Abstract:
Pre-stored or bundled content such as programs can be enabled by using an RFID tag with suitable authorization information according to a process, in which the informs a host device of contents that can be activated with the RFID tag, the host device obtains respective authorization information from the RFID tag and subsequently refreshes the authorization in order to extend the activation over a desired period of time. Unless refreshed, the authorization is terminated after a given interval as of the authorization so that the substantial use of the content is subjected to the possession of the RFID tag and a license can be sold or transferred together with the RFID tag.

Description:
FIELD OF THE INVENTION  
       [0001]     This invention relates to wireless rights management. It relates particularly, but not exclusively, to establishing right to use information with an RFID module.  
       BACKGROUND OF THE INVENTION  
       [0002]     Modem electronic devices are converging towards computers in that often their features, applications and services can be upgraded by downloading software or by enabling pre-stored software.  
         [0003]     Enabling the use of content has inspired numerous technologies as understandably many content providers wish to inhibit unauthorized use of their material. Some content providers have opted to trust the end users and released shareware applications with the idea that time or usage type limited using of the content is free of charge and for other use, the end users should send checks or credit card payment data. Perhaps more often, some features, such as document saving or printing are disabled or restrained, until an access key is typed in to prove the purchase of the program.  
         [0004]     Unlike shareware distributors who solely rely on the honesty of the end user, some content providers impose copy protection and send individual access keys after receiving a payment for the content. Some sophisticated systems even individualize the content or key to depend upon original target environment so that the same key would not work for another copy of the same software in another electronic device. This may be done by taking some equipment specific code into account when creating the key and then again when verifying the key on installation and use phase. For instance, Microsoft® has adopted product activation approach in which the end user should enter an individual product label to register and responsively receive a release code to enable extended use of the product in question. If during the activation of the product, the number of licensed computers is exceeded, no new activation succeeds and consequentially the product may stop operating after a given period of time.  
         [0005]     Typically, however, the end user has to type some code into the target equipment in order to enable the use of desired content therein.  
         [0006]     According to Internet publication  Wired News,  May 19, 2005 article by Katie Dean, Professor Rajit Gadh is developing technology to tag Digital Versatile Data (DVD) discs carrying movies with Radio Frequency Identification units or RFID tags to authorize the discs to compatible DVD players configured to present the content of the DVD disc only after verifying the RFID tag. The tag would be used to bind the use right to the person originally purchasing the DVD disc. At the store, someone buying a new DVD would have to provide a password or some kind of biometric data, like a fingerprint or iris scan, which would be added to the DVD&#39;s RFID tag. Then, when the DVD was popped into a specially equipped DVD player, the viewer would be required to re-enter his or her password or fingerprint. The system would require consumers to buy new DVD players with RFID readers. Another interview of Professor Gadh was published by Mary Catherine O&#39;Connor in the Internet publication  RFID Journal  on May 12, 2005.  
         [0007]     The system of Professor Gadh appears very promising for strict restriction of usage right, but would apparently require dealers to purchase special equipment for obtaining and storing the user&#39;s own password or biometric data onto the RFID tag. Using biometric data as a key could however be seen as too restrictive as then even other members of the family would not have access to the content in the absence of the original purchaser. This might be inconvenient in case of content for children, for instance, as then a parent who purchased the content would not always be present when the access would be desired. Also buying DVD discs locked with a biometric key for a surprise gift could become impossible. The Article in the Wired News also expressed some reservations to the system. For instance, computer science professor Ed Felten of Princeton University suspected that “the people would find it creepy to give their fingerprints every time they wanted to play a DVD” and concerned it unlikely that people would buy new DVD players with RFID readers in order to purchase DVDs that are less functional. Hence, the incorporation of RFID to DVD players for content protection purpose does not appear desirable.  
         [0008]     It is also known from the applicant&#39;s earlier patent application publication WO2004/003829A1 to use an RFID tag to authorize the use of downloaded music in a mobile telephone. Another patent application publication of the applicant, WO2004/040923A1 discloses an arrangement using which downloaded applications can be activated using an RFID tag with suitable information stored therein.  
