Method, system, license server for providing a license to a user for accessing a protected content on a user device and software module

A method for providing a license to a user for accessing a protected content on a user device is provided, the method comprising: transmitting user authentication data from the user device to a user account server; transmitting user identification data from the user account server to a license server if the user authentication data corresponds to a valid user account on the user account server; checking in the license server, whether the user is entitled to the license; and transmitting the license from the license server to the user device, if the user identification data is validated and if the user is deemed entitled to the license. A corresponding system, a license server and a software module are provided as well.

An embodiment of the invention relates to a method, a system and a license server for providing a license to a user for accessing a protected content on a user device. A further embodiment of the invention relates to a software module configured to run on a user device.

BACKGROUND

There exist many ways to distribute encrypted content, which has audio information, video information, text information, binary files etc. to users, while making sure that the users pay some fees to a content provider. The straight forward way is that the user acquires an encrypted file and buys the key for decrypting the file at the content provider. Using the key, the user can decrypt the file to use a decrypted version of the content. This process of acquiring the key might also be referred to as authentication or activation or as acquiring or being provided with a license of the encrypted content. The buying of the key can be performed electronically via the internet. To this end, the user normally accesses a license provider website or an online shop website and answers several questions on his name, email address, address, telephone number, sex, credit card number etc. Thus, the user has to fill in a lot of personal information so that the content provider has enough information to make sure that any fees for the content can be collected from the content buyer.

There are, however, severe limitations in this concept, since an increasing number of internet participants are very reluctant to send their email address to a site, from which the user does not know anything with respect to confidence, etc.

In general, obtained licenses are only valid for a restricted number of computers or user devices. Accordingly a user is not allowed to transfer the protected content to other devices and it is, for instance, very difficult for a user to obtain licenses for other user devices, which might be situated at different places, e.g. in an office, a private home, a car or a secondary residence.

It is an object of the invention to provide a method, a system and a server for accessing protected content on a user device which gives a higher flexibility to the user to access the protected contents on different user devices. This object is solved by a method according to claim1, a system according to claim11, a license server according to claim14and software module according to claim15.

Further details of the invention will become apparent from a consideration of the drawings and ensuing description.

DETAILED DESCRIPTION

In the following, embodiments of the invention are described. It is important to note that all described embodiments in the following may be combined in any way, i.e. there is no limitation that certain described embodiments may not be combined with others. Further, it should be noted that same reference signs throughout the figures denote same or similar elements.

It is to be understood that other embodiments may be utilized and structural or logical changes may be made without departing from the scope of the invention. The following detailed description, therefore, is not to be taken in a limiting sense, and the scope of the present invention is defined by the appended claims.

InFIG. 1a schematic flow diagram for a method according to an embodiment of the invention is depicted.

In a step S100a user authentication data is transmitted to a user account server.

The user authentication data may comprise a login, a password, a combination of a password and a login or other data that is related to the user so that the user account server can identify the user. The user authentication data should be known only to the user and not to other users. The login may be a user name. In the following, the term “user authentication data” is used for what the user provides, attempting to identify himself towards the system. The “user authentication data” might also be referred to as “user credentials”.

The user account server might be a server installed under the control of a distributor of protected content or of a reseller of protected content. A protected content item might comprise but is not limited to audio files, video files, e-book files, computer games or computer programs, which might be used by an application or computer program running on the user device.

The user device might be a personal computer, a rendering device for playing audio files or video files, like e.g. a television set or a radio, or other devices, e.g. telephones, personal digital assistants, smart phones etc.

In S102it is checked whether the user account is valid for the user authentication data on the user account server. If a valid user account is present on the user account server, user identification data is transmitted to a license server in S104.

There might be no valid user account if the user has not any user account at all on the user account server, but it might be also that the password is wrong, or that the user account has been invalidated or revoked because for example the user has not paid a user account fee, the user has been misused this user account, e.g. providing other unauthorized persons with user authentication data. This might be identified, e.g. for example by finding out in the user account server that the user is trying to login from a plurality of different geographic locations within a short time. Geographic locations might be identified by an IP address for example.

It is also envisaged that no valid user account is present, because the user account is temporarily disabled, e.g. when the password has been wrong 3 times in a row, the user account might be locked for 24 hours.

The user identification data might be realized as a security token (e.g. a session ID, a user certificate or others). In the following, the term “user identification data” is used for the system's internal data to identify a user in its user account database system (e.g. a unique user ID, which might be embedded additionally into a larger “user certificate”).

