Abstract: An apparatus to render content according to pre-established permissions associated with the content is provided. The apparatus includes: i) electronic processing circuitry; ii) executable instructions for execution by the processing circuitry, and iii) an output to render content. The executable instructions include instructions to control rendering of content according to pre-established permissions associated with the content. At a minimum, the rendering provides at least a preview of the content. The instructions further include instructions to facilitate communication with an external processor to obtain at least one of: i) content; and ii) supplemental permissions. The supplemental permissions extend permissible rendering of the content beyond the pre-established permissions.

Abstract: A digital repository 20 includes data items. A user can add additional functionality or program routines to data item by including as a data item a data processing identifier pointing to at least one data processing routine. Such routines are accessed by a client 22 by sending from a client to the digital repository 20 a request to access a data item, wherein the repository provides an interface description document 32 from the digital repository 20 to the client 22 as the response to the request. The client 22 can then transmit a data processing request from the client to a service 26 identified by the data processing identifier of the interface description document 32, the data processing request including the identifier from the interface description document.

Abstract: A database structure that may be used for semistructured databases assigns each node of a database to a collection. For each collection, create rights, retrieve rights, associate rights and dissassociate rights are provided to one or more users, the rights being assigned in common for all nodes of the collection. Users can only carry out the task if they have the appropriate rights. In this way, a flexible database security structure is provided that can deliver appropriate security for different elements of a semistructured database.

Abstract: One aspect of the present invention is a method of playing multi-media content through a personal computer. The personal computer includes a processor and memory, with the memory having software instructions stored therein. The processor executes the instructions to carry-out the method. The method includes: receiving data representing multi-media content at the personal computer; receiving at the personal computer an initial set of data representing a base set of usage rights that is associated with the multi-media content, wherein the initial set of data defines a first set of rights that is permissible without upgrading or renewing the base set of usage rights; and upon receiving a request to perform an action involving the multi-media content, checking the initial set of data representing the base set of usage rights to determine whether the action is permissible, and providing an option to a user through the personal computer to contact a remote computer to negotiate for an upgraded set of usage rights.

Abstract: Apparatus for controlling cross-organizational access by end users associated with a plurality of organizations to one or more distributed object services available via a resource server across an information technology communications network. The apparatus comprises at least one Requesting Organization (RO) having access to services via the resource server, the Requesting Organization being adapted to issue enrollments to one or more end users upon request and electronically transmitting the enrollments to the respective end users. The apparatus further comprises at least one Servicing Organization (SO) communicating with the Requesting Organization and defining the credentials required for access to a service via the resource server by end users associated with each of the organizations.

Abstract: A method of providing internet access to a data object repository comprising managing data objects hosted by said repository using a generalised repository directed graph data model having object nodes and resources, said resources comprising at least one of (i) a literal; (ii) actual resource data; and/or (iii) a URI directing a request for resources to an address; wherein said object nodes comprise higher level abstractions of data objects; wherein all object nodes and resources are named, as well as all arcs between object nodes and other object nodes or resources, said arcs modelling properties of said nodes; wherein each said directed graph has a graph interface which represents data as a directed graph of nodes and resources; and wherein said graph interface is capable of enabling access to data represented by said directed graph by traversal of said directed graph using http:GET.

Abstract: Copyrighted electronic media are packaged in a secure electronic format, and registered on associated registration server, which serves to provide on-line licensing and copyright management for that media. Users are connected to the server, e.g., through a computer network or the Internet, to enable data transfers and to transact licenses to utilize the media. Packaged electronic media are typically created by an author or derivative user of the work. Once the packaged media is registered on the server, the media is made available for limited use and possible license through an authorization server. This limited use is specified within the minimum permissions data set assigned to each packaged media. Without a license, users are typically permitted to view the packaged media—through a system which unpackages the media—but cannot save or otherwise transfer the media without obtaining auxiliary permissions to do so from the authorization server.

Abstract: Copyrighted electronic media are packaged in a secure electronic format, and registered on associated registration server, which serves to provide on-line licensing and copyright management for that media. Users are connected to the server, e.g., through a computer network or the Internet, to enable data transfers and to transact licenses to utilize the media. Packaged electronic media are typically created by an author or derivative user of the work. Once the packaged media is registered on the server, the media is made available for limited use and possible license through an authorization server. This limited use is specified within the minimum permissions data set assigned to each packaged media. Without a license, users are typically permitted to view the packaged media—through a system which unpackages the media—but cannot save or otherwise transfer the media without obtaining auxiliary permissions to do so from the authorization server.

Abstract: Messages including encrypted data and having the form of XML documents are exchanged within an information technology network according to Simple Object Access Protocol (SOAP). Each message includes a session key (encrypted to the public key of the party receiving the message) within the XML document containing the encrypted data, meaning that each message is interpretable in a “stand alone” condition, without reference to some shared state (such as the session key for instance) between the parties involved in the messaging. Tags are used to generate modules within the document, and enable easy and convenient separation of elements of the document for distribution by the SOAP gateway protocol handler to the relevant application.

Abstract: Digital Creative Works such as copyrighted electronic media are packaged in a secure electronic format, or CONTAINER, and registered on associated registration server, which serves to provide on-line licensing and copyright management for that Work. Users are connected to the registration server through a computer network or the Internet to enable data transfers and to transact licenses to utilize the media. Packaged electronic media are typically created by an author or derivative user of the work. Once the packaged media is registered on the server, the media is made available for limited use and possible license through an authorization server. This limited use is specified within the minimum permissions data set assigned to each packaged media. Without a license, users are typically permitted to view the packaged media—through a system which unpackages the media—but cannot save, print or otherwise transfer the media without obtaining auxiliary permissions to do so from the authorization server.