         [0009]     Despite the known advances in content authorization and use of RFID, further solutions for providing and authorizing access to content are needed to facilitate legally authorized installation or taking into use of applications and services.  
       SUMMARY OF THE INVENTION  
       [0010]     It is an objective of the invention to avoid or at least mitigate the problems found in prior art.  
         [0011]     According to a first aspect of the invention, an electronic device is provided, comprising:  
         [0012]     a memory for storing content the access to which is specifically restricted, whereby access to the content is allowed by presenting an access code;  
         [0013]     a Radio Frequency IDentification (RFID) communications module capable of detecting an RFID unit brought into the proximity of the device and of receiving information from the RFID unit; and  
         [0014]     a processor for verifying whether the information received from the RFID unit contains the access code and configured to allow execution of the content, wherein the RFID communications module and the processor are configured to repeatedly detect the presence of the RFID unit and to verify whether the information received from the RFID unit contains the access code.  
         [0015]     Advantageously, services, functions and applications may be pre-stored into the electronic device and subsequently taken into use after RFID based authorization. Further advantageously, the content may be pre-stored either or both in the electronic device and in an insertable memory medium. Such pre-stored content may be sold to an end-user by selling an RFID unit equipped with means for providing the access code to the electronic device.  
         [0016]     The repeated verifying of the access code may take place at a fixed or at least partly random time or interval. By re-verifying the access code, the access right may be granted with an RFID so that unauthorized temporary access to the RFID unit will not grant any long-term or irreversible authorization. Conversely, the RFID unit may be on offer in a sales point without fear that the RFID is already exhausted or inoperable for the purchaser.  
         [0017]     The electronic device may comprise an RFID unit holder to facilitate the holding of the RFID unit in the proximity of the RFID communication module.  
         [0018]     Alternatively or additionally to being configured to grant a limited term authorization, the RFID unit may be configured to maintain authorization grant state based on which any new authorization is decided. The RFID unit may be configured capable of authorizing a pre-determined amount of electronic devices within a given period of time such as one per day.  
         [0019]     Advantageously, the re-verifying the access code may prevent extended use of the restricted content so that the reliable use normally requires the possession of the RFID unit. Further advantageously, connecting the use authorization to the possession of the RFID unit enables transfer of a use license to a third party by reselling the RFID unit without multiplying the use right for an excessive period of time. Even further, the repeated checking of the access code allows offering the RFID units in a normal shop so that it is of little harm even if a user would, despite possible orders to the contrary, bring her own electronic device to the proximity of the RFID unit.  
         [0020]     The processor may be configured to allow testing the content for a predetermined or random period of time or number of sessions before requiring the access code for further use. This enables the testing of a function, service or application provided by the program code first and purchasing the RFID unit with a suitable access code only after initial user satisfaction. It also helps reselling the RFID unit, as a potential buyer may briefly test the object of merchandise first.  
         [0021]     The content may comprise generally software or computer program code executable by the processor or by one or more other components of the electronic device. The content may generally be capable of controlling the operation of the electronic device. Hence, pre-programmed features, that is, functions, services and/or applications can be enabled using the RFID unit.  
         [0022]     The access to the content may be individually and content specifically restricted. Advantageously, the content conversely may have an individual access, independent of user account credentials, for example. The access to the content may be bound to a predetermined period of time. The period may correspond to a subscription of a service such as video, news or magazine delivery.  
         [0023]     The electronic device may receive the content by streaming, that is, so that part of the content is reproduced before whole of the content is received. This advantageously provides perceivably fast responding.  
         [0024]     The RFID communication module may wirelessly power the RFID module. This is very convenient since it is very simple to place the RFID unit close to the electronic device for the period of desired use of the content.  
