Ticket-Based Digital Content Leasing Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital content leasing systems, particularly those using Internet Protocol Rights Management (IPRM) architecture, face challenges in allowing subscribers to regain access to digital content after a subscription is canceled, as the infrastructure is not aware of content license identifiers, making it difficult to reinstate usability without additional messaging or new objects.
Innovation Solution
A method and system that retrieves a service ticket with authorization data and a session key for a computing device, allowing access to digital content when authorized subscription services match the required subscription services included with the content rights, without requiring additional messaging or new objects, by using a service ticket that includes authorization data and a session key to authenticate and deliver content rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a ticket-based architecture (IPRM) is used where the infrastructure is not aware of content license identifiers, then device autonomy and security are improved, but the ability to reinstate access to digital content after subscription cancellation deteriorates
Solution Approach 1:
The solution segments the license verification process into two independent components: the service ticket (containing authorization data) and the content rights (containing required subscription services). This segmentation allows the device to autonomously verify licenses by comparing these segments without infrastructure intervention, while still enabling reinstatement by simply updating the service ticket with renewed authorization data.
Solution Approach 2:
The service ticket is obtained in advance and stored on the device, containing pre-validated authorization data from the content provider. This preliminary action allows the device to independently verify content rights without needing real-time infrastructure awareness, and enables quick reinstatement by simply obtaining a new service ticket when the subscription is renewed.
2Ease of operation
If root and leaf license chaining is implemented, then subscription renewal becomes easier without re-acquiring every content license, but the system requires infrastructure awareness of license identifiers which increases system complexity
Solution Approach 1:
The solution extracts the license identifier awareness requirement from the infrastructure and places it entirely on the device side. The device independently stores and compares service ticket authorization data with content rights requirements, eliminating the need for infrastructure to track or be aware of specific license identifiers, thus simplifying the overall system architecture.
Solution Approach 2:
The service ticket contains a copy of the authorization data that the device uses to independently verify content rights. This copying mechanism eliminates the need for the infrastructure to maintain awareness of license identifiers, as the device has all necessary information locally to perform verification and enable reinstatement.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention is a method and system for accessing digital content stored on a computing device. An agreement between a subscriber and a content provider allows the subscriber to lease the digital content from the content provider, and download the digital content from a content server operated by the content provider. The method retrieves a service ticket for the computing device, and retrieves content rights for the digital content. The service ticket includes authorization data, and a session key, where the authorization data include authorized subscription services for the computing device. The content rights include required subscription services for the digital content and are delivered authenticated with the session key. The method allows access to the digital content when the authorized subscription services included with the authorization data match the required subscription services included with the content rights.