Cryptographic system and method for geolocking and securing digital information

• US 20020051540A1
• Filed: 01/10/2001
• Published: 05/02/2002
• Est. Priority Date: 10/30/2000
• Status: Active Grant

• Current Assignee: Longbeam Technologies LLC (IP Edge LLC)
• Original Assignee: Geocodex LLC
• Inventors: Karpf, Ronald S., Glick, Barry J., Seiler, Mark E.
• Granted Patent: US 7,120,254 B2
• Time in Patent Office: Days
• US Class Current: 380/258
• CPC Class Codes: G06F 21/1013 to locations
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04N 9/8205 involving the multiplexing of an additional signal and the colour video signal

Abstract

A method and apparatus for controlling access to digital information utilizes a location identity attribute that defines a specific geographic location. The location identity attribute is associated with the digital information such that the digital information can be accessed only at the specific geographic location. The location identity attribute further includes a location value and a proximity value. The location value corresponds to a location of an intended recipient appliance of the digital information, and may be further defined in terms of latitude, longitude and altitude dimensions. The digital information is encrypted using a geolocking key based at least in part on the location identity attribute. The geolocking key is based on a shape parameter that is determined from the location identity attribute and is included with the encrypted digital information. The shape parameter describes a shape of a geographic area, but does not identify where the geographic area is located. The appliance that receives the encrypted digital information can generate the geolocking key to decrypt the digital information based on the received shape parameter and the appliance location. If the appliance location is not within the proximate area of the location identity attribute, the appliance will be unable to generate the geolocking key to decrypt the digital information.

Claims

1. A method for controlling access to digital information, comprising:

identifying a location identity attribute that defines at least a specific geographic location;

generating a geolocking key based at least in part on said location identity attribute; and

encrypting said digital information using said geolocking key, wherein said encrypted digital information can be accessed only at said specific geographic location.

2. The method of claim 1, wherein said identifying step further comprises identifying at least a location value and a proximity value.

3. The method of claim 2, wherein said location value corresponds to a location of an intended recipient appliance of said digital information.

4. The method of claim 2, wherein said location value further comprises a latitude and longitude dimension.

5. The method of claim 2, wherein said proximity value corresponds to a zone that encompasses said location.

6. The method of claim 2, further comprising generating a shape parameter based on said proximity value, said shape parameter defining a shape of a region that encompasses said specific geographic location.

7. The method of claim 6, further comprising generating an initial key based on said shape parameter.

8. The method of claim 7, further comprising generating said geolocking key based on said initial key, said encrypting step further comprising encrypting said digital information using said geolocking key.

9. The method of claim 6, further comprising packaging said shape parameter with said encrypted digital information.

10. The method of claim 9, further comprising transmitting said shape parameter and said encrypted digital information to an end user.

11. The method of claim 1, further comprising selecting preview information and including said preview information with said digital information prior to said encrypting step.

12. The method of claim 1, further comprising storing said encrypted digital information in a fixed format including at least one of CD-ROM, DVD, diskette, videocassette, and tape.

13. The method of claim 9, wherein said transmitting step further comprises transmitting said encrypted digital information in electronic form via at least one of telephone line, video cable, satellite broadcast, fiber optic, and wireless.

15. The method of claim 14, wherein said location data further comprises a latitude and longitude dimension.

16. The method of claim 14, wherein said generating step further comprises generating an initial key based on said shape parameter.

17. The method of claim 16, wherein said generating step further comprises generating said geolocking key based on said initial key.

18. The method of claim 14, wherein said accessing step further comprises receiving said geolocked data from a remote sender.

19. The method of claim 14, wherein said geolocked data further comprises preview information.

20. The method of claim 14, wherein said accessing step further comprises retrieving said geolocked data from a storage medium including at least one of CD-ROM, DVD, diskette, videocassette, and tape.

21. The method of claim 14, wherein said accessing step further comprises receiving said geolocked data in electronic form via at least one of telephone line, video cable, satellite broadcast, fiber optic, and wireless.

14. A method for recovering encrypted digital information, comprising:

retrieving location data identifying a specific geographic location of a playback appliance;

accessing geolocked data including said encrypted digital information and a shape parameter defining a shape of a region that encompasses said specific geographic location;

generating a geolocking key using at least said shape parameter and said location data; and

decrypting said digital information using said geolocking key.

22. An apparatus for controlling access to digital information, comprising:

a processor having memory adapted to store software instructions operable to cause said processor to execute the following functions;

identifying a location identity attribute that defines at least a specific geographic location;

generating an geolocking key based at least in part on said location identity attribute; and

encrypting said digital information using said geolocking key, wherein said encrypted digital information can be accessed only at said specific geographic location.

23. The apparatus of claim 22, wherein said identifying function further comprises identifying at least a location value and a proximity value.

24. The apparatus of claim 23, wherein said location value corresponds to a location of an intended recipient appliance of said digital information.

25. The apparatus of claim 23, wherein said location value further comprises a latitude and longitude dimension.

26. The apparatus of claim 23, wherein said proximity value corresponds to a zone that encompasses said location.

27. The apparatus of claim 23, further comprising the function of generating a shape parameter based on said proximity value, said shape parameter defining a shape of a region that encompasses said specific geographic location.

28. The apparatus of claim 27, further comprising the function of generating an initial key based on said shape parameter.

29. The apparatus of claim 28, further comprising the function of generating said geolocking key based on said initial key.

30. The apparatus of claim 27, further comprising the function of packaging said shape parameter with said encrypted digital information.

31. The apparatus of claim 30, further comprising the function of transmitting said shape parameter and said encrypted digital information to an end user.

32. The apparatus of claim 22, further comprising the function of selecting preview information and including said preview information with said digital information prior to executing said encrypting function.

33. The apparatus of claim 22, further comprising a server coupled to said processor and adapted to communicate said encrypted digital information to end users over a network connection.

35. The apparatus of claim 34, wherein said location data further comprises a latitude and longitude dimension.

36. The apparatus of claim 34, wherein said generating function further comprises generating an initial key based on said shape parameter.

37. The apparatus of claim 36, wherein said generating function further comprises generating said geolocking key based on said initial key.

38. The apparatus of claim 34, wherein said accessing function further comprises receiving said geolocked data from a remote sender.

39. The apparatus of claim 34, wherein said geolocked data further comprises preview information.

40. The apparatus of claim 34, wherein said accessing function further comprises retrieving said geolocked data from a storage medium including at least one of CD-ROM, DVD, diskette, videocassette, and tape.

41. The apparatus of claim 34, wherein said accessing function further comprises receiving said geolocked data in electronic form via at least one of telephone line, video cable, satellite broadcast, fiber optic, and wireless.

42. The apparatus of claim 34, further comprising a GPS receiver coupled to said processor and adapted to provide said location data.

34. An apparatus for controlling access to digital information, comprising:

a processor having memory adapted to store software instructions operable to cause said processor to execute the following functions;

retrieving location data identifying a specific geographic location of said apparatus;

accessing geolocked data including said encrypted digital information and a shape parameter defining a shape of a region that encompasses said specific geographic location;

generating a geolocking key using at least said shape parameter and said location data; and

decrypting said digital information using said geolocking key.