Digital rights management using trusted processing techniques

摘要

The present invention discloses several methods to strengthen the integrity of entities, messages, and processing related to content distribution as defined by the Open Mobile Alliance (OMA) Digital Rights Management (DRM). The methods use techniques related to the Trusted Computing Group (TCG) specifications. A first embodiment uses TCG techniques to verify platform and DRM software integrity or trustworthiness, both with and without modifications to the DRM rights object acquisition protocol (ROAP) and DRM content format specifications. A second embodiment uses TCG techniques to strengthen the integrity of ROAP messages, constituent information, and processing without changing the existing ROAP protocol. A third embodiment uses TCG techniques to strengthen the integrity of the ROAP messages, information, and processing with some changes to the existing ROAP protocol.

主权项

1. A method for integrity protection of information used in protocol messages exchanged between two entities in a protocol that enables one entity to acquire a rights object from the other entity, comprising, by at least one of the entities:
securely storing information to be used in the protocol messages using a protected module of the entity, wherein the storing comprises sealed signing of the information using, in part, information indicative of an integrity status of the platform on which the entity operates or software components thereof, and wherein the storing further comprises binding the information by encrypting the information with a key protected by the protected module; and pre-verifying the sealed signed information to be used in the protocol messages prior to the use thereof by the entity.