WO2004043033A1

WO2004043033A1 - Method and device for the transmission of encoded useful data objects

Info

Publication number: WO2004043033A1
Application number: PCT/EP2003/011963
Authority: WO
Inventors: Markus Trauberg
Original assignee: Siemens Aktiengesellschaft
Priority date: 2002-11-04
Filing date: 2003-10-28
Publication date: 2004-05-21
Also published as: DE10251222A1; AU2003276197A1

Abstract

A method for the transmission of encoded useful data objects (NDO) is disclosed, in particular by means of the Multimedia Messaging Service (MMS), provided with a separate rights object (RO), which contains both the key and the user rights for the useful data object concerned. Firstly a receiver notification message (M-Nind2) is transmitted to a telecommunication device (TKG), for example a mobile telephone or portable computer, whereby the receiver notification message comprises receiver notification information which indicates that a particular useful data object is available for the telecommunication device on an exchange device (VK). Furthermore, a delivery request message (W-Greq), relating to the particular useful data object is transmitted from the telecommunication device to the exchange component, whereupon the exchange component is requested to deliver the useful data object to the telecommunication device. A delivery message with the requested useful data object is transmitted in encoded form from the exchange component to the telecommunication device. A particularly efficient method is thus achieved when the rights object associated with the requested encoded useful data object is pre-transmitted with the receiver notification to the telecommunication device.

Description

description

METHOD AND DEVICE FOR TRANSMITTING ENCRYPTED USER DATA OBJECTS

The present invention relates to a method for transmitting encrypted useful data objects which are to be made available on a switching component and are to be transmitted to a telecommunications device, such as a cell phone. In particular, the present invention relates to a method by which encrypted useful data objects can be transmitted from a service provider to a telecommunication device in an efficient manner by means of the multimedia messaging service (MMS)

A method or service for the reliable and billable transmission of user data objects to a telecommunications device, in particular in the design of a mobile radio device or mobile telephone, in a data communication network is currently being discussed. The transfer should or

The user data objects are downloaded to the mobile radio device using a protocol specified by the WAP forum (WAP: Wireless Application Protocol) or an Internet protocol (e.g. Hypertext Transfer Protocol: http). A transmission service can be specified in such a way that a user with an application program available on the mobile radio device, which can be referred to as a transmission client or, in the case of a pure downloading of data, as a download client, is to be able to transmit any user data objects that are offered by one or more data provision components, in particular servers from service providers or content providers, in the data communication network.

The WAP forum or its successor organization, Open Mobile Alliance (OMA), has various procedures for managing explicit rights of use for digital content. ger type, such as, for example, multimedia data. It is provided that a user data object to be transmitted is provided with restrictions or restrictions regarding the use by the receiver or user of the mobile radio device. For example, the number of uses of the user data object or the duration of use can be restricted. The practical implementation is carried out by describing the restrictions with a corresponding language, such as the ODRL (Open Digital Rights Language), whereby the transfer client or another special application, a so-called DRM agent, for managing the with a (digital) Rights linked to the user data object (DRM: Digital Rights Management) receives the rights description, evaluates them, stores them in a protected memory area on the mobile radio device that is not accessible to the user and grants the rights when the user requests to use the object in accordance with the rights description. The user data object itself can be protected against unauthorized access either by storing it encrypted in a freely accessible memory area on the mobile radio device or by a special application, for example the DRM agent, which does not allow unauthorized access to it the object allows by the user.

