Patent ID: 7380280

Claim:
A method for digital content access control, comprising: receiving, by a rights locker provider, a rights locker enrollment request from a user device associated with a user, said rights locker enrollment request comprising a digital content request and enrollment authentication data; determining, by said rights locker provider, whether said user is authorized using said enrollment authentication data, said determining comprising determining rights of said user to access said rights locker and rights of said user to digital content specified by said digital content request wherein said rights locker provides (1) a description of a user's access rights for digital content; and (2) controlled access to said description; and if said user is authorized, initializing, by said rights locker provider, said rights locker with rights to said digital content; obtaining, by said rights locker provider, a new token that authenticates future access to said rights locker corresponding to said digital content; creating, by said rights locker provider, an authenticated rights locker access request based at least in part on said new token; and sending, by said rights locker provider, said authenticated rights locker access request over a network to said user device.