Method and apparatus for creating licenses in a mobile digital rights management network

FIELD

The described aspects relate generally to wireless communication devices and network communication. More particularly, the described aspects relate to creating media content licenses in a mobile Digital Rights Management Network.

BACKGROUND

Digital Rights Management (DRM) is a systematic approach to copyright protection for digital media. The purpose of DRM is to prevent illegal distribution of content over networks, such as the Internet. DRM systems were developed in response to the rapid increase in online piracy of commercially marketed material, which proliferated through the widespread use of peer-to-peer file exchange programs. Although copyright laws protect online content, policing the Web and catching law-breakers is very difficult. DRM technology focuses on making it difficult to steal content in the first place, thereby providing a much surer approach to the problem than the hit-and-miss strategies aimed at apprehending online poachers after-the-fact.

In a wireless or mobile network environment, the ability to protect digital rights becomes even more problematic as the ease by which attackers can intercept wireless transmissions increases. Thus, it is generally accepted that in a mobile DRM network, digitally authenticated DRM licenses, otherwise referred to as digitally signed DRM licenses, offer greater security against unauthorized modification than licenses that are not digitally authenticated.

DRM schemes that do not use digitally authenticated licenses are forced to protect the license against modification using methods that have been found to be unacceptable in terms of the security that they offer. For example, "secure" storage methods, systems that rely on the hiding of keys on the client device or software obfuscation, are all less desirable for various reasons. First, these suspect security methods do not offer "provable" security. In other words, it may be difficult to provide a measure to quantify the level of security provided by these methods. In contrast, the time required (i.e., work factor) to break a commonly used public key algorithm, for example a 1024 or 2048 bit RSA algorithm, is assumed to be well understood by those having knowledge in the art of cryptography. Secondly, successful attacks against such schemes tend to propagate well. Once an attacker figures out how client based keys are generated, or how they are stored, or the gist of the obfuscated software, then this information can be leveraged into a widespread attack, in which a utility is written, downloaded or distributed for use by the novice attacker.

In addition to security concerns, "secure" storage methods, key hiding methods and software obfuscation do not tend to work well on heterogeneous networks. In such networks, some original equipment manufacturers (OEMs) may have implemented very strong, hardware-based secure storage while other OEMs may have implemented weaker software-based secured storage and still others may not have implemented any storage security whatsoever. Such networking environments are very common, and result in a security situation that is extremely difficult to monitor and manage.

DRM schemes that use digitally authenticated licenses limit the attacker, who desires to perform an unauthorized modification of the rights contained in the license, to modifying the implementation itself. In a mobile or wireless network environment, modifying the implementation would generally entail reflashing the handset (i.e., re-programming the flash part), which is an attack that does not propagate well.

Thus, for the security reasons described above, the current trend within DRM schemes is reliance on digitally authenticated licenses. All of these current schemes rely on having the license generated and authenticated concurrently or in immediate succession by a relevant server, such as a licensing server or a content server. Therefore, a need exists to create an alternative method for implementing DRM in a mobile or wireless network environment. For example, a need exists to generate a DRM scheme that relies on authentication mechanisms, such as digital signatures or the like, but provides the ability to generate the licensing rights and a corresponding license authentication mechanism independent of each other. Thus, the desired DRM scheme will provide additional security, in that independent creation of the licensing rights and license authentication mechanism may further thwart the efforts of would be attackers or license manipulators.

<patcit id="pcit0001" dnum="EP1571524A2"><text>EP1571524A2</text></patcit> describes a method for accessing a digital content consisting in:a client device receiving a right managed content inlcuding a SRL and an encrypted digital content; the client device transmitting the SRL to a RM server; the RM server obtaining a symmetric key CK and rights data from the SRL; the RM server transmitting the symmetric key CK and the rights data to the client device; the client device decrypting the encrypted digital content file using the symmetric key CK to form the digital content file; and the client device accessing the digital content according to the received rights data.

SUMMARY

Thus, devices, methods, apparatus, computer-readable media and processors are presented that provide for the creation of digitally authenticated licenses in a wireless digital rights management network. The aspects provide for the licensing rights to be generated at the wireless device in accordance with available licensing parameters associated with selected media content. The digital authentication mechanism is generated at a network device and communicated to the wireless device, either separately as an authentication mechanism or as part of an assembled digital media license. In some aspects, the wireless device will assemble the licensing rights and the authentication mechanism to create the digital media license. Thus, the present aspects provide for a highly secure means of protecting media content rights, insuring that media content rights are securely formed and, once formed, the authenticated license insures that rights are not susceptible to tampering or alteration by the licensee or another would be attacker.

In one aspect, a method for generating a media content license in a wireless network is provided. The method includes generating one or more proposed licensing rights related to selected media content, communicating the proposed licensing rights to a network device and receiving licensing rights validation, such as an authentication mechanism, thereby defining authenticated licensing rights. In some alternate aspects, the method may also include the step of assembling, at the wireless device, the licensing rights and the authentication mechanism to create a media content license. An alternate aspect is defined by a machine-readable medium that includes instructions, which, when executed by a machine, cause the machine to perform operations. The operations include generating, at a wireless device, one or more proposed licensing rights related to selected media content, communicating the proposed licensing rights to a network device and receiving, at the wireless device, licensing rights approval, such as an authentication mechanism, thereby defining authenticated licensing rights. In some aspects, the operations may additionally include assembling, at the wireless communication device, the licensing rights and the authentication mechanism to create a media content license.

Yet another aspect is defined by a processor device, implemented in a wireless device that is configured to perform the operations of generating one or more proposed licensing rights related to selected media content, communicating the proposed licensing rights to a network device and receiving licensing rights approval, such as an license authentication mechanism, thereby defining authenticated licensing rights. In some aspects, the processor may be additionally configured to perform the operation of assembling the licensing rights and the authentication mechanism to create a media content license.

In an alternate aspect, a wireless communication device is provided that includes a computer platform including a processing engine and a memory unit and a licensing rights module stored in the memory unit and executed by the processing engine. The licensing module is operable to present licensing options for selected media content, generate proposed licensing rights based on selected licensing options and communicate the proposed licensing rights to a network device for validation. In certain aspects licensing options are generated from an association between a licensing code associated with selected media content and available licensing parameters, such as usage terms, pricing information, device characteristics and the like.

In a related aspect, a wireless device is defined that includes a means for processing data on the wireless device, a means for storing data on the wireless device that is in communication with the means for processing data, a means for presenting licensing options for selected media content, a means for generating proposed licensing rights based on selected licensing options and a means for communicating the proposed licensing rights to a network device for validation.

An aspect is also defined by a system for creating digitally authenticated licenses in a wireless network. The system includes a wireless communication device that includes a computer platform that includes a processing engine, a memory unit and a licensing rights module that is stored in the memory unit and executed locally by the processing engine. The licensing rights module is operable to present licensing options for selected media content, generate proposed licensing rights based on selected licensing options and communicate the proposed licensing rights. Additionally, the system includes a network device in communication with the wireless device that comprises a computer platform that includes a processing engine, a memory unit and a license validation module stored in the memory unit and executed by the processing engine. The license validation module is operable to validate proposed licensing rights received from the wireless communication device and communicate a licensing rights validation to the wireless communication device.

According to an alternate aspect, a method for validating licensing rights within a wireless network is defined. The method includes receiving, at a network device, communication from a wireless device that includes proposed licensing rights associated with media content, validating, at the network device, the proposed licensing rights and communicating, to the wireless device, a licensing rights validation thereby defining authenticated licensing rights.

