Upload
buddy-thompson
View
217
Download
1
Tags:
Embed Size (px)
Citation preview
Digital Rights Management in the Academy
MERLOT International ConferenceAugust 3, 2004
This work is licensed under the Creative Commons Attribution-NoDerivs-NonCommercial License. To view a copy of this license, visit http://creativecommons.org/licenses/by-nd-nc/1.0/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA. The license permits non-commercial use, requires attribution and forbids modification.
August 3, 2004MERLOT Conference: DRM in the Academy Page 2Eduworks Corporation
Purpose
Explore the management of digital content rights in a distributed ecosystem Requirements Processes Technologies Services Examples Issues
Consider the impact of digital rights management on MERLOT
August 3, 2004MERLOT Conference: DRM in the Academy Page 3Eduworks Corporation
AgendaIntroduction and Agenda 1:00 – 1:10
Exercise: Non-Digital Scenario 1:10 – 1:40
The Digital Rights Challenge 1:40 – 2:00
Digital Rights Ecosystem Model 2:00 – 2:20
Exercise: Digital Scenario 2:20 – 2:40
Break 2:40 – 2:50
Exercise: Digital Scenario (Cont’d) 2:50 – 3:10
Demonstrator Projects and Tools 3:10 – 3:50
Discussion: MERLOT Implications 3:50 – 4:30
Non-Digital Scenario
August 3, 2004MERLOT Conference: DRM in the Academy Page 5Eduworks Corporation
SCENARIO: TEXT BOOKS
Author writes a book Publisher publishes it Publisher sells book to wholesaler Instructor selects book for course Wholesaler sells to College Bookstore Bookstore sells to Students
August 3, 2004MERLOT Conference: DRM in the Academy Page 6Eduworks Corporation
Role Playing Scenario Duration - 40 minutes total
Assign Roles – Author, Publisher, Wholesaler, Retailer, Instructor,
Student, Book Step through the life cycle – at each step:
Market model, rights management expectations, law How are rights are defined, distributed, acquired,
enforced and tracked? Identify the technology used to support rights processes
August 3, 2004MERLOT Conference: DRM in the Academy Page 7Eduworks Corporation
SCENARIO: Rights Perspective
© defined when book is published Publisher to Wholesaler to Bookstore to Student:
Rights distributed / acquired in exchange for money The physical book
Contains and renders content Is a token of exchange Helps enforce rights via copy protection & tracking
Rights are Governed by law, agreements & professional ethics (e.g.
attribution Supported by trusted B2B & B2C relationships
Digital Rights Management Challenge
August 3, 2004MERLOT Conference: DRM in the Academy Page 9Eduworks Corporation
What Changes in the Digital World?
Separation of content and rendering Digital files contain content Players render content A book does both
Replication and distribution Replication is (nearly) perfect Distribution is (nearly) free Books are hard to replicate and
require physical distribution
August 3, 2004MERLOT Conference: DRM in the Academy Page 10Eduworks Corporation
What Changes in the Digital World?
Tracking and control How do you uniquely label a digital copy? How many digital copies have been distributed? Books can be physically ‘stacked and tracked’
The nature of distribution Services are unbundled (and less familiar) There are few barriers to participation in digital
distribution Who do you trust?
August 3, 2004MERLOT Conference: DRM in the Academy Page 11Eduworks Corporation
Therefore … A move from organizational to technological
methods of rights management
In the ‘perfect’ digital world: Authors define rights and licenses when they create the
content Rights are expressed in a standardized form Distribution, repository and rendering technology
Recognizes Interprets Enforces Redistributes
But … we are at the beginning of the road
Digital Rights Requirements in Academia
August 3, 2004MERLOT Conference: DRM in the Academy Page 13Eduworks Corporation
Protect … or Share?
