Method of and system for providing access to access restricted content to a user
According to an example embodiment of the invention, there is provided a system for providing access to access restricted content to a user, the system including a communication arrangement operable to receive a content request message, the content request message including a content identifier, a processor configured to cause a first determination to be performed to yield a positive or a negative result, a validation module configured to, in response to the first determination yielding a positive result, obtain a first digital rights management key, the processor being further configured to cause a second determination to be performed to yield a positive or a negative result, and responsive to the first and second determinations yielding a positive result, the validation module is configured to cause access to the access restricted content to be provided to the user.
1. An apparatus, comprising at least one processor and a memory comprising program instructions, the processor, memory and program instructions configured to cause the apparatus at least to:
obtain an access restricted content from at least one of a content database and a content providing server;
obtain a first digital rights management key from the content database, wherein the obtaining is based at least in part on a query, the query comprising the content identifier and an identifier associated with the user;
using the first digital rights management key, obtain a fingerprint of the access restricted content wherein the obtaining is based at least in part on the first digital rights management key,
cause the content providing server to validate the fingerprint, and, if the validation is successful, access the access restricted content and
derive a second and third digital rights management key from the access restricted content using the digital rights management header of the access restricted content
wherein the second and third digital rights management keys are applied to retrieve the payload of the access restricted content and wherein at least one of the second or third digital rights management key is used to encrypt the other key of the second or third digital rights management key
wherein the content is usable without being in an unprotected state.
2. The apparatus according to claim 1 , wherein the apparatus is caused to obtain the first digital rights management key either by receiving it from a server or by generating it at least in part from at least one of environmental parameters and parameters of the access restricted content.
3. The apparatus of claim 1 , wherein the first digital rights management key is unique to a specific session.
4. The apparatus of claim 1 , wherein the access restricted content comprises a first layer that is decryptable using the first digital rights management key, the first layer comprising information on which key may be used to obtain fuller access to the access restricted content.
5. The apparatus of claim 1 , wherein the first, second and third digital rights management keys are each encrypted with 256 bit AES encryption.
6. The apparatus of claim 1 , wherein at least one of the content database and the content providing server comprise a content registration module, wherein said content registration module registers the usage of the content on the content database with respect to the user identifier and the content identifier.
7. The apparatus of claim 1 , wherein said status content usage includes the calculated time period associated with the user identifier and the content identifier.
8. The apparatus of claim 1 , wherein the apparatus retrieves the first digital rights management key from at least one of the content database and the content providing server when required.
9. The apparatus of claim 1 , wherein the apparatus generates the first digital rights management key when required, the generation being based on environment and media parameters.
10. A method, comprising:
obtaining an access restricted content from at least one of a content database and a content providing server;
obtaining a first digital rights management key from a content database, wherein the obtaining is based at least in part on a query, the query comprising the content identifier and an identifier associated with the user;
deriving, using the first digital rights management key, from the access restricted content a fingerprint of the access restricted content wherein the obtaining is based at least in part on the first digital rights management key,
causing the content providing server to validate the fingerprint, and, if the validation is successful, accessing the access restricted content and
information describing encryption properties of the access restricted content, and
deriving, using the digital rights management header of the access restricted content, from the access restricted content a second and third digital rights management key,
wherein the second and third digital rights management keys are applied to retrieve the payload of the access restricted content and wherein at least one of the second or third digital rights management key is used to encrypt the other key of the second or third digital rights management key,
wherein the content is usable without being in an unprotected state.
11. The method of claim 10 , wherein the first digital rights management key is unique to a specific session.