A system and method for communicating information between a first party and a second party, comprising the steps of receiving, by an intermediary, an identifier of desired information and accounting information for a transaction involving the information from the first party, transmitting an identifier of the first party to the second party, and negotiating, by the intermediary, a comprehension function for obscuring at least a portion of the information communicated between the first party and the second party. The data transmission may be made secure with respect to the intermediary by providing an asymmetric key or direct key exchange for encryption of the communication between the first and second party. The data transmission may be made secure with respect to the second party by maintaining the information in encrypted format at the second party, with the decryption key held only by the intermediary, and transmitting a secure composite of the decryption key and a new encryption key to the second party for transcoding of the data record, and providing the new decryption key to the first party, so that the information transmitted to the first party can be comprehended by it.

System and method for secure three-party communications

In this paper, we introduce the family of UCONABC models for usage control (UCON), which integrate Authorizations (A), oBligations (B), and Conditions (C). We call these core models because they address the essence of UCON, leaving administration, delegation, and other important but second-order issues for later work. The term usage control is a generalization of access control to cover authorizations, obligations, conditions, continuity (ongoing controls), and mutability. Traditionally, access control has dealt only with authorization decisions on users' access to target resources. Obligations are requirements that have to be fulfilled by obligation subjects for allowing access. Conditions are subject and object independent environmental or system requirements that have to be satisfied for access. In today's highly dynamic, distributed environment, obligations and conditions are also crucial decision factors for richer and finer controls on usage of digital resources. Although they have been discussed occasionally in recent literature, most authors have been motivated from specific target problems and thereby limited in their approaches. The UCONABC model integrates these diverse concepts in a unified framework. Traditional authorization decisions are generally made at the time of requests but hardly recognize ongoing controls for relatively long-lived access or for immediate revocation. Moreover, mutability issues that deal with updates on related subject or object attributes as a consequence of access have not been systematically studied.Unlike other studies that have targeted on specific problems or issues, the UCONABC model seeks to enrich and refine the access control discipline in its definition and scope. UCONABC covers traditional access controls such as mandatory, discretionary, and role-based access control. Digital rights management and other modern access controls are also covered. UCONABC lays the foundation for next generation access controls that are required for today's real-world information and systems security. This paper articulates the core of this new area of UCON and develops several detailed models.

/pdf/the-uconabc-usage-control-model-2xlun8x02y.pdf

The UCONABC usage control model

A method for providing unequal allocation of rights among agents while operating according to fair principles, comprising assigning a hierarchal rank to each agent; providing a synthetic economic value to a first set of agents at the a high level of the hierarchy; allocating portions of the synthetic economic value by the first set of agents to a second set of agents at respectively different hierarchal rank than the first set of agents; and conducting an auction amongst agents using the synthetic economic value as the currency. A method for allocation among agents, comprising assigning a wealth generation function for generating future wealth to each of a plurality of agents, communicating subjective market information between agents, and transferring wealth generated by the secure wealth generation function between agents in consideration of a market transaction. The method may further comprise the step of transferring at least a portion of the wealth generation function between agents.

Multifactorial optimization system and method

The invention provides a method, system, and computer program product to control the access, copying, and/or transfer of a digital asset by mobile, wireless devices using a digital voucher. The digital voucher references a primary content that contains all of the expression for that particular asset and a secondary content that contains information that can be distilled out as a preview. The information in the primary content can be limited to a specified duration or a specific number of viewings. The author, owner, or possessor of the digital asset specifies the terms and conditions for distribution of the digital asset. The digital voucher authorizes the mobile, wireless device to access a specified primary or secondary content that may be located elsewhere in the network. The mobile, wireless device can download a copy of portions or all of the content depending on the terms specified in the voucher.

Digital rights management in a mobile communications environment

A method and apparatus for displaying the evolution of an electronic document (e.g. word-processing document, portable-document-format file, spreadsheet, drawing, and the like), containing tracked changes, is disclosed. In accordance with the disclosed method and apparatus, the revisions of an electronic document may be treated as parent frames. In between the parent frames, child frames may be constructed from the combined images of their parent frames. To form a child frame, an image of a parent frame has a degree of translucency as it is combined with the translucent image of the other parent frame, such that every child frame contains traces of the images of both its parent frames. An input device (e.g. keyboard, mouse, touchpad, stylus, voice activation, and the like) may be used to control the frame visible to the user at any one time. The user may use the input device to traverse the frames at various speeds and in either direction, creating the visual illusion that a certain revision of the document is being morphed into its future revisions—or stripped off its changes as it is morphed into previous revisions—depending on the direction chosen by the user.

Method for presentation of revisions of an electronic document

A method and system for managing use of items having usage rights associated therewith including a point of capture system adapted to generate content of a future event when the event occurs, a content distributor adapted to generate a rights label having usage rights associated with content of the future event before the content is created, the rights label having a distribution key for encrypting the content as the content is generated, the distribution key being encrypted with a public key. The system also includes a license server adapted to generate a license associate with the content from the rights label before the content is generated, the license including the distribution key encrypted with the public key, and a content distributor adapted to distribute the license before the content is generated.

Digital rights management of content when content is a future live event

An enforceable property right and a system for controlling the manner of use of an item in accordance with usage rights. The enforceable property right includes an item ticket having a security mechanism incorporated therein and specifying an item for which the item ticket can be redeemed and a license associated with the item ticket. The license includes usage rights specifying a manner of use for redeeming the item ticket and a mechanism for unlocking said security mechanism.

Method and apparatus for distributing enforceable property rights

XrML (eXtensible rights Markup Language) is an XML-based language for digital rights management (DRM), providing a universal method for specifying rights and conditions associated with the use and protection of digital content and services. Originally developed at Xerox's Palo Alto Research Center (PARC), the specification facilitates the creation of an open architecture for digital rights management of content or services. It can be integrated with both existing and new DRM systems. XrML is a general-purpose rights language, agnostic to the type of resource, platform, media, or business applications. The latest release, XrML 2.0, expands the capabilities of a digital rights language to enable developers to establish the rights and conditions needed to access web services in addition to digital content. It also contains additional capabilities in the areas of extensibility, security, and life cycle management. Recent actions in several standards bodies, most notably MPEG, OeBF and OASIS, have positioned XrML to become the world wide industry standard for a digital rights language. This paper provides a brief introduction to XrML, its data model, usage and extensibility as it applies to digital media, multi-tier content distribution and XML-based healthcare information.

XrML -- eXtensible rights Markup Language

A system and method for managing use of items having usage rights associated therewith. In one embodiment, the method includes receiving request for a license (52) associated with an item on behalf of a license requesting user, the license requesting user having an associated identification mechanism (52a). The method also includes determining whether the identification mechanism (52a) associated to the license requesting user is an access list (120) having identification mechanisms associated with authorized users. The method further includes issuing the license with the item to the license requesting user upon determining that the identification mechanism associated to the license requesting user is an access list (120).

Protected content distribution system

A method and an apparatus for specifying and editing rights asociated with a content (300) includes a general model that comprehends rights specification at different levels of the content life cycle. The rights specification includes content association, and the protection of the content is a byproduct of the content and rights association. The general model includes a rights component (322), a conditions component (324), a rights offer component (326), and a rights label component (328). The rights offers specify the relationship between rights and conditions. The rights labels are collections of the offers.

Guillermo Lao

Papers

Digital rights management of content when content is a future live event

Method and apparatus for distributing enforceable property rights

XrML -- eXtensible rights Markup Language

Protected content distribution system

Method and apparatus for managing digital content usage rights