Protection is not the only goal The commercial licensing of inviolable content
directly to a consumer is only one model
For education and research, digital rights must support sharing and reuse DRM as an enabler, not
just a controlling technology Difficulty of accessing rights is
a barrier to reuse *
*NSDL Content Reusability project – www.reusablelearning.org
August 3, 2004MERLOT Conference: DRM in the Academy Page 14Eduworks Corporation
Policy vs. Enforcement *
Digital Policy Management Identify and describe rights Set business rules Organize rights to enable content distribution
Digital Policy Enforcement Ensuring that digital rights are respected Not punitive, based on mutual benefit
Two different, but interrelated activities
* From a presentation by Chris Barlas of Rightscom at the EdMedia 2004 world conference in Lugano, Switzerland
August 3, 2004MERLOT Conference: DRM in the Academy Page 15Eduworks Corporation
Tracking and Attribution
Goals of academic authors Share IP as widely as possible Receive proper attribution
Repositories and providers want to track usage Evaluation of the value of content Determining cost per use Reporting usage for funding and recognition
August 3, 2004MERLOT Conference: DRM in the Academy Page 16Eduworks Corporation
Persistence and Standards Rights must persist in a distributed network
IT can provide control within the organizational firewall … but …
Content in academia must freely cross technological and organizational boundaries
Rights expressions must ‘persist’ so they are available wherever and whenever content is used.
Standards are needed For expressing, transmitting,
interpreting and enforcing However, we are not going to
enthrall you today with our vastknowledge of the details ofevolving standards Man turns to stone listening
to standards presentation
*
* Permission to use requested from Williams-Exeter Programme at Oxford - www.williams.edu/ dean/oxford/oxford.htm
August 3, 2004MERLOT Conference: DRM in the Academy Page 17Eduworks Corporation
Overarching Issues
DRM = Management of Rights by Digital Means
Rights Management depends on models of IP Control (individual – organizational –
public) Rewards (fame – fortune – fulfillment) Constraints (policy – legal – technological) Content (form – function – properties) Relationships (trust – communication – economic)
In the digital world Content has changed Relationships have changed Standards are in their infancy Functionality is clumsy
A Digital Rights Ecosystem Model
August 3, 2004MERLOT Conference: DRM in the Academy Page 22Eduworks Corporation
DIGITAL RIGHTS ECOSYSTEM:
Law & Policy Market Mechanisms Rights Expectations Content workflows Content management
technology
Agents & Actors who distribute, acquire or enforce rights
Learning environments
Standards Infrastructure Services
A system formed by the interaction of a distributed learning community with
August 3, 2004MERLOT Conference: DRM in the Academy Page 23Eduworks Corporation
Rights Management EnvironmentLaw ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Environment in which DRM takes place
August 3, 2004MERLOT Conference: DRM in the Academy Page 24Eduworks Corporation
Rights Management EnvironmentLaw ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
Actors in the Ecosystem
August 3, 2004MERLOT Conference: DRM in the Academy Page 25Eduworks Corporation
Author
Assemble
Publish
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Rights Management Environment
Use
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
CONTENT MANAGEMENT
August 3, 2004MERLOT Conference: DRM in the Academy Page 26Eduworks Corporation
Content Life Cycle Create
Author Assemble
Offer Publish Catalog Distribute
Acquire Find Acquire Rights Acquire Content
Use
August 3, 2004MERLOT Conference: DRM in the Academy Page 27Eduworks Corporation
Author
Assemble
Publish
Distribute
Content
Acquire Content
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Distribute Content
Acquire Content
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Distribute Content
Acquire Content
Distribute Content
Acquire Content
Rights Management Environment
Use
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
The Flow of Content
August 3, 2004MERLOT Conference: DRM in the Academy Page 28Eduworks Corporation
Rights Management Processes
Define Rights
Distribute / Acquire Rights
Enforce Rights
Track Usage
August 3, 2004MERLOT Conference: DRM in the Academy Page 29Eduworks Corporation
Author
Assemble
Publish
Rights Management Environment
Distribute Rights
Acquire Rights
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Enforce and Distribute Rights
Acquire Rights and Track Usage
Acquire Rights and
Track Usage
Distribute Rights
