KEY MANAGEMENT PROTOCOL AND AUTHENTICATION SYSTEM FOR SECURECONTENT DELIVERY OVER THE INTERNET

摘要

A digital rights management architecture for securely delivering content to authorized consumers. The architecture includes a content provider (202) and a consumer system (216) for requesting content from the content provider. The content provider generates a session rights object (202B) having purchase options selected by the consumer. A KDC (204) thereafter provides authorization data to the consumer system. Also, a caching server (215) is provided for comparing the purchase options with the authorization data. The caching server (215) forwards the requested content to the consumer system (216) if the purchase options match the authorization data. Note that the caching (215) server employs real time streaming for securely forwarding the encrypted content, and the requested content is encrypted for forwarding to the consumer system (216). Further, the caching server (215) and the consume r system (216) exchange encrypted control messages (and authenticated) for supporting transfer of the requested content. In this manner, all interfaces between components are protected by encryption and/authenticated.