Patent ID: 7885871

Claim:
A method of digital rights management (DRM), comprising: performing, by a first network server serving as a Domain Enforcement Agent (DEA) of a home network, a registration procedure into a second network server serving as a Domain Authority (DA) for providing a domain key to a device to join a user domain, wherein, during the registration procedure, the first network server serving the DEA receives from the second network server serving as the DA information including a URL of the second network server serving as the DA; performing, by the first network server serving as the DEA, a device discovery procedure in order to detect whether said device has to join or leave the user domain of the home network; checking, by the first network server serving as the DEA, one or more domain policies related to said device to determine whether registration or de-registration of said device is to be performed; sending, by the first network server serving as the DEA, a Join User Domain Service message to said device by using a UPnP (Universal Plug and Play) protocol, if registration of said device is to be performed as a result of the checking step, wherein the Join User Domain Service message further includes a URL of the second network server serving as the DA and cryptographic binding information related to the first network server serving as the DEA, such that said device uses the URL to contact the second network server serving as the DA and uses the cryptographic binding information to join the user domain, and wherein the cryptographic binding information comprises an identifier of the first network server serving as the DEA, a signature of the first network server serving as the DEA, and an identifier of the user domain; sending, by the first network server serving as the DEA, a Leave User Domain Service message to said device by using the UPnP (Universal Plug and Play) protocol, if de-registration of said device is to be performed as a result of the checking step, wherein the Leave User Domain Service message includes the URL of the second network server serving as the DA such that said device uses the URL to contact the second network server serving as the DA to leave the user domain; and receiving, by the first network server serving as the DEA, notification from said device that joining or leaving the user domain was successful as a result of said device interacting with the second network server serving as the DA.