Another aspect is defined by a machine-readable medium that includes instructions, which, when executed by a machine, cause the machine to perform operations. The operations include receiving, at a network device, communication from a wireless device that includes proposed licensing rights associated with media content, validating, at the network device, the proposed licensing rights and communicating, to the wireless device, a licensing rights validation thereby defining authenticated licensing rights.

In a related aspect, a processor device, operable be a network device and configured to perform the operations of receiving communication from a wireless device that includes proposed licensing rights associated with media content, validating the proposed licensing rights and communicating, to the wireless device, a licensing rights validation thereby defining authenticated licensing rights.

In another aspect, a network device for validating licensing rights is defined. The device includes a computer platform that includes a processing engine and a memory unit and a license validation module stored in the memory unit and executed by the processing engine. The license validation module is operable to validate proposed licensing rights received from the wireless communication device and communicate a licensing rights validation to the wireless communication device.

Thus, the described aspects provide for alternative methods for generating digitally authenticated media content licenses in a wireless network environment. The disclosed aspects provide for systems that bifurcate license formation by generating the licensing rights at the wireless device and generating the associated authentication mechanism at a network device. As such, the proposed aspects provide for content media licenses that are highly secured and are not readily susceptible to alteration or attack.

BRIEF DESCRIPTION OF THE DRAWINGS

The disclosed aspects will hereinafter be described in conjunction with the appended drawings, provided to illustrate and not to limit the disclosed aspects, wherein like designations denote the elements, an in which: <ul id="ul0001" list-style="none" compact="compact"><li><figref idref="f0001">Fig. 1</figref> illustrates one aspect of a system for creating digitally authenticated licenses in a wireless Digital Rights Management (DRM) network;</li><li><figref idref="f0002">Fig. 2</figref> illustrates one aspect of a wireless device for creating digitally authenticated licenses;</li><li><figref idref="f0003">Fig. 3</figref> illustrates one aspect of the content storage in a wireless device for creating digitally authenticated licenses;</li><li><figref idref="f0004">Fig. 4</figref> illustrates one aspect of a licensing options table as presented on a wireless device for choosing licensing options;</li><li><figref idref="f0005">Fig. 5</figref> illustrates one aspect of a network device for creating digitally authenticated licenses;</li><li><figref idref="f0006">Fig. 6</figref> illustrates one aspect of a second network device for communicating usage term handles to the wireless device;</li><li><figref idref="f0007">Fig. 7</figref> illustrates one aspect of a cellular telephone network for implementing the DRM network;</li><li><figref idref="f0008">Fig. 8</figref> is a flowchart of one aspect of a method for creating digitally authenticated licenses at a wireless device;</li><li><figref idref="f0009">Fig. 9</figref> is a flowchart of one aspect of a method for authenticating licensing rights at a network device.</li></ul>

DETAILED DESCRIPTION

The present devices, apparatus, methods, computer-readable media and processors now will be described more fully hereinafter with reference to the accompanying drawings, in which aspects of the described embodiments are shown. The devices, apparatus, methods, computer-readable media and processors may, however, be embodied in many different forms and should not be construed as limited to the aspects set forth herein; rather, these aspects are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. Additionally, throughout this description, like numbers refer to like elements.

The present devices, apparatus, methods, computer-readable media and processors provide for the creation of digitally authenticated, media content licenses in a wireless Digital Rights Management (DRM) network. The described aspects provide for the licensing rights to be generated at the wireless device in accordance with selected usage rules and, in some aspects, wireless device attributes. In response to receiving proposed licensing rights having approvable terms, the described aspects provide validation of the proposed licensing rights to the wireless device. For example, an authentication mechanism may be generated at a network device and communicated to the wireless device, either as on its own or as part of an assembled media content license. In some aspects, the wireless device assembles the licensing rights and the authentication mechanism to create the media content license, thereby allowing access by the wireless device to the content based on licensing terms generated at the wireless device.

Referring to <figref idref="f0001">Fig. 1</figref>, one aspect is defined by a system <b>10</b> for creating digitally signed licenses on a wireless device in a wireless DRM network. The system <b>10</b> includes a wireless communication device <b>12</b> and a network device <b>14,</b> such as the illustrated licensing server, in communication across a wireless network <b>16.</b> For a protected piece of media content <b>18</b> to which the wireless device <b>12</b> desires access, the wireless device <b>12</b> locally generates licensing rights <b>20,</b> including usage terms and/or pricing, selected from a plurality of licensing parameters <b>22.</b> The available ones of the plurality of licensing parameters <b>22</b> may vary based on the requested media content <b>18,</b> and in some aspects, may further vary depending on a wireless device attribute <b>24,</b> as will be discussed below in more detail. Once the licensing rights <b>20</b> for the requested content <b>18</b> have been generated, the licensing rights, or a reference that corresponds to the generated licensing rights, are communicated from the wireless device <b>12</b> to the network device <b>14.</b> The network device <b>14</b> validates the terms associated with the licensing rights <b>20,</b> or the reference thereto, and generates a corresponding authentication mechanism <b>26,</b> such as a digital signature, digital certificate, digital code, keyed hash or the like. Once the authentication mechanism <b>26</b> has been created with respect to the licensing rights <b>20</b> proposed by the wireless device <b>12,</b> the network device <b>14</b> communicates the authentication mechanism <b>26</b> to the wireless device <b>12</b> and the wireless device <b>12</b> assembles and stores the licensing rights <b>20</b> and the authentication mechanism <b>26</b> as a digitally authenticated media content license <b>28.</b> Optionally, the network device <b>14</b> may assemble the licensing rights <b>20</b> and the authentication mechanism <b>26</b> into a digitally authenticated media content license <b>28</b> and communicate the license to the wireless device. Thus, once in possession of a valid media content license <b>28,</b> wireless device <b>12</b> may execute media content module <b>30</b> to access and present the respective licensed content <b>18.</b>

The system <b>10</b> may optionally include a second network device <b>32,</b> such as the illustrated media content server, which communicates with the wireless device <b>12</b> across wireless network <b>16</b> and provides the wireless device <b>12</b> with requested media content <b>18,</b> which may be selected from a plurality of media content <b>34</b> resident on or accessible by the second network device <b>32.</b> Additionally, in some aspects, the second network device <b>32</b> may provide for communicating to the wireless device <b>12</b> a media content index <b>36,</b> which may include a reference, referred to herein as a licensing code <b>38,</b> to usage terms and pricing information associated with the media content <b>34.</b> As will be discussed in more detail below, the wireless device <b>12</b> uses the one or more licensing codes <b>38</b> associated with a given media content <b>18</b> to filter the available usage terms, pricing and other licensing-related conditions from the plurality of potential licensing parameters <b>22,</b> thereby allowing a user of the wireless device <b>12</b> to select and generate licensing rights <b>20</b> to present to network device <b>14</b> for approval.

In some aspects, the licensing functionality of the network device <b>14</b> and the media content downloading functionality of second network device <b>32</b> may be embodied within a single, unitary network device (illustrated in <figref idref="f0001">Fig. 1</figref> by block <b>40</b>). It should also be noted that the aspects described herein are not limited by the existence of media content <b>18</b> on the wireless device. The communication of the media content <b>18</b> to the wireless device <b>12</b> may occur at any point in time before, during or after the creation of the digitally authenticated media content license. As such, the media content <b>18</b> may be downloaded or otherwise communicated to the wireless device <b>12</b> prior to the generation of licensing rights <b>20,</b> at any point in time during the creation of the digitally authenticated license <b>28</b> or after the formation of the digitally authenticated license <b>28.</b>

The wireless communication device <b>12</b> includes a computer platform <b>42</b> that can transmit data across wireless network <b>16,</b> and that can receive and execute routines and applications. The computer platform <b>42</b> includes a licensing module <b>44</b> that generates licensing rights <b>20</b> for specified media content <b>18</b> based on selected licensing parameters <b>22</b> and, in some aspects, wireless device attributes <b>24.</b> Initially, the licensing module <b>44</b> will determine, at the wireless device, terms that will be used to generate the licensing rights. In some aspects, the user of a media content module <b>30,</b> which may operate in cooperation with licensing module <b>44,</b> selects the terms. For example, media content module <b>30</b> may allow for the user to select from amongst various usage options, such as unlimited use, time period usage (e.g., one day, one month, etc.), play count based usage (e.g., one play, five plays, etc.) or the like.

