Anchor point-based digital content protection with an escrow anchor point
View Patent ↗Digital rights management (DRM) can be effectively implemented through use of an anchor point and binding records in a user domain and backed up through use of an escrow anchor point and an escrow binding record in an anchor point based digital rights management system. An escrow binding record provides additional functionality and reliability to a DRM system by allowing a user to use of digital content even after an access device has been lost or compromised.
1. A method comprising:
providing a backup of an active binding record, the active binding record being stored in a first secure active anchor point and the active binding record including a first binding record data instance for decrypting a digital property instance, providing a backup including:
generating an escrow binding record including a second binding record data instance received from a binding record data source, the escrow binding record representing a substantial copy of the active binding record and including a reference to the first secure active anchor point;
storing the escrow binding record in a secure escrow anchor point that is physically distinct from the first secure active anchor point, the escrow binding record including binding data sufficient to restore the active binding record in the first secure active anchor point; and
restoring the active binding record to a second secure active anchor point using the escrow binding record of the secure escrow anchor point, the restoring including transmitting the second binding record data instance to the second secure active anchor point.
2. The method of claim 1 wherein the first and second binding record data instances each include a binding key capable of decrypting a title pre-key to generate a title key, the title key being used to decrypt an encrypted digital property instance to generate the digital property instance.
3. The method of claim 1 wherein the active binding record is associated with the escrow binding record by an identifier of the active binding record stored in the escrow binding record.
4. The method of claim 1 wherein the active binding record is associated with the escrow binding record, restoring the active binding record to a second secure active anchor point further comprising:
receiving a request from the second secure active anchor point to restore the active binding record associated with the escrow binding record;
determining whether the first secure active anchor point is invalid;
restoring the active binding record to the second secure active anchor point using the escrow binding record of the secure escrow anchor point, if the first secure active anchor point is determined to be invalid.
5. A method of providing a backup of an active binding record, the active binding record being stored in a first secure active anchor point and storing a first binding record data instance for decrypting a digital property instance, the method comprising:
generating an escrow binding record including a second binding record data instance received from a binding record data source, the escrow binding record representing a substantial copy of the active binding record and including a reference to the first secure active anchor point;
storing the escrow binding record in a secure escrow anchor point that is physically distinct from the first secure active anchor point, the escrow binding record including binding data sufficient to restore the active binding record in the first secure active anchor point; and
the first and second binding record data instances each include a binding key capable of encrypting a first instance of a title key received from a content provider to generate a title pre-key, the first instance of the title key being used to encrypt the digital property instance to generate an encrypted digital property instance.
6. The method of claim 5 wherein the secure escrow binding record includes an anchor point identifier of the first secure active anchor point, and further comprising:
receiving a request from a second secure active anchor point to restore the active binding record associated with the escrow binding record, the request identifying the second secure active anchor point;
restoring the active binding record to the second secure active anchor point using the escrow binding record of the secure escrow anchor point;
storing an anchor point identifier of the second secure active anchor point in the escrow binding record in the secure escrow anchor point.
7. The method of claim 5 further comprising:
restoring the active binding record to a second secure active anchor point using the escrow binding record of the secure escrow anchor point.
8. The method of claim 5 further comprising:
restoring the active binding record to a second secure active anchor point using the escrow binding record of the secure escrow anchor point, wherein the restoring operation comprises:
generating a new active binding record from the second binding record data instance; and
transmitting the new active binding record to the second secure active anchor point.
9. A computer-readable storage medium storing instructions, that when executed by a processor cause the processor to perform a method comprising:
executing on a computer system a process for providing a backup of an active binding record, the active binding record being stored in a first secure active anchor point and the active binding record including a first binding record data instance for decrypting a digital property instance;
generating an escrow binding record including a second binding record data instance received from a binding record data source, the escrow binding record representing a substantial copy of the active binding record and including a reference to the first secure active anchor point;
storing the escrow binding record in a secure escrow anchor point that is physically distinct from the first secure active anchor point, the escrow binding record including binding data sufficient to restore the active binding record in the first secure active anchor point; and
restoring the active binding record to a second secure active anchor point using the escrow binding record of the secure escrow anchor point, the restoring including transmitting the second binding record data instance to the second secure active anchor point.
10. The computer-readable storage medium of claim 9 wherein the first and second binding record data instances each include a binding key capable of encrypting a first instance of a title key received from a content provider to generate a title pre-key, the first instance of the title key being used to encrypt the digital property instance to generate an encrypted digital property instance.
11. The computer-readable storage medium of claim 9 wherein the first and second binding record data instances each include a binding key capable of decrypting a title pre-key to generate a title key, the title key being used to decrypt an encrypted digital property instance to generate the digital property instance.
12. The computer-readable storage medium of claim 9 wherein the active binding record is associated with the escrow binding record by an identifier of the active binding record stored in the escrow binding record.
13. The computer-readable storage medium of claim 9 wherein the active binding record is associated with the escrow binding record, and further comprising:
receiving a request from a second secure active anchor point to restore the active binding record associated with the escrow binding record;
determining whether the first secure active anchor point is invalid;
restoring the active binding record to the second secure active anchor point using the escrow binding record of the secure escrow anchor point, if the first secure active anchor point is determined to be invalid.
14. The computer-readable storage medium of claim 9 wherein the secure escrow binding record includes an anchor point identifier of the first secure active anchor point, and the computer process further comprises:
receiving a request from a second secure active anchor point to restore the active binding record associated with the escrow binding record, the request identifying the second secure active anchor point;
restoring the active binding record to the second secure active anchor point using the escrow binding record of the secure escrow anchor point;
storing an anchor point identifier of the second secure active anchor point in the escrow binding record in the secure escrow anchor point.
15. The computer-readable storage medium of claim 9 wherein the computer process further comprises:
restoring the active binding record to a second secure active anchor point using the escrow binding record of the secure escrow anchor point.
16. The computer-readable storage medium of claim 9 wherein the computer process further comprises:
restoring the active binding record to a second secure active anchor point using the escrow binding record of the secure escrow anchor point, wherein the restoring operation comprises:
transmitting the second binding record data instance to the second secure active anchor point.
17. The computer-readable storage medium of claim 9 wherein the computer process further comprises:
restoring the active binding record to a second secure active anchor point using the escrow binding record of the secure escrow anchor point, wherein the restoring operation comprises:
generating a new active binding record from the second binding record data instance; and
transmitting the new active binding record to the second secure active anchor point.
18. A secure escrow anchor point system comprising:
a secure escrow anchor point device for providing a backup of an active binding record, the active binding record being stored in a secure active anchor point and storing a binding record data for decrypting a digital property instance, wherein the secure anchor point device is communicably coupled to the first secure active anchor point, is physically distinct from the first secure active anchor point, and stores an escrow binding record representing a substantial copy of the active binding record and including binding record data sufficient to restore the active binding record; and
restoration circuitry coupled to access the escrow binding record of the secure escrow anchor point device, the restoration circuitry restoring the active binding record to a second secure active anchor point using the escrow binding record of the secure escrow anchor point, and configured to transmit the active binding record to the second secure active anchor point.