Method and system for digital rights enforcement

There is provided a method and system for digital rights enforcement. The method includes: determining digital content requested by a user via a selected user device; determining digital rights associated with the digital content; reviewing the digital rights to determine access rights relating to authorized devices for the user; determining whether the user has exhausted the access rights; and if the access rights are exhausted: determining at least one use factor for each of the user's previously authorized user devices; determining a previously authorized user device on which to revoke access to the digital content based on the at least one use factor; and revoking access rights to the previously authorized user associated device; otherwise downloading the digital content on the selected user device. The system includes a content review module and a revoker module.

FIELD

The present disclosure relates generally to digital rights. More particularly, the present disclosure relates to a method and system for digital rights enforcement over a plurality of user devices.

BACKGROUND

Digital content is often protected by associated digital rights, for example, Digital Right Management (DRM) data. DRM is a class of access control technologies that are used with the intent to limit the use of digital content after the sale or distribution of the digital content. DRM describes any technology that inhibits the use of digital content in a manner not intended by the content provider.

According to the related art, on the purchase of digital content, DRM is associated with the digital content or a device in which to review the digital content. For example, a compact disc or Blu-ray™ disc may have a region code associated with the content which only allows players associated with that region code to play the disc. In another example, when downloading an electronic book (e-book), a user may be requested to specify the device which is to receive the content. Only on manipulation of the digital content is the user aware that the rights are limited. Issues can occur when digital content is purchased via an online purchase and the user has multiple devices that are able to display the digital content, yet the user is limited to using the digital content only on the original device that was associated with the purchased digital content.

It is, therefore, desirable to provide a method and system for digital rights management enforcement that mitigates at least one disadvantage of previous systems.

SUMMARY

In a first aspect, the present disclosure provides a method for digital rights enforcement over multiple devices, the method including: determining digital content requested by a user via a selected user device; determining digital rights associated with the digital content; determining access rights relating to authorized devices for the user based at least in part on the digital rights associated with the digital content; determining whether the user has exhausted the access rights; and if the access rights are exhausted: determining at least one use factor for each of the user's previously authorized user devices; determining a previously authorized user device on which to revoke access to the digital content based on the at least one use factor; and revoking access rights to the previously authorized user associated device; otherwise downloading the digital content on the selected user device.

In a particular case, the revoking of the access rights to the previously authorized user device may occur automatically.

In another particular case, the user may be requested to approve the selection of which previously authorized user associated device to revoke prior to the revoking of the access rights.

In still another particular case, one or more of the at least one use factor may be selected from the group of: time the digital content was downloaded on the user device; last access of the digital content on the user device; time spent using the digital content on the user device; and frequency of accessing the digital content on the user device.

In yet another particular case, the method may include determining a number of concurrent downloads requested by the user after determining the digital content requested by the user; and if the number of concurrent downloads is above a predetermined threshold, waiting for a preset condition to be satisfied before proceeding. In this case, the preset condition may be the expiry of a predetermined time interval.

In still yet another particular case, the method may include encrypting the digital content prior to downloading the digital content on the selected user device.

In still another case, the encrypting of the digital content occurs contemporaneous to the request for the digital content.

In a particular case, the method may include displaying a catalogue of available digital content to the user prior to determining the digital content requested by the user.

In another particular case, the displaying of the catalogue may include: determining user data related to the user; and determining catalogue content from a learning management system based on the user data.

In still another particular case, the revoking of the access rights may include deleting the digital content from the previously authorized user device.

In yet another particular case, the revoking of the access rights may include deleting a decryption key from the previously authorized user device.

In still yet another particular case, the revoking access rights may include: monitoring for connection of the previously authorized user device to a network; and sending a signal revoking the access rights of the previously authorized user device to the previously authorized user device to revoke the digital content.

In a particular case, the method may include determining a user identification; and determining access rights relating to authorized devices for the user based at least in part on the user identification.

In another particular case, the user identification identifies the user as either a student or instructor and the determining of the access rights relating to authorized devices further comprises determine a course related to the digital content.

In a further embodiment there is provided a system for digital rights enforcement over multiple devices, the system including: a content review module configured to: determine digital content requested by a user via a selected user device; and determine digital rights associated with the digital content; and an revoker module configured to: to determine access rights relating to authorized devices for the user based at least in part on the digital rights associated with the digital content; determine whether the user has exhausted the access rights; and if the access rights are exhausted: determine at least one use factor for each of the user's previously authorized user devices; determine which previously authorized user device on which to revoke access to the digital content based on the at least one use factor; and send a revoke message to revoke the access rights to the previously authorized user device; otherwise allow the download of the digital content on the selected user device.

