Koninklijke Philips Corporation N.v.

Adrea, LLC

Tp Vision Holding B.v.

Franciscus Lucas Antonius Johannes Kamperman

Petrus Johannes Lenoir

Antonius Adriaan Maria Staring

Pim Theo Tuyls

Geert Jan Schrijen

Thomas Andreas Maria Kevenaar

Robert Paul Koster

Sebastiaan Antonius Fransiscus Arnoldus Van Den Heuvel

Bartholomeus Johannes Van Rijnsoever

Alexis Stephen Richard Ashley

Mathieu Petrus Franciscus Maria Goudsmits

Yi Yang

Job Cornelis Oostveen

Johan Paul Marie Gerard Linnartz

Alphons Antonius Maria Lambertus Bruekers

Derk Reefman

Willem Marie Julia Marcel Coene

Wilhelmus Franciscus Johannes Fontijn

Steven Broeils Luitjens

Lukasz Szostek

Gerardus Cornelis Petrus Lokhoff

Gongming Wei

Darwin He

Aloysius Michael Josephus Maria Spruijt

Paulus Reinier Joannes Van Roosmalen

Wouter Baks

Wenying You

Sebastiaan Antonius Fransiscus Van Den Heuvel

Willem Jonker

Jan Harm Boer

To ensure that digital rights cannot be forged or tampered with, they can be digitally signed. However, this means that updating the digital rights is no longer possible, as this would invalidate the digital signature. The present invention proposes that the issuer of digital rights issues rights which are signed in elementary pieces, rather than as a whole. Rather than issuing a right to play back a piece of content three times, the provider issues for example three rights to play back the content once in a particular AD, of which two may be transferred to other domains. The digital rights are individually protected by signatures and it is no longer possible to forge digital rights. As an enhancement the rights that can be transferred are indicated as such and stored securely to prevent tampering. When the right is transferred, it must be signed by the person who originally received it.

Divided rights in authorized domain

A method of controlling access to a content item in a domain comprising a set of mutually authenticated devices, the method comprising deriving one or more domain-specific rights from a right associated with the content item, the one or more domain-specific rights being bound to the domain and allowing the devices in the domain access to the content item. Also system comprising a set of mutually authenticated devices, said set making up a domain, the system comprising a central rights manager arranged for executing said method.

Digital rights management method and system

The invention relates to a method for a first communication device to perform authenticated distance measurement between the first communication device and a second communication device, wherein the first and the second communication device share a common secret and the common secret is used for performing the distance measurement between the first and the second communication device. The invention also relates to a method of determining whether data stored on a first communication device are to be accessed by a second communication device. Moreover, the invention relates to a communication device for performing authenticated distance measurement to a second communication device. The invention also relates to an apparatus for playing back multimedia content comprising a communication device.

Secure authenticated distance measurement

This invention relates to a system and a method of generating an Authorized Domain (AD) by selecting a domain identifier, and binding at least one person (P, P, PN), at least one device (D, D, . . . , DM), and at least one content item (C, C, . . . , CNZ) to the Authorized Domain (AD) given by the domain identifier (Domain ID). Hereby, a number of verified devices (D, D, . . . , DM) and a number of verified persons (P, P, . . . , PN) that is authorized to access a content item of the Authorized Domain () is obtained. In this way, access to a content item of an authorized domain by a person operating a device is obtained either by verifying that the content item and the person are linked to the same domain or by verifying that the device and the content item are linked to the same domain. Thereby, enhanced flexibility for one or more persons when accessing content in an authorized domain is obtained while security of the content is still maintaining. This is further done in a simple, secure and reliable way.

Hybrid device and person based authorized domain architecture

The invention relates to a method for a first communication device to performing authenticated distance measurement between said first communication device and a second communication device, wherein the first and the second communication device share a common secret and said common secret is used for performing the distance measurement between said first and said second communication device. The invention also relates to a method of determining whether data stored on a first communication device are to be accessed by a second communication device. Moreover, the invention relates to a communication device for performing authenticated distance measurement to a second communication device. The invention also relates to an apparatus for playing back multimedia content comprising a communication device.

