Method and system for digital rights management of documents

• US 10,382,406 B2
• Filed: 04/06/2018
• Issued: 08/13/2019
• Est. Priority Date: 04/13/2004
• Status: Active Grant

• Current Assignee: Keyavi Data Corp.
• Original Assignee: Encryptics, LLC
• Inventors: Pigin, Vlad
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US15/946,881
• Publication Number:
  US 20180302383A1
• Time in Patent Office: 494 Days
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/64 Self-signed certificates
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

An improved method and system for digital rights management is described.

Claims

1. A method for sending data to a recipient the method comprising:

generating a graphical representation of an electronic document;

encrypting information comprising the graphical representation of the electronic document and a set of recipient rights for the electronic document using a public key of the recipient;

encrypting the encrypted information using a symmetric key;

placing a data stream resulting from the encrypting of the encrypted information into a container; and

sending the container to the recipient.

2. The method of claim 1 wherein the set of rights include at least one from the following set:

reading rights indefinitely;

reading rights up to a preset date;

printing rights indefinitely;

printing rights up to a preset date;

copying rights indefinitely; and

copying rights up to a preset date.

3. The method of claim 1 wherein the encrypting the graphical representation of the electronic document includes utilizing a terminal of the recipient to establish a computer passport.

4. The method of claim 3 further including utilizing at least one of the following to generate a unique symmetry key to encrypt a session key that is used to encrypt the electronic document and the set of recipient rights:

the terminal'"'"'s MAC address, master serial number, Basic Input/Output System (BIOS) information or BIOS date.

5. The method of claim 1 further including using a certificate of a sender.

6. The method of claim 1 farther including selecting from a set of certificates of a sender.

7. The method of claim 1, wherein the container is sent to the recipient as a message attachment.

8. A system for sending data to a recipient, the system comprising a processor and memory, wherein the processor and the memory in combination are operable to:

generate a graphical representation of an electronic document;

encrypt the graphical representation of the electronic document and a set of recipient rights for the electronic document; and

send the encrypted graphical representation of the electronic document and the set of recipient rights to the recipient.

9. The system of claim 8 wherein the set of rights include at least one from the following set:

reading rights indefinitely;

reading rights up to a preset date;

printing rights indefinitely;

printing rights up to a preset date;

copying rights indefinitely; and

copying rights up to a preset date.

10. The system of claim 8 wherein the encryption of the graphical representation of the electronic document includes utilizing a terminal of the recipient to establish a computer passport.

11. The system of claim 10 further including utilizing at least one of the following to generate a unique symmetry key to encrypt a session key that is used to encrypt the electronic document and the set of recipient rights:

the terminal'"'"'s MAC address, master serial number, Basic Input/Output System (BIOS) information or BIOS date.

12. The system of claim 8 further including using a certificate of a sender.

13. The system of claim 8 wherein the processor and the memory in combination are operable to select from a set of certificates of a sender.

14. The system of claim 8 wherein the processor and the memory in combination are operable to select a document to wipe out completely from any storage device.

15. A method for sending an electronic document to a recipient the method comprising:

generating a graphical representation of the electronic document;

encrypting the graphical representation of the electronic document and a set of recipient rights for the electronic document;

sending the encrypted graphical representation of the electronic document to the recipient; and

providing the recipient access to the graphical representation of the electronic document according to the set of recipient rights.

16. The method of claim 15 wherein the encrypting the graphical representation of the electronic document includes utilizing a terminal of the recipient to establish a computer passport.

17. The method of claim 16 further including utilizing at least one of the following to generate a unique symmetry key to encrypt a session key that is used to encrypt the electronic document and set of recipient rights:

the terminal'"'"'s MAC address, master serial number, Basic Input/Output System (BIOS) information or BIOS date.

18. The method of claim 15 further including using a certificate of a sender.

19. The method of claim 15 further including selecting from a set of certificates of a sender.

20. The method of claim 15 further including selecting a document to wipe out completely from any storage device.