[go: up one dir, main page]

WO2011154742A1 - Procédé pour une identification unique d'un dispositif ordinateur individuel afin d'empêcher un abus de périodes d'essai dans un service de contenu multimédia numérique - Google Patents

Procédé pour une identification unique d'un dispositif ordinateur individuel afin d'empêcher un abus de périodes d'essai dans un service de contenu multimédia numérique Download PDF

Info

Publication number
WO2011154742A1
WO2011154742A1 PCT/GB2011/051081 GB2011051081W WO2011154742A1 WO 2011154742 A1 WO2011154742 A1 WO 2011154742A1 GB 2011051081 W GB2011051081 W GB 2011051081W WO 2011154742 A1 WO2011154742 A1 WO 2011154742A1
Authority
WO
WIPO (PCT)
Prior art keywords
unique identifier
digital media
computing device
service
cimv2
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/GB2011/051081
Other languages
English (en)
Inventor
Philip Sant
Matt Tighe
Neal Hart
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Omnifone Ltd
Original Assignee
Omnifone Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from GBGB1009650.1A external-priority patent/GB201009650D0/en
Priority claimed from GBGB1009655.0A external-priority patent/GB201009655D0/en
Priority claimed from GBGB1009646.9A external-priority patent/GB201009646D0/en
Priority claimed from GBGB1009648.5A external-priority patent/GB201009648D0/en
Application filed by Omnifone Ltd filed Critical Omnifone Ltd
Publication of WO2011154742A1 publication Critical patent/WO2011154742A1/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/73—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by creating or determining hardware identification, e.g. serial numbers
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2129—Authenticate client device independently of the user