In some aspects, the various usage term options and the corresponding prices of the options, which are presented by the media content module <b>30,</b> may be based on device attributes <b>24</b> associated with the wireless device. The attributes <b>24</b> may include, but are not limited to, service or membership status (e.g., premier/gold service, standard service, member of a club associated with a content provider, etc.), geographic/physical location and/or network location associated with the wireless device or the device user, device security capabilities, hardware capabilities and the like. In this manner, the licensing parameters <b>22</b> which are available to the user of the wireless device <b>12</b> may differ amongst wireless devices based on the unique attributes associated with each respective wireless device.

Once the particular licensing parameters <b>22</b> for the selected media content <b>18</b> are selected, the licensing module <b>44</b> generates licensing rights <b>20.</b> The licensing rights <b>20</b> may be directly defined by the selected one of the plurality of licensing parameters <b>22,</b> or alternatively, the licensing rights <b>20</b> may further include other parameters, such as device-specific, network-specific, and/or content-specific parameters. In some aspects, the licensing module <b>44</b> may read the one or more licensing codes <b>38</b> associated with the requested content <b>18,</b> and then rely on a look-up table that maps the one or more licensing codes <b>38</b> to available usage terms, pricing information and/or licensing conditions in the database of licensing parameters <b>22.</b>

Once the proposed licensing rights <b>20</b> are generated, they are communicated to the network device <b>14</b> via wireless network <b>16.</b> The network device <b>14</b> includes a computer platform <b>46</b> that can transmit data across wireless network <b>16,</b> and that executes routines and applications. The computer platform <b>46</b> includes a license validation module <b>48</b> that confirms that the licensing rights <b>20</b> proposed by the wireless device <b>12</b> fall within the scope of available licensing rights for the given content and/or for the given wireless device. For example, license validation module <b>48</b> may compare the proposed licensing rights <b>20</b> with the authentic version of available licensing parameters <b>22</b> and the licensing codes <b>38</b> associated with the given content <b>18,</b> such as by confirming this information with network device <b>32</b> and/or with a local copy of this information. If the terms of the licensing rights <b>20</b> are confirmed, then license validation module <b>48</b> is operable to cause the generation of an authentication mechanism <b>26,</b> such as a digital signature or the like to validate the licensing rights <b>20.</b> The term "authentication mechanism", as used herein, may refer to any digital code typically employed in the art of network communications. For example, authentication mechanisms <b>26</b> may include an acceptable encryption algorithm, a cipher, a keyed hash, and/or a Message Authentication Code (MAC). Once the authentication mechanism <b>26</b> has been associated with the licensing rights <b>20,</b> the network device communicates the authentication mechanism <b>26</b> to the wireless device or, alternatively, the network device communicates a media content license <b>28</b> (i.e., the combined licensing rights and authentication mechanism) to the wireless device.

Once the wireless device <b>12</b> receives the authentication mechanism <b>26</b> from the network device <b>14,</b> the licensing module <b>44</b> assembles the licensing rights <b>20</b> and the authentication mechanism <b>26</b> to define a content media license <b>28.</b>

The optional second network device <b>32</b> includes a computer platform <b>50</b> that can transmit data across wireless network <b>16,</b> and that can execute routines and applications. The computer platform <b>50</b> includes a media content module <b>52</b> operable to interact with content module <b>30</b> resident on the wireless device <b>12.</b> In some aspects, media content module <b>52</b> may forward media content module <b>30</b> to the wireless device <b>12</b> to enable the wireless device to retrieve content from the network device. Further, media content module <b>52</b> may forward the media content index <b>36</b> and the plurality of licensing parameters <b>22</b> to the wireless device <b>12.</b> The media content index <b>36</b> may identify the content <b>34</b> available from the network device <b>32.</b> The plurality of licensing parameters <b>22</b> may identify various usage terms, pricing and conditions that may be available for one or more of the plurality of content <b>34</b> provided by the network device <b>32.</b> Further, in response to a request for more information on a specific piece of content, media content module <b>52</b> may forward the requested content <b>18,</b> which may be selected from the plurality of content <b>34,</b> as well as one or more corresponding licensing codes <b>38</b> which identify available ones of the plurality of licensing parameters <b>22</b> for the requested content. For example, once the licensing codes <b>38</b> have been communicated to the wireless device, the licensing module <b>44</b> uses the codes in combination with the licensing parameters to generate licensing right options for the user of the wireless device.

Thus, system <b>10</b> provides apparatus and methods for creating a license <b>20</b> to selected content <b>18</b> at the wireless device <b>12.</b>

Referring to <figref idref="f0002">Fig. 2</figref>, according to one aspect, a wireless communication device is depicted. The wireless device <b>12</b> may include any type of computerized, wireless device, such as cellular telephone, Personal Digital Assistant (PDA), two-way text pager, portable computer, and even a separate computer platform that has a wireless communications portal, and which also may have a wired connection to a network or the Internet. The wireless device <b>12</b> can be a remote-slave, or other device that does not have an end-user thereof but simply communicates data across the wireless network <b>16,</b> such as remote sensors, diagnostic tools, data relays, and the like. The apparatus and method for creating digitally signed licenses can accordingly be performed on any form of wireless device or computer module, including a wired or wireless communication portal, including without limitation, wireless modems, PCMCIA cards, access terminals, personal computers, telephones, or any combination or sub-combination thereof.

Additionally, wireless device <b>12</b> has input mechanism <b>54</b> for generating inputs into wireless device, and output mechanism <b>56</b> for generating information for consumption by the user of the wireless device. For example, input mechanism <b>54</b> may include a mechanism such as a keypad or keyboard, a mouse, a touch-screen display, a microphone in association with a voice recognition module, etc. In certain aspects, the input mechanisms <b>54</b> provides for user input to activate the media content module <b>30,</b> choose a desired piece of content <b>18</b> from the media content index <b>36</b> and subsequently choose from amongst a wireless-device generated list of usage and pricing options. Further, for example, output mechanism <b>56</b> may include a display, an audio speaker, a haptic feedback mechanism, etc. In certain aspects, the output mechanisms assist in providing a user access to the media content index, the usage and pricing options and the media content.

Further, wireless device <b>12</b> has computer platform <b>42</b> that can transmit data across wireless network <b>16,</b> and that can receive and execute routines and applications and display data transmitted from network devices <b>14</b> and <b>32,</b> such as a licensing server or a media content server or another computer device connected to wireless network <b>16.</b> Computer platform <b>42</b> includes a data registry <b>58,</b> which may comprise volatile and nonvolatile memory such as read-only and/or random-access memory (RAM and ROM), EPROM, EEPROM, flash cards, or any memory common to computer platforms. Further, data registry <b>58</b> may include one or more flash memory cells, or may be any secondary or tertiary storage device, such as magnetic media, optical media, tape, or soft or hard disk.