The license server is a separate server from the user account server. The license server might be installed under the control of a license distributor, e.g. a company providing content protection applications which can be unlocked with decryption keys or licenses.

At the license server it is checked in S106whether the user is entitled to a license. For instance, the license can be generated in accordance with a digital rights management (DRM) system.

The digital rights management (DRM) system might consider the following checks:start date (user receives or otherwise acquires the license not before a start date),end date (user does not receive or otherwise acquire any licenses after an end date),number of activations within a given timeframe,activations on different user devices within a given timeframe,number of activations on same user device within a given timeframe,number of activations on same user device,activations on different user device,expiration days (number of days to play until reactivation is necessary),number of launches (number of launches to play until re-activation is necessary),playtime restriction (number of minutes to play until re-activation is necessary),geographical check.

Of course all these checks may be combined, e.g. the protected content can be activated on a defined start date only from one country, or other countries can activate on a different date.

If the user is entitled to a license in S108the license is transmitted to the user device.

A user is then allowed to access the protected content, e.g. listen to an audio file watch a video file, play a computer game or run a computer program on the user device.

With this method the license is bound to the user account. Only a valid user account is required to authenticate a protected content on a user device, e.g. a computer game on a personal computer. With this approach a publisher or distributor can configure on how many user devices the user can access the content, including even an unlimited number of user devices. Once authenticated on a user device, the protected content can be accessed always on the user device unless the user de-authenticates the license.

Thus, the license is not bound to some sort of identification of the individual purchased item (e.g. a serial number of a protected content) but is only bound to a login of the user. Therefore, a user might use a login to access the protected content. There is no longer a need to search for a serial number. The user might be even allowed to retrieve the login credential if he forgets them. Serial numbers are likely to be generated randomly and include alphanumeric characters. The term is not intended to be understood as sequentially issued numbers.

InFIG. 2an embodiment of a system according to a further embodiment of the invention is depicted.

In a user device200a content protection application202, e.g. a computer game, as an example for a protected content is installed. The computer game is included in the content protection application202in order to ensure the protection of the game as content against unauthorized access.

If the user intends to activate the computer game, a separate software module204, for instance a dynamic link library DLL, is used to send in a step S206the user login and password to the user account server208.

The user account server208validates the user and creates a security token (e.g. a session ID, a user certificate or others) in S210and transmits the security token to the separate software module204in S212if a valid user account is present on the user account server208.

Afterwards the software module204sends the security token together with a request to transmit a license to the license server220in a step S222.

The license server220sends the security token in S224to the user account server208.

In a step S226the user account server208verifies the security token and retrieves the user identification data. The user account server208afterwards transmits the user identification data in a step S228to the license server220.

In a step S230the license server220verifies the digital rights management licenses and issues a corresponding license in a step S232to the software module204, which transfers the license to the content protection application202.

In a step S240within the user device200the license is stored and afterwards in a step S242the user can access the protected content, e.g. start to play a computer game.

In some embodiments it is envisaged that the separate software module204sends the user login and password to the user account server208in step S206and receives the security token from the user account server208in step S212and afterwards the separate software module204transmits the security token to the content protection application202, which sends the security token to the license server220in step S222and which receives the license in step S232from the license server220.

A further possibility is that the content protection application202sends the user login and password to the user account server208in step S206and receives the security token from the user account server208in step S212and afterwards the content protection application202transmits the security token to the separate software module204, which sends the security token to the license server220in step S222and which receives the license in step S232from the license server220.

According to a further embodiment, the content protection application202sends the user login and password to the user account server208in step S206and receives the security token from the user account server208in step S212and afterwards the content protection application202transmits the security token to the license server220in step S222and receives the license in step S232from the license server220.

Within these embodiments, there is no user login data stored in the license server. Therefore, the user data is handled only in the user account server, which gives a higher security for the user data, which if released, could be abused.

The license server220, the user account server208and the user device200might be connected by the internet or any other suitable network.

InFIG. 3a further schematic diagram according to a further embodiment of the invention is depicted.

According to this embodiment a user purchases a protected content, e.g. a game, by communication with an online shop server300. The online shop server300validates the user account in a step S302at the user account server208and sends a game identification, the user identification data and, optionally, the serial number, to the license server220.

When afterwards the user launches the game in a step S310, the user account is validated in a step S312at the user account server208. In case of the positive validation the user device200retrieves a license from the license server220in step S314.

The license server220checks together with a user account server208whether the user account is valid. In case the user account is valid, the license server220issues a license to the user device200and the game can be launched.

InFIG. 4a schematic diagram according to a further embodiment of the invention is depicted.