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Enforce and Distribute
Rights
Acquire Rights and
Track UsageUse
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
The Flow of Rights
August 3, 2004MERLOT Conference: DRM in the Academy Page 30Eduworks Corporation
Author
Assemble
Publish
Rights Management Environment
Distribute Rights
Acquire Rights
Expression / Enforcement Standards
Infrastructure Services (Some Standardized)
Rights Expression
Content Protection
Content Registry
Authentication AuthorizationFinancial Services
Rights Registry
Usage Tracking & Reporting Services
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Enforce and Distribute Rights
Acquire Rights and Track Usage
Acquire Rights and
Track Usage
Distribute Rights
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Enforce and Distribute
Rights
Acquire Rights and
Track UsageUse
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
August 3, 2004MERLOT Conference: DRM in the Academy Page 31Eduworks Corporation
Author
Assemble
Publish
Rights Management Environment
Distribute Rights
Acquire Rights
Expression / Enforcement Standards
Infrastructure Services (Some Standardized)
Rights Expression
Content Protection
Content Registry
Authentication AuthorizationFinancial Services
Rights Registry
Usage Tracking & Reporting Services
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Enforce and Distribute Rights
Acquire Rights and Track Usage
Acquire Rights and
Track Usage
Distribute Rights
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Enforce and Distribute
Rights
Acquire Rights and
Track UsageUse
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
Rights expression
A machine (and human) readable expression of what can be done with content under what
conditions. Licenses can be written using rights expressions. A rights expression
language is a grammar and vocabulary for expressing rights in a standardized format.
August 3, 2004MERLOT Conference: DRM in the Academy Page 32Eduworks Corporation
Author
Assemble
Publish
Rights Management Environment
Distribute Rights
Acquire Rights
Expression / Enforcement Standards
Infrastructure Services (Some Standardized)
Rights Expression
Content Protection
Content Registry
Authentication AuthorizationFinancial Services
Rights Registry
Usage Tracking & Reporting Services
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Enforce and Distribute Rights
Acquire Rights and Track Usage
Acquire Rights and
Track Usage
Distribute Rights
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Enforce and Distribute
Rights
Acquire Rights and
Track UsageUse
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
Content Protection
Preventing or discouraging the unauthorized use of content. E.g. copy or print protection. Supported by standards such as encryption,
digital watermarking, etc.
August 3, 2004MERLOT Conference: DRM in the Academy Page 33Eduworks Corporation
Author
Assemble
Publish
Rights Management Environment
Distribute Rights
Acquire Rights
Expression / Enforcement Standards
Infrastructure Services (Some Standardized)
Rights Expression
Content Protection
Content Registry
Authentication AuthorizationFinancial Services
Rights Registry
Usage Tracking & Reporting Services
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Enforce and Distribute Rights
Acquire Rights and Track Usage
Acquire Rights and
Track Usage
Distribute Rights
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Enforce and Distribute
Rights
Acquire Rights and
Track UsageUse
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
Authentication and Authorization
Authentication is the process of establishing the identity of a user.
Authorization is the process of determining what a user is permitted to do.
August 3, 2004MERLOT Conference: DRM in the Academy Page 34Eduworks Corporation
Author
Assemble
Publish
Rights Management Environment
Distribute Rights
Acquire Rights
Expression / Enforcement Standards
Infrastructure Services (Some Standardized)
Rights Expression
Content Protection
Content Registry
Authentication AuthorizationFinancial Services
Rights Registry
Usage Tracking & Reporting Services
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Enforce and Distribute Rights
Acquire Rights and Track Usage
Acquire Rights and
Track Usage
Distribute Rights
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Enforce and Distribute
Rights
Acquire Rights and
Track UsageUse
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
Content Registry
A registry is a storehouse of information about content that provides persistent unique
identifiers. Registries may provide means to find content in ways that are more
dependable than direct pointers to content.
