eXtensible rights Markup Language (XrML) 2.0 Specification
Part IV: Content Extension Schema

20 November 2001

Available formats: HTML and PDF. In case of a discrepancy, the HTML is considered definitive. 

NOTE: To enable interactive browsing of the XrML schemas and examples, the XrML Specification and its companion Example Use Cases document use an HTML version that leverages the XML access functionality provided by the W3C Xpath recommendation. For this reason, you need to view these HTML documents with a browser that supports that recommendation (for example, Internet Explorer Version 6.0). If your browser does not support this functionality, please view the PDF versions of those documents.

Copyright (C) 2001 ContentGuard Holdings, Inc. All rights reserved. "ContentGuard" is a registered trademark and "XrML", "eXtensible rights Markup Language", the XrML logo, and the ContentGuard logo are trademarks of ContentGuard Holdings, Inc. All other trademarks are properties of their respective owners.

Quick Table of Contents

Part 1: Primer

1 About XrML

2 XrML Concepts

3 Extensibility of the XrML Core

4 Conformance

Part II: XrML Core Schema

5 Technical Reference

Part III: Standard Extension Schema

6 Standard Extensions

Part IV: Content Extension Schema

7   About the Content Extension

8 Content Extension Data Model

9. Content Extension Elements

Part V: Appendices

A XrML Schemas

B Glossary

C Index of Types and Attributes

D References

E Acknowledgements

Full Table of Contents for Part IV: Content Extension Schema

7   About the XrML Content Extension

8 Content Extension Data Model

8.1 Resources

8.1.1 The Digital Work 

8.1.2 Metadata

8.2 Rights

8.3 Conditions and Obligations

9. Content Extension Concepts

9.1 Content Extension Rights

9.1.1 The AccessFolderInfo Right

9.1.2 The Backup Right

9.1.3 The Copy Right

9.1.4 The Delete Right

9.1.5 The Edit Right

9.1.6 The Embed Right

9.1.7 The Execute Right

9.1.8 The Export Right

9.1.9 The Extract Right

9.1.10 The Install Right

9.1.11 The Loan Right

9.1.12 The ManageFolder Right

9.1.13 The Play Right

9.1.14 The Print Right

9.1.15 The Read Right

9.1.16 The Restore Right

9.1.17 The Transfer Right

9.1.18 The Uninstall Right

9.1.19 The Verify Right

9.1.20 The Write Right

9.2 Content Extension Resources and Metadata

9.2.1 The DigitalWork Resource

9.2.1.1 description

9.2.1.2 metadata

9.2.1.3 locator

9.2.51.4 parts

9.2.2 The SimpleDigitalWorkMetadata

9.2.2.1 title

9.2.2.2 creator

9.2.2.3 publisher

9.2.2.4 publicationDate

9.2.2.5 owner

9.2.2.6 copyright

9.2.3 The SecurityLevel Resource

9.2.3.1 value

9.3 Content Extension Conditions and Obligations

9.3.1 The Destination Condition

9.3.2 The Helper Condition

9.3.3 The Renderer Condition

9.3.4 The Source Condition

9.3.5 The Watermark Condition

9.3.5.1 string

9.3.5.2 WatermarkToken

9.3.5.3 object 

7  About the Content Extension

The XrML content extension is an extension to XrML 2.0 that describes rights, conditions, and metadata for digital works, allowing trusted systems to exchange digital works and interoperate.

Trusted systems (or repositories) are systems that can hold digital works and that can be trusted to honor the rights and conditions specified for them. For example, in document commerce, trusted systems are for authoring, playing, and selling digital works. They include personal systems, on-line storefront systems, library systems, and so on.

Design goals for the XrML content extension are:

The XrML content extension is defined using XML Schema and extensively exploits its typing system.

8 Content Extension Data Model

This chapter describes the basic elements for the XrML content extension. These elements describe following:

8.1 Resources

The XrML content extension extends the resource element defined by the XrML 2.0 Core to address digital works. Specifically, the XrML content extension defines a DigitalWork type that encapsulates information about a digital work. 