In a particular case, the system may include an enforcement module configured to revoke the access rights on the previously authorized user device.

In another particular case, the revoker module may be further configure to provide a prompt to the user wherein the user is requested to approve the selection of which previously authorized user device to revoke prior to the revoking of the access rights.

In still another particular case, one or more of the at least one use factor may be selected from the group of: time the digital content was downloaded on the user device; last access of the digital content on the user device; time spent using the digital content on the user device; and frequency of accessing the digital content on the user device.

In yet another particular case, the content review module may be further configured to: determine a number of concurrent downloads requested by the user after determining the digital content requested by the user; and if the number of concurrent downloads is above a predetermined threshold, wait a predetermined time interval before proceeding.

In still yet another particular case, the content review module may be further configured to: encrypt the digital content prior to downloading the digital content on the selected user device.

In a particular case, the system may include a display module configured to display a catalogue of available digital content to the user.

In another particular case, the enforcement module may be configured to revoke the access rights by deleting the digital content from the previously authorized user device.

In still another particular case, the enforcement module may be configured to revoke the access rights by deleting a decryption key from the previously authorized user device.

DETAILED DESCRIPTION

The terms and words used in the following description and claims are not limited to the bibliographical meanings, but, are merely used by the inventor to enable a clear and consistent understanding of the embodiments of the method and system described herein. Accordingly, it should be apparent to those skilled in the art that the following description of example embodiments is provided for illustration purpose only and not for the purpose of limiting the invention as defined by the appended claims and their equivalents.

Generally, the present disclosure provides a method and system for digital rights enforcement on a plurality of devices. In particular, the embodiments of the system and method detailed herein provide for the digital rights, for example the Digital Rights Management (DRM) information, to be enforced on a plurality of devices associated with a user. Further, the system and method provide for revoking access to digital content from a device if the user wishes to load the digital content on another device but has reached a maximum number of authorized devices. In some cases, the device from which the access to digital content is revoked is selected based on at least one use factor including, for example, time since digital content was downloaded, time since last content was last reviewed, time content was reviewed on device, and the like.

Control over digital content is increasingly important as users accept and adapt to new forms of media. Users are able to access digital content (which is generally covered by copyright and sometimes referred to as copyright content) through a variety of computing devices, for example, electronic books or readers, tablet computers, smart phones, netbooks, laptops, and the like. Users may have access to a plurality of computing devices and may wish to view electronic content on each of the plurality of computing devices depending on the situation of each user.

FIG. 1illustrates a system100for digital rights enforcement for a plurality of user devices according to an example embodiment. Referring toFIG. 1, the system100may include at least one user device110, and a network device120and is operatively connected to a network130, a third party server240and a learning management system250.

At least one user105a, via at least one user device110a-110c, accesses the network device120via the network130. Another user105b, may also access the network device120via at least one user device110d-110e. The user devices110a-110emay be, for example, an electronic book, an electronic reader, a tablet computer, a smart phone, a laptop, a desktop, a gaming console (handheld or stationary), or the like. The network device120may be a separate computing device configured to transmit and receive data related to one or more services or applications that run on one or more user devices110. The network device120may be a stand-alone device or an arrangement of two or more devices working in conjunction with each other. In some cases, the network device120may be a component or a module of the learning management system250. The network130may be the Internet, a Local Area Network (LAN), a Wide Area Network (WAN), a Personal Area Network (PAN), an enterprise network, a Virtual Private Network (VPN), or the like. The third party server240, may be, for example, a web server, a Google™ drive, a server of Amazon™ cloud services, or the like.

FIG. 2illustrates the user device110according to an example embodiment. The user device110includes an output module140, a connection module150, an enforcement module160, a memory module170and a processing module180.

The user105accesses the system via a user device110. Each user device110includes, for example, the output module140configured to display digital content to the user105. It will be understood that other forms of output may also be anticipated, such as audio output, and the like but for the purposes of this embodiment reference is made to a display. The display may also be configured to receive input from the user, for example a touch screen, or the user device may have alternative input components. Each user device110may have network capabilities via, for example, the connection module150. The connection module may be configured to receive communication from and transmit communication to the network device120, the learning management system250, and third party servers240, typically via the network130.

The user device110further includes the enforcement module160which is configured to retrieve and enforce the digital rights, such as the DRM, associated with the digital content. The user device includes the processing module180configured to execute instructions received from the system100and the memory module170, for example, a database for storing, for example, digital content, DRM, use factors, or the like.