August 3, 2004MERLOT Conference: DRM in the Academy Page 35Eduworks Corporation
Author
Assemble
Publish
Rights Management Environment
Distribute Rights
Acquire Rights
Expression / Enforcement Standards
Infrastructure Services (Some Standardized)
Rights Expression
Content Protection
Content Registry
Authentication AuthorizationFinancial Services
Rights Registry
Usage Tracking & Reporting Services
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Enforce and Distribute Rights
Acquire Rights and Track Usage
Acquire Rights and
Track Usage
Distribute Rights
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Enforce and Distribute
Rights
Acquire Rights and
Track UsageUse
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
Rights (License) Registry
A place where licenses associated with content may be permanently stored and
readily accessed. License registries associate rights to content in a persistent fashion, and
allows licenses to be accessed remotely. (Creative Commons is one example.)
August 3, 2004MERLOT Conference: DRM in the Academy Page 36Eduworks Corporation
Author
Assemble
Publish
Rights Management Environment
Distribute Rights
Acquire Rights
Expression / Enforcement Standards
Infrastructure Services (Some Standardized)
Rights Expression
Content Protection
Content Registry
Authentication AuthorizationFinancial Services
Rights Registry
Usage Tracking & Reporting Services
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Enforce and Distribute Rights
Acquire Rights and Track Usage
Acquire Rights and
Track Usage
Distribute Rights
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Enforce and Distribute
Rights
Acquire Rights and
Track UsageUse
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
Financial Services
Financial systems, human resources systems, and other ‘enterprise systems’ manage access
to content based on departmental charge-backs, user fees, manager permissions and
other factors.
August 3, 2004MERLOT Conference: DRM in the Academy Page 37Eduworks Corporation
Author
Assemble
Publish
Rights Management Environment
Distribute Rights
Acquire Rights
Expression / Enforcement Standards
Infrastructure Services (Some Standardized)
Rights Expression
Content Protection
Content Registry
Authentication AuthorizationFinancial Services
Rights Registry
Usage Tracking & Reporting Services
External Sites
--------------
Digital LibrariesE-stores
BookstoresEtc.
Internal Sites
-------------
Libraries,Repositories,Content Mgt
SystemsEtc.
Catalog
Find
Acquire
Distribute
Enforce and Distribute Rights
Acquire Rights and Track Usage
Acquire Rights and
Track Usage
Distribute Rights
Learning Management
Environments---------------Course Mgt Systems,
Collaborative Environments,
PortalsEtc.
Enforce and Distribute
Rights
Acquire Rights and
Track UsageUse
Law ExpectationsPolicyMarket Mechanisms
DIGITAL RIGHTS MANAGEMENT ECOSYSTEM
Librarians / Repository ManagersPublishersAuthors Faculty Students
Usage Tracking and Reporting Services
Usage tracking and reporting services are likely to be part of a widely distributed ecosystem, partly to support ‘per use’
financial models. Such services may be linked to content registries.
Exercise: Digital Scenario
August 3, 2004MERLOT Conference: DRM in the Academy Page 39Eduworks Corporation
Checklist for applying the model Environmental factors that affect rights management:
Market models; The legal and policy context; Important actors (organizations and people) and roles; Expectations for the management of rights
Content lifecycle(s) in the scenario. Where and how should rights be
Defined; Acquired and distributed; Enforced Where and how usage should be tracked. What services are required to support rights management
processes? What services are provided by existing technology? Identify what functionality gaps need to be filled and what
approaches are realistic
August 3, 2004MERLOT Conference: DRM in the Academy Page 40Eduworks Corporation
SCENARIO: Learning Object Repository* State Resource Center
Develops a piece of content themselves (adaptable content) Gets a piece of content from PBS
Digital Repository Reviews the content, generates metadata descriptions,
catalogs University / School District Library
Identifies useful repository resources Incorporates into their catalog / teacher portal
Teachers Discover and use content Modify content Deliver to Students via learning management environment
* Based on scenarios from U.S. Eisenhower National Clearinghouse (ENC)
August 3, 2004MERLOT Conference: DRM in the Academy Page 41Eduworks Corporation
Scenario Analysis Purpose:
Explore the requirements for individuals, technology and organizations to support a comprehensive distributed digital rights ecosystem.