Resource Model

8.1.1 The Digital Work 

The DigitalWork represents the digital content to which Rights and Conditions are being applied. The digital work consists of the following:

Digital Work Model

8.1.2 Metadata

metadata specifies information about the DigitalWork. This information may be used in many contexts. For example, an eCommerce web site may use this information to construct a catalog of works for sale.  

The SimpleDigitalWorkMetadata provides the following information:

Simple Digital Work Metadata Model

8.2 Rights

When using the XrML content extension, Rights are associated with a DigitalWork to describe how it may be distributed and/or used. Each Right has a corresponding transaction that defines what a trusted system or repository does when that right is exercised.

The XrML 2.0 Core and Standard Extension define some general-use rights. The XrML content extension defines Rights specific to distributing and using DigitalWorks. Conceptually, these Rights are grouped by type as follows:

Render Rights

Govern the rendering of a DigitalWork. The XrML content extension defines the following render Rights:

Play: Render the work in a transient form, as appropriate to the content type. Depending on the content type, exercising the Play Right might result in displaying a book, playing an audio clip, or showing a video.

Print: Make a permanent non-digital rendered copy of the work outside the control of a repository. Exercising the Print Right might result in a printing a hard copy of a book or creating an audio recording on a magnetic tape.

Export: Make a digital source copy of the work without any Rights or Conditions associated with it.

 

Transport Rights

Govern the movement of a DigitalWork from one repository to another. The XrML content extension defines the following transport Rights:

Copy: Make a copy of the work.

Transfer: Transfer the work to another repository, removing the protected content from the original location.

Loan: Lend the work for a specific period of time. While the work is on loan, the original copy cannot be used.

 

Derivative Work Rights

Govern the reuse of a digital work, in whole or in part, to create a new or composite work.

Edit: Make changes to work to create a new work based on the original.

Extract: Use a portion of the work to create a new work.

Embed: Include the work as part of a composite work. An Embed operation places a copy of the work inside the composite work.

 

File Management Rights

Govern two types of operations:

  • Access to the directory information between repositories. These Rights are needed whenever two repositories need to communicate, such as when Transfer or Loan Rights are exercised.

  • Make and restore backup copies of a DigitalWork.

Read: Read the work from the repository.

Write: Write the work in the repository.

Execute: Execute the work from the repository.

Delete: Delete the work from the repository.

Backup: Create a backup copy of the work. 

Restore: Restore a digital work from a backup copy.

Verify: Check the authenticity of the work in the repository.

ManageFolder: Create and name subfolders and configure folders by moving files and subfolders among them.

AccessFolderInfo: Obtain information about the work within folders in a repository.  

Configuration Rights

Govern the addition and removal of system software from a repository.

Install: Make software runable on the repository, including checking that the software is certified, that it has not been tampered with, and that it is compatible with the repository.

Uninstall: Disable software from running, restoring it to the state it was in before it was installed. Exercising an uninstall Right does not remove the files for the program from the repository.

Right Model

8.3 Conditions

Conditions specify the terms, conditions, restrictions, and other modifiers applied to the exercise of Rights. These elements can be used to specify, for instance, watermarks to be applied when using a work or other restrictions on use.

The XrML 2.0 Core and Standard Extension define some general-use Conditions, such as fees and expiration times. The XrML content extension defines the following Conditions specific to distributing and using DigitalWorks:

Destination

Limits the repositories to which a work can be moved.

Helper Limits the software that can be used to exercise a Right.

Renderer

Identifies the device that can be used to render a work. 

Source

Limits the source device to use when exercising a Right.

Watermark

Specifies a digital watermark.

Condition Model

9. Content Extension Concepts

The XrML Content Extension extends the XrML Core by defining rights, resources and metadata, and conditions and obligations related to digital content management.

9.1 Content Extension Rights

This section describes each of the Right elements defined by the XrML Content Extension. 