When the user105requests digital content, for example, an electronic book, a game, a video, an image, an audio recording, or the like, the user device110transmits the request via the connection module150to the network device120.

FIG. 3illustrates the network device120according to an example embodiment. The network device may include a connection module190, a content review module200, a revoker module210, a memory module220and a processor module230.

The connection module190of the network device120receives the request from the user device110and may transmit the request for digital content to the processor module230for processing. The content review module200is configured to retrieve the digital content requested by the user. The content review module200is further configured to determine the DRM associated with the requested digital content. In some cases, the DRM may be stored in the memory module220.

The content review module200is configured to retrieve the digital content associated with or requested by the user105aaccessing the system100. The content review module200is further configured to determine the DRM based on the digital content selected by the user105or any specific DRM that may be associated with the user105accessing the digital content. In some cases, the content review module may determine the user's identification, for example the user may be identified as a student, teacher, administrator, publisher, author, or the like, and only specific digital content may be available to the user and the content may vary depending on the user's role. In an example, a student user may only have access to an ebook (the digital content) for a limited number of days, for example, 2 days, 90 days, 180 days or the like, while a separate instructor user may have access to the ebook for an unlimited number of days. Further, the student user may be limited in the amount of text the student has access to copy, while the instructor user may have unlimited amount or have a higher limit in the amount of text the instructor has access to copy.

In some cases, the content review module200is configured to query the learning management system250to determine user data, for example, role of the user, courses associated with the user, course dates for enrolled courses, and the like. The content review module200may be further configured to query third party servers, such as third party server240, to determine the digital content requested by the user and/or the DRM associated with the digital content.

The revoker module210is configured to retrieve the DRM associated access rights for the user. In some cases, the DRM will provide the revoker module210with the number of authorized devices for the user with respect to the requested digital content, for example, the number of copies or devices allowed to host and/or store the digital content at a given period in time. The revoker module210is further configured to determine the previously authorized user devices which have previously downloaded the content and on which the content remains active and accessible to the user. If downloading the additional copy of the digital content requested by the user105will give the user access to more than the maximum number of authorized devices allowed, the revoker module210will revoke at least one previously authorized device by, for example, disabling or removing the digital content on the previously authorized device. In some case, the revoker module210reviews at least one use factor to determine which user device110should be revoked, and sends a revoke message to the user device110. In other cases, the revoker module210reviews a plurality of use factors to determine which user device the user is least likely to require use of the digital content and send a revoke message to that user device. In still other cases, the revoker module210may request user input to determine which user device110should be revoked prior to revoking the user device, for example, by presenting a list of user devices having the content and allowing a selection of the device to be revoked.

The memory module220may be a database within the network device120, or may be operatively connected to the network device120. The memory module220may be operatively connected to the content review module200and the revoker module210and may be configured to store user data, digital content, DRM, user data, use factors and the like. The network device120further includes a processing module230configured to execute the instructions and/or commands of the other modules. In some cases, the processing module230may be the central processing unit of the network device, in other cases, the processing module may be distributed and each module may include a separate processor.

FIG. 4is a flowchart illustrating a method300for digital rights management enforcement for multiple devices according to an example embodiment.

At310, the user105baccesses the system100via the user device110d. On accessing the system100, the content review module200determines a catalogue of available digital content for the user105b. The catalogue may be retrieved from the memory module220or may be derived by, for example, querying third party servers240and/or the learning management system250to determine the digital content the user105bis authorized to download. In some cases, the user105bmay have the option of viewing a plurality of catalogues, for example, a catalogue of digital content already purchased by the user, a catalogue of digital content required for upcoming courses in which the user is enrolled, a catalogue of digital content that might interest the user based on past purchases, or the like.

Each user may have individualized catalogues based on the associated user data, for example, the user's role, the user's past behavior, the user's upcoming courses, or the like. The catalogue may provide detail to the user of the digital content available, the DRM associated with the content, the cost, and the like. The catalogue may further provide an input component, such as a link, a button, or the like, where the user can select specific digital content.