Further, computer platform <b>42</b> also includes a processing engine <b>60,</b> which may be an application-specific integrated circuit ("ASIC"), or other chipset, processor, logic circuit, or other data processing device. Processing engine <b>60</b> or other processor such as ASIC may execute an application programming interface ("API") layer <b>62</b> that interfaces with any resident programs, such as licensing module <b>44,</b> in a data registry <b>58</b> of the wireless device <b>12.</b> API <b>62</b> is typically a runtime environment executing on the respective wireless device. One such runtime environment is Binary Runtime Environment for Wireless® (BREW®) software developed by Qualcomm, Inc., of San Diego, California. Other runtime environments may be utilized that, for example, operate to control the execution of applications on wireless computing devices.

Processing engine <b>60</b> includes various processing subsystems <b>64</b> embodied in hardware, firmware, software, and combinations thereof, that enable the functionality of wireless device <b>12</b> and the operability of the wireless device on wireless network <b>16.</b> For example, processing subsystems <b>64</b> allow for initiating and maintaining communications, and exchanging data, with other networked devices. In one aspect, such as in a cellular telephone, communications processing engine <b>60</b> may include one or a combination of processing subsystems <b>64,</b> such as: sound, non-volatile memory, file system, transmit, receive, searcher, layer 1, layer 2, layer 3, main control, remote procedure, handset, power management, diagnostic, digital signal processor, vocoder, messaging, call manager, Bluetooth® system, Bluetooth® LPOS, position determination, position engine, user interface, sleep, data services, security, authentication, USIM/SIM, voice services, graphics, USB, multimedia such as MPEG, GPRS, etc. For the disclosed aspects, processing subsystems <b>64</b> of processing engine <b>60</b> may include any subsystem components that interact with applications executing on computer platform <b>42.</b> For example, processing subsystems <b>64</b> may include any subsystem components that receive data reads and data writes from API <b>62</b> on behalf of the licensing module <b>44.</b> Further, locally stored media content <b>18</b> and media content licenses <b>28</b> that are gathered and then logged in the content storage <b>66</b> and license storage <b>68,</b> respectively, are available from these subsystems <b>64.</b>

Computer platform <b>42</b> may further include a communications module <b>70</b> embodied in hardware, firmware, software, and combinations thereof, that enables communications among the various components of the wireless device <b>12,</b> as well as between the wireless device <b>12</b> and the wireless network <b>16.</b> The communication module <b>70</b> may include the requisite hardware, firmware, software and/or combinations thereof for establishing a wireless communication connection, including wireless signal transmit, receive, modulation and demodulation components.

The computer platform <b>42</b> may further include a media content module <b>30</b> that is launched by the user of the wireless device who wishes to access media content. The media content module <b>30</b> includes hardware, software, firmware, executable instructions, data, and combinations thereof which provide the wireless device <b>12</b> with the ability to retrieve content descriptions, select parameters to include in proposed licensing rights, obtain a license, retrieve content from across the wireless network <b>16,</b> and access the retrieved content within the terms of the respective license. In some aspects, media content module <b>30</b> includes media selection logic <b>72,</b> which initiates wireless communication with a media content server in order to determine content available to download. For example, media selection logic <b>72</b> may retrieve a media content index <b>36</b> from a network device <b>32,</b> such as a media content server. Alternatively, media selection logic <b>72</b> may access a previously-retrieved and/or previously-stored version of the media content index <b>36</b> locally residing in content storage <b>66.</b> Media presentation logic <b>74</b> is operable to present the device user with the information from the media content index <b>36,</b> and is operable to receive selections for requested content <b>18.</b> For example, these selections may include requests for additional information, and/or requests to acquire the selected content. Further, media selection logic <b>72</b> may be operable to forward the request to the network device <b>32</b> in order to receive additional description <b>76</b> (<figref idref="f0003">Fig. 3</figref>) relating to the requested content, and/or to receive the requested content <b>18.</b> As noted above, the time of receipt of requested content <b>18</b> may be before, during or after the appropriate license <b>28</b> has been obtained. Further, upon receiving a selection and request to acquire media content, media selection logic <b>72</b> may be further operable to invoke licensing rights module <b>44</b> in order to initiate the acquisition of the appropriate license <b>28</b> for the requested content <b>18.</b>

Licensing rights module <b>44,</b> which may reside on computer platform <b>42,</b> is operable to generate proposed licensing rights locally at the wireless device, and communicate the proposed licensing rights to a network device. In response, upon approval of the licensing rights by the network device, licensing rights module <b>44</b> receives from the network device <b>14</b> either an authentication mechanism <b>26</b> associated with the licensing rights <b>20</b> or a digitally authenticated media content license <b>28.</b> Optionally, in some aspects, the licensing rights module <b>44</b> assembles the licensing rights <b>20</b> and the authentication mechanism <b>26</b> into the digitally signed media content license <b>28.</b> Licensing rights module <b>44</b> includes one or any combination of hardware, software, firmware, data and executable instructions to carry out the functionality described herein.

In some aspects, the licensing rights module <b>44</b> may include licensing options logic <b>78</b> operable for defining licensing terms associated with user-selected media content. In operation, according to some aspects, a user selects media content from the media content index <b>36,</b> the selection is sent to a network device <b>32,</b> such as a media content server, and the selected content <b>18,</b> additional description <b>76,</b> and/or content licensing codes <b>38</b> are communicated back to the wireless device. The licensing options logic <b>78</b> may be configured to access the content storage <b>66,</b> and specifically the database of the plurality of licensing parameters <b>22</b> (<figref idref="f0003">Fig. 3</figref>), to determine one or more sets of available licensing parameters <b>98,</b> including price, usage terms and conditions. In some aspects, licensing options logic <b>78</b> may access wireless device storage <b>80</b> to obtain wireless device attributes <b>24,</b> such as a wireless device identifier (ID) that uniquely identifies the wireless device or the wireless device user, a service status, a current device location, device security capabilities and device hardware capabilities, any combination thereof which may affect the availability of a given set of the plurality of licensing parameters <b>22.</b> Once the licensing options logic <b>78</b> determines the one or more sets of available licensing parameters <b>98,</b> the parameters representing one or more licensing options are presented to the user for selection.

The licensing rights module <b>44</b> also may include licensing rights generator logic <b>82</b> operable for generating licensing rights <b>20</b> at the wireless device. In some aspects, the licensing rights <b>20</b> are defined by the selected ones of the available licensing parameters <b>98.</b> Once the licensing rights generator logic <b>82</b> generates the licensing rights <b>20,</b> the rights are communicated from the wireless device <b>12</b> to a network device <b>14,</b> such as a licensing server.

The licensing rights module <b>44</b> may further include license assembler logic <b>84.</b> The license assembler logic <b>84</b> is invoked if the network device <b>14</b> communicates an authentication mechanism <b>26,</b> as opposed to a digitally signed media content license <b>28.</b> In the case of such an event, the license assembler logic <b>84</b> assembles a media content license <b>28</b> including, for example, the licensing rights <b>20,</b> the corresponding authentication mechanism <b>26,</b> and the corresponding content identification <b>86,</b> such as content metadata. Once the license assembler logic <b>84</b> has assembled the media content license <b>28,</b> the license <b>28</b> may be stored in license storage <b>68.</b>

The licensing rights module <b>44</b> may further include license validation logic <b>88</b> that is implemented in aspects in which the license <b>28</b> requires validation prior to accessing the media content <b>18</b> associated with the respective license <b>28.</b> In such aspects, the license validation logic <b>88</b> is operable to invoke the digital rights management ("DRM") agent <b>90</b> to access the media content license <b>28</b> prior to accessing the related media content <b>18.</b> The DRM agent <b>90</b> interacts with both licensing rights module <b>44</b> and media player module <b>30</b> to verify the existence of proper licensing rights, such as license <b>28</b> in license storage <b>68,</b> prior to executing media content <b>18.</b> DRM agent <b>90</b> may be embodied in at least one of hardware, software, firmware, data and executable instructions, and generally controls the consumption of any content <b>18</b> based on the associated licensing rights <b>20.</b>

In some aspects, validation of the media content license <b>28</b> provides for validating the authentication mechanism <b>26,</b> which in some aspects includes accessing security storage <b>92</b> to retrieve and implement the appropriate one of a plurality of security mechanisms <b>94,</b> such as a key corresponding to the key used to create the digital signature, a keyed hash function, etc.

