Enrolling / sub-enrolling a digital rights management (drm) server into a drm architecture

Abstract

A Digital Rights Management (DRM) system has a plurality of DRM servers performing DRM functionality and an entering DRM-E server is enrolled into the system by an enrolling DRM-R server such that the entering DRM-E server is to be trusted within the system. The DRM-E server sends an enrollment request to the DRM-R server including a proffering identification and a public key (PU-E). The DRM-R server validates the proffering identification, and, if the request is to be honored, generates a digital enrollment certificate with (PU-E) for the DRM-E server to enroll such DRM-E server into the DRM system. The now-enrolled DRM-E server with the generated enrollment certificate is able to employ same to issue DRM documents within the DRM system.

1 . A method in combination with a Digital Rights Management (DRM) system having a plurality of DRM servers performing DRM functionality, the method for an entering DRM-E server to be enrolled into the system by an enrolling DRM-R server such that the entering DRM-E server is to be trusted within the system and comprising:
 the DRM-E server procuring a public/private key pair (PU-E, PR-E) for identifying such DRM-E server within the DRM system;   the DRM-E server procuring a proffering identification thereof;   the DRM-E server sending an enrollment request to the DRM-R server, the request including the proffering identification and (PU-E);   the DRM-R server validating the proffering identification;   the DRM-R server, if the request is to be honored, generating a digital enrollment certificate for the DRM-E server to enroll such DRM-E server into the DRM system, the generated enrollment certificate being based at least in part on (PU-E);   the DRM-R server returning the generated enrollment certificate to the requesting DRM-E server; and   the now-enrolled DRM-E server storing the returned enrollment certificate in an appropriate location for future use, the DRM-E server with the enrollment certificate able to employ same to issue DRM documents within the DRM system.   
   
   
       2 .- 74 . (canceled)