Microsoft Technology Licensing, LLC

Mark E Paley

Clifford Paul Strom

Stephen P DiAcetis

Kenneth D Ray

Paul England

Bryan M Willman

David Benson Cross

Kedarnath Atmaram Dubhashi

Thekkthalackal Varugis Kurien

Jamie Hunter

Pierre Jacomet

Derek Norman LaSalle

Lonnie Dean McMichael

This document describes policies for digital rights management that enable distribution of full-function versions of applications that, while fully functional, have functions limited by an associated policy. A policy may be replaced or updated, thereby enabling use of previously limited functions without distribution of another version of the application.

Policy for digital rights management

A content license associated with unencrypted digital content is generated, the content license including both an identifier of the unencrypted digital content and a content policy. At a user device, a determination is made as to whether the content license corresponds to particular unencrypted digital content. Use of the particular unencrypted digital content by the computing device is permitted in accordance with the content policy if the content license corresponds to the particular unencrypted digital content. However, use of the particular unencrypted digital content by the computing device based on the content license is prohibited if the content license does not correspond to the particular unencrypted digital content.

Associating policy with unencrypted digital content

A mechanism for protected operating system boot that prevents rogue components from being loaded with the operating system, and thus prevents divulgence of the system key under inappropriate circumstances. After a portion of the machine startup procedure has occurred, the operating system loader is run, the loader is validated, and a correct machine state is either verified to exist and/or created. Once the loader has been verified to be a legitimate loader, and the machine state under which it is running is verified to be correct, the loader's future behavior is known to protect against the loading of rogue components that could cause divulgence of the system key. With the loader's behavior being known to be safe for the system key, the validator may unseal the system key and provides it to the loader.

System and method for protected operating system boot using state validation

Growing community of inventors

Redmond, WA, United States of America

Mark E Paley