Further, in certain aspects, the network device <b>14</b> and/or <b>32</b> will communicate all or portions of the license <b>28,</b> the authentication mechanism <b>26,</b> and/or the content <b>18,</b> to the wireless device <b>12</b> in a secure manner, such as by encrypting and authenticating the data. This authentication is above and beyond the "built-in" authentication that comes from digitally signing or applying a keyed-hash message authentication code (HMAC) to the license itself. It protects the entire communications channel, so that associated metadata, etc. cannot be tampered with or viewed. In such cases, the wireless device <b>12</b> may utilize one of a plurality of security mechanisms <b>94,</b> such as a corresponding key or the like, which may be stored in the security storage <b>92,</b> to decrypt and authenticate the secured message and thereby allow access to or modification of the information. In other aspects, another one of the plurality of security mechanisms <b>94</b> may include a locking mechanism, such as a key or the like, for encrypting or otherwise encoding the proposed licensing rights <b>20,</b> or any other information, prior to communication to the network device <b>14</b> or prior to internally storing information.

In any case, once the license <b>28</b> has been validated, the licensing rights module <b>44</b> causes enforcement the rights granted by the license and provides the user with access to the media content <b>18</b> according to the terms of the license.

Referring additionally to <figref idref="f0003">Fig. 3</figref>, the content storage <b>66</b> of wireless device <b>12</b> may store media content index <b>36</b> that provides the user with one or a plurality of content identifications (IDs) <b>86,</b> such as a name and/or unique identifier, and corresponding descriptions <b>96</b> of the content available from network device <b>32.</b> Additionally, content index <b>36</b> may further include one or more licensing code(s) <b>38</b> associated with each content ID <b>86.</b> Each licensing code <b>38</b> relates to a predetermined set of available parameters <b>98</b> within the plurality of licensing parameters <b>22</b> for the given content ID <b>86.</b> For example, in some aspects, the predetermined available licensing parameters <b>98</b> may include one or more of: pricing information <b>100,</b> which identifies a cost associated with the given set of licensing terms, such as a monetary amount or a discount or mark-up from a standard cost; usage terms <b>102,</b> which identify usage rules for the content, such as a predetermined number of times the content may be accessed, a predetermined time period for which the content may be accessed, unlimited access, etc.; and one or more conditions <b>104,</b> which may identify a prerequisite for qualifying for the given pricing information <b>100</b> and/or usage terms <b>102,</b> such as a device attribute <b>24,</b> a network attribute, a device user attribute, and any other quality that may affect pricing and usage. Examples of conditions <b>104</b> include, but are not limited to: a predetermined status, such as a membership status, an association with an entity/enterprise, a carrier relationship, a content provider relationship, a content distributor relationship, etc.; a predetermined device hardware characteristic, such as an amount of memory, a processor speed, a display size and configuration, a sound speaker type and capability, etc.; a predetermined device software characteristic, such as a version of an application, program or operating system; a predetermined device user characteristic, such as a user identification; and, a predetermined network-related characteristic, such as an associated carrier network or network component, etc. Further, the content storage <b>66</b> includes one or more selected content <b>18.</b> Each selected content <b>18</b> may further include additional content description <b>76,</b> which may provide a more detailed explanation of the respective content. Further, each selected content <b>18</b> may further include references to one or more licensing codes <b>38</b> corresponding to available licensing parameters <b>98</b> for the respective content.

Referring to <figref idref="f0004">Fig. 4</figref>, in some aspects, a licensing options table <b>150</b> may be presented on the output mechanism <b>56</b> of the wireless device <b>10</b> upon indicating a desire to obtain rights to desired content, such as by making a selection from content index <b>36.</b> Such a table <b>150</b> interactively provides the user of the wireless device <b>12</b> with the ability to select from among a plurality of available licensing terms/parameters <b>98</b> associated with the selected content <b>18</b> (<figref idref="f0003">Fig. 3</figref>) or content ID <b>86</b> (<figref idref="f0003">Fig. 3</figref>), and to thereby selectively generate proposed licensing rights <b>20</b> (<figref idref="f0002">Fig. 2</figref>). As noted above, each of the plurality of media content <b>34</b> (<figref idref="f0001">Fig. 1</figref>) is associated with one or more licensing codes <b>38.</b> Further, each licensing code <b>38</b> is indexed in a list of licensing parameters <b>22.</b> As such, upon selected of a given piece of content 18, the media content module <b>30</b> references the list of licensing parameters <b>22</b> and extracts the one or more available licensing parameter terms <b>98</b> corresponding to each licensing code <b>38</b> associated with the selected content <b>18.</b> Thus, in this manner, media content module <b>30</b> generates the licensing options table <b>150</b> and initiates presentation of the table to the user of the wireless device <b>12.</b> In the illustrated example, licensing terms <b>98</b> include usage terms <b>102,</b> pricing information <b>100</b> and device characteristics/conditions <b>104.</b> It is noted that the illustrated table shows only an example of licensing terms; alternate aspects may include other licensing terms. In the illustrated table, for example, the user is presented with three different licensing codes, "X", "Y" and "Z", which allow the user to choose from three different usage and pricing options. For example, licensing code "X" is associated with a single play usage option at a price of $2.00, licensing code "Y" is associated with a monthly usage option at a price of $5.00 and licensing code "Z" is associated with an unlimited usage option at a price of $7.50.

In some aspects, the device characteristics/conditions <b>104</b> define characteristics or conditions that affect the availability of the given licensing terms and/or that provide for a predetermined adjustment to the given pricing information and/or the given usage terms. For example, in the illustrated table <b>150,</b> the device characteristics/conditions <b>104</b> include the membership status <b>154</b> of the user, the location <b>156</b> of the device or the user, the security capabilities <b>158</b> of the device and the hardware <b>160</b> capabilities of the device. Thus, in the illustrated aspect, a 20% pricing discount will be afforded the user if a membership exists, a 5% pricing discount will be afforded the user if the device is located in a predefined location, a 10% pricing discount will be afforded the user if the device is equipped with requisite security capabilities and a 5% pricing discount will be afforded the user if the device is equipped with requisite hardware capabilities. Although illustrated as affecting pricing information <b>100,</b> it should be re-emphasized that the device characteristics/conditions <b>104</b> may affect the pricing information <b>100,</b> the usage terms <b>102,</b> any combination thereof, and even the ability to qualify for the licensing option. Additionally, in some aspects, for example, the media content module <b>30</b> may automatically highlight or otherwise indicate the ability to qualify for a given one of the device characteristics/conditions <b>104</b> based on comparing the device attributes <b>24</b> (<figref idref="f0002">Fig. 2</figref>) with the device characteristics/conditions <b>104.</b>

Referring to <figref idref="f0005">Fig. 5</figref>, in one aspect, illustrates a network device <b>14,</b> such as a licensing server is presented. The network device may comprise at least one of any type of hardware, server, personal computer, mini computer, mainframe computer, or any computing device either special purpose or general computing device. Further, the modules and applications described herein as being operated on or executed by the network device <b>14</b> may be executed entirely on the network device <b>14</b> or alternatively, in other aspects, separate servers or computer devices may work in concert to provide data in usable formats to parties, and/or to provide a separate layer of control in the data flow between the wireless device <b>12</b> and the modules and applications executed by network device <b>14.</b>