According to a variant specified by the WAP forum, the so-called "separate delivery" for the management of DRM-protected content, a user data object provided by a data provision component is encrypted and transferred to a telecommunication device such as a mobile radio device, packaged in a so-called container file or a so-called container object (which has, for example, been assigned the data type or content type "Application / VND. OMA. DRM. Content"). With a service for the reliable transmission of content from a data provision component (content download), the encrypted user data object is stored in the Container object packed by means of WAP protocols (such as the WSP: Wireless Session Protocol) or Internet protocols (such as the http) transmitted to the telecommunication device. Separately from the encrypted user data object, a so-called rights object is transmitted to the telecommunication device via a secure channel, for example automatically using WAP push. The rights object contains a description of the rights that are granted to the user to use the encrypted user data object, a reference to the container object, which enables the rights object to be assigned to the corresponding container object, and a key with which the encrypted user data object is decrypted can use it afterwards. To use the combination of the encrypted useful data object packed in the container object and the rights object, a special device or application is required on the telecommunications device, such as the mobile radio device, which can be the DRM agent mentioned above. After the transfer of the rights object to the telecommunication device, the rights object is transferred directly to the DRM agent, who is responsible for the administration and protection of the secret, namely the key for decrypting the encrypted user data object. In practice, the DRM agent stores the rights object protected against unauthorized access by other applications or users on the telecommunications device. If an encrypted user data object is to be used, the DRM agent is activated first. This searches for a rights object matching the container object in the memory area managed by him in the telecommunication device on the basis of the identification contained in the container object and also in the rights object, checks whether for the requested type of use (such as a "playing" of music data or a "Display" of image data, etc.) rights can be granted and decides the user data object with the key from the rights object if the rights can be granted. With the method described above, in which an encrypted user data ten object and a separate rights object can be used, the value of digital data is no longer represented by the (encrypted) user data object or the container object itself, but rather by the rights object and the key contained therein, without which the encrypted user data object would not is usable. In this case, the encrypted useful data objects can thus be packaged and stored in the container objects in a freely accessible manner on the telecommunications device.

Since, as already mentioned, the (encrypted) useful data objects to be transmitted can be data objects with multimedia content and thus data with a large scope, a service with a large transmission capacity is required for a corresponding transmission of such data.

For example, the multimedia messaging service (MMS) specified by the 3GPP (3rd Generation Partnership Project) and the OMA is able to transmit and transmit multimedia messages to and from mobile communication subscribers.

It is therefore the object of the present invention to create an efficient and procedurally minimized method for transmitting encrypted user data objects, in particular with multimedia content.

This object is solved by the subject matter of the independent claims. Advantageous refinements are the subject of the dependent claims.

Here, a method for transmitting encrypted user data objects, to which a respective separate rights object is assigned that contains the key and the usage rights for the assigned user data object, includes the following steps. First, a recipient notification message is sent to a telecommunications device, such as a mobile radio or mobile phone, etc., wherein the recipient notification message comprises a recipient notification message that indicates that a certain user data object is provided for the telecommunication device on a switching component, such as a server of a transmission service. Furthermore, a delivery request message relating to the specific useful data object is transmitted from the telecommunication device to the switching component, which instructs the switching component to deliver the useful data object to the telecommunication device. Thereupon, a delivery message with the requested user data object is transmitted in encrypted form from the switching component to the telecommunication device. A particularly efficient method is finally achieved if the legal object associated with the requested encrypted useful data object is transmitted to the telecommunication device together with the recipient notification. In this way, two separate contents, namely the recipient notification message and the rights object, are transferred to the telecommunication device in a single recipient notification message and thus in a single method step. In an embodiment to be described in more detail below, in which the messages between the switching component and the telecommunication device are transmitted to and from the telecommunication device by means of the MMS, and in particular by means of WAP protocols, it is therefore only necessary to have a single AP push message as the recipient notification message to transfer to the telecommunication device.

As already mentioned, the method for transmitting encrypted user data objects takes place according to an advantageous embodiment according to the multimedia messaging service (MMS), the respective messages being transmitted as multimedia messages (MM) in the context of the MMS between the switching component and the telecommunication device. This enables a transmission of (encrypted) user data objects enables that can also include multimedia content with a large amount of data, such as digital photos or video clips.