Examine rights management issues and requirements within the context of the repository scenario.
Process: Assign roles – Authors, state resource center, digital
repository, school district library, teacher, content Step through the simulation
Flow from the creation of the content all the way to its eventual use by a student
Identify rights management requirements and processes at each step
August 3, 2004MERLOT Conference: DRM in the Academy Page 42Eduworks Corporation
Environment / Requirements
The repository is a distributor Rights are determined by a range of rights holders, not the
repository. Rights management issues include
Viewing Modification Distribution Attribution Tracking
Catalog records are also intellectual property. Repository wants attribution Repository wants to maintain quality branding
August 3, 2004MERLOT Conference: DRM in the Academy Page 43Eduworks Corporation
Content Life Cycle and Rights Life Cycle
Content authored by a range of sources Repository finds content or has it submitted to them Repository categorizes, evaluates and describes content
and creates catalog records Users search repository to find content for a range of
uses
Rights Defined by authors when content is created Repository defines rights for catalog records themselves Repository may need to access rights through a number
of layers in between them and the author Need to interpret, display and distribute rights as part of
catalog in a consistent way
August 3, 2004MERLOT Conference: DRM in the Academy Page 44Eduworks Corporation
Usage Tracking and Services Needed
Usage Tracking Repository wants to track and report usage of assets
back to the source, and to funding agencies
Services Required Rights expression for consistent display and
interpretation Persistent unique identifiers to avoid redundant entries,
and for ongoing maintenance Usage tracking service, including the tracking of the
reuse of catalog records by other repositories
August 3, 2004MERLOT Conference: DRM in the Academy Page 45Eduworks Corporation
Services Provided and Gaps
Services Provided None of those described are yet available
Gaps Standards and technology are emerging for:
Digital rights expression language Persistent unique identifiers / registries
Nothing on the horizon for usage tracking services
Other Digital Scenarios
August 3, 2004MERLOT Conference: DRM in the Academy Page 47Eduworks Corporation
SCENARIO 1: Commercial “E-Packs”
Textbook publisher sells “e-packs” (or “course packs”).
E-packs are loaded directly into a Course Management System*.
Students access content through the Course Management System.
* Same as “Virtual Learning Environment” or “Learning Management System”
August 3, 2004MERLOT Conference: DRM in the Academy Page 48Eduworks Corporation
Environment / Requirements
Remuneration for publisher. Attribution for author. Local copies for students. School required to control access
per class or section or per individually purchased license.
Publisher expects access to be restricted
August 3, 2004MERLOT Conference: DRM in the Academy Page 49Eduworks Corporation
Content Life Cycle and Rights
A simple linear life cycle Content enters ecosystem from a controlled source
(publisher) Distributed via course management system Used by student
Rights Defined through law and contract Trusted partners (publisher, bookstore, IT) Enforced by CMS restricting access to registered
students Content could require students to have a license code
August 3, 2004MERLOT Conference: DRM in the Academy Page 50Eduworks Corporation
Usage Tracking and Services Needed
Usage Tracking At the CMS when content is used, or At bookstore when license and textbook sold
Services Required Copy protection / encryption Authentication and authorization Financial services (fees for licenses) Usage tracking and reporting
August 3, 2004MERLOT Conference: DRM in the Academy Page 51Eduworks Corporation
Services Provided and Gaps
Services Provided CMS or IT env’t provides authentication and
authorization Financial and usage tracking available via
bookstore
Gaps CMS cannot support entry of license code for
content Copy protection not in student computing env’t No persistence of rights outside of CMS
August 3, 2004MERLOT Conference: DRM in the Academy Page 52Eduworks Corporation
SCENARIO 2: Sharing a Test Bank*
A professor creates a bank of interactive test questions.
The funding comes from a grant with no intellectual property strings attached.