         [0025]     According to a second aspect of the invention, there is provided a method for controlling access to content by an electronic device, comprising:  
         [0026]     storing content the access to which is restricted specifically to the content in question, whereby access to the content is allowed by presenting an access code;  
         [0027]     detecting an RFID unit brought into the proximity of the device and of receiving information from the RFID unit;  
         [0028]     verifying whether the information received from the RFID unit contains the access code to allow execution of the content; and  
         [0029]     repeatedly detecting the presence of the RFID unit and verifying whether the information received from the RFID unit contains the access code.  
         [0030]     According to a third aspect of the invention, there is provided a computer program for controlling access to content by an electronic device, comprising:  
         [0031]     computer executable program code for causing the electronic device to store content the access to which is specifically restricted, whereby access to the content is allowed by presenting an access code;  
         [0032]     computer executable program code for causing the electronic device to detect an RFID unit brought into the proximity of the device and of receiving information from the RFID unit;  
         [0033]     computer executable program code for causing the electronic device to verify whether the information received from the RFID unit contains the access code to allow execution of the content; and  
         [0034]     computer executable program code for causing the electronic device to repeatedly detect the presence of the RFID unit and to verify whether the information received from the RFID unit contains the access code.  
         [0035]     According to a fourth aspect of the invention, there is provided an authorization unit for wirelessly authorizing access to content by an electronic device, comprising:  
         [0036]     a communication block for exchanging wirelessly information with an electronic device;  
         [0037]     a persistent memory for maintaining authorization information for authorizing use of content; and  
         [0038]     a processor configured to verify a present licensing status related to the content, to determine whether the authorization should be permitted, and if yes, to provide authorization information using the communication block to the electronic device to grant a license to use the content.  
         [0039]     Various embodiments of the present invention have been illustrated only with reference to the one aspect of the invention for sake of briefness, but it should be appreciated that corresponding embodiments may apply to other aspects as well. 
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0040]     The invention will now be described, by way of example only, with reference to the accompanying drawings, in which:  
         [0041]      FIG. 1  shows a block diagram of a system according to an embodiment of the invention;  
         [0042]      FIG. 2  shows a block diagram of an authorization server of  FIG. 1 ;  
         [0043]      FIG. 3  shows a block diagram of a mobile communications device of  FIG. 1 ;  
         [0044]      FIG. 4  shows a block diagram of an RFID tag according to  FIG. 1 ;  
         [0045]      FIG. 5  shows a signaling diagram illustrating details of signaling in the system of  FIG. 1 ;  
         [0046]      FIG. 6  shows a flow chart illustrating the operation of the mobile communications device of  FIG. 1 ; and  
         [0047]      FIG. 7  shows an exemplary structure of an authorization record stored into the RFID tag of  FIGS. 1 and 4 . 
     
    
     DETAILED DESCRIPTION  
       [0048]      FIG. 1  shows a block diagram of a system  100  according to an embodiment of the invention. The system  100  comprises an authorization server  110 , a plurality of Mobile Communication Devices (MCD)  120 , a number of RFID tags  130 , a plurality of subscribers  140  and groups of RFID tags (tags in short)  130  illustrating sets  150  representing various tags  130  associated with a given MCD  120  or subscriber  140 .  
         [0049]     The system assigns and controls use rights or authorization for given applications, services and/or functions (referred to as executable content in general) as will be described with further detail with reference to the further drawings intended to facilitate the understanding of various forms and examples of the present invention.  
         [0050]      FIG. 2  shows a block diagram of an Authorization Server (AS)  110  of  FIG. 1 . The AS  110  contains a data port  210  in order to output to the MCD  120  and to optionally input data from the MCD  120 , a user interface  220  for data exchange (input and output) with an administrator, a power supply  230  for powering the MCD  120 , a persistent or non-volatile memory  240  for storing computer program code  241  and long-term data  242 , a work memory  250  for buffering data for fast processing, a mass memory  260  typically for storing substantial amounts of data and a processor  270  for executing the stored computer program code and for thereby generally controlling the operation of the other parts of the MCD  120 . The data port  210  is typically capable of connecting to a computer data network such as the Internet or to a backbone system of a public land mobile network or a satellite radio network.  
