Microsoft Technology Licensing, LLC

Chandramouli Venkatesh

Attila Narin

Peter David Waxman

Vinay Krishnaswamy

Steve Bourne

Marco A Demello

Prashant Malik

Blair Brewster Dillaway

Frank Byrum

Charles F Rose

Rushmi U Malaviarachchi

Steven Bourne

Pierre Jacomet

Yevgeniy Eugene Rozenfeld

Kumar B Parambir

Yevgeniy (Eugene) Rozenfeld

Scott C Cottrille

Jason Matthew Cahill

Lauren Nicole Antonoff

Gregory Kostal

Vladimir Yarmolenko

Xing Wu

Sonu Arora

Ehab Sobhy

Robert Aron Drollinger

Artem D Yegorov

Thomas K Lindeman

David Larson

Christopher Robert Richard Madonna

Attilla Narin

Rushmi U Malviarachchi

James B Shobe, Jr

Alexander Nikolayevich Samoylenko

Sandeep Kuruvilla Lukose

Syed Mohammad Ali

The claimed subject matter provides a system and/or a method that facilitates integrating two or more applications for secure sharing of data. A line of business (LOB) system can include a portion of metadata associated with a business application. An adapter can employ a dynamic service contract to the LOB system, wherein the service contract is a fluid contract constructed in real time from a portion of metadata selected within the LOB system. Moreover, the adapter can enable a client to access the portion of metadata selected via the service contract.

Framework for development of integration adapters that surface non-static, type-safe service contracts to LOB systems

A publishing user publishes digital content and issues to itself a corresponding digital publisher license to allow itself to render the published digital content. The publishing user is supplied with a publishing certificate from a digital rights management (DRM) server, where the publishing certificate allows the publishing user to so publish the digital content and to so issue the publisher license.

Issuing a publisher use license off-line in a digital rights management (DRM) system

A method for managing rights in digital content includes generating rights data for a piece of digital content and forming a piece of rights managed digital content by associating the rights data with the piece of digital content. The rights data includes parameters that govern the terms on which the content may be licensed, and may include a list of entities to which the content may be licensed, a respective set of one or more rights that each such entity has in the digital content, and any conditions that may be placed on those rights. A method for licensing rights managed digital content includes receiving a license request for a license to use the piece of rights managed digital content, where the license request includes such a signed rights label. The digital signature on the signed rights label is validated to determine whether a trusted entity issued the signed rights label. If a trusted entity issued the signed rights label, a license to use the piece of rights managed digital content in accordance with the rights data may be issued.

Systems and methods for issuing usage licenses for digital content and services

An organization maintains a computer network comprising at least a forest A and a forest B, where forest A has a directory A and a querying entity A capable of querying directory A, and forest B has a directory B and a querying entity B capable of querying directory B. Querying entity A receives a request from the user and decides whether to grant the request based at least in part on whether the user is a member of the group. Thus, querying entity A queries directory A to return information on the group, is directed to forest B, contacts querying entity B, requests querying entity B to query directory B whether the user is a member of the group, receives a response, and grants the request from the user based at least in part on whether the user is a member of the group.

Issuing a digital rights management (DRM) license for content based on cross-forest directory information

Systems and methods for providing digital rights management services are disclosed. Such a system includes a service program that provides a processing framework for performing a digital rights management service, such as publishing or licensing rights managed digital content. A plurality of plug-in components are provided, each of which performs a respective task associated with the digital rights management service. The plug-in components are integrated into the processing framework according to predefined sets of interface rules.

Secure server plug-in architecture for digital rights management systems

A licensor receives a request from a requestor including an identifier identifying the requestor and rights data associated with digital content, where the rights data lists at least one identifier and rights associated therewith. The licensor thereafter locates the identifier of the requestor in a directory, and locates in the directory based thereon an identifier of each group which the requestor is a member of. Each of the located requestor identifier and each located group identifier is compared to each identifier listed in the rights data to find a match, and a digital license to render the content is issued to the requestor with the rights associated with the matching identifier.

Publishing digital content within a defined universe such as an organization in accordance with a digital rights management (DRM) system

Content is encrypted according to a content key (CK) ((CK(content))), (CK) is protected according to a license server public key (PU-DRM), and rights data associated with the content is retrieved from a rights template and protected according to (PU-DRM). The protected items and a digital signature from the rights template are submitted as a rights label to the license server for signing. The license server verifies the rights template signature, and if such signature verifies signs the rights label to result in a signed rights label (SRL), and returns same. The SRL is concatenated with (CK(content)) and both are distributed to a user. To render the content, the user submits the SRL to the license server to request a license.

Using a rights template to obtain a signed rights label (SRL) for digital content in a digital rights management system

Content is encrypted according to a content key (CK) to result in (CK(content)) and the content key (CK) is protected according to a public key for a license server (PU-RM). Rights data is retrieved from a rights template to be associated with the content, and rules for modifying the retrieved rights data are also retrieved from the retrieved rights template. The retrieved rights data from the rights template is modified according to the rules, and the rights data and the protected content key (CK)) are submitted as a rights label to the license server for signing thereby. The license server thus validates the rights label and, if valid, creates a digital signature based on a private key (PR-RM) corresponding to (PU-RM) and based at least in part on the rights data to result in a signed rights label (SRL), and returns the SRL.

Using a flexible rights template to obtain a signed rights label (SRL) for digital content in a rights management system

A digital license corresponds to encrypted digital content and includes a content key for decrypting same. The content key is encrypted and is decryptable by a decryption key available only to the first persona, the license thereby being tied to the first persona. The license is a first license and further includes referral information specifying a first location at which a second persona may obtain a second license for the content tied thereto. The second persona requests to render the content by way of the first license and the request is denied because the first license is not tied to the second persona. The referral information is obtained from the first license and employed to initiate contact with the specified first location and obtain the second license tied to the second persona.

Digital license with referral information

Content is encrypted according to a content key (CK) ((CK(content))), (CK) is protected according to a license server public key (PU-DRM), and rights data associated with the content is protected according to (PU-DRM). The protected items are submitted as a rights label to the license server for signing. The license server validates the rights label and, if valid, digitally signs based on the protected rights data to result in a signed rights label (SRL), and returns same. The SRL is concatenated with (CK(content)) and both are distributed to a user. To render the content, the user submits the SRL to the license server to request a license. The license server verifies the SRL signature and reviews the SRL protected rights data to determine whether the user is entitled to the license, and if so issues the license, including (CK) in a protected form accessible to the user.

Obtaining a signed rights label (SRL) for digital content and obtaining a digital license corresponding to the content based on the SRL in a digital rights management system

A computer network has storage devices organized into X levels and storing element-group information. To determine whether an element is a member of any target groups, each target group is validated by searching the storage devices to find a target group item and, if found, placing the target group in a validated target bin (V). Also, the element is validated by searching the storage devices to find an element item, and if found, determining from the item all groups that the element is listed as being a member of and placing such member-of groups in a search bin (S). If (S) intersects (V), the element is a member of a target group. If not, all groups in (S) are moved to a queue (Q) corresponding to the storage device at leveland an iterative process searches for a membership path from the element to any target group.

Reviewing cached user-group information in connection with issuing a digital rights management (DRM) license for content

Growing community of inventors

Sammamish, WA, United States of America

Chandramouli Venkatesh