A system and method for communicating information between a first party and a second party, comprising the steps of receiving, by an intermediary, an identifier of desired information and accounting information for a transaction involving the information from the first party, transmitting an identifier of the first party to the second party, and negotiating, by the intermediary, a comprehension function for obscuring at least a portion of the information communicated between the first party and the second party. The data transmission may be made secure with respect to the intermediary by providing an asymmetric key or direct key exchange for encryption of the communication between the first and second party. The data transmission may be made secure with respect to the second party by maintaining the information in encrypted format at the second party, with the decryption key held only by the intermediary, and transmitting a secure composite of the decryption key and a new encryption key to the second party for transcoding of the data record, and providing the new decryption key to the first party, so that the information transmitted to the first party can be comprehended by it.

System and method for secure three-party communications

In this paper, we introduce the family of UCONABC models for usage control (UCON), which integrate Authorizations (A), oBligations (B), and Conditions (C). We call these core models because they address the essence of UCON, leaving administration, delegation, and other important but second-order issues for later work. The term usage control is a generalization of access control to cover authorizations, obligations, conditions, continuity (ongoing controls), and mutability. Traditionally, access control has dealt only with authorization decisions on users' access to target resources. Obligations are requirements that have to be fulfilled by obligation subjects for allowing access. Conditions are subject and object independent environmental or system requirements that have to be satisfied for access. In today's highly dynamic, distributed environment, obligations and conditions are also crucial decision factors for richer and finer controls on usage of digital resources. Although they have been discussed occasionally in recent literature, most authors have been motivated from specific target problems and thereby limited in their approaches. The UCONABC model integrates these diverse concepts in a unified framework. Traditional authorization decisions are generally made at the time of requests but hardly recognize ongoing controls for relatively long-lived access or for immediate revocation. Moreover, mutability issues that deal with updates on related subject or object attributes as a consequence of access have not been systematically studied.Unlike other studies that have targeted on specific problems or issues, the UCONABC model seeks to enrich and refine the access control discipline in its definition and scope. UCONABC covers traditional access controls such as mandatory, discretionary, and role-based access control. Digital rights management and other modern access controls are also covered. UCONABC lays the foundation for next generation access controls that are required for today's real-world information and systems security. This paper articulates the core of this new area of UCON and develops several detailed models.

/pdf/the-uconabc-usage-control-model-2xlun8x02y.pdf

The UCONABC usage control model

The invention provides a method, system, and computer program product to control the access, copying, and/or transfer of a digital asset by mobile, wireless devices using a digital voucher. The digital voucher references a primary content that contains all of the expression for that particular asset and a secondary content that contains information that can be distilled out as a preview. The information in the primary content can be limited to a specified duration or a specific number of viewings. The author, owner, or possessor of the digital asset specifies the terms and conditions for distribution of the digital asset. The digital voucher authorizes the mobile, wireless device to access a specified primary or secondary content that may be located elsewhere in the network. The mobile, wireless device can download a copy of portions or all of the content depending on the terms specified in the voucher.

Digital rights management in a mobile communications environment

A method and apparatus for displaying the evolution of an electronic document (e.g. word-processing document, portable-document-format file, spreadsheet, drawing, and the like), containing tracked changes, is disclosed. In accordance with the disclosed method and apparatus, the revisions of an electronic document may be treated as parent frames. In between the parent frames, child frames may be constructed from the combined images of their parent frames. To form a child frame, an image of a parent frame has a degree of translucency as it is combined with the translucent image of the other parent frame, such that every child frame contains traces of the images of both its parent frames. An input device (e.g. keyboard, mouse, touchpad, stylus, voice activation, and the like) may be used to control the frame visible to the user at any one time. The user may use the input device to traverse the frames at various speeds and in either direction, creating the visual illusion that a certain revision of the document is being morphed into its future revisions—or stripped off its changes as it is morphed into previous revisions—depending on the direction chosen by the user.

Method for presentation of revisions of an electronic document

Systems and methods are described for performing policy-managed, peer-to-peer service orchestration in a manner that supports the formation of self-organizing service networks that enable rich media experiences. In one embodiment, services are distributed across peer-to-peer communicating nodes, and each node provides message routing and orchestration using a message pump and workflow collator. Distributed policy management of service interfaces helps to provide trust and security, supporting commercial exchange of value. Peer-to-peer messaging and workflow collation allow services to be dynamically created from a heterogeneous set of primitive services. The shared resources are services of many different types, using different service interface bindings beyond those typically supported in a web service deployments built on UDDI, SOAP, and WSDL. In a preferred embodiment, a media services framework is provided that enables nodes to find one another, interact, exchange value, and cooperate across tiers of networks from WANs to PANs.

Interoperable systems and methods for peer-to-peer service orchestration

An enforceable property right and a system for controlling the manner of use of an item in accordance with usage rights. The enforceable property right includes an item ticket having a security mechanism incorporated therein and specifying an item for which the item ticket can be redeemed and a license associated with the item ticket. The license includes usage rights specifying a manner of use for redeeming the item ticket and a mechanism for unlocking said security mechanism.

Method and apparatus for distributing enforceable property rights

XrML (eXtensible rights Markup Language) is an XML-based language for digital rights management (DRM), providing a universal method for specifying rights and conditions associated with the use and protection of digital content and services. Originally developed at Xerox's Palo Alto Research Center (PARC), the specification facilitates the creation of an open architecture for digital rights management of content or services. It can be integrated with both existing and new DRM systems. XrML is a general-purpose rights language, agnostic to the type of resource, platform, media, or business applications. The latest release, XrML 2.0, expands the capabilities of a digital rights language to enable developers to establish the rights and conditions needed to access web services in addition to digital content. It also contains additional capabilities in the areas of extensibility, security, and life cycle management. Recent actions in several standards bodies, most notably MPEG, OeBF and OASIS, have positioned XrML to become the world wide industry standard for a digital rights language. This paper provides a brief introduction to XrML, its data model, usage and extensibility as it applies to digital media, multi-tier content distribution and XML-based healthcare information.

XrML -- eXtensible rights Markup Language

A rights management system including one or more consequential rights associated with digital content, and specifying a manner of use of the digital content, a right management module that enforces the rights permitting use of the digital content in accordance with the rights upon occurrence of a consequential event. The consequential event is based on another usage right. In one embodiment, the consequential event is the exercise, expiration, or possession of another usage right.

Method and apparatus for assigning consequential rights to documents and documents having such rights

A method, system, and computer program product for controlling consumption of a networked service (119) in accordance with rights expression information (127) associated with the networked service (119) and specifying a manner of use of the networked service (119), including determining the rights expression information (127) associated with the networked service (119), the rights expression information (127) indicating a manner of use of the networked service (119); and controlling consumption of the networked service (119) based on the rights expression information (127).

Networked services licensing system and method

A system, method and device for creating a rights expression for association with an item for use in a system for controlling use of the item in accordance with the rights expression, including specifying rights expression information indicating a manner of use of an item, the rights expression information including at least one element, the element having a variable and corresponding value for the variable; generating a profile of the rights expression information, including removing the value for the variable from the element; and generating an identification for the profile, whereby the rights expression information can be enforced on the device based on the variable and the identification for the profile.

Thomas Demartini

Papers

Method and apparatus for distributing enforceable property rights

XrML -- eXtensible rights Markup Language

Method and apparatus for assigning consequential rights to documents and documents having such rights

Networked services licensing system and method

Rights expression profile system and method