A method of providing automatically verifiable trust in a content resolution process in which a PDR resolves a content reference identifier (CRID) identifying a content item using a resolution authority record (RAR) to obtain a locator identifying a location where the PDR can obtain the content item. Preferably, the measure comprises computing a digital signature over at least part of the contents of the CRID, the locator and/or the RAR. The method may also comprise encrypting at least a data portion of the CRID, RAR or locator. Digital rights needed to access the content item can be provided with the CRID, RAR or locator.

Enhanced content resolution method

This invention relates to a system and a method of generating an Authorized Domain (AI)), the method comprising the steps of selecting a domain identifier (Domain ID) uniquely identifying the Authorized Domain, binding at least one user (P, P, . . . , PN) to the domain identifier (Domain ID), and binding at least one device (D, D, . . . , DM) to at least one user (P, P, . . . , PN), thereby obtaining a number of devices (D, D, . . . , DM) and a number of users (P, P, . . . , PN) that is authorized to access a content item (C, C, CN) of said Authorized Domain (). Hereby, a number of verified devices (D, D, . . . , DM) and a number of verified persons (P, P, . . . , PN) that is authorized to access a content item of said Authorized Domain () is obtained. Additionally, it is possible to enable automatic assignment of imported content being imported on a device belonging to the Authorized Domain (AD) since it now is given to which person a given authorized device belongs to. Further, a simple and efficient way of implementing domain boundaries is enabled.

Method of and system for generating an authorized domain

The present invention relates to a method and a device for determining access to multimedia content from an entry identifier, in a domain which comprises a number of entry identifiers, and where the multimedia content is assigned an access number n indicating the number of entry identifiers which may access the multimedia content. This is obtained by accessing a domain list indicating at least some of said entry identifiers in said network domain and by further determining that the entry identifier may access said multimedia content if said entry identifier is between the n entries in said domain list determined by an evaluation rule.

Authorized domain policy method

An information system according to the invention comprises a record carrier and a playback apparatus. The record carrier has information marks along a track thereof and exhibits first variations caused by existence and nonexistence of the information marks along the track. The first variations represent an information signal recorded on said record carrier. The record carrier further exhibits second variations caused by variations associated with the information marks. The phase of the second variations is coupled to the phase of the first variations.

Record carrier, playback apparatus and information system comprising a record carrier and a playback apparatus

A method of and system for digital rights management, in which access to a piece of content is granted in accordance with a license owned by a license owner to a client who is a member of a domain. This requires successfully verifying that a membership relation exists between the client and the domain as reflected in a first state variable, and that an association relation exists between the license owner and the domain as reflected in a second state variable. Both relationships are revoked by executing an online protocol between the parties in the relationship after which both remove the corresponding state variable. The domain controller propagates the state administration relating to the domain is propagated to the client so that the client can update its state administration.

DRM system

Data is transmitted using a layered communication model. In a first layer of the model, a first communication fragment is generated. The first fragment includes a first address reference referring to a first entity. In a second layer of the model, below the first layer, a second communication fragment is generated based on the first communication fragment. The second communication fragment includes a second address reference referring to a second entity which is related to the first entity. The first address reference is at least partially removed from the data to be transmitted. Then the data including the second communication fragment is transmitted.

Overhead reduction and address protection in communication stack

The present invention relates to a method and a system for performing digital rights management. The idea of the invention is that a master right associated with a content is stored at a first authorized device (). An authorized device is a device which can be considered trusted and performs actions with contents according to the associated rights. These devices enforce rights that are bound to contents, and perform the security tasks of the DRM system employed. A subright is derived from the master right, which subright controls what type of access a second authorized device () is given to the associated content. Finally, the subright is distributed to the second authorized device, given that the second device complies with predetermined distribution criteria associated with the master right. The device distributing the subright authenticates the device which is to receive the subright, ensuring that the second device can be trusted.

Connection linked rights protection

The invention reduces addressing overhead for communication using a layered communication protocol. An improvement of the invention maintains security for the addressing information.

Growing community of inventors

Eindhoven, Netherlands

Franciscus Lucas Antonius Johannes Kamperman