Content License Migration via Client Key Update
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In digital content distribution systems, when a client device updates its rights management application or changes its client key, existing systems face challenges in accessing encrypted licenses, leading to inaccessible content due to incompatible encryption keys, and require cumbersome re-downloading of licenses, which may not be feasible or allowed by license providers.
Innovation Solution
A rights management application that includes a client key embedded in its code and a machine key unique to the device, allowing the system to decrypt and update the machine key through a migration service, ensuring seamless access to encrypted content without requiring additional license downloads or provider intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the client key is updated in the rights management application, then security is improved, but the existing encrypted licenses become inaccessible
Solution Approach 1:
The patent introduces a migration service as an intermediary between the client device and license server. This service receives migration requests containing the new client key, generates a mapping between old and new keys, and facilitates the decryption of licenses encrypted with the old key using the new key, thereby maintaining compatibility while allowing key updates
Solution Approach 2:
The system changes the encryption parameter (client key) by allowing updates to the embedded key in the rights management application. The migration service handles the parameter transition by generating key mappings that enable seamless transition from old to new keys without losing access to existing licenses
2Ease of operation
If licenses are re-downloaded from the license server, then access to content is restored, but server workload increases and provider intervention is required
Solution Approach 1:
The migration service enables self-service by automatically handling the license migration process on the client device. The service uses the stored encrypted license data and the generated key mapping to decrypt licenses locally, eliminating the need for clients to contact providers or manually re-download licenses, thus reducing server workload
3Reliability
If the machine key is stored in encrypted form, then security is improved, but key access becomes more complex
Solution Approach 1:
The system performs preliminary action by pre-storing the encrypted machine key in the device's secure storage during initial setup. The migration service later retrieves this encrypted key and uses the client key to decrypt it, establishing a streamlined access path that balances security with operational simplicity
Data Source
AI summary
A system can comprise a processor and a memory embodying an application. The application can comprise code that causes the processor to identify a client key embedded or hard-coded in the application (i.e., included as part of the code comprising the application). Additional code causes the processor to identify data to be accessed according to an encrypted license accessible through use of a machine key. The application can maintain the machine key in an encrypted state using the client key. The application can include code that causes the processor to determine if an encrypted version of the machine key accessible by the processor can actually be decrypted using the client key. If so, the client key can be used to access the machine key. If not, the processor can request a differently-encrypted version of the machine key from a migration service.