Import/export in digital rights management

ABSTRACT

The inherently controlled nature of digital rights management systems does little to promote inter-operability of systems provided by different vendors. In this paper, we consider import and export functionality by which multimedia protected by one digital rights management regime can be made available to a multimedia device that supports a different digital rights management regime, without compromising the protection afforded to the content under the original regime. We first identify specific issues to be addressed by developers of digital rights management import/export regimes and outline a variety of methods by which these regimes may be implemented. We then apply our observations to the specific example of import and export of content between the digital rights management regimes defined by the Motion Picture Exports Group and the Open Mobile Alliance.

REFERENCES

• 1: R. Anderson. 'Trusted computing' and competition policy -- issues for computing professionals. Upgrade, IV:35--41, 2003.
• 2: T. Berners-Lee, R. Fielding, U. C. Irvine, and L. Masinter. Uniform resource identifiers (URI): Generic syntax. RFC 2396, 1998.
• 3: J. Bormans and K. Hill. MPEG-21 overview v.5. http://www.chiariglione.org/mpeg/standards/mpeg-21/mpeg-21.htm, 2002.
• 4: John M. Boyer, Bulletproof business process automation: securing XML forms with document subset signatures, Proceedings of the 2003 ACM workshop on XML security, October 31-31, 2003, Fairfax, Virginia [doi>10.1145/968559.968576]
• 5: William B. Bradley , David P. Maher, The NEMO P2P Service Orchestration Framework, Proceedings of the Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS'04) - Track 9, p.90290.3, January 05-08, 2004
• 6: C. N. Chong, R. Corin, S. Etalle, P. H. Hartel, W. Jonker, and Y. W. Law. LicenseScript: A novel digital rights language and its semantics. In Third International Conference on the Web Delivery of Music, pages 122--129, Los Alamitos, USA, 2003.
• 7: C. N. Chong, S. Etalle, and P. H. Hartel. Comparing logic-based and XML-based rights expressions lanuages. In On the Move to Meaningful Internet Systems, pages 779--792, Catania, Italy, 2003.
• 8: J. Clark. XSL transformations (XSLT) version 1.0. http://www.w3.org/TR/xslt, 1999.
• 9: ContentGuard. Extensible rights markup language. http://www.xrml.org, 2004.
• 10: D. Eastlake, J. Reagle, and D. Solo. XML-signature syntax and processing, 2002.
• 11: Susanne Guth , Gustaf Neumann , Mark Strembeck, Experiences with the enforcement of access rights extracted from ODRL-based digital contracts, Proceedings of the 3rd ACM workshop on Digital rights management, October 27-27, 2003, Washington, DC, USA [doi>10.1145/947380.947392]
• 12: S. Guth, G. Neumann, and M. Strembeck. Toward a conceptual framework for digital contract composition and fulfillment. In International Workshop for Technology, Economy, Social and Legal Aspects of Virtual Goods, Ilmenau, Germany, 2003.
• 13: International Standards Organisation. Information technology -- multimedia framework (MPEG-21) -- part 1: Vision, technologies and strategy. ISO/IEC 21000-1:2001.
• 14: International Standards Organisation. Information technology -- multimedia framework (MPEG-21) -- part 2: Digital item declaration. ISO/IEC 21000-2:2003.
• 15: International Standards Organisation. Information technology -- multimedia framework (MPEG-21) -- part 3: Digital item identification. ISO/IEC 21000-3:2003.
• 16: International Standards Organisation. Information technology -- multimedia framework (MPEG-21) -- part 5: Rights expression language. ISO/IEC 21000-5:2004.
• 17: International Telecommunications Union. Information technology -- open systems interconnection -- the directory: Public-key and attribute certificate frameworks. Recommendation X.509, 2000.
• 18: R. H. Koenen, J. Lacy, M. Mackay, and S. Mitchell. The long march to interoperable digital rights management. Proceedings of the IEEE, 92:883--897, 2004.
• 19: Masahiro Mambo , Keisuke Usuda , Eiji Okamoto, Proxy signatures for delegating signing operation, Proceedings of the 3rd ACM conference on Computer and communications security, p.48-57, March 14-15, 1996, New Delhi, India [doi>10.1145/238168.238185]
• 20: Thomas S. Messerges , Ezzat A. Dabbish, Digital rights management in a 3G mobile phone and beyond, Proceedings of the 3rd ACM workshop on Digital rights management, October 27-27, 2003, Washington, DC, USA [doi>10.1145/947380.947385]
• 21: Open Digital Rights Language Initiative. The Open Digital Rights Language Initiative. http://www.odrl.net, 2004.
• 22: Open Mobile Alliance. OMA wireless identity module version 1.1, 24th October 2002.
• 23: Open Mobile Alliance. OMA DRM specification version 2.0, 28th February 2004.
• 24: Open Mobile Alliance. OMA DRM rights expression language version 2.0, 8th April 2004.
• 25: F. Pestoni, J. B. Lotspiech, and S. Nusser. xCP: Peer-to-peer content protection. IEEE Signal Processing Magazine, 21:71--81, 2004.
• 26: J. Polo, J. Prados, and J. Delgado. Interoperability between ODRL and MPEG-21 REL. In First International ODRL Workshop, Vienna, Austria, 2004.
• 27: RealNetworks, Inc. RealNetworks introduces Harmony, enabling consumers to buy digital music that plays on all popular devices. Press release, RealNetworks, 26 July 2004. http://www.realnetworks.com/company/press/releases/2004/harmony.html.
• 28: N. Rump. Can digital rights management be standardized? IEEE Signal Processing Magazine, 21(2):63--70, 2004.
• 29: A. U. Schmidt, O. Tafreschi, and R. Wolf. Interoperability challenges for DRM systems. In International Workshop for Technology, Economy, Social and Legal Aspects of Virtual Goods, Ilmenau, Germany, 2004.
• 30: Trusted Computing Group. Trusted Computing Group, 2004.
• 31: L. van Grinsven and B. Warner. Music downloaders hit by acronym cacophony. Reuters, 5 July 2004.
• 32: Xerox Corporation. The Digital Rights Property Language: Manual and tutorial -- XML edition. http://www.oasis-open.org/cover/DPRLmanual-XML2.html, 1998.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Design, Languages, Standardization

Keywords:
digital rights management, export, import, inter-operability