At320, the user requests to download a selected digital content and the user device110transmits the request to an appropriate server hosting the content requested by the user. Once the request has been made, the user may be directed to a secure page in order to confirm the user id and login via a password or other confirmation technique. In some cases, the user may have already been authenticated via the network to a network device prior to requesting a download of a selected content. If the user is requesting to download digital content not previously purchased, the user may further be requested to enter payment details. In some cases, if the user is requesting to download digital content which has previously been purchased and downloaded by the user, the user may be requested to specify a user device to receive the digital content. In other cases, the user may be presented with a list of devices associated with the user, and the user can select a specific device. In still other cases, the system100will assume the content is to be downloaded on the user device the user is currently using to access the system100.

At330, the status of the user may be checked, for example by the network120device querying the user device110, the processor module230of the network device querying the memory220if the status is stored by the network device120, or the like. The status of the user is reviewed to determine the user's status with respect to ongoing downloads. The number of active user downloads is compared against a predetermined threshold. In some cases, the threshold may be manually entered by, for example, an administrator, a publisher, an author, a super user or the like of the system100. In other cases, the threshold may be automatically configured based on the bandwidth capabilities of the user device requesting the download and the bandwidth available to the network device and/or third party server currently hosting the digital content. In some cases, the threshold may be limited to a small number of concurrent downloads, for example, 2, 3, 5 or the like.

At340, system may block the user from downloading the requested digital content due to the number of concurrent downloads. In some cases, the user may receive a prompt or message stating the due to the ongoing downloads the user is requested to wait until at least one download finishes before requesting another download of the digital content. In other cases, the user may be returned to the catalogue of available digital content and may only be notified that the download failed.

Limiting the number of concurrent downloads is also intended to reduce the number of illegitimate downloads occurring on a user's account. In an example, the user may purchase the digital content and then provide the user id and secure login information to other users, or have the user id and secure login information hacked by other users. Other users may be able to download the digital content and may attempt to do so at the same time. In some cases, if the user is blocked, the user may be required to wait for a preset condition to be satisfied before proceeding, for example, waiting for a download to be completed, waiting for predetermined time interval, or the like prior to requesting another download. In some cases, the predetermined time interval may be, for example 30 seconds 1 minute, 5 minutes, or the like. In some cases, the predetermined time interval may be adjusted depending on the number of downloads being attempted simultaneously. The more simultaneous attempts to download the digital content, the longer the predetermined time interval the user must wait prior to providing a new download request. By including a time interval, it is intended that the fraudulent users may be dissuaded or discouraged from downloading the digital content.

At350, if the user's current downloads including the download of the requested digital content are below the predetermined download threshold, the user will receive a ticket indicating the download will progress shortly. The content review module200retrieves the digital content and the associated DRM and is further configured to encrypt the digital content. In some cases, the content review module200will transmit the digital content and associated DRM to another network device or third party server for encryption.

At360, the revoker module210determines the access rights and previously authorized devices associated with the digital content, for example, the number of user devices that have previously downloaded the digital content and in which the content has not been revoked. The revoker module210further reviews the DRM to determine the access rights associated with the digital content, for example, the number of simultaneous authorized devices the user is permitted. If the user has not exhausted the access rights, the revoker module210is configured to allow the download to proceed.

At370, if the revoker module210determines that the user has exhausted the access rights. If the requested download will result in more authorized devices hosting the digital content than the access rights allow, the revoker module210will send a revoke notification or message to at least one of the previously authorized devices currently hosting a downloaded copy of the digital content.

The revoker module210may determine which previously authorized user device to revoke the digital content by reviewing at least one use factors, for example, time the digital content was downloaded, last access of the digital content, time spent using the digital content, frequency the digital content is accessed, or the like. In some cases, only a single use factor may be reviewed, for example, the revoker module210may determine to revoke the user device which has the oldest download request and revoke the digital content from that device. In other cases, the revoker module210will review a plurality of use factors and determine which previously authorized user device is least likely to be used to review the digital content in the future or which device has been used the least in the past and revoke that device. In other cases, the revoker module210may request user input to determine which device should be revoked. The revoker module210may determine that the digital content needs to be removed from at least one of a plurality of previously authorized devices and may list the plurality of user devices and the user may select which device to revoke.

At380, the user may experience a delay or a progress screen which is intended to allow time for the digital content to be encrypted. The digital content may be retrieved from publishers and hosted on, for example, third party servers, the learning management system, or the like, and is generally protected so that no unauthorized user can obtain access to the digital content. One way to protect the content is to encrypt the digital content for each user. The encryption key may be a one-time use key. Possible encryption schemes are described in Table 1, below, although those skilled in the art may be aware of further schemes, or may combine the schemes described below. Even with the digital content being encrypted, there may still be possibility that a rogue or fraudulent user may obtain the decryption key on the user or user's device, for example, jailbroken iPad, rooted Android, web client through javascript inspection, or the like.

