Method and System to Support Dynamic Rights and Resources Sharing

Abstract

The invention relates to method for deriving a sub-right from a right, the right comprising a plurality of components, each of which specifies an aspect of the right. A component may be, for example, a principal, an action, a resource, and a condition. The invention also relates to a method for integrating a first right with a second right. Furthermore, the invention relates to a method of sharing rights by deriving a sub-right from a right, allowing use of the sub-right, and integrating the sub-right with the right. In addition, the invention relates to a system to support rights sharing by enabling the derivation of a sub-right from a right, the right comprising plural components each of which specifies an aspect of the right, the system comprising a receiving module for receiving a sub-right, the sub-right comprising plural components each of which specifies an aspect of the sub-right, and a confirmation module for confirming that the values of the components of the sub-right can be derived from the values of the corresponding components of the right. The invention further relates to a method for deriving a sub-right from a pool of rights granted by a grantor to a grantee for controlling use of resources within a computing environment, the computing environment having a mechanism for enforcing rights within the environment to control use of resources in accordance with the rights.

1 . A computer implemented method for dynamically associating a sub-right to an authorized computing device, wherein the sub-right is derived from maximum rights associated with a protected resource, the method comprising:
 associating, with a computing device, maximum rights with a protected resource, the maximum rights allowing one or more authorized computing devices to use the protected resource, wherein the maximum rights comprise a first set of condition states; and   deriving, with a computing device, from the maximum rights a sub-right for sharing with an authorized device, wherein the sub-right includes a second set of condition states, the second set of condition states is a subset of the first condition states;   wherein the sub-right is a shareable right from which further sub-rights can be derived for sharing.   
     
     
         2 . The method of  claim 1 , wherein the step of deriving comprises associating the sub-right with an authorized device to allow the authorized device to use the protected resource. 
     
     
         3 . The method of  claim 1 , wherein the step of deriving comprises adjusting the maximum rights to reflect new condition states and disabling further sharing of the maximum rights if the new condition states are empty. 
     
     
         4 . The method of  claim 1 , wherein the one or more authorized devices include devices which are activated from an activation server. 
     
     
         5 . The method of  claim 1 , wherein the one or more authorized devices include a specific set of device types. 
     
     
         6 . The method of  claim 1 , wherein the deriving step further includes connecting to an authorization server for at least one of tracking and authorization. 
     
     
         7 . The method of  claim 6 , wherein the authorization server includes a central authorization server. 
     
     
         8 . The method of  claim 1 , wherein the first set conditions includes a time condition which specifies a time range during which the maximum rights can be exercised. 
     
     
         9 . The method of  claim 1 , further comprising creating restricted conditions to further restrict the use of the protected resource on the authorized device. 
     
     
         10 . The method of  claim 3 , wherein said disabling step further comprises uninstalling the maximum rights to prevent further sharing of the maximum rights. 
     
     
         11 . The method of  claim 1 , further comprising:
 deriving a further subright form the subrights; and   sharing the further subrights with another device.   
     
     
         12 . A system for dynamically associating a sub-right to an authorized device, wherein the sub-right is derived from maximum rights associated with a protected resource, the system comprising:
 a source device configured to receive maximum rights associated with a protected resource, wherein the maximum rights allow the source device and other authorized devices to use the protected resource, and the maximum rights comprise a first set of condition states; and   a DRM component configured to derive a sub-right from the maximum rights for sharing, wherein the sub-right includes a second set of condition states, the second set of condition states is a subset of the first condition states and wherein the sub-right is a shareable rights from which further sub-right can be derived for sharing.   
     
     
         13 . The system of  claim 12  further comprising an authorized device for receiving the sub-right, wherein the sub-right allows the authorized device to use the protected resource 
     
     
         14 . The system of  claim 12 , wherein the DRM component is configured to adjust the maximum rights to reflect new condition states and disable further sharing of the maximum rights if the new condition states are empty. 
     
     
         15 . The system of  claim 12 , wherein the one or more authorized devices include devices which are activated from an activation server. 
     
     
         16 . The method of  claim 12 , wherein the one or more authorized devices include a specific set of device types. 
     
     
         17 . The system of  claim 12 , wherein the DRM comprises an interface component adapted to communicate with an authorization server for at least one of tracking and authorization. 
     
     
         18 . The system of  claim 17 , wherein the authorization server includes a central authorization server. 
     
     
         19 . The system of  claim 12 , wherein the first set conditions includes a time condition which specifies a time range during which the maximum rights can be exercised. 
     
     
         20 . The system of  claim 12 , wherein the DRM component is adapted to create restricted conditions to further restrict the use of the protected resource on the authorized device. 
     
     
         21 . The system of  claim 12 , wherein the DRM component is adapted to uninstall the maximum rights to prevent further sharing of the maximum rights if the new state conditions are empty.