We present a solution to the problem of privacy invasion in a multiparty digital rights management scheme. (Roaming) users buy content licenses from a content provider and execute it at any nearby content distributor. Our approach, which does not need any trusted third party--in contrast to most related work on privacy-preserving DRM--is based on a re-encryption scheme that runs on any mobile Android device. Only a minor security-critical part needs to be performed on the device's smartcard which could, for instance, be a SIM card.
In @cite_15 , propose a scenario where a content owner provides its (encrypted) content to users via a number of different (local) content distributors---which is similar to our scenario. Employing this scheme, users can buy licenses for content from a license server, acting as trusted third party. Once a license is bought, the user gets in possession of the decryption key which allows him her to access the content as often as desired. Differentiated license models are not intended in their approach---however, if license enforcement additionally took place on the client-side, differentiated license models could be implemented. As content download and license buying are done anonymously, none of the parties can build profiles of users' interest in content.
@cite_15
2028381593
Traditional Digital Rights Management (DRM) systems are one level distributor system which involve single distributor. However, for a flexible and scalable content distribution mechanism, it is necessary to accommodate multiple distributors in DRM model so that different strategies can be implemented in diverse geographical areas. We develop a multiparty multilevel DRM model using facility location and design a prototype DRM system that provides transparent and flexible content distribution mechanism while maintaining the users' privacy along with accountability in the system.