Each XrML Content Extension Right element has a corresponding type that extends the Right complex type defined in the XrML Core.

9.1.1 The AccessFolderInfo Right

Schema Representation of the AccessFolderInfo Type
Schema Representation of the accessFolderInfo Element

Using the AccessFolderInfo Right

The AccessFolderInfo type represents the Right to deliver or reveal information about the works contained within folders.

AccessFolderInfo is one of the file management rights.

Alice has the Right to get a directory listing of the Specs folder 

9.1.2 The Backup Right

Schema Representation of the Backup Type
Schema Representation of the backup Element

Using the Backup Right

The Backup type represents the Right to make copies of a DigitalWork for the purpose of guarding against the loss of the original due to accident or catastrophic media or equipment failure

The backup copy is created as a new work, separate from the original work that was backed up. The only Right which may be exercised on a backup work is the Restore Right.  The license for the original work may or may not be valid for the backup copy. For this reason, this specification does not mandate any specification of rights for the backup copy.

Backup is one of the file management rights.

Alice can Backup book1

9.1.3 The Copy Right

Schema Representation of the Copy Type
Schema Representation of the copy Element

Using the Copy Right

The new copy of the DigitalWork is created as a new work, separate from the original that was copied. The license for the original work may or may not be valid for the new copy. For this reason, this specification does not mandate any specification of rights for the new copy. 

Copy is one of the transport rights.

Granting the Copy Right to distributors

9.1.4 The Delete Right

Schema Representation of the Delete Type
Schema Representation of the delete Element

Using the Delete Right

Generally, any copy owner would have the Right to Delete the DigitalWork

The Right to Delete must be controlled if many people can log into a repository and Delete files either accidentally or in malicious mischief. To prevent the unwanted and unauthorized deletion of remotely-accessed DigitalWorks, a Delete Right typically includes various conditions.

An opposite problem from unauthorized deletion is the creation of "Trojan Horse" works that are copied for free but require fees to Delete them. To defend against such tricks, many repositories generate warning and confirmation messages before accepting copies of works that lack Delete Rights or that assess charges or Conditions to exercise this Right.

Delete is one of the file management rights.

Alice is allowed to Delete the Specs folder

9.1.5 The Edit Right

Schema Representation of the Edit Type
Schema Representation of the edit Element

Using the Edit Right

Since the content of the edited work has changed from the original DigitalWork, the license for the original work may or may not be valid for the edited work.  For this reason, when the edited copy is saved, it is considered a new work even if it overwrites the original copy.  In addition, this specification does not mandate any specification of rights for the edited copy.

Edit is like Extract in that it creates a new work. It differs from Extract in that it confers the right to make changes to the work.

Edit is one of the derivative work rights.

Alice can Edit XMLBook

9.1.6 The Embed Right

Schema Representation of the Embed Type
Schema Representation of the embed Element

Using the Embed Right

The Embed type represents the Right to include a DigitalWork as part of another work, forming a composite work.  

The composite work is created as a new work, separate from the original work that was embedded. The license for the original work may or may not be valid for the composite work. For this reason, this specification does not mandate any specification of rights for the composite work.

Embed is one of the derivative work rights.

XMLBook may be embedded in another work

9.1.7 The Execute Right

Schema Representation of the Execute Type
Schema Representation of the execute Element

Using the Execute Right

Execute is one of the file management rights.

Alice can execute the XmlReader application

9.1.8 The Export Right

Schema Representation of the Export Type
Schema Representation of the export Element

Using the Export Right

Typically, the exported copy of the DigitalWork would be in a file format suitable for unrestricted viewing, printing, or editing. Thus, this Right can be used to make a digital copy that is not encrypted or otherwise protected. For example, an Export Right might be exercised to release an older work after it has passed out of copyright. 

The exported copy is created as a new work, separate from the original work. The license for the original work may or may not be valid for the exported copy. For this reason, this specification does not mandate any specification of rights for the exported copy.  