The telecommunications device advantageously sends a first one after receiving the recipient notification message

Confirmation message in this regard and / or after receipt of the delivery message, a second confirmation message to the switching component.

It is conceivable that the messages are sent to and from the telecommunication device via an air interface. The telecommunication device can include a radio module, and in particular can be designed as a mobile phone, a cordless phone, or a portable computer. As already mentioned, messages can then be transmitted to and from the telecommunication device using WAP protocols or the Hypertext Transfer Protocol (http).

According to an advantageous embodiment, the telecommunication device and possibly further telecommunication devices as well as the switching component are part of a telecommunication network. The one or more telecommunication devices can be part of a first telecommunication network (in the case of several telecommunication devices, however, these do not have to be part of the same telecommunication network). Correspondingly, the switching component, which is designed in particular as a server of a data transmission service, for example as an MMS relay server, can be provided in a second telecommunication network which is connected to the telecommunication network or networks which are associated with the further telecommunication device or devices , This second telecommunications network can in particular be designed as a telecommunications network based on Internet protocols such as the Hypertext Transfer Protocol.

In order to be able to use the method for transmitting user data objects as flexibly as possible, the telecommunications Onsgerät (or also the other telecommunications devices) preferably be designed as a mobile telecommunications device and in particular include a radio module or mobile radio module. The telecommunication device can be designed, for example, as a mobile phone, a cordless phone, as a smartphone (combination of a small portable computer and a mobile phone), as a PDA (PDA: Personal Digital Assistant = personal digital assistant) or as an organizer. Furthermore, the telecommunications device can also comprise other devices that can be reached by mobile devices, such as a personal computer (PC) or a laptop, which can be reached by means of a connected mobile device (mobile phone) via a mobile radio network. The mobile radio device can then be connected to the personal computer or laptop, for example via a cable, or can also contact the latter wirelessly via an infrared interface or a local Bluetooth network. In this case, a telecommunications device, such as the mobile radio device, including the telecommunications network assigned to it, can operate in the design of a mobile radio network in accordance with the GSM (Global System for Mobile Communication) standard or the UMTS (Universal Mobile Telecommunications System) standard, etc. Such mobile radio networks or telecommunication devices according to the GSM or UMTS standard can represent a platform for WAP protocols or the WAP protocol stack (WAP: Wireless Application Protocol) by means of which data (messages or user data objects) in each case Cellular network are transferable.

The first and the second telecommunication networks are advantageously connected to one another by a connection component. If the WAP protocol stack is used, as mentioned above, it is possible to use a WAP gateway as an interface or connection component between a mobile radio network and another network, for example a network based on an Internet protocol to create a connection to this. In this way it is possible for the switching components to be located in a network based on an Internet protocol, such as the Internet, the data (messages, user data objects) via a WAP gateway and finally via an air interface of a mobile radio network between the base station or stations Mobile network and can be transmitted to the respective telecommunications devices by users. In this context, it should be mentioned that, in particular in the context of the MMS data transmission service, messages can be sent from the MMS relay server as a switching component automatically, ie without a telecommunications device being requested, to a telecommunications device using WAP push. Here, the MMS relay server serves as a so-called push initiator, which causes the WAP gateway or a sub-component thereof, namely the push proxy gateway, to send a message to the telecommunication device using WAP push. For example, according to the MMS transmission service, the recipient notification message is transmitted to the telecommunication device using WAP push. It is therefore particularly advantageous if, with the recipient notification message, ie in a single WAP push message, two separate contents, namely the recipient notification message and a rights object assigned to an encrypted useful data object, are transmitted to a telecommunications device. As a result, the WAP push mechanism is only used once. The

When the encrypted user data object arrives, the rights object already exists on the receiving telecommunication device. The recipient, i.e. the user of the receiving telecommunication device, in case of doubt after the arrival of the encrypted user data object (e.g. with multimedia content), does not have to be referred to the later possible use if, according to the state of the art, the rights object has been transferred separately to the telecommunication terminal.