The network device <b>14</b> has computer platform <b>46</b> that can transmit and receive data across wireless network <b>16,</b> and that can execute routines and applications. Computer platform <b>46</b> includes a data storage <b>106,</b> which may comprise volatile and nonvolatile memory such as read-only and/or random-access memory (RAM and ROM), EPROM, EEPROM, flash cards, or any memory common to computer platforms. Further, data storage <b>106</b> may include one or more flash memory cells, or may be any secondary or tertiary storage device, such as magnetic media, optical media, tape, or soft or hard disk. Further, computer platform <b>46</b> also includes a processing engine <b>108,</b> which may be an application-specific integrated circuit ("ASIC"), or other chipset, processor, logic circuit, or other data processing device. The computer platform <b>46</b> may further include a communications module <b>110</b> embodied in hardware, firmware, software, and combinations thereof, that enables communications among the various components of the network device <b>14,</b> as well as between the network device <b>14</b> and the wireless network <b>16.</b> For example, in the described aspects, the communication module <b>110</b> is configured to receive proposed licensing rights <b>20</b> from wireless device <b>12</b> and, if agreeable, communicate in response an authentication mechanism <b>26</b> and/or an authenticated license <b>28</b> that provides access to the respective content <b>18</b> (<figref idref="f0001">Fig. 1</figref>). As noted above, authentication mechanism <b>26</b> may include a digital signature or any other mechanism operable to authenticate licensing approval-related information from the network device <b>14.</b>

The data storage <b>106</b> includes a license validation module <b>48</b> that is in communication with the processing engine <b>108</b> and operable for validating the proposed licensing rights <b>20</b> and generating an authentication mechanism, such as a digital signature, digital certificate, keyed hash or the like, in response to validation of the licensing rights <b>20.</b>

The license validation module <b>48</b> includes rights confirmation logic <b>112</b> that confirms that the licensing rights <b>20</b> proposed by the wireless device <b>12</b> falls within the scope of available licensing parameters <b>98</b> for the given content <b>18</b> and/or for the given wireless device <b>12.</b> For example, the rights confirmation logic <b>112</b> may compare the proposed licensing rights <b>20</b> with the authentic version of available licensing parameters <b>98</b> and the licensing codes <b>38</b> associated with the given content <b>18</b> and/or content ID <b>86</b> (<figref idref="f0003">Fig. 3</figref>), such as by confirming this information with network device <b>32</b> and/or with a local copy of this information stored in client storage <b>114.</b>

The license validation module <b>48</b> further includes validation logic <b>116,</b> which is implemented if the terms of the licensing rights <b>20</b> are approved/confirmed. The validation logic <b>116</b> is operable to cause the generation of an authentication mechanism <b>26,</b> such as a digital signature, digital certificate or the like, to validate the licensing rights <b>20.</b> Further, for example, authentication mechanism <b>26</b> may further include an acceptable encryption algorithm, a cipher, a keyed hash, a message authentication code (MAC), etc.

In some aspects, the communications module <b>110</b> of the network device <b>14</b> will communicate the generated authentication mechanism <b>26</b> to the wireless device <b>12,</b> while in alternate embodiments the network device will assemble a license <b>28</b> including the authentication mechanism <b>26</b> and communicate the assembled license to the wireless device <b>10.</b> Thus, in those aspects in which the license <b>28</b> is assembled at the network device <b>14,</b> the data storage <b>106</b> includes a license assembler module <b>118</b> that implements license assembly logic <b>120</b> operable for assembling a media content license <b>28.</b> The license assembler logic <b>120</b> assembles a media content license <b>28</b> including the licensing rights <b>20,</b> authentication mechanism <b>26,</b> and content identification <b>86,</b> such as content metadata or the like. In some aspects, the network device <b>14</b> may include license storage <b>122</b> that provides for storage of the license <b>28.</b> Additionally, the license <b>28</b> and/or authentication mechanism <b>26</b> may be generated and/or stored with reference to the respective selected content <b>18</b> and/or content ID <b>86,</b> as well as with reference to the identification information associated with the respective wireless device <b>12.</b>

In some aspects, the network device <b>14</b> may assign and communicate one of a plurality of security mechanisms <b>129</b> along with the authentication mechanism <b>26.</b> In this case, the data storage <b>106</b> may include a security module <b>124</b> having security logic <b>126</b> operable for generating and/or assigning one of the security mechanisms <b>129,</b> which may be stored in security storage <b>128.</b> The security mechanisms <b>129</b> may include encryption and/or decryption mechanisms, such as one of a public/private key pair, a symmetric key or any other mechanism that provides for the secure exchange of the authentication mechanism <b>26</b> and/or license <b>28</b> between the network device <b>14</b> and wireless device <b>12.</b>

Referring to <figref idref="f0006">Fig. 6</figref>, some aspects of the described embodiments include a second network device <b>32,</b> such as a media content server or the like. As previously discussed, the functionality of the media content server <b>32</b> and the licensing server <b>14</b> may be incorporated in one comprehensive network device/component or in individual network devices/components. The second network device <b>32</b> may comprise at least one of any type of hardware, server, personal computer, mini computer, mainframe computer, or any computing device either special purpose or general computing device. Further, the modules and applications described herein as being operated on or executed by the second network device <b>32</b> may be executed entirely on the second network device <b>32</b> or alternatively, in other aspects, separate servers or computer devices may work in concert to provide data in usable formats to parties, and/or to provide a separate layer of control in the data flow between the wireless device <b>12</b> and the modules and applications executed by second network device <b>32.</b>

The second network device <b>32</b> has computer platform <b>50</b> that can transmit and receive data across wireless network <b>16,</b> and that can execute routines and applications. Computer platform <b>50</b> includes a data storage <b>130,</b> which may comprise volatile and nonvolatile memory such as read-only and/or random-access memory (RAM and ROM), EPROM, EEPROM, flash cards, or any memory common to computer platforms. Further, data storage <b>130</b> may include one or more flash memory cells, or may be any secondary or tertiary storage device, such as magnetic media, optical media, tape, or soft or hard disk. Further, computer platform <b>50</b> also includes a processing engine <b>132,</b> which may be an application-specific integrated circuit ("ASIC"), or other chipset, processor, logic circuit, or other data processing device. The computer platform <b>50</b> may further include a communications module <b>134</b> embodied in hardware, firmware, software, and combinations thereof, that enables communications among the various components of the second network device <b>32,</b> as well as between the second network device <b>32</b> and the wireless network <b>16.</b> For example, in the described aspects, the communication module <b>134</b> is configured to receive messages representing requests for available media content, additional content information, and selected media content, and to transmit the content index <b>36,</b> the licensing parameter database <b>22,</b> and any selected content <b>18</b> from the plurality of available media content <b>34.</b>

The data storage <b>130</b> includes media content module <b>52</b> that is operable to interact with the media content module <b>30</b> resident on the wireless device <b>12.</b> In some aspects, media content module <b>52</b> may forward media content module <b>30</b> to the wireless device <b>12</b> to enable the wireless device to retrieve content from the network device <b>32.</b> Further, media content module <b>52</b> may be operable to access content storage <b>130</b> and retrieve the media content index <b>36</b> and forward the index to the wireless device <b>12.</b> The media content index <b>36</b> may identify the content available from the network device <b>32.</b> Additionally, the media content module <b>52</b> may be operable to access the licensing storage <b>138,</b> retrieve the database of licensing parameters <b>22,</b> and forward the database of licensing parameters <b>22</b> to the wireless device <b>12.</b> As previously noted, the database of licensing parameters <b>22</b> may identify a plurality of licensing terms and conditions, predetermined combinations of which are available for one or more of the plurality of content <b>34</b> provided by the network device <b>32.</b> Further, in response to a request from the wireless device <b>12</b> for more information on a specific piece of content, media content module <b>52</b> may access content storage <b>134</b> to retrieve and forward additional description <b>76</b> (<figref idref="f0003">Fig. 3</figref>) associated with the requested content <b>18</b> (<figref idref="f0003">Fig. 3</figref>), which may be selected from the plurality of content <b>34.</b> Further, media content module <b>52</b> is operable to transmit to the wireless device <b>12</b> the desired content 18 (<figref idref="f0003">Fig. 3</figref>) selected from the plurality of content <b>34,</b> which as noted previously may occur at any time during the interaction between the wireless device <b>12</b> and one and/or both of servers <b>32</b> and <b>14.</b>