Export differs from Copy in that an Export is made to an in-the-clear non-secure repository whereas a Copy is made to another secure repository.

Export is one of the render rights.

Alice can Export chapter 1 if she pays $30.00

9.1.9 The Extract Right

Schema Representation of the Extract Type
Schema Representation of the extract Element

Using the Extract Right

A rights owner can divide a DigitalWork up into several sub-works, each with its own rights specification. In this way, the rights owner can decide whether a work can be reused as a whole or in parts and associate different Rights and Conditions with the parts of a DigitalWork.

The extracted material is created as a new work, separate from the original work. The license for the original work may or may not be valid for the extracted copy. For this reason, this specification does not mandate any specification of rights for the extracted copy.  

Extract differs from Edit in that it does not grant the Right to modify a work.  

Extract is one of the derivative work rights

Alice can Extract image1

9.1.10 The Install Right

Schema Representation of the Install Type
Schema Representation of the install Element

Using the Install Right

Simply copying a program to a repository does not make it runable. The installation operation checks that software is certified, that it has not been tampered with, and that it is compatible with the repository. If these conditions are satisfied, the install operation links the software into the secure software procedures of the repository.

Install is one of the configuration rights

Alice is granted the Right to Install a Setup program

9.1.11 The Loan Right

Schema Representation of the Loan Type
Schema Representation of the loan Element

Using the Loan Right

Exercising a Loan Right creates a "loaner" copy of a DigitalWork on a receiving repository. The loaner copy is created as new work, separate from the original work. The license for the original work may or may not be valid for the loaner copy. For this reason, this specification does not mandate any specification of rights for the loaner copy.  

Typically, the original copy of the work cannot be used while the work is "on loan". Throughout the loan period, both repositories must take the loan into account in all transactions relevant to the work on loan. At the end of the loan period, the loaner copy deactivates and the original copy reactivates.

Note: If the original repository contains more than one copy of the work, the original repository can still exercise all rights on copies that are not on loan. 

Loan is one of the transport rights

The loaner copy may be played by anyone for 1 month

9.1.12 The ManageFolder Right

Schema Representation of the ManageFolder Type
Schema Representation of the manageFolder Element

Using the ManageFolder Right

The ManageFolder type represents the Right to perform the following operations:

The Right to perform all of these repository actions is governed by the single ManageFolder Right; there are no separate rights for moving or renaming files and folders. The ManageFolder Right is commonly exercised by commands at a repository user interface.

ManageFolder is one of the file management rights.

Granting ManageFolder access

9.1.13 The Play Right

Schema Representation of the Play Type
Schema Representation of the play Element

Using the Play Right

Typically, a Grant containing a Play element also contains a Condition specifying the device on which to Play the Resource. For more information, refer to the Renderer Condition.

Play is one of the render rights.  

Grant someone the right to Play a movie

9.1.14 The Print Right

Schema Representation of the Print Type
Schema Representation of the print Element

Using the Print Right

Print is different from Export in that Print creates non-digital copies while Export creates digital copies.

Print is one of the render rights.

Grant someone the Right to Print a book

9.1.15 The Read Right

Schema Representation of the Read Type
Schema Representation of the read Element

Using the Read Right

The Read type represents a Right to access a DigitalWork. It should not be confused with Play, which represents the Right to render a DigitalWork.

Read is one of the file management rights

Granting the Right to Read

9.1.16 The Restore Right

Schema Representation of the Restore Type
Schema Representation of the restore Element

Using the Restore Right

Restore is one of the file management rights

Granting the Right to Restore a backup copy

9.1.17 The Transfer Right

Schema Representation of the Transfer Type
Schema Representation of the transfer Element

Using the Transfer Right

Exercising a Transfer Right moves the DigitalWork from one repository to another. Exercising a Transfer Right does not increase the number of copies of a work, because the Transfer transaction between two repositories removes the DigitalWork from the original repository when the copy has been created and verified on the receiving repository.  

