Adobe, Inc.

Pivotcloud, Inc.

James Lester

Peter Sorotokin

Kenneth Edward Feuerman

James D Pravetz

Yohko A Kelley

Steven Clifford Gottwals

Sunil Agrawal

Roy Peter D'Souza

Andrei Sheretov

Method, apparatus, computer programs and data structures are provided, according to at least one embodiment, wherein an author of digital content identifies at least some trusted code that the author trusts to be used to read digital content, and stores information in the unit of digital content that is capable of identifying the trusted code. In at least some embodiments, the unit of digital content is an electronic document. In other embodiments, a publisher of the trusted code, or an author of the digital content, signs the trusted code with a private key, and a certificate associated with the private key is embedded in the unit of digital content. The certificate may provide public key information associated with the private key. The public key may be used to verify that code is trusted before it is allowed access to the unit of digital content.

Method and apparatus for document author control of digital rights management

Various embodiments of a system and method for parts-based digital rights management are described. Various embodiments may include a digital rights management component configured to receive content comprising a plurality of portions of content. The digital rights management component may also receive a license for the encrypted content; the license may include a plurality of permissions each specific to a respective portion of the content. Additionally, each permission may specify one or more access privileges for the respective portion of the content. The digital rights management component may receive a digital signature for the entire license. The digital rights management component may validate the digital signature to determine that the permissions have not been modified. The digital rights management component may also be configured to, in response to determining that said permissions have not been modified, provide access to content in accordance with said license including said permissions.

System and method for parts-based digital rights management

A system and method provide selective access to portions of digital content. A request to access a digital content item is received, the digital content item including multiple portions. Responsive to the request, multiple policies relating respectively to the multiple portions of the digital content item are identified. Access to the multiple portions of the digital content item is selectively enabled, based on the multiple policies.

Selective access to portions of digital content

A document rights management system (DRM) defines an unrenderable origin designator in a media item that does not display or alter the physically rendered version of an instantiation of the media item. The unrenderable designator does not appear as an obscured or occluded feature in a printed or displayed versions. The rendered version is unaffected by the unrenderable designator because it does not result in any displayable features. The unrenderable designator is stored in a display list of the media item and appears as an attribute of objects such that the function to cause the display object to be undisplayable, or unrenderable, are not immediately apparent. The DRM system encodes a designator in an attribute of a display object for rendering according to a media rendering format such as PDF, such that the designator causes the display object to be unrenderable and indicates the origin of the media item.

Document origin designator

A method includes receiving a request to access a digital content item, the digital content item including multiple portions. Responsive to the request, multiple policies relating respectively to the multiple portions of the digital content item are identified. Access to the multiple portions of the digital content item is selectively enabled, based on the multiple policies.

A digital rights management retrieval system is provided. In some embodiments, a digital rights management system includes receiving a first notification from a first client device of a first protected content transaction for a first user with a first content distributor, wherein the first notification includes a first network address for the first content distributor; receiving a second notification from the first client device of a second protected content transaction by the first user with a second content distributor, wherein the second notification includes a second network address for the second content distributor; and maintaining a first list of content distributors for the first user, wherein the first list includes a network address for each content distributor from which the first user has downloaded protected content.

Digital rights management retrieval system

Methods, systems and apparatuses for a mediator enforcing policies to a resource utilizing an electronic content, are disclosed. One method includes receiving, by a mediator computing device of a mediator, a second share SKfrom an owner server, wherein a first share SKis provided to a member server of a member of a group by the owner server, wherein the owner defines policies associated with the group. The method further includes the mediator receiving a request from the member for mediation, including the mediator receiving a dispatch of the header of the encrypted electronic content, determining, by the mediator, whether the member is eligible to access the electronic content based at least in part on the policies associated with the group, if eligible, the mediator responds to the request for mediation with a member accessible header.

Mediator utilizing electronic content to enforce policies to a resource

A media signer produces an array of hash values including a respective hash value for each of multiple different portions of content. The media signer applies a hash function and an encryption key to the array of hash values to create a digital signature associated with the content. Prior to playback of the content, a media verifier retrieves the array of hash values for the different portions of content. The media verifier produces a hash value result for the retrieved array. Based on the hash value result for the retrieved array and a hash value result of the array in the received digital signature, the media verifier verifies the integrity of the retrieved array. If the retrieved array of hash values is found to be trustworthy, the media verifier determines the integrity of a portion of the content by verifying the portion's corresponding hash value from the 'trustworthy' array.

Content integrity and incremental security

Various embodiments of a system and method for transparently authenticating a user to a digital rights management entity are described. In various embodiments, a digital rights management server may be configured to receive an authentication token from a first remote computer system. Such authentication token may indicate that a particular user of the first remote computer system was authenticated by a first content provider of one or more content providers. In various embodiments, the digital rights management server may also be configured to verify the authentication token by determining that one or more portions of the authentication token were generated based on respective authentication information issued to the first content provider. In various embodiments, the digital rights management server may also be configured to, in response to verification of the authentication token, issue to the first remote computer system one or more credentials.

System and method for transparently authenticating a user to a digital rights management entity

Various embodiments of a system and method for digital rights management using digital signatures are described. Various embodiments may include a digital rights management component configured to receive license data including user information and an encrypted decryption key. The digital rights management component may also receive a digital signature and encrypted content data. The digital rights management component may, in response to determining that the digital signature is a valid digital signature of the license data, generate on a device, a message including the user information. The digital rights management component may also perform a key derivation function on the user information to generate a result, generate a decryption key by decrypting the encrypted decryption key with the result of the key derivation function, and decrypt the encrypted content data with the generated decryption key to generate unencrypted content data.

System and method for digital rights management using digital signatures

Methods and apparatus, including computer systems and program products, for creating and using documents with machine-readable codes. A computer program receives user data provided for one or more fields in an electronic document, generates input data containing the user data and metadata that provides a self-contained description of the user data, encodes the input data into a machine-readable code, and generates a final representation of the electronic document with a display of the machine-readable code. Upon reading the machine-readable code, the metadata can be used to identify a set of fields in a target system to which to assign the user data. In some embodiments, the metadata and the user data can be transformed and sent to a target system. The use of metadata in this manner enables machine-readable codes to maintain a physical representation of data that facilitates transfer of the data back into an electronic environment.

Creating and using documents with machine-readable codes

Methods and apparatus, including computer systems and program products, for creating and using documents with machine-readable codes. A computer program displays a list of fields in an electronic document, receives user input selecting one or more of the fields, automatically generates generation instructions for a machine-readable code to be displayed in a final appearance of the electronic document, and stores the generation instructions in the electronic document. The generation instructions specify that the machine-readable code is to be produced using data to be provided for the selected fields. In some embodiments, the program can also evaluate the user input, as well as user modifications made to the electronic document, to determine whether the machine-readable code is validly configured. By guiding users through the process of setting up machine-readable codes, the program can help users create forms with machine-readable codes that have a high probability of being scanned and decoded successfully.

Growing community of inventors

Dublin, CA, United States of America

James Lester