Method and apparatus for sharing licenses between secure removable media

Abstract

A method and an apparatus for sharing a license between SRMs are disclosed. The method includes: a DRM agent obtains the license from a first SRM, and sets the license to a forwarding state locally; the DRM agent deducts one right of sharing the license; and the DRM agent sends the license to a second SRM. In the prior art, one moving right is deducted when the license moves from SRM1 to the device, and the other moving right is deducted when the license moves from the device to SRM2. By contrast, in the technical solution under the present invention, the license forwarded by the DRM agent is set to the forwarding state, and only one sharing right needs to be deducted, and therefore, the consumption of the sharing rights is reduced and the subscriber's rights are protected.

1 . A method for sharing a license between Secure Removable Media (SRM), comprising:
 obtaining, by a Digital Rights Management (DRM) agent, the license from a first SRM, and setting the license to a forwarding state locally;   deducting, by the DRM agent, one right of sharing the license; and   sending, by the DRM agent, the license to a second SRM.   
     
     
         2 . The method of  claim 1 , wherein:
 sharing of the license is copying of the license or moving of the license, and sharing of rights is copying of the rights or moving of the rights;   when sharing of the license is moving of the license, the method further comprises: triggering, by the DRM agent, the first SRM to delete the license;   when the sharing of the license is copying of the license, the deducting of one right of sharing the license by the DRM agent comprise: deducting, by the DRM agent, one right of copying of the license on the first SRM, wherein the license sent by the DRM agent to the second SRM does not comprise the copying right; or, deducting, by the DRM agent, one right of copying of the license sent to the second SRM, and deducting all rights of copying the license on the first SRM.   
     
     
         3 . The method of  claim 1 , further comprising:
 keeping, by the DRM agent, a log in the forwarding process, wherein the log comprises at least one of a operation type, a current state, a license identifier, an identifier of the first SRM, a first handle on the first SRM corresponding to the license, an identifier of the second SRM, and a second handle on the second SRM corresponding to the license;   when the sharing of the license is interrupted, the method further comprises:   continuing, by the DRM agent, sending the license to the second SRM according to the log;   or,   recovering, by the DRM agent, the license on the first SRM according to the log.   
     
     
         4 . The method of  claim 1 , wherein the sending of the license by the DRM agent to the second SRM comprises:
 forwarding, by the DRM agent, the license to the second SRM through another DRM agent.   
     
     
         5 . A method for sharing a license, comprising:
 triggering, by a Digital Rights Management (DRM) agent, a first Secure Removable Medium (SRM) and a second SRM to negotiate a shared key;   encrypting, by the first SRM, partial or complete information of the license by using the shared key; and   sending the license to the second SRM.   
     
     
         6 . The method of  claim 5 , wherein: before the first SRM sends the license to the second SRM, the method further comprises:
 performing, by the first SRM, integrity protection for partial or complete information of the license by using the shared key.   
     
     
         7 . The method of  claim 5 , wherein: after the first SRM sends the license to the second SRM, the method further comprises:
 authenticating, by the second SRM, the license, and deducting one right of sharing the license after the authentication succeeds.   
     
     
         8 . The method of  claim 5 , wherein: before the first SRM sends the license to the second SRM, the method further comprises:
 deducting, by the first SRM, one right of sharing the license.   
     
     
         9 . The method of  claim 5 , wherein the sending of the license by the first SRM to the second SRM comprises:
 sending, by the first SRM, the license to the second SRM through the DRM agent; and   authenticating, by the DRM agent, the license in a forwarding process, and deducting one right of sharing the license.   
     
     
         10 . The method of  claim 5 , wherein the triggering, by the DRM agent , the first SRM and the second SRM to negotiate the shared key comprises:
 initiating, by the DRM agent, an authentication process to the first SRM, and obtaining a first SRM certificate chain;   initiating, by the DRM agent, an authentication process to the second SRM, sending the obtained first SRM certificate chain to the second SRM, and obtaining a second SRM certificate chain and a second random number from the second SRM, wherein the second random number is encrypted through a first SRM public key;   initiating, by the DRM agent, a key exchange process to the first SRM, sending the second SRM certificate chain and the second random number encrypted through the first SRM public key to the first SRM, and obtaining a first random number encrypted through a second SRM public key from the first SRM;   initiating, by the DRM agent, a key exchange process to the second SRM, and sending the first random number encrypted through the second SRM public key to the second SRM; and   using, by the first SRM and the second SRM, the first random number and the second random number to determine the shared key.   
     
     
         11 . A method for sharing a license, comprising:
 sending, by a first Digital Rights Management (DRM) agent, the license to an Rights Issuer (RI) after obtaining the license from a first Secure Removable Medium (SRM);   obtaining, by a second DRM agent, the license from the RI; and   sending, by a second DRM agent, the license to a second SRM.   
     
     
         12 . The method of  claim 11 , wherein: before the second DRM agent obtains the license from the RI, the method further comprises:
 generating, by the RI, a license bound to the second SRM according to the license obtained from the first SRM.   
     
     
         13 . The method of  claim 11 , wherein: before the second DRM agent obtains the license from the RI, the method further comprises:
 verifying, by the RI, that the first SRM and the second SRM belong to the same subscriber.   
     
     
         14 . A method for sharing a license, comprising:
 sending, by a Digital Rights Management (DRM) agent, the license obtained from a first Secure Removable Medium (SRM) to a second SRM after determining that the first SRM and the second SRM belong to a same subscriber.   
     
     
         15 . The method of  claim 14 , wherein the determining of that the first SRM and the second SRM belong to the same subscriber by the DRM agent comprises:
 sending, by the DRM agent, a query message that carries an identifier of the first SRM to the RI or a subscriber manage server to query a subscriber to whom the first SRM belongs;   sending, by the DRM agent, a query message that carries an identifier of the second SRM to the RI or a subscriber manager to query a subscriber to whom the second SRM belongs; and   verifying, by the DRM agent, whether the first SRM and the second SRM belong to the same subscriber;   or,   sending, by the DRM agent, a query message that carries the identifier of the first SRM and the identifier of the second SRM to the RI or subscriber manage server to verify whether the first SRM and the second SRM belong to the same subscriber; and   returning, by the RI or the subscriber manage server, a query response to the DRM agent, indicating whether the first SRM and the second SRM belong to the same subscriber.   
     
     
         16 . An apparatus for sharing a license, comprising:
 an obtaining unit, configured to obtain the license from a first Secure Removable Medium (SRM);   a forwarding setting unit, configured to set the obtained license to a forwarding state;   a sending unit, configured to send the obtained license to a second SRM; and   a controlling unit, configured to deduct one right of sharing the license.   
     
     
         17 . The apparatus of  claim 16 , further comprising:
 a deletion requesting unit, configured to request the first SRM to delete the license; and   a deletion response receiving unit, configured to receive a license deletion response returned by the first SRM.   
     
     
         18 . An apparatus for sharing a license, comprising:
 a Secure Removable Media (SRM) interacting unit, configured to trigger a first SRM and a second SRM to perform key negotiation; and   a forwarding unit, configured to forward the license of the first SRM to the second SRM.   
     
     
         19 . An apparatus for sharing a license between a first Secure Removable Media (SRM) and a second SRM, located in the first SRM, comprising:
 a key negotiating unit, configured to perform key negotiation with the second SRM;   a processing unit, configured to encrypt partial information or complete information of the license by using a shared key negotiated with the second SRM; and   a sending unit, configured to send the license to the second SRM.   
     
     
         20 . The apparatus of  claim 19 , further comprising:
 a deleting unit, configured to delete a local license after confirming that the second SRM receives the license.