Thus, the content index <b>36</b> and database of licensing parameters <b>22</b> may be utilized by network device <b>32</b> to provide an efficient system of identifying available content and corresponding available licensing options. The data held by both the index <b>36</b> and the licensing parameter database <b>22</b> may be dynamically updated to include references to new content and/or new licensing parameters, or to delete inactive content and/or parameters. Therefore, the content index <b>36</b> and database of licensing parameters <b>22</b> provide a dynamic mechanism for establishing a plurality of licensing options for a plurality of content.

Additionally, in some aspects, data storage <b>130</b> may further include a security module <b>131</b> having security logic <b>133</b> operable to apply one of a plurality of security mechanisms <b>135</b> to any information transmitted and/or received by media content server 32. For example, data storage <b>130</b> may include a security storage <b>137</b> for storing the plurality of security mechanism <b>135.</b> The security mechanisms <b>135</b> may include, for example, one or any combination of mechanisms for encrypting and/or decrypting information, such as a public/private key, a symmetric key, etc. For example, all or any portion of one or more of the plurality of media content <b>34</b> may be encrypted by one of the security mechanisms <b>135,</b> in this case a locking mechanism, to protect against unauthorized usage. For example, referring to <figref idref="f0003">Fig. 3</figref>, the selected content <b>18</b> may be transmitted to the wireless device <b>12</b> in a state wherein the additional description <b>76</b> is in the clear, but the remaining portion of the selected content <b>18</b> is encrypted. As such, the wireless device <b>12</b> may be prevented from accessing the entirety of the selected content <b>18</b> until appropriate licensing rights, such a license <b>28</b> (<figref idref="f0001">Fig. 1</figref>) are obtained, and in some cases, until appropriate fees have been paid. Network device <b>14</b> may notify network device <b>32</b> when it is appropriate to send a given wireless device <b>12</b> the access mechanism, i.e. one of the plurality of security mechanism <b>135,</b> corresponding to the locking mechanism used to secure the selected content <b>18.</b> In other alternatives, network device <b>32</b> may provide the access mechanism to network device <b>14,</b> which may then forward it to the wireless device <b>12</b> along with the authentication mechanism <b>26</b> and/or the license <b>28.</b>

Referring back to <figref idref="f0001">Fig. 1</figref>, the wireless network 16 may include at least one, or any combination, of: a cellular telephone network; a terrestrial telephone network; a satellite telephone network; an infrared network such as an Infrared Data Association ("IrDA")-based network; a short-range wireless network; a Bluetooth® technology network; a ZigBee® protocol network; an ultra wide band ("UWB") protocol network; a home radio frequency ("HomeRF") network; a shared wireless access protocol ("SWAP") network; a wideband network, such as a wireless Ethernet compatibility alliance ("WECA") network, a wireless fidelity alliance ("Wi-Fi Alliance") network, and a 802.11 network; a public switched telephone network; a public heterogeneous communications network, such as the Internet; a private communications network; and land mobile radio network. Suitable examples of telephone networks include at least one, or any combination, of analog and digital networks/technologies, such as: code division multiple access ("CDMA"), wideband code division multiple access ("WCDMA"), universal mobile telecommunications system ("UMTS"), advanced mobile phone service ("AMPS"), time division multiple access ("TDMA"), frequency division multiple access ("FDMA"), orthogonal frequency division multiple access ("OFDMA"), global system for mobile communications ("GSM"), single carrier ("IX") radio transmission technology ("RTT"), evolution data only ("EV-DO") technology, general packet radio service ("GPRS"), enhanced data GSM environment ("EDGE"), high speed downlink data packet access ("HSPDA"), analog and digital satellite systems, and any other technologies/protocols that may be used in at least one of a wireless communications network and a data communications network.

Referring to <figref idref="f0007">Fig. 7</figref>, in one aspect, each of the plurality of wireless devices 12 comprises a cellular telephone. A cellular telephone system 200 may include wireless network 202 connected to a wired network 204 via a carrier network 206. Wireless devices 12 are being manufactured with increased computing capabilities and often can communicate packets including voice and data over wireless network 202. As described earlier, these "smart" wireless devices 12 have APIs resident on their local computer platform 42 that allow software developers to create software applications that operate on the cellular telephone <b>12,</b> and control certain functionality on the device. <figref idref="f0007">Fig. 7</figref> is a representative diagram that more fully illustrates the components of a cellular wireless network and the interrelation of the elements of one aspect of the present system. Cellular wireless network <b>202</b> is merely exemplary and can include any system whereby remote modules, such as wireless devices <b>12</b> communicate over-the-air between and among each other and/or between and among components of a wireless network <b>202,</b> including, without limitation, wireless network carriers and/or servers.

In system <b>200,</b> licensing server <b>14</b> and/or media content server <b>32</b> can be in communication over a wired network <b>204</b> (e.g. a local area network, LAN) with a separate data repository <b>208</b> for storing modules and/or data associated with the described embodiments, such as the licensing rights module, the licenses, the content or wireless device data. Further, a data management server <b>210</b> may be in communication with licensing server <b>14</b> and/or media content server <b>32</b> to provide post-processing capabilities, data flow control, etc. Licensing server <b>14</b> and/or media content server <b>32,</b> data repository <b>208</b> and data management server <b>210</b> may be present on the cellular telephone system <b>200</b> with any other network components that are needed to provide cellular telecommunication services. Licensing server <b>14</b> and/or media content server <b>32,</b> and/or data management server <b>208</b> communicate with carrier network <b>206</b> through a data links <b>212</b> and <b>214,</b> which may be data links such as the Internet, a secure LAN, WAN, or other network. Carrier network <b>206</b> controls messages (generally being data packets) sent to a mobile switching center ("MSC") <b>216.</b> Further, carrier network <b>206</b> communicates with MSC <b>216</b> by a network <b>214,</b> such as the Internet, and/or POTS ("plain old telephone service"). Typically, in network <b>214,</b> a network or Internet portion transfers data, and the POTS portion transfers voice information. MSC <b>216</b> may be connected to multiple base stations ("BTS") <b>218</b> by another network <b>220,</b> such as a data network and/or Internet portion for data transfer and a POTS portion for voice information. BTS <b>218</b> ultimately broadcasts messages wirelessly to the wireless devices, such as wireless devices <b>10,</b> by short messaging service ("SMS"), or other over-the-air methods.

In accordance with an aspect, <figref idref="f0008">Fig. 8</figref> provides a flow diagram of a method for generating licensing rights at a wireless device. At Event <b>200,</b> license parameters are received or otherwise loaded onto a wireless device. In this regard, the licensing parameters may be communicated from a network device, such as a licensing server, a media content server or the like. Alternatively, the licensing parameters may be preloaded on the wireless device by the device manufacturer or service provider or the licensing parameters loaded on to the wireless device by any other acceptable means. In the illustrated method the licensing parameters are received or otherwise loaded prior to requesting access to media content, however; the licensing parameters may received or otherwise loaded onto the wireless device at any point in time during the process of generating the media content license or accessing the media content.