Definitions

  • This invention relates to a method for uniquely identifying a personal computing device to prevent the abuse of trial periods in a digital media content service.
  • trial periods are used as a method of encouraging users to experience the service at low or no cost for a short to medium term period followed by a transitioning of such consumer into a paying and satisfied long term subscriber.
  • gaming consoles may have such a fixed devicelD embedded into them, the far more commonplace personal computer often does not.
  • the present invention provides a method to overcome this deficiency by disclosing a mechanism for uniquely identifying a personal computing device in order to determine whether that device is entitled to a trial period in a digital media content service.
  • the present invention provides a method for uniquely identifying a personal computing device in order to determine whether that device is, for example, entitled to a trial period in a digital media content service.
  • the invention is a method for uniquely identifying a computing device, comprising the steps of: using a tool to read or construct a unique identifier for the device, the tool being a browser plug-in that is programmed to read or construct the unique identifier from one or more Microsoft WindowsTM management instrumentation sources and is programmed to provide that unique identifier to a remote digital media service.
  • FIG. 1 Other aspects of the invention are a computing device uniquely identified using the above method and a system comprising a digital media service and multiple computing devices, each uniquely identified using the above method a.
  • the method comprises steps which— taken in combination— result in a robust unique identifier for the computing device on which those steps are performed.
  • Figure 1 is a flowchart illustrating the operation of the invention.
  • Figure 2 is a screen shot that shows that multiple attempts to enable a trial period are denied.
  • music and “media content” in this document are to be taken to encompass all “media content” which is in digital form or which it is possible to convert to digital form - including but not limited to books, magazines, newspapers and other periodicals, video in the form of digital video, motion pictures, television shows (as series, as seasons and as individual episodes), computer games and other interactive media, images (photographic or otherwise) and music.
  • track indicates a specific item of media content, whether that be a song, a television show, an eBook or portion thereof, a computer game or any other discreet item of media content.
  • playlist and "album” are used interchangeably to indicate collections of “tracks” which have been conjoined together such that they may be treated as a single entity for the purposes of analysis or recommendation.
  • digital media catalogue digital music catalogue
  • media catalogue media catalogue
  • catalog catalogs
  • the terms “digital media catalogue”, “digital music catalogue”, “media catalogue” and “catalogue” are used interchangeably to indicate a collection of tracks and/ or albums to which a user may be allowed access for listening purposes.
  • the digital media catalogue may aggregate both digital media files and their associated metadata or, in another example embodiment, the digital media and metadata may be delivered from multiple such catalogues. There is no implication that only one such catalogue exists, and the term encompasses access to multiple separate catalogues simultaneously, whether consecutively, concurrently or by aggregation.
  • the actual catalogue utilised by any given operation may be fixed or may vary over time and/ or according to the location or access rights of a particular device or end-user.
  • DRM Digital Rights Management
  • the verbs "to listen”, “to view” and “to play” are to be taken as encompassing any interaction between a human and media content, whether that be listening to audio content, watching video or image content, reading books or other textual content, playing a computer game, interacting with interactive media content or some combination of such activities.
  • device and “media player” are used interchangeably to refer to any computational device which is capable of playing digital media content, including but not limited to MP3 players, television sets, home entertainment system, home computer systems, mobile computing devices, games consoles, handheld games consoles, IVEs or other vehicular-based media players or any other applicable device or software media player on such a device. Something essentially capable of playback of media. Where applicable, “device” may refer to the device alone or to the combination of the device and the CloudStick.
  • the intention of the present invention is to produce a unique identifier for a computing device which does not have such an identifier built into it at the manufacturing stage.
  • it is intended for application on personal computers rather than on devices, such as games consoles, which provide a unique and unchangeably identifier which can be readily checked.
  • Figure 1 is a flowchart illustrating the operation of an implementation of the invention.
  • a DevicelD detecting Browser Plug-in For new Microsoft WindowsTM PCs, a DevicelD detecting Browser Plug-in, 'DevicelD ⁇ , may be pre-installed in all browsers delivered with all new Computers. This solution delivers the maximum DevicelD recognition capabilities and requires no painful user authorization process to use. For legacy PCs, that plug-in may still be utilized but users may opt not to install it, in which case other methods - as disclosed below - are to be used.
  • the DevicelD BPI retrieves unique information from potentially many Windows Management Instrumentation sources, including logic such as:
  • this value is then hashed using SHA256 to obfuscate it.
  • the DevicelD BPI is not itself trying to determine if this device is entitled to a trial period, it is merely a device identification mechanism. It is the digital media service back-end (with the assistance of the client's own network platform, where applicable) which is determining if a trial period can be delivered to the device. It should also be noted that if BPIs are not acceptable for reasons other than those related to their install process, then the Web DevicelD mechanism can be used for new PCs.
  • the DevicelD BPI is very hard to circumvent and really only would be achievable by experienced hackers. This falls well within the major labels criteria for 'doesn't easily allow abuse'. In fact the DevicelD BPI route is very hard to abuse.
  • Web DevicelD mechanism is used which is a combination of three components available in all target web browsers which allow storage of persistent information.
  • the primary of these mechanisms is achieved using Flash, where it is present on the target device.
  • Flash SharedObjects in the preferred embodiment, as a primary prevention mechanism and both cookies and browser local storage as secondary prevention mechanisms.
  • the service 'CustomerClientGUID' is stored and persisted on the device. That 'CustomerClientGUID' is a non-personal unique user/device identifier which is generated by the service's back-end and stored against the user's user record.
  • the user's user record is itself related to an network account ID, where the service is linked with a network account on which user's have uniquely identifiable records.
  • the service's web application on the device sends the CustomerClientGUID to the service platform.
  • the service platform first checks if the client's network believes that this user (the network account related to this CustomerCUentGUID) is entitled to another trial period.
  • the service platform confirms that this CustomerCUentGUID has no record of being given a trial period before. It should be noted that unless a user goes through the difficult circumvention mechanism described below then they wiU not be given another trial period even if they have gone to the trouble of creating another network account.
  • Flash SharedObjects provide the abiUty for a Flash application (in this example the service web appUcation flash component) to persist local data.
  • Data stored in Flash SharedObjects is stored independently of particular browsers and so provides a cross- browser solution.
  • the Web DevicelD mechanism uses a Flash SharedObject to store the ClientCustomerGUID. This is normally possible without any user interaction or approval because the default setting for Flash is to aUow new sites to use Flash SharedObjects.
  • the user is notified that in order to proceed they need to enable Flash SharedObjects.
  • the UI will display an adequate on screen explanation of how to do this - that said the user should actually only be in this situation because they have previously used this control to change from the default setting and therefore they know what they are doing.
  • the service web application will store the user's CustomerCUentGUID using this mechanism. If the DevicelD check finds there is no CustomerCUentGUID stored as a Flash SharedObject, then the cookies will be checked for same and the CustomerCUentGUID sent to the service platform if found. In these situations users wiU be told that they have used their trial period and offered a paid-for proposition.
  • All target browsers offer (in one way or another - see fig.3) a browser based local storage mechanism which the Music web application, if aUowed, wiU use to store the user's CustomerCUentGUID .
  • the service web appUcation wiU check local browser storage methods (based on browser type).
  • the CustomerCUentGUID is sent to the digital media services platform if found. In these situations users will be told that they have used their trial period and offered a paid- for proposition.
  • Flash SharedObjects must be available to access trial periods.
  • the Web DevicelD mechanism falls well within the major labels criteria for 'doesn't easily allow abuse'. This is especially so given that this process needs to be performed on expiry of each trial period (a period likely to be once every month). The major labels believe that people willing to go to these lengths every month will already be determined P2P files sharers.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Multimedia (AREA)
  • Technology Law (AREA)
  • Mathematical Physics (AREA)
  • Storage Device Security (AREA)