According to a further advantageous embodiment, it is conceivable that the specific user data object is Provisioning component is sent to the switching component for forwarding to the telecommunications device. The specific user data object can already be sent in encrypted form from the data preparation component together with the associated rights object to the switching component. The data provision component can be designed as a server of a data service provider, which, like the switching component, is arranged in a network based on an Internet protocol and is connected to the switching component. However, it is also possible for the data provision component to be designed as a further telecommunication device of a user, for example in the form of a mobile radio device or cell phone or a computer etc. (see also above for the possible design of the telecommunication device).

As already mentioned, in particular in the case of a method for transmitting encrypted user data objects in the MMS transmission service, the rights object can be integrated in the notification of the recipient notification. In the MMS transmission service, the multimedia messages (MM) have so-called header fields (“header fields *), which indicate which type of MM it is, which version of the MMS it is, etc. This enables the recipient notification message More specifically, its recipient notification message comprise a plurality of header fields to which a respective field value is assigned, a header field assigned to the rights object being provided in the recipient notification message for integrating the rights object, the field value of which represents the rights object itself. It is also conceivable that the rights object is not integrated directly in the context of a field value in the recipient notification message, but is attached to it. According to an advantageous embodiment, the useful data objects can be data in the form of text data, image data or video data, audio data, executable programs or software components or a combination of these types of data, ie multimedia data or content.

According to a further aspect, a telecommunication arrangement comprising a switching component and at least one telecommunication device is created, the telecommunication arrangement being designed to carry out a method or an embodiment thereof.

Preferred embodiments of the present invention are explained in more detail below with reference to the accompanying drawings. Show it:

1 shows a block diagram which shows the flow of messages when a useful data object is delivered, for example with multimedia content in accordance with the MMS

Represents broadcasting service;

FIG. 2 is a block diagram that shows the message flow when transmitting or downloading an encrypted user data object in accordance with the “separate” method.

Delivery "(separate delivery);

FIG. 3 shows a block diagram that shows the message flow when transmitting or downloading an encrypted user data object in accordance with the “separate” method.

Delivery "(separate transmission) by means of the MMS transmission service according to the prior art;

FIG. 4 is a block diagram that shows the message flow when transmitting or downloading an encrypted user data object by means of the MMS Transmission service represents in a new variant according to the invention to the method shown in Figure 3.

Reference is made to FIG. 1, in which the time profile (corresponding to the arrow "t" for the time) of a data transmission scheme or a message flow between components of a telecommunication arrangement for the delivery of a user data object with multimedia content according to the MMS transmission service is shown is.

As can be seen in FIG. 1, the telecommunication arrangement for carrying out a method for transmitting useful data objects by means of the MMS comprises a data provision component DBK for providing or, in the case here, for sending useful data objects, a switching component VK for temporarily storing useful data objects, and a telecommunication device TKG. In the example, the telecommunications device TKG is designed as a mobile phone which can work according to the UMTS standard. It is also assumed that the TKG, which is designed as a mobile phone, is part of a mobile radio network. The TKG mobile phone is able to use WAP protocols (eg wireless session protocol: WSP, etc.) or the WAP protocol stack to send data via an air interface to a corresponding stationary transmission / reception arrangement of the A mobile phone assigned mobile network to transmit. The data provision component DBK and the switching component VK can be provided in the mobile radio network assigned to the mobile telephone TKG or can be provided, for example, on the Internet, which is connected to the mobile radio network of the mobile telephone TKG via corresponding WAP gateways. Since the transmission of user data objects in the present case is to take place in accordance with the MMS, the switching component is designed as an MMS relay server, ie as a network component of an MMS transmission service provider. The data ready Position component DBK in the example, however, is a server of an additional service provider (e.g. provider of stock exchange news, business news etc.), which sends user data objects with certain (possibly multimedia) content to recipients, such as subscribers for certain content.