Licensing parameters may include but are not limited to pricing information, which identifies a cost associated with the given set of licensing terms, such as a monetary amount or a discount or mark-up from a standard cost; usage terms, which identify usage rules for the content, such as a predetermined number of times the content may be accessed, a predetermined time period for which the content may be accessed, unlimited access, etc and conditions, which may identify a prerequisite for qualifying for the given pricing information and/or usage terms. Conditions may include a device attribute, a network attribute, a device user attribute, and any other quality that may affect pricing and usage. Examples of conditions include, but are not limited to: a predetermined status, such as a membership status, an association with an entity/enterprise, a carrier relationship, a content provider relationship, a content distributor relationship, etc.; a predetermined device hardware characteristic, such as an amount of memory, a processor speed, a display size and configuration, a sound speaker type and capability, etc.; a predetermined device software characteristic, such as a version of an application, program or operating system; a predetermined device user characteristic, such as a user identification; and, a predetermined network-related characteristic, such as an associated carrier network or network component, etc.

At Event <b>210,</b> a request is generated for available media content. In many aspects, the request for available media content will include launching a media player module or application, which in turn communicates with an external network, such as the Internet, to retrieve a listing of available media content. At Event <b>220,</b> in response to the request for available media content, the wireless device will receive an index of available media content communicated from a network device, such as a media content server. In certain aspects, the content index will include the title or name of the media content, a brief description of the content and, optionally, an unprotected preview portion of the media content (i.e., an audio, video or multimedia preview of the media content). The media content index is provided to the user through an appropriate output mechanism, such as a display.

At Event <b>230,</b> the wireless device receives licensing codes associated with the available media content. The licensing codes may be communicated as part of the index of available content (Event <b>220</b>) or the licensing codes may be communicated in conjunction with a request for additional information related to an available media content item, or upon selection of a media content item or at any other appropriate point in time during the generation of the media content license or the accessing of media content. The licensing code is indexed in the listing of licensing parameters and provides for the media content item to be associated with one or more licensing parameters.

At Event <b>240,</b> the wireless device receives a user selection of desired media content. In the aspect described above, the selection may occur by a user indicating a choice of a desired media content item, such as an audio file, video file, multimedia file, text file or the like, from a media content index listing of available media content items. Selection of an option to use or purchase rights to the selected media content item triggers, at Event <b>250,</b> the referencing of a list of available parameters based on the licensing code associated with the selected media content item. At Event <b>260,</b> a selection list of available licensing parameters is generated and displayed on a wireless device output mechanism, such as a display. At Event <b>270,</b> if the user desires a license to use the media content, the wireless device receives a user selection from one or a plurality of the available licensing parameters to form proposed licensing rights.

At Event <b>280,</b> the proposed licensing rights and a content identifier, such as appropriate content metadata, are communicated to a network device, such as a licensing server. At Event <b>290,</b> in response to the communication of the proposed licensing rights to the network device, the wireless device receives an authentication mechanism or, alternately, a media content license that includes the licensing rights, the authentication mechanism and a content identifier. The authentication mechanism may include a digital signature, a digital certificate, a keyed hash value or the like. Additionally, the wireless device may receive a security mechanism such as a decryption key, which is used to access the selected content. At optional Event <b>300,</b> the wireless device assembles the media content license, including the licensing rights, the authentication mechanism, the content identifier and, optionally, the security mechanism. The assembling of the media content license at the wireless device is only required if the network device communicates the authentication mechanism absent an assembled media content license.

At Event <b>310,</b> the wireless device stores the digitally authenticated media content license in wireless device memory. When a user desires access to the media content, at optional Event <b>320,</b> the media content license is validated based on the authentication mechanism. Once validated, the licensing rights are enforced, secured content may be unsecured, and, at Event <b>330,</b> the user is granted access to the media content according to the rights in the media content license.

In accordance with another aspect, <figref idref="f0009">Fig. 9</figref> provides a flow diagram of a method for validating licensing rights and generating an authentication mechanism at a network device. At Event <b>400,</b> a network device, such as a licensing server receives proposed licensing rights and a content identifier from a wireless device. At Decision <b>410,</b> the network device determines if the wireless device or, alternately the user of the wireless device, can be authenticated. If the wireless device cannot be authenticated, at Event <b>420,</b> the network device communicates a license denied message to the wireless device. If the wireless device and/or user can be authenticated then, at Decision <b>430,</b> the network device determines if the licensing rights can be validated as acceptable licensing rights for the selected content. Validation occurs by matching up the proposed licensing rights with confirmed, allowable licensing rights. The network device may store or otherwise have access to the confirmed, allowable licensing rights, such as via an authentic listing of licensing parameters and/or licensing codes. If a determination is made that the licensing rights cannot be authenticated then, at Event <b>440,</b> the network device communicates a license denied message to the wireless device. If the licensing rights can be validated then, at Event <b>450,</b> the network device creates an authentication mechanism, such as a digital signature, digital certificate, keyed hash value or the like with respect to the licensing rights. For example, in one aspect, the network device executes a standard RSA algorithm over a hash of the license that then serves as the digital signature.

Once the authentication mechanism has been generated, at Decision <b>460,</b> the network device may optionally determine if a security mechanism has been or is to be assigned to the content and/or the authentication mechanism and/or license. If no security mechanism is warranted, then at Event <b>470,</b> the network device communicates the authentication mechanism to the wireless device that sent the proposed licensing rights. If a determination is made that a security mechanism is to be assigned, then at Event <b>480,</b> a security mechanism is assigned to the content and/or authentication mechanism and/or license. At Decision <b>490,</b> the network device determines if a media content license is to be assembled at the network device. If a determination is made that the network device does not assemble the media content license then, at Event <b>500,</b> the network device communicates the authentication mechanism and the security mechanism to the wireless device.

If a determination is made that the network device assembles a license, then at optional Event <b>510,</b> the media content license is assembled including the licensing rights, the authentication mechanism, a content identifier and, optionally, a security mechanism. At Event <b>520,</b> the assembled media content license is communicated to the wireless device.

Thus, the described aspects provide apparatus and methods for generating media content licenses in a wireless network environment. The disclosed aspects provide for systems that bifurcates license formation by generating the licensing rights at the wireless device and generating the associated authentication mechanism at a network device. As such, the proposed aspects provide for content media licenses that are highly secured and are not readily susceptible to alteration or attack.

The various illustrative logics, logical blocks, modules, and circuits described in connection with the embodiments disclosed herein may be implemented or performed with a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein. A general-purpose processor may be a microprocessor, but, in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine. A processor may also be implemented as a combination of computing devices, e.g., a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such configuration.

Further, the steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. A software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor, such that the processor can read information from, and write information to, the storage medium. In the alternative, the storage medium may be integral to the processor. The processor and the storage medium may reside in an ASIC. The ASIC may reside in a user terminal. In the alternative, the processor and the storage medium may reside as discrete components in a user terminal.

While the foregoing disclosure discusses illustrative aspects and/or embodiments, it should be noted that various changes and modifications could be made herein without departing from the scope of the described aspects and/or embodiments as defined by the appended claims. Furthermore, although elements of the described embodiments may be described or claimed in the singular, the plural is contemplated unless limitation to the singular is explicitly stated. Additionally, all or a portion of any aspect and/or embodiment may be utilized with all or a portion of any other aspect and/or embodiment, unless stated otherwise.

Therefore, upon having the benefit of the teachings presented in the foregoing descriptions and the associated drawings, many modifications and other embodiments of the invention will come to mind to one skilled in the art to which this invention pertains. Therefore, it is to be understood that the invention is not to be limited to the specific aspects disclosed and that modifications are intended to be included within the scope of the appended claims.