         [0051]      FIG. 3  shows a block diagram of the Mobile Communications Device (MCD)  120  of  FIG. 1 . The MCD  120  contains a radio block  310  for wireless communications, a user interface  320  for data exchange (input and output) with a user, a battery  330  for powering the MCD  120 , a persistent or non-volatile memory  340  for storing computer program code  341  and long-term data  342 , a work memory  350  for buffering data for fast processing, an RFID tag reader (and optionally also writer) or generally an RFID communication module  360  and a processor  370  for executing the stored computer program code and for thereby generally controlling the operation of the other parts of the MCD  120 . The radio block  310  is typically a cellular radio network compatible unit capable of receiving and/or transmitting computer program code over a cellular network. The MCD  120  may also contain a holder for carrying one or more RFID tags  130  at hand for subsequent use on refreshing an authorization.  
         [0052]      FIG. 4  shows a block diagram of an RFID tag (tag  130 ) according to  FIG. 1 . The tag  130  contains a proximity communications block  410  for receiving signals and responsively transmitting response signals, a persistent memory  420  for storing identification information  421 , and operating instructions  422  (that is, computer program code) and optionally user data  423 , a work memory  430  and a processor  440  for running the computer program code and thereby controlling the operation of the tag  130 . The tag  130  may additionally contain a battery for maintaining data in an otherwise volatile memory and/or for powering the tag  130  in order to provide longer operation distance form the RFID communication module  360 . The persistent memory  420  further contains one or more authorization records  424  each containing authorization information for authorizing content by the MCD  120 . It is also advantageous for particular embodiments for the tag  130  to contain a clock  450  (or timer). The identification information may contain a shared secret that is sent or compared with a response or that is used as a basis to compute derived information for concealing the actual shared secret from the communications between the tag  130  and the RFID communication module  360  of the MCD  120 . In other words, the shared secret may provide static or dynamic authentication information, wherein static information may be reused later, whilst dynamic authentication information is typically adapted according to allowable interval of time and/or equipment. In either case, it can be said that the RFID provides authentication information or an access code based on the shared secret even if the code may vary from one time to another. In sake of simplicity, both static and dynamic access codes are treated equally in this application and the term access code should be understood to embrace also variable codes.  
         [0053]      FIG. 5  shows a signaling diagram illustrating details of signaling in the system of  FIG. 1 . The signaling presented is exemplary only and illustrates one possible way of using the invention. In signal (S) S 1 , the AS  110  sends the authorization records to the tag  130 . This sending may take place by a mass transfer wherein the AS defines a function according to which the authorization records are generated by another server or equipment and stored in to the tag  130  among a batch of tags  130 . After the tag  130  has been sold to a user or subscriber  140 , the user may bring the tag  130  to the vicinity of the communication module  360  of the MCD  120 . The communication module  360  and the tag  130  detect the presence of each other with signaling S 2  and the tag  130  sends an advertisement signal S 3  to the MCD  120  containing information on the designated content(s) for which the tag  130  is eligible. The MCD  120  sends, on demand, a request signal S 4  to order the authorization for content. The request signal need not identify any particular content if only one is available, otherwise in the absence of an identifier of requested content, a predetermined one of the content may be chosen or the selection may be negotiated with separate signals not shown. After receiving the request signal S 4 , the tag  130  responds by a respective authorization signal S 5  or a series of authorization signals S 5  to authorize the use of one or more contents authorizable with the tag  130 . In return, the MCD  120  acknowledges the signal S 5  with acknowledgement S 6  or sends a negative acknowledgement S 7  in the absence of the authorization signal S 5  within a predetermined period.  
         [0054]     The authorization signal S 5  may also contain a time condition for the period of allowed use time in terms of available time or expire moment for any given authorization. The authorization signal may further provide such a time condition separate for two or more authorized contents.  