TABLE 1Encryption SchemesNameDescriptionPros and ConsCustomUsing an encryption algorithmcan be encrypted in real-Encryp-such as Advanced Encyptiontime with very good servertionStandard (AES) to encrypt anside performanceentire PDF document. Userweb client cannot decryptdevice downloads the entirethe entire file in memory.encrypted document, decrypts,iOS client takes a while tothen renders the PDFdecrypt the file. However,document.because of memoryconstraints, the decryptedfile is saved to memorybefore sending to therenderer. This leavesplaintext file on diskCustomDivide PDF into portions, andEncryption can be done inEncryp-then use an encryption such asreal-time. Portioning needstionAES to encrypt the portions.to be done at contentwithingestion timePortioningtable of contents will bebrokenannotations are page-specific, and thereforeneeds to be reconstructedand saved properly by theclientfull text search is broken,would require server togenerate indexingPDFUse PDF password protection,password protected PDFsNativewhich encrypts objects insideare secureEncryp-the PDF file. This is part of thecan be loaded directly intotionPDF spec. Available encryptionrendering library, andalgorithms include RC4 up todecryption happens on-the-128-bit and AES up to 256-bit.flybookmarks, annotations,full text search, areall preservedPDF specific encryption,i.e. to encrypt other filetypes, new mechanism isrequired.

As the user waits, the system100encrypts the digital content the user has requested.

At390, the download of the encrypted digital content is requested by the network device120to download the digital content to the user device.

At400, the download status is checked. In some cases, the system100will be determined that the encryption has yet to finish, and the user will be returned to wait for a further predetermined interval of time before the download is re-requested to provide time for the encryption to finish. In other cases, the system100may determine that a non-downloadable condition has occurred, for example, the content does not exist, the content failed to encrypt, another error has occurred, the user is no longer connected, or the like. In some cases, for example, if the user session connection may time out, the user may need to re-login. The user may be returned to the catalogue to request a further download or be redirected to similar content to download, if a non-downloadable condition has occurred.

At410, in still other cases, the user device will be redirected to receive the content from a third party server240or third party content host. The user device may download the content from the network device, if the content is located there, or the user device may receive the content from a third party server after being directed to the server by the content review module200of the network device120.

At420, the encrypted content is saved to the memory module170of the user's device.

At430, the user may be notified when the download is complete and the user can access the digital content on the user device.

In an example, the processing module230may load the entire digital content prior to encrypting the digital content to ensure the entire digital content is encrypted. Various libraries may be used, for example:i. Aspose;ii. EO pdf;iii. iText;iv. Docotic;v. Apache PDFBox;vi. PDFSecure;vii. Etc.

In some cases, the digital content may allow for a plurality of downloads while other digital content may only allow for the user to have the content on a single authorized device. The specific digital content may also allow for a different access rights depending on the user data. For example, a professor may be able to have specific digital content on three authorized user devices, while a student may be limited to a single authorized device for the same digital content.

FIG. 5illustrates a method500for content removal from a user device according to an example embodiment.

At510, the user logs into or otherwise accesses the system100.

At520, the system100retrieves the device has a device identifier or device ID.

At530, if the device does not have a device ID, the user device generates a unique device ID for the user's device. In some cases, the device ID will be associated with the user data and or user identification.

At540, the enforcement module160determines a catalogue of available digital content for the user by reviewing the digital content stored in the memory module170of the user device. The enforcement module160may further be in communication with the content review module200to determine other digital content available to the user.

At550, the enforcement module160further reviews metadata related to the digital content of the catalogue and the user. In some cases, the metadata will be stored locally in the memory module170. In other cases, the enforcement module160may retrieve the metadata from the network device120. In other case, the metadata may be transmitted to the previously authorized user devices, when the user requests a download of digital content on a different user device.

At560, the enforcement module160determines if any of the metadata requiring digital content to be revoked is associated with the device ID. In some cases, the metadata may specifically list device ID's to be revoked. In other case, the metadata may only list device IDs which are authorized devices permitted to have downloaded copies of the digital content.

At570, the enforcement module160will review whether the user device contains content that needs to be revoked and deleted. In some cases, the enforcement module160will determine the device has digital content but the device ID is not listed as a permitted device.

