Patent ID: 8256009

Claim:
A method for managing rights object of Secure Removable Media (SRM) which corresponds to one type of memory card and includes a processor and a memory having a SRM agent, the method performed by a terminal having a processor having a digital rights management (DRM) agent configured to communicate with the SRM agent and the method comprising: exchanging, by the terminal, information with the SRM, wherein the information includes a terminal ID for identifying the terminal and a SRM ID for identifying the SRM; performing, by the terminal, a mutual authentication procedure with the SRM; receiving, by the terminal, a trigger message from a right issuing server which indicates to the terminal that a rights object bound to the SRM is prepared in the right issuing server; if a parameter included in the trigger message does not indicate the SRM, performing, by the terminal, a procedure for obtaining a rights object for the terminal; if a parameter included in the trigger message indicates the SRM which is inserted into the terminal, performing, by the terminal, a procedure for requesting a rights object for the SRM; wherein the procedure for requesting the rights object for the SRM includes: generating, by the terminal and on behalf of the SRM, a rights object request message for requesting a rights object for the SRM from the rights issuing server, the rights object request message including not a terminal ID for identifying the terminal, but the SRM ID for identifying the SRM; transmitting, from the terminal to the SRM, a signature request including the generated rights object request message for requesting a rights object for the SRM in order to confirm that the SRM itself requests the rights object for the SRM itself; receiving, by the terminal and from the SRM, a signature response including a signature of the SRM, wherein the signature is generated by the SRM agent of the SRM in order to confirm that the SRM itself requests the rights object for the SRM itself; transmitting, from the terminal to the rights issuing server, the generated rights object request message for requesting a rights object for the SRM, wherein the signature generated by the SRM agent of the SRM is inserted into the generated rights object request message in order to confirm that the SRM itself requests the rights object for the SRM itself; receiving, by the terminal, and from the rights issuing server, a rights object response message, the rights object response message including not the terminal ID but the SRM ID and a protected rights object, wherein the rights object is cryptographically bound to the SRM such that the terminal without a key of the SRM is prohibited from decrypting the rights object cryptographically bound to the SRM; and transmitting, from the terminal to the SRM, the information about the protected rights object to be installed in the SRM.