It is assumed in the following that applications, in particular software applications, are provided or stored on the respective components of the telecommunication arrangement which are designed for the message exchange shown in FIG. 1. An MMS user application M-UA is provided on the mobile phone TKG, an application M-RS on the MMS relay server VK and a server application M-SA on the data provision component DBK.

If the data provision component DBK would like to transmit a subscribed content to the mobile telephone TKG, it sends a corresponding user data object with the subscribed content by means of a message “M-Send.req” or “M-Sreq” to the MMS relay server VK. This confirms the receipt of the message with a message "M-Send.conf" or "M-Sconf". Thereupon a recipient notification or recipient notification message "M-Nind" is sent by WAP push from the MMS relay server VK to the mobile phone TKG. In the case shown, the mobile phone or its MMS application M-UA first answers the message "M-Nind" with a confirmation "M-NRind" for the recipient notification message. At a later time, the application M-UA sends a download request message "W-Greq" to the MMS relay server VK. This responds with a delivery message "M-Rconf" in which the user data object with the subscribed (possibly) multimedia content is contained. Finally, the application M-UA also confirms the delivery of the message "M-Rconf" with the delivery confirmation message "M-Aind". It should be noted that in the example, with the exception of the "M-Nind" message, all transactions take place via Hypertext Transfer Protocol (http) or via Wireless Session Protocol (WSP).

Reference is now made to FIG. 2, in which a general chronological sequence (corresponding to the arrow “t” for the time) for downloading an encrypted user data object or DRM-protected media object according to the “separate delivery” method is shown. For the sake of simplicity, the preceding process of an agreement on the content and its form on the basis of the communicated properties of the terminal or of the TKG mobile phone is not shown. Furthermore, it is assumed that the transmission process is to take place between two components already known from FIG. 1, namely between the MMS relay server VK and the mobile telephone TKG. In contrast to FIG. 1, a DRM is used on the mobile phone TKG for the transmission or management of encrypted or DRM (digital rights management) protected user data objects (see also the explanations regarding the management of protected user data objects at the beginning of the registration) -Application or DRM agent DRM-C and on the MMS relay server VK a DRM application or DRM agent DRM-S is used.

Expressed in a simplified form, the DRM-C application first sends a request message “DRM-Greq” for downloading the encrypted user data object (with a desired content) to the terminal device to the MMS relay server in order to transmit or download an encrypted user data object or its application DRM-S sent. This responds with the delivery or delivery message "DRM-CR" of the encrypted user data object. These transactions are based in particular on the http or WSP protocols. The DRM-S application then sends the rights object assigned to the encrypted user data object, which transmits information for decrypting and granting user rights. falsf, via WAP push using the message "DRM-RO-P" to the application DRM-C.

Reference is now made to FIG. 3, in which the temporal flow (corresponding to the arrow "t" for the time) of messages when transmitting an encrypted user data object according to the "separate delivery" method using the MMS transmission service according to a first possible variant is shown. This means that the method shown in Figure 3 represents an integration of the methods shown in Figures 1 and 2. It should be noted, however, that for reasons of a clearer illustration of the essential method steps, the first two message transmission steps of Figure 1, i.e. the transmission of one or more user data objects from the data provision component DBK to the MMS relay server VK (cf. steps "M-Sreq" or "M-Sconf") has been omitted in FIG. 3. Rather, it is assumed that the data provision component DBK has already transmitted an encrypted user data object with certain content together with a rights object assigned to the user data object to the MMS relay server VK, which is to be delivered to the mobile phone TKG. Furthermore, it should be noted that the respective applications M-RS and DRM-S on the switching component VK or the applications M-UA and DRM-C on the mobile phone TKG now interact for the transmission of encrypted user data objects including assigned rights objects by means of the MMS ( see also the explanations regarding the management of protected user data objects at the beginning of the registration).

