Extending an OMA-based DRM Framework with Non-Repudiation Services∗

Digital Rights Management (DRM) is an umbrella term for any of several arrangements which allows a vendor of content in electronic form to control the material and restrict its usage in various ways that can be speci ed by the vendor. These arrangements are provided through security techniques, mainly encryption, and the distribution, in a detached manner, of content and rights. This allows free access to the content by the consumers, but only those carrying the proper Right Object (RO) will be able to process such content. As a security service considered in different layers of the security framework de ned by ITU X.805, almost all applications need to consider non-repudiation in the very beginning of their design. Unfortunately this has not been done so far in DRM speci cations due to practical issues and the type of content distributed. We analyze this service for a DRM framework and provide a solution which allows the right objects acquisition to be undeniable.