         [0055]     Furthermore, the MCD  120  and the tag  130  may exchange signaling in which the MCD  120  is requested to stop providing another content before providing use for another content on authorization of the tag  130 . Such a signaling may include signals S 6  from the tag  130  to the MCD  120  enquiring presently authorized other content, response signal S 7  to the tag  130  listing presently authorized content and disablement signal S 8  from the tag to the MCD  120  to command the MCD to disable respective content to be subsided by a new authorization.  
         [0056]      FIG. 6  shows a flow chart illustrating the operation of the mobile communications device MCD  120  of  FIG. 1 . In step  61 , the MCD  120  receives the advertisement signal S 3  informing of available authorization for a given content (say, a new screen saver monitoring stock ratings). Responsive to the advertisement signal, the MCD  120  prompts a user to select whether to activate the content offered. Particularly if the content is pre-stored by the MCD  120  supplier or manufacturer, the subscriber  140  may confidently allow the activation of the content and confirm the procedure. Otherwise, the process resumes to wait for step  61 .  
         [0057]     After the user has confirmed the activation or authorization of the use of the content prompted in step  61 , the MCD  120  exchanges signals S 4  and S 5  in step  62 . At step  64  it is checked if the authorization signal S 5  contains a time condition. If yes, at step  65  the MCD  120  advantageously displays the authorized use time and starts a corresponding timer to count down remaining usage right. The MCD  120  can be configured to display or start displaying or otherwise presenting at step  65  the remaining use status by an icon or other display indicator in order to keep the subscriber  140  informed of the remaining time. On expiry of the authorized use time, the MCD  120  checks at step  66  whether the tag  130  is still available to refresh the authorization if the tag  130  is still eligible at that time to authorize the use of the content. If yes, the process resumes to step  61 , otherwise the process ends until the tag  130  (or another tag  130 ) is brought into proximity of the MCD  120  and the process is restarted from step  61 .  
         [0058]      FIG. 7  shows an exemplary structure of an authorization record  700  stored into the RFID tag  130  of  FIGS. 1 and 4 . The authorization record  700  contains a content identifier  710  for which the authorization record is intended, license conditions data  720 , current authorization situation data  730  and an integrity protector code  740 . The content identifier  710  designates the content or contents if many for which the tag  130  is eligible, that is, usable to authorize the use. The license conditions data  720  contains possible licensing restrictions such as the term  721  of licensing new subscribers, the permissible number  722  of possible simultaneously licensed subscribers, a qualifier  723  for each designated content or a common qualifier for more than one designated contents reflecting whether removal of authorization is required before authorizing a new subscriber prior the present authorization term of a preceding authorization expires, and a residual compensation flag  724  for determining whether a subscriber returning the tag  130  should be compensated for a remaining license term  721  or usable period of the tag  130 .  
         [0059]     The authorization record can be modified in a number of ways in accordance with present needs. For instance, a common tag may be capable of authorizing using any of the different content provided by a content provider with the condition that only one of these may be used at the time. Using the qualifier  723 , the tag  130  may control that no second authorization is granted whilst another one may still be in force.  
         [0060]     The present invention enables authorizing content whether pre-stored in an electronic device or delivered installed on a memory medium. It is also understood that the present invention in its different embodiments may provide numerous advantages, including but not restricted to transferring an end user license along the tag  130  to another user, to supplying users with terminals or memory cards with pre-installed applications or services which can be taken into use with a separately sold or bundled authorization tag  130  and using ordinary sales outlets such as grocery stores, record stores and kiosks to deliver the tags  130  to the users.  
         [0061]     Particular implementations and embodiments of the invention have been described. It is clear to a person skilled in the art that the invention is not restricted to details of the embodiments presented above, but that it can be implemented in other embodiments using equivalent means without deviating from the characteristics of the invention. A number of features were described as part of examples in the foregoing and wherever technically possible, the features should be regarded as optional and combinable with any different other examples of the description. For instance, the invention is useful also in various electronic devices, particularly in portable electronic books, PDA devices, gaming devices, music players, DRM enabled set-top boxes capable of providing limited access to (rented) content and GPS positioning devices. Hence, the scope of the invention is only restricted by the attached patent claims.