Based on this situation, the recipient or the mobile phone TKG of the recipient is notified in accordance with FIG. 1 by means of the message “M-Nind” about the presence of a useful data object on the MMS relay server VK. The TKG mobile phone confirms this notification by means of a "M-NRind" message, it also requests delivery by means of the "W-Greq" message and finally receives this The encrypted form is sent to the MMS relay server VK as part of the delivery message "M-Rconf". The TKG mobile phone then confirms delivery with the message "M-Aind". At the end or in parallel to the delivery of the encrypted user data object, the rights object is transmitted to the mobile telephone TKG by WAP push using the rights transmission message “DRM-RO-P”.

Reference is now made to FIG. 4, in which a variant of the method explained in FIG. 3 for transmitting an encrypted user data object by means of the MMS transmission service is shown. The method shown in FIG. 4 essentially corresponds to the method shown in FIG. 3 (which is why reference is made to the explanation of FIG. 3 for the explanation of the same method steps or the same messages (transmissions)), but has two essential differences. On the one hand the message "DRM-RO-P" is omitted and on the other hand the message "M-Nind" is replaced by the message "M-Nind2".

The reason for these differences is that in the new message "M-Nind2", the new recipient notification message, two separate contents are transferred in a single WAP push message by the rights object RO (formerly by the message "DRM-RO -P "transmitted) integrated in the message" M-Nind2 "as an integral part of the MMS protocol is transmitted from the M-RS to the M-UA. As a result, the WAP push mechanism is only used once when all message components are delivered. In addition, when the encrypted or DRM-protected useful data object NDO with the multimedia content arrives, the rights object is already present on the receiving telecommunication device by means of the delivery message “M-Rconf”. In case of doubt, the recipient does not have to wait for the later possible use after the content of a multimedia message (MM) has arrived. be pointed out if (as in Figure 3) the rights object also arrived later.

Previous MMS user applications with the recipient notification or recipient notification message do not expect any rights object in the MMS, which therefore they cannot use either. You will therefore discard the rights objects accordingly. Backwards compatibility is advantageously automatically ensured.

The method according to FIG. 4 is particularly advantageous if user data objects or contents are supplied to customers by additional service providers. Here, content is often offered as a subscription. The customer is not billed for every delivery of content individually. Rather, a certain service is compensated with a flat-rate settlement. The rights objects can then also be transferred before the content. The content or user data objects are sent from servers of the additional service providers (cf. data provision component DBK) to the MMS relay server VK, which sends its contents to the telecommunications devices of subscribers or recipients via a WAP gateway.

After displaying the message transmission between the MMS relay server or the applications provided on it (M-RS or DRM-S) and the mobile telephone TKG or the applications provided on it (M-UA or DRM-C) According to FIG. 4, the representation of the rights object assigned to a specific useful data object or its inclusion in the recipient notification message will now be discussed.

According to the OMA specification OMA-Download-DRMREL-vl_0, a rights object can be displayed in two different formats, both of which are based on the eXtensible Markup Language (XML): 1. "application / vnd.oma.drm.rights + xml": the textual form for displaying rights objects; or

2. "application / vnd.o a.drm.rights + wbxml": the binary form for the representation of rights objects, in which the predefined marks ("tags") are replaced by binary codes and this creates a much more compact form.

There are two ways to integrate a rights object into an MMS recipient notification:

A) According to a first advantageous embodiment of the invention, the rights object can be attached as a separate object to the recipient notification message in the recipient notification message, as is the case with the

"Multipurpose Internet Mail Extension" (MIME - Internet Engineering Task Force: Request For Comments 2045 ff.) Is possible.

B) According to a second advantageous embodiment of the invention, the rights object can also be integrated in a header field of the recipient notification message to be redefined, which would change little the previous definition of the recipient notification message, since recipient notification messages have so far only consisted of header spiders, each of which has a name and have a value.