At580, the enforcement module160will delete or otherwise remove the content. In some cases, the enforcement module160may remove the decryption key as opposed to deleting the content. Removing the key may revoke access to the user on the user device but is intended to allow for access to be reinstated more quickly. If the user requests access to a revoked but previously authorized user device, the user may simply require the key and not be required to download the digital content again. Downloading the key is intended to be quicker and require less bandwidth than downloading the digital content. Removing the key may be preferred by users that may have downloading quotas or caps.

At590, the display module150displays the catalogue for the user and the user can select digital content to review.

In some cases, the user may already be logged in or otherwise accessing the system100when the user device receives metadata stating that the device is revoked in relation to the digital content. The user device, for example an android tablet, may be set to receive updates even if the user is not currently using the application to view the digital content, or not using the user device at the time of the update. In this case, the enforcement module170may delete or otherwise revoke the content in the background, without the user accessing the catalogue of data.

In some cases, the metadata may be pushed to the device from the network device at predetermined intervals, for example, every 5 minutes, every 30 minutes, every download request by a user, every completed download by a user, or the like. In other cases, the user device may periodically ping the network device for updates to the metadata, for example, every time the user logs in, every 30 minutes, once a day, or the like.

In some cases, if the user device to be revoked is not connected to the network, the digital content may not be revoked until the user connects the device. This scenario may allow the user to temporarily have more than the maximum number of authorized devices hosting the digital content. As such, when the user attempts to access the digital content on a device not connected to the network, the user may receive a prompt requesting the user to connect the device prior to accessing the digital content.

In other cases, the user may be requested to connect a previously authorized device to the network if it is determined that the device has received a revoke message but has not yet connected to the system100. For example, a user may request to download digital content on a user device. The system100determines that a previous revoke message relating to the selected digital content or to other digital content has been sent, but the authorized device has not yet revoked the digital content. The user may be requested to connect the authorized device to the network prior to being permitted to download the selected digital content.

Table 2 illustrates an example of determining content catalogue for a user, wherein the device ID's listed are device ID's allowed to access the digital content. The example is provided for illustrative purposes only and one skilled in the art will understand that there is a plurality of ways to determine whether a user device continues to have access to digital content or if the content should be deleted.

In one example, a student accesses the system100via a user device, for example a tablet computer. The display module110displays a catalogue of available material to the student. The student wishes to download a textbook that the student has previously downloaded on his laptop computer and on his smart phone as the student plans to return home for the weekend and does not wish to bring the laptop computer with him. The student requests the download of the textbook to the tablet computer. The system100determines that the maximum number of authorized devices is two and to download the digital content on the tablet computer, the digital content will need to be revoked on either the laptop computer or mobile phone. The system100may review use factors and determine that the smart phone was the first to download the digital content and the digital content has been accesses more frequently, more recently and for longer intervals on the laptop computer. As such, the system100may determine to revoke the digital content on the smart phone. In some cases, the system100may review only a single use factor, for example, the first device to request the download may be revoked. In other cases, the system100may suggest a user device to revoke and may prompt the student to agree to the selection or to modify the selection. In still other cases, the student may be presented with a list of current devices hosting the digital content and the student selects which device to revoke. The system100then encrypts or provides for the encryption of the digital content and the tablet computer downloads the encrypted textbook. The digital content is revoked by deleting or otherwise removing the textbook from the smartphone or by deleting or otherwise removing the key to access the textbook.

In another example, the access rights may specify different maximum authorized devices depending on the device type. For example, the access rights may allow the user a single laptop or desktop computer to host the device, but may allow the user to have two handheld portable communication devices, for example two smartphones, or a smart phone and a tablet. The revoker module210may determine the type of device has been previously authorized to determine whether the user has exhausted the access rights. In some cases, the user may attempt to download the digital content on a type of device that has exhausted access rights. The revoker module210may revoke the previously authorized device of the same type or, prior to revoking the device may inform the user that although the user has exhausted the access rights with respect to this type of device, the user may still download the digital content on a separate type of device to see if the user would prefer to download the digital content on an the different type of device.

In yet another example, a user may download a component of the selected digital content. For example, the user may wish to download only a chapter of a textbook. The access rights may only allow a single authorized download but may allow the components to be downloaded on separate device. For example, if the student is accessing a textbook, the student may be select to download chapters 1 to 3 on a laptop. The student then may access the system100with a tablet computer and request the download of chapters 3 and 4 for the tablet device. The revoker module210may revoke chapter 3 from the laptop but may leave chapters 1 and 2 as the user has not requested to download those components of the selected digital content. After sending the revocation to the laptop with respect to chapter 3, the user may then download chapters 3 and 4 onto the tablet computer.