System and method for authorized digital content distribution

• US 10,536,435 B2
• Filed: 06/29/2015
• Issued: 01/14/2020
• Est. Priority Date: 01/26/2005
• Status: Active Grant

• Current Assignee: Nytell Software LLC (Intellectual Ventures LLC)
• Original Assignee: Nytell Software LLC (Intellectual Ventures LLC)
• Inventors: Marples, David J., Wullert, II, John R.
• Primary Examiner(s): Nigh, James D
• Application Number:
  US14/753,385
• Publication Number:
  US 20150372990A1
• Time in Patent Office: 1,660 Days
• Field of Search: 705 51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 2220/10 Usage protection of distributed data files
• CPC Class Codes: G06Q 2220/12 Usage or charge determination
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

A digital content distribution system uses a Digital Rights Management Controller that performs a set of arbitrary tests against the transfer request from one user to another such as user A to user B. Assuming these tests are successful, the DRM sends an encryption key to transferring user A. This encryption key E is taken from a table of encryption key/hash pairs which have been provided to the DRM Controller by an external authority such as the content rights holder. User A encrypts the content using they key provided by the DRM controller and then optionally calculates a hash over the encrypted form of the content E(X) and returns this value to the DRM Controller. On checking the returned hash against the hash from the table the DRM controller knows that user A does indeed have the digital content X in good condition. The DRM Controller then instructs both users A and B that the transfer may proceed. The encrypted form of the content E(X) is transferred from A to B. Once the content transfer has completed B ensures that the received content has been physically written to non-volatile storage (to account for crashes etc. during the next step). B then calculates a hash over the received content and returns this value to the DRM Controller. If this value matches the value previously given then the transfer has been successful and the DRM Controller updates whatever central records are appropriate, while also returning a decrypt key to B to allow it to decrypt the content.

Claims

1. A method for authorized distribution of digital content from a first user to a second user in communication with a digital rights management (DRM) controller computing device wherein the DRM controller computing device does not possess a copy of the digital content and does possess a key/hash pair provided by a third party associated with the digital content in a key/hash database, the method comprising the steps of:

receiving at the DRM controller computing device a request from a first computing device to transfer the digital content to a second computing device;

sending an encryption key from the DRM controller computing device to the first computing device, which is usable to encrypt the digital content at the first computing device;

receiving a hash of encrypted digital content at the DRM controller computing device from the second computing device after the encrypted digital content has been transferred from the first computing device to the second computing device;

determining at the DRM controller computing device if the result of the hash is correct for the digital content by comparing the key/hash pair provided by the third party associated with the digital content in the key/hash database to the hash received from the second computing device; and

if the hash received from the second computing device corresponds to the key/hash pair associated with the digital content in the key/hash database, sending a decryption key to the second computing device from the DRM controller computing device that is usable to decrypt the digital content at the second computing device.

2. The method of claim 1 further comprising the steps of:

performing the hash at the first computing device after the step of encrypting and sending the hash to the DRM controller computing device;

comparing the hash sent by the first computing device at the DRM Controller computing device with the key/hash pair provided by the third party associated with the digital content in the key/hash database; and

authorizing transfer of the encrypted digital content from the first computing device to the second computing device, upon confirmation that the hash received from the first computing device corresponds to the key/hash pair associated with the digital content in the key/hash database.

3. The method of claim 1 further comprising the steps of:

determining at the DRM controller computing device whether the transfer of digital content is authorized by performing one or more arbitrary tests.

4. The method of claim 3 wherein the arbitrary test determines whether the first user possesses a legitimate copy of the digital content and the method further comprising receiving a hashed version of the encrypted digital content at the DRM controller computing device from the first computing device and comparing the received hashed version of the encrypted digital content with the key/hash pair associated with the digital content in the key/hash database.

5. The method of claim 3 wherein the arbitrary test determines whether the second computing device has an account with sufficient funds to compensate an owner of the digital content.

6. The method of claim 1 wherein the key/hash pair is used only for the transfer of the digital content from the first computing device to the second computing device and is not used for any other transfer and wherein the method further comprises receiving at the DRM controller computing device the key/hash pair for the digital content from a third computing device and storing the key/hash pair received from the third computing device in the key/hash database.

7. The method of claim 1 further comprising the step of determining that the first computing device possesses digital content that the second computing device desires to have without using the DRM controller computing device to make such a determination.

8. The method of claim 1 further comprising the step of sending a request from the first computing device and/or the second computing device to the DRM controller computing device for a transfer of the digital content from the first computing device to the second computing device.

9. The method of claim 3 further comprising the step of sending an acknowledgement from the DRM controller computing device to the first computing device and/or the second computing device that the transfer is authorized.

10. The method of claim 1 further comprising the step of storing a record of the transfer of the digital content from the first computing device to the second computing device without storing a copy of the digital content at the DRM controller computing device.

11. The method of claim 10 wherein the step of storing a record is accomplished using an accounting and content web server.

12. The method of claim 11 wherein an account of the owner of the digital content is incremented upon transfer of the digital content from the first computing device to the second computing device.

13. The method of claim 11 wherein an account of the first computing device is incremented upon transfer of the digital content from the first computing device to the second computing device.

14. The method of claim 11 wherein an account of the second computing device is decremented upon transfer of the digital content from the first computing device to the second computing device.