In this embodiment the user device200transmits the user authentication data, e.g. a login and a password together with an unlock request code in a step S400to the license server220. The license server220checks the user authentication data with the user account server208. Within the user account server208the user account is verified and in case of a valid user account the license server220verifies the corresponding digital rights management rights. If the user is entitled to access the protected content the license server220issues the license in a step S420to the user device200.

Within this embodiment the user authentication data is transmitted from the user device200to the user account server208via the license server220.

InFIG. 5a further embodiment according to the invention is schematically depicted.

In this embodiment the user device200transmits the user authentication data, e.g. a login and a password together with an unlock request code in a step S500to the user account server208.

The user account server verifies in the step S502whether a valid user account is available and afterwards transmits the user identification and an unlock request code to the license server220. Within the license server220it is checked whether the corresponding DRM rights are available for the user identification of user ID.

In the case of a positive verification of the DRM rights the license is provided from the license server220to the user account server208. Afterwards the user account server208issues the license to the user device200in a step S530.

In this embodiment the license is transmitted from the license server220to the user device200via the user account server208.

InFIG. 6a system for providing a license for accessing a protected content on a user device200is depicted according to a further embodiment of the invention.

The system600comprises a user account server208and a license server220.

The user account server208includes a first receiver602configured to receive user authentication data from the user device200. It further comprises a first control unit604configured to check whether the user authentication data corresponds to a valid user account of the user on the user account server208. Further, the user account server208comprises a first transmitter606configured to transmit user identification data to the license server220if the user has a valid user account.

The license server220includes a second receiver608configured to receive the user identification data. The license server220further includes a second control unit610configured to check whether the user is entitled to the license and whether the user identification data is received and it further includes a second transmitter612configured to transmit the license to the user device200if the user identification data is received and if the user is entitled to the license.

InFIG. 7a software module700, e.g. the separate software module204, is schematically depicted according to a further embodiment of the invention. The software module700is configured to run on a user device702and comprises a communication module704configured to communicate with a content protection application710on the user device702.

The software module700further comprises a transmitting module712configured to send user authentication data from the user device702to the user account server208if the content protection application710requests a license from the software module700.

The software module700further comprises a receiving module720configured to receive the license from the license server220different from the user account server208. If the software module700has received the license from the license server220the communication module is used to provide a content protection application710with the license and the content protection application afterwards uses the license to e.g. decrypt the content or to allow the running of a computer program or game on the user device702.

With some of the proposed embodiments it is also envisaged that the user purchases a protected content that is stored on a data carrier, e.g. a computer game or a video file on a Compact Disc (CD) or a Digital Versatile Disc (DVD) or a Blu-ray-Disc in a shop. If the content is protected by the content protection application710, the software module700might be already installed on the user device200or might be stored on the data carrier as well. The shop where the user has bought the data carrier interoperates with the user account server, to which the software module700sends the user authentication data. In accordance with the embodiments of the invention, a license is provided by the license server to the software module700afterwards.

The separate software module700might also be used to request the license in cooperation with the user account server208, the license server220and a separate license handling application in parallel or prior when the protected content is downloaded, e.g. from the online shop server300depicted inFIG. 3. Thus, the user is enabled to start earlier accessing the protected content, since the license might be available at the user device200already before the protected content is completely downloaded from the online shop server300. The separate license handling application is also included into a content protection application, as it has been described with regard to the computer game inFIG. 2.

The proposed method, system and server provide a high flexibility to the user for requesting licenses. For instance the user might select between different licenses before the user goes online to obtain the license. The user may choose a onetime start license, or a license valid for a certain predetermined number of days, or forever. The license server220can check the corresponding digital right management rights against the request from the user and provide the corresponding license to the user device200.

In some embodiments it is also envisaged that a user de-activates or revokes an existing license. Therefore, if a user has purchased a license for a certain number of days the user might first apply for e.g. ten days of license, but de-activate the license after eight days by transmitting a de-activation request to the license server, which afterwards transmits a command to de-activate the license on the user device.

Further, in some embodiments it is envisaged that first the license is de-activated on the user device with a de-activation command, and afterwards a de-activation confirmation is transmitted to the license server.

Afterwards it is envisaged that the user can re-activate the license for further use, e.g. for the remaining two days at a later time with a request at the license server

Since the user data is checked in the user account server it is not necessary to store a user login data in the license server. This might give a further security to the user. The user account server might be a more trustable server, since the user has used it already for e.g. other online processes, e.g. purchases of books, audio files or other items.