Software Application Verification for DRM Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current Digital Rights Management (DRM) systems are vulnerable to malicious application spoofing, allowing unauthorized access and misuse of protected content, resulting in revenue loss and security breaches.

Innovation Solution

Implementing software application verification methods that utilize client-side and server-side verification processes, including digital rights management systems to authenticate and authorize applications using public keys or other identifying information, ensuring only approved applications can access and play protected content.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If machine-based DRM access is implemented, then content accessibility is improved, but security against unauthorized access deteriorates

Engineering Contradiction:
Improvecontent accessibilityVSAvoidsecurity against unauthorized access
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent segments the authentication process into two distinct levels: machine-level authentication (device ID verification) and application-level authentication (application signature verification). This segmentation allows the system to maintain ease of content accessibility for authorized applications while simultaneously strengthening security by verifying both the device and the specific application's identity before granting access to protected content.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If application spoofing is allowed, then application versatility is improved, but content protection deteriorates

Engineering Contradiction:
Improveapplication compatibilityVSAvoidcontent protection
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary action by requiring applications to present their digital signatures before accessing protected content. The DRM system verifies these signatures in advance during the license acquisition process, preventing spoofed applications from gaining access. This preliminary verification mechanism maintains application versatility for legitimate apps while blocking malicious spoofing attempts before they can compromise content protection.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If DRM verification is extended to applications, then security is improved, but system complexity deteriorates

Engineering Contradiction:
ImproveDRM securityVSAvoidverification system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary component - the DRM system acting as a mediator between applications and protected content. Instead of requiring complex verification logic within each application or the playback device, the DRM system handles application signature verification centrally. This intermediary approach enhances security by centralizing authentication logic while reducing the complexity burden on individual components of the playback system.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2382734B1Software application verification
Publication Date: 2017.08.02 MICROSOFT TECHNOLOGY LICENSING LLC
  • EP2382734B1 patent drawingFigure 1
  • EP2382734B1 patent drawingFigure 2
  • EP2382734B1 patent drawingFigure 3

AI summary

Various embodiments for software application verification are disclosed. Software application verification applies digital rights management to applications that run protected content on a playback device. In this way, protected content may be provided to approved applications and withheld from applications that have not been approved to run the protected content.