Domain membership rights object

摘要

A method of providing permissions to consume content objects within a domain includes creating a domain and a domain membership rights object for each member. The domain facilitates the sharing of content objects amongst the members of the domain. The domain membership rights objects for each member include permissions for each member in the domain to consume content objects in the domain.

主权项

1. A non-transitory computer-readable medium having instructions stored thereon that, in response to execution, cause a system including a processor to perform operations comprising:
creating, at a service provider, a domain of members to facilitate sharing of content objects amongst the members of the domain; and creating, at the service provider, a domain membership rights object (DMRO) for each member of the domain, wherein each DMRO includes permissions for a particular member in the domain to consume one or more of the content objects; sending a content object to a member of the domain, wherein the content object is encrypted with a content encryption key; sending a rights object for the content object to the member of the domain, the rights object including the content encryption key encrypted with a subdomain key for a subdomain of the domain, wherein the subdomain includes a subset of the members of the domain; and sending the DMRO for the member to the member, wherein the DMRO for the member includes the permissions for the member to consume the content object, and includes the subdomain key encrypted with a unique cryptographic key for the member or includes a domain key encrypted with a unique cryptographic key for the member wherein the domain key enables access to subdomain keys corresponding to all subdomains of that domain.