The transferred copy is created as a new work in the receiving repository, separate from the original work. The license for the original work may or may not be valid for the transferred copy. For this reason, this specification does not mandate any specification of rights for the transferred copy.  

Transfer is one of the transport rights

Alice can Transfer book1

9.1.18 The Uninstall Right

Schema Representation of the Uninstall Type
Schema Representation of the Uninstall Element

Using the Uninstall Right

The Uninstall type represents the Right to Uninstall a Resource. The Uninstall operation removes software from the running system. The Uninstall operation does not Delete the file corresponding to the program; it merely disables the program from running, restoring it to the state in which it was before installation.

Uninstall is one of the configuration rights.  

Granting Alice the Right to Uninstall XMLReader

9.1.19 The Verify Right

Schema Representation of the Verify Type
Schema Representation of the Verify Element

Using the Verify Right

The Verify type represents the Right to authenticate a given DigitalWork and/or verify its integrity.  

Verify is one of the file management rights

Granting the Verify right

9.1.20 The Write Right

Schema Representation of the Write Type
Schema Representation of the Write Element

Using the Write Right

Write is one of the file management rights.

Granting the Write right

9.2 Content Extension Resources and Metadata

This section describes each of the Resource and metadata elements defined by the XrML Content Extension. These elements represent DigitalWorks and the information about them.

9.2.1 The DigitalWork Resource

Schema Representation of the DigitalWork Type
Schema Representation of the digitalWork Element

Using the DigitalWork Resource

A DigitalWork may consist of several identified parts, each of which is itself a DigitalWork. With this construction, Rights to use different parts of the work might be granted differently to different parties.

Specifying a book as a DigitalWork

9.2.1.1 description

The optional description element describes the work, possibly in different languages.  The sequence of bits identified by this DigitalWork is not affected by this element.

9.2.1.2 metadata

The optional metadata element enables referencing of metadata that is embedded in a Resource, or metadata that exists in a database, or an XML fragment of metadata that makes use of other metadata schemes.  It is of type DigitalResource defined in the core schema.  The sequence of bits identified by this DigitalWork must be able to be shown to have each of the metadata specified here.

9.2.1.4 locator

The optional locator element specifies how to locate the content of the work.  It may specify a location or an inline inclusion of the content. It is of type DigitalResource, which is defined in the XrML Core.  The sequence of bits identified by this DigitalWork must be that sequence of bits identified by this locator, whose semantics are exactly that of its type.

9.2.1.5 parts

The optional parts element specifies the DigitalWorks that are included as parts of this work. It is of type DigitalWork.  The sequence of bits identified by this DigitalWork must be able to be shown to have each of the parts specified here.

Specifying Chapter 1 as part of a book

9.2.2 The SimpleDigitalWorkMetadata

Schema Representation of the SimpleDigitalWorkMetadata Type
Schema Representation of the simpleDigitalWorkMetadata Element

Using the SimpleDigitalWorkMetadata

The SimpleDigitalWorkMetadata type may be embedded in the metadata xml specification to specify information related to the DigitalResource.  Note that the xml element is part of the DigitalResource type, which servers the type of metadataDigitalResource is defined in XrML Core.

9.2.2.1 title

The SimpleDigitalWorkMetadata title specifies the work title; it has type LinguisticString, which is defined in the XrML Core.  

9.2.2.2 creator

The creator element specifies the party who created the work, such as an author, illustrator, editor or translator.

9.2.2.3 publisher

The publisher element specifies the party who published the work. 

9.2.2.4 publicationDate

The publicationDate specifies the date (and possibly time) at which this work was published.

9.2.2.5 owner

The owner element specifies the holder of the copyright for the work. 

9.2.2.6 copyright

The copyright element specifies the formal copyright declaration(s) of the work.

Specifying simple metadata for a book. Note the use of the MediaFileTypeCode entity from ONIX.

