FLEXIBLE DOMAIN POLICY DISTRIBUTION

摘要

The present invention relates to a method and a system of distributing domain policy enforcement to at least one target device (103, 104, 105, 106) in an authorized domain (101). A basic idea of the present invention is to distribute at least a part of an authorized domain policy in an authorized domain by distributing data representing at least part of the domain policy from one AD device to another, which another device is arranged to execute at least part of the domain policy. The domain policy governs AD management and may be divided in different parts, and devices typically enforce only a part of the complete domain policy. Further, a user authentication token may also enforce a part of the domain policy. Hence, the domain policy (or parts of it) may be distributed among other types of devices than AD devices, for example among user authentication tokens. The present invention is advantageous since it enables a rights issuer, which typically is a content provider, and an ADM, also known as domain manager (107) or domain issuer, to share the responsibilities of managing ADs and issuing rights, since a non- fixed domain policy is prescribed.