Microsoft Technology Licensing, LLC

Panasonic Corporation

Microsoft Corporation

Clifford Paul Strom

Brian Patrick Evans

Benjamin Brooks Cutter, Jr

Krishnamurthy Ganesan

Anand Paka

Alexandre Vicktorovich Grigorovitch

Patrik Schnell

Kedarnath Atmaram Dubhashi

Jeffrey Richard McKune

Marcus Peinado

James Morris Alkove

Vijay Gajjala

Stephen P DiAcetis

Philip J Lafornara

Daniel Rosenstein

Chittaranjan Sadanand Pattekar

Michael Jay Parks

Amit Jain

Alex McKelvey

Kevin H Lau

Charlie David Chase, Jr

Scott A Plette

Jonas Fredrik Helin

Satvir Randhawa

Mark L Beaubien

Daniel Kevin McBride

Arvind Ramakrishnan

Yashraj Motilal Borse

Brian D Crites

Adrian J Oney

Sandeep S Sahasrabudhe

Richard D Prologo

Pratul Dublish

Yuen Yu Leung

M Jay Parks

Vikas Khandelwal

Cory West

Mark E Paley

Alexander McKelvey

Daniel Adent

Michael Y Siu

Toshihisa Nakano

Kaoru Murase

Shunji Harada

Geoffrey T Dunbar

Ian Cameron Mercer

Max Glenn Morris

Nicholas Jie Fang

Eduardo P Oliveira

Kevin Leigh LaChapelle

Matthew James Bordenet

Quintin Swayne Burns

Ryan A Haveson

Michael Yiu-Kwan Siu

Philip E Fawcett

Christopher Blomfield-Brown

Ptratul Dublish

Jonathan Billings

John Paddleford

Christopher J Fox

Michael Yui-Kwan Siu

Eduardo Oliveria

Brian P Evans

Sandeep Sahasrabuhde

Jay M Parks

Anand D Paka

Benjamin Brooks Cutter

Alex Mckelvey

Scott Plette

Kevin Lau

Embodiments of the disclosure provide application management capabilities to enterprises. A computing device of a user, associated with the enterprise, receives an enrollment token signed with a certificate. The enrollment token includes an enterprise identifier associated with the enterprise. The computing device receives a package containing one or more applications. The package also includes an enterprise identifier. Installation and execution of one or more applications from the received package is accepted or rejected based on a comparison of the enterprise identifier from the enrollment token with the enterprise identifier from the received package or application. A web service provides validation services by monitoring the installation and execution of applications on the computing devices associated with the enterprise.

Enterprise application management with enrollment tokens

Techniques enable creation of a preview license for digital content. In some instances, the preview license indicates that it allows a content-consuming device to consume less than all of the content. This preview license may create a list specifying multiple portions of the digital content that the content-consuming device may consume. These techniques may also present to a device user an offer to purchase rights to consume all of the digital content after consumption of the preview-licensed portion(s). In other instances, a content server may embed the preview license into a content package that contains the digital content, allowing the server to distribute the package to multiple devices. In still other instances, the preview license may be bound to a domain rather than to individual devices. This allows member devices to share the digital content and the preview license, such that each member device may enjoy the preview experience.

Content preview

This document describes policies for digital rights management that enable distribution of full-function versions of applications that, while fully functional, have functions limited by an associated policy. A policy may be replaced or updated, thereby enabling use of previously limited functions without distribution of another version of the application.

Policy for digital rights management

Metering is enabled through an arrangement in which a metering certificate is communicated to a mobile device using an over-the-air protocol. A metering trigger provides the metering certificate that includes a location to which metering data is posted by the mobile device and a public key of a public-private key pair, or alternatively provides a link to such metering certificate. A metering helper passes the metering certificate to a DRM system on the mobile device which collects metering data associated with the metering ID and uses the public key to encrypt the metering data into a metering challenge. The metering helper posts the metering challenge to the location. The metering service extracts the metering data from the metering challenge using a private key and generates a metering response that is received by the metering helper which prompts the DRM system to reset at least a portion of a data store in which the metering data is stored.

Over-the-air delivery of metering certificates and data

A content license associated with unencrypted digital content is generated, the content license including both an identifier of the unencrypted digital content and a content policy. At a user device, a determination is made as to whether the content license corresponds to particular unencrypted digital content. Use of the particular unencrypted digital content by the computing device is permitted in accordance with the content policy if the content license corresponds to the particular unencrypted digital content. However, use of the particular unencrypted digital content by the computing device based on the content license is prohibited if the content license does not correspond to the particular unencrypted digital content.

Associating policy with unencrypted digital content

A computing device has encrypted content and a corresponding license having a decryption key for decrypting the content. The license allows the computing device to render the content thereon. The computing device may issue a sub-license based on the license to a portable device. The sub-license allows the portable device to render the content thereon and has the decryption key. The portable device has a digital device certificate including information thereon. The computing device receives from the portable device the device certificate thereof, and determines based on rules in the license and the information on the portable device in the device certificate whether the computing device can issue the sub-license to the portable device. If so, the computing device constructs such sub-license to include the decryption key (KD) and transmits the constructed sub-license to the portable device.

Licensing content for use on portable device

A system of controlling playback of digital media. A system of controlling playback of digital media comprising a CE device having an output path and a license having a specified output protection level disposed upon the CE device in which the specified output protection level controls playback of the digital media over the output path.

Output protection levels

Portable digital rights for multiple devices is described. In an embodiment, a digital rights management (DRM) system includes a first device with a removable component configured as a token that is associated with a DRM license. The first device also includes a removable memory card that stores protected media content on which the first device can perform actions as permitted by the DRM license. The DRM system also includes a second device that can have the removable component and the removable memory card when removed from the first device and installed in the second device such that the second device can perform the actions on the protected media content as permitted by the DRM license.

Portable digital rights for multiple devices

This document describes tools that enable a computing device to receive an update to content management software. The tools also enable the computing device to generate new public and private keys without the use of a key server.

Secure local update of content management software

Techniques enable building a collection of data that defines an asset, with the data possibly having differing data types. These techniques are then capable of assigning arbitrary policy to that asset, regardless of which data types are present within the asset. In addition, these techniques enable packaging of this first asset with one or more additional assets in a self-contained envelope. Each asset within the envelope may similarly include data of differing data types. Furthermore, each of these assets may be assigned a policy that may be different than the policy assigned to the first asset. This envelope, or a collection of envelopes, may then be provided to a content-consuming device to consume the assets in accordance with each asset's specified policy.

Managing digital rights for multiple assets in an envelope

A system of controlling playback of digital media. A system of controlling playback of digital media comprising a CE device having a secure clock and a license having a specified grace period disposed upon the CE device in which a digital media file governed by the license may be played for the grace period upon failure of the secure clock.

Secure clock with grace periods

A digital license includes an identification of a removal service that can authorize removing such license. A client selects the license to be removed and the service, constructs a challenge including therein a challenge license identification block (LIB) identifying the license to be removed, and sends the challenge to the service. The service receives the challenge, stores at least a portion of the challenge in a database, constructs a response corresponding to the challenge and including therein a response LIB identifying the license to be removed and an identification of the service, and sends the response to the client. The client receives the response, employs the response LIB from the response to identify the license to be removed, and removes the identified license upon confirming that the identification of the service in the identified license matches the identification of the service in the response.

Trusted license removal in a content protection system or the like

Growing community of inventors

Sammamish, WA, United States of America

Clifford Paul Strom