9.2.3 The SecurityLevel Resource

Schema Representation of the SecurityLevel Type
Schema Representation of the securityLevel Element

Using the SecurityLevel Resource

To specify a SecurityLevel, place the securityLevel element as a Resource in a Grant that also specifies the PossessProperty Right, which is defined in the XrML Core.

The SecurityLevel element is an extension of the Resource element, which is defined in the XrML Core.

9.2.3.1 value

The value element specifies the security level.

Assigning a securityLevel of 5 to a projector

9.3 Content Extension Conditions and Obligations

This section describes each of the condition and obligation elements defined by the XrML Content Extension. These elements represent restrictions or modifiers that can be associated with rights in Grant specifications.

9.3.1 The Destination Condition

Schema Representation of the Destination Type
Schema Representation of the destination Element

Using the Destination Condition

A typical use of a Destination element is in a Grant that includes a Transfer Right. In this case, the Destination element could be used to limit the secure repository to which a work can be transferred.

The Destination type is an extension of the Condition type, which is defined in the XrML Core.

The Destination/principal must be the destination secure repository for this Condition to be satisfied.

9.3.2 The Helper Condition

Schema Representation of the Helper Type
Schema Representation of the helper Element

Using the Helper Condition

The Helper type may be specified for any Right.  A typical use of a Helper element is in a Grant that includes a Play right. In this case, the Helper element could be used to specify the software that can be used to Play the work.

The Helper type is an extension of the Condition type, which is defined in the XrML core. 

The Helper/principal must be the controlling software for this Condition to be satisfied.

Specifying the software to be used for editing

9.3.3 The Renderer Condition

Schema Representation of the Renderer Type
Schema Representation of the renderer Element

Using the Renderer Condition

A typical use of a Renderer element is in a Grant that includes an Play Right. In this case, the Renderer element could be used to specify the device on which the work can be played.

The Renderer type is an extension of the Condition type, which is defined in the XrML Core.  

The Renderer/principal must be the rendering device for this Condition to be satisfied.

Specifying an authorized projector as a Renderer

9.3.4 The Source Condition

Schema Representation of the Source Type
Schema Representation of the source Element

Using the Source Condition

A typical use of a Source element is in a Grant that includes a Copy Right. In this case, the Source element could be used to limit the source device from which to read.

The Source type is an extension of the Condition type, which is defined in the XrML Core.  

The Source/principal must be the source secure repository for this Condition to be satisfied.

Alice is granted ManageFolder right on a smartcard

9.3.5 The Watermark Condition

Schema Representation of the Watermark Type
Schema Representation of the watermark Element

Using the Watermark Condition

The Watermark Condition is typically used in Grants that specify Backup, Export, Install, Play, and Print rights.

9.3.5.1 string

The string element specifies a piece of information known at the time the DigitalWork is published, such as distributor contact URL or creator ID. 

9.3.5.2 WatermarkToken

The WatermarkToken element represents a fingerprint watermark. The fingerprint watermark ensures copyright protection by watermarking the DigitalWork with customer identification used to track and trace legal or illegal copies. The following table lists the defined watermark tokens and their meanings:

Token Meaning
all-rights Listing of all rights associated with the work, expressed in XrML
render-rights Listing of all render rights associated with the work, expressed in XrML
user-name The user's name
user-id The user's ID, associated with his identity certificate
user-location The user's location, associated with his identity certificate
institution-name The institution's name that owns the rendering service or rendering device
institution-id The institution's ID, associated with its identity certificate
institution-location The institution's location, associated with its identity certificate
render-name The name of the rendering device (e.g. the printer name) that rendered the copy
render-id The rendering device's ID, associated with its identity certificate
render-location The rendering device's location, associated with its identity certificate
render-time The time and date that the work was rendered
copy-number The number of copies of the work

Watermark in printed copy
 

9.3.5.3 Object 

The object element specifies a kind of watermark that is a DigitalWork encoded so that it cannot be found without possession of a secret key.

Go to Part V: Appendices