Both options thus result in the integration of the rights object in the MMS recipient notification message and the possible joint transmission of the information that is to be transmitted to the terminal or mobile phone by WAP push.

In the following, the options for embedding a rights object in an MMS

Receiver notification message ("M-Nind2") according to the advantageous embodiments A) and B) explained in more detail. be tert. In the case of data or messages that are transmitted via WAP push, a channel whose bandwidth is very limited, great attention is paid to efficient use of the available bandwidth. The following two configurations A) and B) (corresponding to the embodiment shown above) are therefore both based on the integration of binary-coded rights objects ("application / vnd.oma.drm.rights + wbxml") in MMS recipient notification messages ("M-Nind2 "):

• Design A: Integration of the rights object in the form of an additional header in the MMS

Recipient notification message of a recipient notification message

In this embodiment, the integration of a rights object into a recipient notification message takes place as an additional header field, which is given the name "X-Mms-Rights-Object" as an example. The following table shows the header fields for an MMS recipient notification message including the new header field "X-Mms-Rights-Object" (which has a double border).

The following definition is possible for the new header field:

X-Mms-Rights-Object = Value-length RightsObject; with - Value-length: length specification for the remaining information of the header field,

- RightsObject: binary coded rights object of the type "application / vnd.oma.drm-rights + wbxml"

In principle, the recipient notification can have the structure shown below, the header fields being shown as text for the sake of clarity. In contrast, binary codes are used for a standard-compliant transmission to the data communication terminal:

MMS recipient notification message ("M-Nind2") sent from M-RS to M-UA (rights object integrated as header)

X-Mms-Message-Type: m-notif ication-ind X-Mms-Transaction-ID: TRANSACTION ~ ID # l From: userAΘoperatorA

X-Mms-Message-Size: XXX (size of the associated MMS delivery message)

X-Mms-Content-Location: www.OperatorA.de/mms-inbox/ABCD.1234 Subject: A DRM-protected object X-Mms-Rights-Object: 84 ... 84 binary octets ... (rights object)

In this example, a rights object is integrated in the MMS recipient notification message of a recipient notification message. With the technology used, however, several rights objects for several individual encrypted user data objects or media objects in the delivery message are also possible. Backward compatibility for MMS user applications on telecommunication devices without the support of the additional DRM functionality, ie the ability to handle encrypted user data objects, is easily possible with the method presented here. According to the OMA / WAP specification, MMS user applications should simply ignore unknown header fields and discard their content.

• Design B: Integration of the rights object in the form of an object additionally attached to the MMS recipient notification message

The following embodiment demonstrates the possibility of attaching a rights object as an attachment to an MMS recipient notification message of a recipient notification message. In principle, this is not a problem, since other MMS message types, in particular the MMS delivery message, already work with this technology. This procedure does not require definitions for new headers. It suffices to specify in recipient notification messages that MMS recipient notification messages may contain objects of the type "application / vnd.oma.drm.rights + wbxml" as an attachment: MMS recipient notification message ("M-Nind2") sent from M-RS to M-UA (rights object integrated as an attachment)

X-Mms-Message-Type: m-notification-ind X-Mms-Transaction-ID: TRANSACTION-ID # 2 From: userAΘoperatorA

X-Mms-Message-Size: XXX (size of the associated MMS delivery message) X-Mms-Content-Location: www.OperatorA.de/mms-inbox/ABCD.12345 Subject: A DRM-protected object Content-Type: application / vnd. granny. drm.rights + wbxml

... rights object in binary coding ...

With this method, too, several rights objects can be integrated into an MMS recipient notification message, for example by a MIME multipart construct is used, which is also possible in the MMS delivery message.

In contrast to embodiment A), however, the rights object is not given a special status vis-à-vis other objects that could possibly also be sent by MMS recipient notification message.