Abstract: A method of securely packaging multi-media content is provided. The multi-media content is to be rendered through a corresponding rendering application. The application limits rendering of content according to sets of usage rights associated with the content. The application further provides or facilitates a communications medium through which a user can negotiate with a remote server for additional usage rights. The method includes: i) receiving multi-media content to be securely packaged; ii) receiving an identifier for the content, the identifier helping to identify the content during a negotiation for additional usage rights; iii) receiving a first set of usage rights, the first set of usage rights identifying a minimum set of uses of the multi-media content that are permissible without requiring a second and expanded set of usage rights; and iv) packaging the multi-media content, identifier and first set of usage rights in a secure container.

Abstract: One aspect of the present invention is a method of playing multi-media content through a personal computer. The personal computer includes a processor and memory, with the memory having software instructions stored therein. The processor executes the instructions to carry-out the method. The method includes: receiving data representing multi-media content at the personal computer; receiving at the personal computer an initial set of data representing a base set of usage rights that is associated with the multi-media content, wherein the initial set of data defines a first set of rights that is permissible without upgrading or renewing the base set of usage rights; and upon receiving a request to perform an action involving the multi-media content, checking the initial set of data representing the base set of usage rights to determine whether the action is permissible, and providing an option to a user through the personal computer to contact a remote computer to negotiate for an upgraded set of usage rights.

Abstract: Copyrighted electronic media are packaged in a secure electronic format, and registered on associated registration server, which serves to provide on-line licensing and copyright management for that media. Users are connected to the server, e.g., through a computer network or the Internet, to enable data transfers and to transact licenses to utilize the media. Packaged electronic media are typically created by an author or derivative user of the work. Once the packaged media is registered on the server, the media is made available for limited use and possible license through an authorization server. This limited use is specified within the minimum permissions data set assigned to each packaged media. Without a license, users are typically permitted to view the packaged media—through a system which unpackages the media—but cannot save or otherwise transfer the media without obtaining auxiliary permissions to do so from the authorization server.

Abstract: An apparatus to render content according to pre-established permissions associated with the content is provided. The apparatus includes: i) electronic processing circuitry; ii) executable instructions for execution by the processing circuitry, and iii) an output to render content. The executable instructions include instructions to control rendering of content according to pre-established permissions associated with the content. At a minimum, the rendering provides at least a preview of the content. The instructions further include instructions to facilitate communication with an external processor to obtain at least one of: i) content; and ii) supplemental permissions. The supplemental permissions extend permissible rendering of the content beyond the pre-established permissions.

Abstract: Copyrighted electronic media are packaged in a secure electronic format, and registered on associated registration server, which serves to provide on-line licensing and copyright management for that media. Users are connected to the server, e.g., through a computer network or the Internet, to enable data transfers and to transact licenses to utilize the media. Packaged electronic media are typically created by an author or derivative user of the work. Once the packaged media is registered on the server, the media is made available for limited use and possible license through an authorization server. This limited use is specified within the minimum permissions data set assigned to each packaged media. Without a license, users are typically permitted to view the packaged media—through a system which unpackages the media—but cannot save or otherwise transfer the media without obtaining auxiliary permissions to do so from the authorization server.

Abstract: Messages including encrypted data and having the form of XML documents are exchanged within an information technology network according to Simple Object Access Protocol (SOAP). Each message includes a session key (encrypted to the public key of the party receiving the message) within the XML document containing the encrypted data, meaning that each message is interpretable in a “stand alone” condition, without reference to some shared state (such as the session key for instance) between the parties involved in the messaging. Tags are used to generate modules within the document, and enable easy and convenient separation of elements of the document for distribution by the SOAP gateway protocol handler to the relevant application.

Abstract: Apparatus for controlling cross-organisational access by end users associated with a plurality of organisations to one or more distributed object services available via a resource server across an information technology communications network. The apparatus comprises at least one Requesting Organisation (RO) having access to services via the resource server, the Requesting Organisation being adapted to issue enrolments to one or more end users upon request and electronically transmitting the enrolments to the respective end users. The apparatus further comprises at least one Servicing Organisation (SO) communicating with the Requesting Organisation and defining the credentials required for access to a service via the resource server by end users associated with each of the organisations.

Abstract: Apparatus for determining the output of a contract or agreement at any point in time as required, comprising means for creating a state machine representative of the contract or agreement, at least some of the clauses and/or conditions of the contract or agreement being represented as a respective state variable of the state machine, means for storing the state machine, means for receiving data representative of one or more events relevant to the contract or agreement, determining whether the event changes the state of the state machine and changing the state of the state machine if required. The apparatus of the present invention, can provide the core for licence repository and automated rights management services, making the task of rights decision-making easier and more efficient. A preferred embodiment involves providing an novel digital representation of the contract, the unique aspect of this model being that it is dynamic, in that it accurately captures the sequential characteristics of real contracts.

Abstract: The present invention provides a single “container” for storing and/or transporting electronic data, the container including data (externally of the “container”) which is universally readable and/or decipherable and which can be used to specify to the wide range of different applications the format of the encapsulated data, reference the rights management technology used to package the data, and provide policies in order to obtain and interpret the data content.

Abstract: A proxy service for providing a practical point of intervention for the application of information handling policies, especially copyright management and enforcement services. The invention provides a platform upon which to generalize the interpretation and enforcement of copyright policies, which is particularly useful where large related basis of users with heterogeneous viewing environments might need policies applied in a uniform and flexible way. The invention keeps the process and mechanisms of user authentication and authorization separate and distinct from the actual implementation of policy enforcement.