* Contributed by Gerd Kortemeyer, Director, Michigan State University Laboratory for Instructional Technology in Education
August 3, 2004MERLOT Conference: DRM in the Academy Page 53Eduworks Corporation
Environment / Requirements
Use is free for educational purposes Commercial use requires permission
Source code may be installed with permission and proper safeguards
Professor wants attribution and record of all uses Does not want students to access questions
and answers outside of a course Instructors want scores reported to Course
Management Systems
August 3, 2004MERLOT Conference: DRM in the Academy Page 54Eduworks Corporation
Content Life Cycle and Rights
Distributed Network life cycle Prof creates question bank in personal env’t Distributes via her web site and loads to university
library repository Faculty load content to other school’s CMS Some faculty want to make changes
Rights Partners not known in advance Access is governed by roles (student and faculty) Modification not allowed without permission Copy / print enforcement needed to prevent students
August 3, 2004MERLOT Conference: DRM in the Academy Page 55Eduworks Corporation
Usage Tracking and Services Needed
Usage Tracking Prof wants usage and question results reported
Services Required Copy protection / encryption Authentication and role-based authorization
(prof’s web site, library repository and all CMS systems)
Expression of rights so faculty understand Usage tracking and reporting
August 3, 2004MERLOT Conference: DRM in the Academy Page 56Eduworks Corporation
Services Provided and Gaps
Services Provided Authentication and authorization
part of library repository and CMS environments Shibboleth can support cross-institution
Downloads can be tracked Some file formats can be copy protected
Gaps Prof’s web site not secure Downloading faculty could grant access to students Depending on format, no copy protection External CMS won’t report usage to prof No standard rights expression language
August 3, 2004MERLOT Conference: DRM in the Academy Page 57Eduworks Corporation
SCENARIO 3 –TEACH Act* A History professor
wishes to make a portion of a copyrighted film available to students online.
The professor's institution owns a copy of the film on videotape* US Copyright Law Exemption:
Technology, Education And Copyright Harmonization ACT
August 3, 2004MERLOT Conference: DRM in the Academy Page 58Eduworks Corporation
Environment / Requirements
Teach Act Requirements College must be accredited. College must obtain a digitized copy if possible. (If not,
then may digitize film.) Copyright policy must be in place; faculty and
appropriate staff must be educated. Use must be under “instructor supervision.” Copyright notice must be displayed. Access must be restricted to class members and for a
reasonable time period. Students must be technologically prevented from
redistributing or retaining copies past deadline.
August 3, 2004MERLOT Conference: DRM in the Academy Page 59Eduworks Corporation
Content Life Cycle and Rights
Life Cycle Prof purchases as a consumer Loaded to server Viewed by students enrolled in course
Rights Rights defined by PBS at time of production and sale TEACH act grants restricted usage and distribution rights Students acquire rights to view when then enroll in class Enforcement require to prevent student copying, and to
stop access when class is over
August 3, 2004MERLOT Conference: DRM in the Academy Page 60Eduworks Corporation
Usage Tracking and Services Needed
Usage Tracking CC not required to track usage Prof may want to track for pedagogical
purposes
Services Required Authentication and authorization Content copy protection / encryption Restrict student access to time enrolled in class
August 3, 2004MERLOT Conference: DRM in the Academy Page 61Eduworks Corporation
Services Provided and Gaps
Services Provided CMS provides authentication and authorization CMS restricts access to enrolled students while class is
on Media servers can prevent copying
Gaps Ability to have rights associated directly with content,
rather than having to program CMS every time a course is held.