Claims

claims

1. Method for transmitting encrypted user data objects (NDO), in which an encrypted user data object (NDO) is assigned a respective separate rights object (RO) which contains the key and the usage rights for the assigned user data object, the method comprising the following steps:

Broadcast a recipient notification message

(M-Nind2) to a telecommunications device (TKG), the recipient notification message comprising a recipient notification message which indicates that a specific user data object (NDO) for the telecommunications device (TKG) is provided on a switching component (VK);

Sending a delivery request message (W-Greq) relating to the specific user data object (NDO) from the telecommunication device (TKG) to the switching component (VK);

Transmitting a delivery message (M-Rconf) with the requested user data object (NDO) in encrypted form from the switching component (VK) to the telecommunications device (TKG);

wherein the legal object (RO) assigned to the requested encrypted useful data object (NDO) is transmitted to the telecommunications device (TKG) together with the recipient notification message in a recipient notification message (M-Nind2).

2. The method according to claim 1, in which the messages are transmitted as multimedia messages (MM) as part of the multimedia messaging service between the switching component (VK) and the telecommunications device (TKG).

3. The method of claim 1 or 2, wherein the telecommunications device (TKG) after receiving the recipient notification message (M-Nind2) a first confirmation message (M-NRind) in this regard and / or after receiving the delivery message (M-Rconf) a second Sends confirmation message (M-Aind) to the switching component (VK).

4. The method according to any one of claims 1 to 3, in which the messages are sent to and from the telecommunications device (TKG) via an air interface.

5. The method of claim 4, wherein the telecommunications device (TKG) comprises a radio module, and in particular is designed as a mobile phone, a cordless phone, or a portable computer.

6. The method according to claim 4 or 5, wherein the transmission of messages to and from the telecommunications device (TKG) by means of WAP protocols or the Hypertext Transfer Protocol (http).

7. The method according to any one of claims 1 to 6, wherein the telecommunications device (TKG) is part of a first telecommunications network.

8. The method according to claim 7, wherein the first telecommunications network is designed as a mobile radio network, which operates in particular according to the GSM or UMTS standard.

9. The method according to any one of claims 7 or 8, wherein the switching component (VK) is designed as part of a second telecommunications network connected to the first telecommunications network, in particular as one based on Internet protocols, such as the Hypertext Transfer Protocol, based telecommunications network is executed.

10. The method according to claim 9, wherein. the first and the second telecommunications network are connected to one another by a connection component, which is in particular designed as a WAP gateway.

11. The method according to any one of claims 1 to 10, wherein the recipient notification message (M-Nind2) is transmitted to the telecommunications device (TKG) by means of WAP push.

12. The method according to any one of claims 1 to 11, in which the determined user data object (NDO) from a data provision component DBK) is sent to the switching component (VK) for forwarding to the telecommunications device (TKG).

13. The method according to claim 12, in which the specific user data object (NDO) is already sent in encrypted form by the data provision component (DBK) together with the associated rights object (RO) to the switching component (VK).

14. The method of claim 12 or 13, wherein the data provision component (DBK) is designed as a server of a data service provider.

15. The method according to any one of claims 1 to 14, wherein the switching component (VK) is designed as an MMS relay server.

16. The method according to any one of claims 2 to 15, wherein the rights object (RO) is integrated in the recipient notification message (M-Nind2).

17. The method as claimed in claim 16, in which the recipient notification message (M-Nind2) comprises a plurality of header feathers to which a respective field value is assigned, the object of rights (RO) being integrated in the recipient a header field assigned to the rights object is provided, the field value of which represents the rights object itself.

18. The method according to any one of claims 2 to 15, wherein the rights object (RO) is attached to the recipient notification message.

19. The method according to any one of claims 1 to 18, wherein the user data objects (NDO) text information, audio information,

Contain video information, executable programs, software modules or a combination of this information.

20. Telecommunication arrangement comprising a switching component (VK) and at least one telecommunication device

(TKG), wherein the telecommunication arrangement is designed to carry out a method according to one of claims 1 to 19.