Abstract

La présente invention concerne un procédé permettant l'identification unique d'un dispositif ordinateur individuel afin de déterminer si ce dispositif a reçu, par exemple, une autorisation pour une période d'essai dans un service de contenu multimédia numérique. L'invention est un procédé permettant l'identification unique d'un dispositif ordinateur individuel, comprenant les étapes consistant à : utiliser un outil pour lire ou créer un identifiant unique pour le dispositif, l'outil étant un module d'extension d'un navigateur qui est programmé pour lire ou créer l'identifiant unique à partir d'une ou de plusieurs sources d'instrumentation de gestion de Microsoft Windows® et est programmé pour fournir cet identifiant unique à un service de contenu multimédia numérique distant.
PCT/GB2011/051081 2010-06-09 2011-06-09 Procédé pour une identification unique d'un dispositif ordinateur individuel afin d'empêcher un abus de périodes d'essai dans un service de contenu multimédia numérique Ceased WO2011154742A1 (fr)

Applications Claiming Priority (8)

Application Number Priority Date Filing Date Title
GBGB1009650.1A GB201009650D0 (en) 2010-06-09 2010-06-09 Multi-device digital media subscription service
GB1009646.9 2010-06-09
GB1009648.5 2010-06-09
GBGB1009655.0A GB201009655D0 (en) 2010-06-09 2010-06-09 Patent dump
GBGB1009646.9A GB201009646D0 (en) 2010-06-09 2010-06-09 Digital media subscription service subscription and lifecycle management
GBGB1009648.5A GB201009648D0 (en) 2010-06-09 2010-06-09 Digital media service trial period abuse prevention
GB1009650.1 2010-06-09
GB1009655.0 2010-06-09

Publications (1)

Publication Number Publication Date
WO2011154742A1 true WO2011154742A1 (fr) 2011-12-15

Family

ID=44310271

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/GB2011/051081 Ceased WO2011154742A1 (fr) 2010-06-09 2011-06-09 Procédé pour une identification unique d'un dispositif ordinateur individuel afin d'empêcher un abus de périodes d'essai dans un service de contenu multimédia numérique

Country Status (2)

Country Link
GB (1) GB2481133A (fr)
WO (1) WO2011154742A1 (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10652365B2 (en) 2016-01-06 2020-05-12 Adobe Inc. Robust computing device identification framework

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020106081A1 (en) * 2000-12-28 2002-08-08 Ta-Kuang Yang Multiple registration system and method of using the same account for registering different device to a DRC server
US7272628B1 (en) * 2000-07-25 2007-09-18 Adobe Systems Incorporated Communicating data using an HTTP client
US20090089420A1 (en) * 2007-10-01 2009-04-02 Michael Caruso Flash tracking system and method

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7272628B1 (en) * 2000-07-25 2007-09-18 Adobe Systems Incorporated Communicating data using an HTTP client
US20020106081A1 (en) * 2000-12-28 2002-08-08 Ta-Kuang Yang Multiple registration system and method of using the same account for registering different device to a DRC server
US20090089420A1 (en) * 2007-10-01 2009-04-02 Michael Caruso Flash tracking system and method

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
"HTTP Cookie", 3 February 2010 (2010-02-03), XP002656203, Retrieved from the Internet <URL:http://web.archive.org/web/20100203123514/http://en.wikipedia.org/wiki/HTTP_cookie> [retrieved on 20110805] *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10652365B2 (en) 2016-01-06 2020-05-12 Adobe Inc. Robust computing device identification framework
US11418570B2 (en) 2016-01-06 2022-08-16 Adobe Inc. Robust computing device identification framework

Also Published As

Publication number Publication date
GB2481133A (en) 2011-12-14
GB201109666D0 (en) 2011-07-27

Similar Documents

Publication Publication Date Title
US11775355B2 (en) Systems and methods for controlling a local application through a web page
US11409891B2 (en) Method and system for providing digital media rental
US11190822B2 (en) Digital audio-video content mobile library
US8539233B2 (en) Binding content licenses to portable storage devices
US8105165B2 (en) Controlling interaction between protected media
US20160205113A1 (en) Method For Sharing A Media Collection In A Network Environment
US20090260067A1 (en) Method and system for legitimate lending and sharing of digital copyrighted content items over a data network
WO2008057502A2 (fr) Systeme et procede d&#39;emprunt de contenu
US20090006261A1 (en) Portable device for carrying licenses
JP2007510985A (ja) メディア提供エンティティにおけるコントロールポイントに対する異なる許可
US20080148349A1 (en) Authorization to use content
WO2011154742A1 (fr) Procédé pour une identification unique d&#39;un dispositif ordinateur individuel afin d&#39;empêcher un abus de périodes d&#39;essai dans un service de contenu multimédia numérique
KR20040038456A (ko) 홈 서버 컨텐츠 공유가 가능한 디알엠 장치 및 방법
US11641359B2 (en) System for connecting computing devices

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 11726935

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 11726935

Country of ref document: EP

Kind code of ref document: A1