Demonstrator Projects and Tools
August 3, 2004MERLOT Conference: DRM in the Academy Page 63Eduworks Corporation
COLIS
See COLIS slides
August 3, 2004MERLOT Conference: DRM in the Academy Page 64Eduworks Corporation
Key Points to COLIS
Rights are expressed through a rights expression language
Rights are enforced at point of delivery Includes repository services & directory
services
August 3, 2004MERLOT Conference: DRM in the Academy Page 65Eduworks Corporation
CELEBRATE
CELEBRATE slides
CELEBRATE demonstration site
http://demoportal.eun.org/
For information on CELEBRATE
http://www.eun.org/eun.org2/eun/en/index_celebrate.cfm
August 3, 2004MERLOT Conference: DRM in the Academy Page 66Eduworks Corporation
Key Points to CELEBRATE Rights embedded in metadata via a rights
expression language A Brokerage provides federated search &
rights management services Brokerage mediates and records
agreements among highly trusted clients Users are not identified; they are hidden
behind LMS / CMS that communicate and enforce constraints
August 3, 2004MERLOT Conference: DRM in the Academy Page 67Eduworks Corporation
What Is Microsoft Rights Management Server (RMS)? * Information protection technology
works with RMS-enabled applications to help safeguard digital information from unauthorized use
online and offline inside and outside the firewall Includes encryption, certificates and authentication
technologies Protection of information through persistent
usage policies, which remain with the information—no matter where it goes XrML – eXtensible rights Markup Language
* Extracted from– “Microsoft Windows Rights Management Services for Windows Server 2003”, www.microsoft.com, October 2003
August 3, 2004MERLOT Conference: DRM in the Academy Page 68Eduworks Corporation
Microsoft RMS and GigaTrust
GigaTrust presentation
Rights Definition and Enforcement
August 3, 2004MERLOT Conference: DRM in the Academy Page 69Eduworks Corporation
Key Points about RMS and GigaTrust Rights embedded in rights expression Access to central server required to get
access to license Authentication (based on email address in
demo) required to get the license Encryption prevents access without license Rights persist regardless of file location
Discussion - MERLOT Recommendations
August 3, 2004MERLOT Conference: DRM in the Academy Page 73Eduworks Corporation
Rights & Permissions Guidelines
The NSDL Reusable Learning project has developed Guidelines for reusability
Structure is modeled after Web Accessibility guidelines
The handout contains the guidelines that pertain to rights
These may be useful in the subsequent discussion
August 3, 2004MERLOT Conference: DRM in the Academy Page 74Eduworks Corporation
Rights & Permissions GuidelinesProvide a statement of rights and permissions. Grant
appropriate rights.
Statement of Copyright (P1) - The copyright should be clearly stated, and include contact information for the copyright holder.
Terms of Use (P1) - A license or explicit statement of rights and terms of use should be attached to or referenced in the resource.
Grant Modification Rights (P2) - Grant rights to modify the digital learning resource, or provide contact information for asking permission.
August 3, 2004MERLOT Conference: DRM in the Academy Page 75Eduworks Corporation
Recommendations
Write down 2 concrete recommendations for MERLOT or MERLOT contributors with regard to Rights Management and related topics (5 minutes)
Post to Flip chart
Sharing and discussion
Moving Forward
August 3, 2004MERLOT Conference: DRM in the Academy Page 77Eduworks Corporation
Conclusions from Examples
DRM models emerging for federations Persistence not yet addressed Services / Standards are emerging
Persistent Unique Identifiers Rights Expression Languages Federated trusted authorization Standardized licenses Tracking services Content protection
August 3, 2004MERLOT Conference: DRM in the Academy Page 78Eduworks Corporation
Challenges
There are demonstrators, but … Limited in scope Need solutions now
There are standards and technology, but … Not ready Won’t be ready soon
Changing the world would be nice, but … Decision makers need answers now Implementers need answers now Users need answers now
August 3, 2004MERLOT Conference: DRM in the Academy Page 79Eduworks Corporation
Some Tools of the Trade Rights Expression Languages
Standardized expressions of rights (permissions, conditions, offers etc.)
XML – machine & human readable (somewhat) Key for persistent DRM
Creative Commons Licenses Standardized grants of rights by copyrights holders Easily incorporated, legally correct
Persistent Unique Identifiers “Handle” systems Registration authorities Standardized
August 3, 2004MERLOT Conference: DRM in the Academy Page 80Eduworks Corporation
Questions & Answers
Contact information: [email protected] [email protected]
Slides will be available from http://www.eduworks.com/library