Data management system

• US 20020059238A1
• Filed: 11/02/2001
• Published: 05/16/2002
• Est. Priority Date: 09/30/1994
• Status: Active Grant

• Current Assignee: Piracy Protection LLC (LF Capital Partners, LLC)
• Original Assignee: Mitsubishi Corporation
• Inventors: Saito, Makoto
• Granted Patent: US 6,741,991 B2
• Time in Patent Office: Days
• US Class Current: 707/9
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G06T 2201/0064 for copy protection or copy management, e.g. CGMS, copy only once, one-time copy
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 : using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/062 : for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/126 : the source of the received data
• CPC Class Codes: H04L 9/083 : involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4334 : Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4408 : involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/63345 : by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: Y10S 707/99939 : Privileged access

Abstract

To prevent piracy or leakage of data content, a cryptography technique and electronic watermark technique are combined together and used. In a data content supplied to a user, a user data is entered as electronic watermark by a data management center, and the data content with an electronic watermark entered in it is encrypted using a crypt key and is supplied. The encrypted data content is decrypted using a crypt key distributed from the data management center and is used. In case it is to be stored, it is encrypted using another crypt key. In case the data content is copied and transferred to other user, a user data of the other user is entered as electronic watermark, and a scenario to enter the user data of the other user as electronic watermark is registered at the data management center, and the data content with electronic watermark entered in it is encrypted using another crypt key and is supplied. When the validity of the other user is confirmed by the scenario, another crypt key is distributed to the other user. The encrypted data content is decrypted using another crypt key and is used. When it is to be stored, it is encrypted using still another key. In case the data content has been copied and transferred illegitimately, it is possible by verifying the electronic watermark to identify the user who has copied and transferred the data content illegitimately.

Claims

1. A data management system, in which users utilize data content of a data center, whereby:

a data management center comprises a data center and a key center;

a first user specifies a data content name to said key center, presents a user data and requests a distribution of a first secret-key and a second secret-key;

when requested to distribute said first secret-key and said second secret-key, said key center generates said first secret-key and said second secret-key, stores said data content name, a first user data, said first secret-key and said second secret-key, and distributes said first secret-key and said second secret-key to said first user;

when said first secret-key and said second secret-key are distributed, said first user stores said first secret-key and said second secret-key in a storage unit;

when said first secret-key and said second secret-key are stored in said storage unit, said first user presents said first user data, specifies said data content name, and requests said data center to distribute the data content;

when requested to distribute said data content, said data center transfers said first user data and said data content name presented by said first user to said key center, asking to transfer said first secret-key and said second secret-key;

when said first user data and said data content name are transferred, said key center transfers said first secret-key and said second secret-key to said data center;

when said first secret-key and said second secret-key are transferred, said data center enters said first user data as electronic watermark in said data content requested by said first user and edits said data content to a first edited data content, encrypts said first edited data content using said first secret-key to obtain an encrypted first edited data content, distributes said encrypted first edited data content to said first user and stores a first scenario of editing process of said first edited data content;

when said encrypted first edited data content is distributed, said first user decrypts said encrypted first edited data content using said first secret-key and uses said first edited data content thus decrypted, and said first secret-key is abandoned at this time;

when said first edited data content is stored in the storage unit, said first edited data content is encrypted using said second secret-key and is stored;

when said encrypted first edited data content is re-used, said encrypted first edited data content is re-decrypted using said second secret-key and re-used;

when said first edited data content is stored again, said first edited data content is encrypted again using said second secret-key and is stored;

when said first user transfers said first edited data content to a second user, said first user enters a second user data as electronic watermark in said first edited data content to edit said first edited data content to a second edited data content, encrypts said second edited data content using said second secret-key to obtain an encrypted second edited data content, transfers said encrypted second edited data content to said second user, and a second scenario of editing process of said second edited data content is transferred to said key center and is registered;

when said encrypted second edited data content is transferred, said second user specifies said data content name to said key center, presents said second user data, and requests distribution of said second secret-key and a third secret-key;

when requested to distribute said second secret-key and said third secret-key, said key center confirms by said second scenario that said second user is a valid user, generates and stores said third secret-key, and distributes said second secret-key and said third secret-key to said second user;

when said second secret-key and said third secret-key are distributed, said second user decrypts said encrypted second edited data content using said second secret-key and uses said second edited data content thus decrypted, and said second secret-key is abandoned at this time;

when said second edited data content is stored, said second edited data content is re-encrypted using said third secret-key and is stored;

when said encrypted second edited data content is re-used, said encrypted second edited data content is decrypted using said third secret-key and is re-used;

when said second edited data content is stored again, said second edited data content is re-encrypted using said third secret-key and is stored again; and

the same operation is repeated thereafter.

2. A data management system, in which users utilize data content of a data center, whereby:

a data management center comprises a data center and a key center;

a first user specifies a data content name to said key center, presents a user data and requests a distribution of a first secret-key and a second secret-key;

when requested to distribute said first secret-key and said second secret-key, said key center generates said first secret-key and said second secret-key, stores said data content name, the first user data, said first secret-key and said second secret-key, and distributes said first secret-key and said second secret-key to said first user;

when said first secret-key and said second secret-key are distributed, said first user stores said first secret-key and said second secret-key in a storage unit;

when said first secret-key and said second secret-key are stored in the storage unit, said first user presents said first user data, specifies said data content name, and requests to said data center to distribute the data content;

when requested to distribute said data content, said data center transfers said first user data and said data content name presented by said first user to said key center, asking to transfer said first secret-key and said second secret-key;

when said first user data and said data content name are transferred, said key center transfers said first secret-key and said second secret-key to said data center;

when said first secret-key and said second secret-key are transferred, said data center enters said first user data as electronic watermark to said data content requested by said first user and edits said data content to a first edited data content, encrypts said first edited data content using said first secret-key to obtain an encrypted first edited data content, distributes said encrypted first edited data content to said first user and stores a first scenario of editing process of said first edited data content;

when said encrypted first edited data content is distributed, said first user decrypts said encrypted first edited data content using said fist secret-key and uses said first edited data content thus decrypted, and said first secret-key is abandoned at this time;

when said first edited data content is stored in the storage unit, said first edited data content is encrypted using said second secret-key and is stored;

when said encrypted first edited data content is re-used, said encrypted first edited data content is decrypted again using said second secret-key and re-used;

when said first edited data content is stored again, said first edited data content is re-encrypted using said second secret-key and is stored again;

when said first user transfers said first edited data content to a second user, said first user enters a second user data as electronic watermark in said first edited data content to edit said first edited data content to a second edited data content, encrypts said second edited data content using said second secret-key to obtain an encrypted second edited data content, transfers said encrypted second edited data content to said second user, and a second scenario of editing process of said second edited data content is transferred to said key center and is registered;

when said second scenario is transferred, said key center generates a third secret-key, stores said second scenario and said third secret-key, and distributes said third secret-key to said first user;

when said third secret-key is distributed, said first user encrypts said second edited data content using said third secret-key, and transfers the encrypted second edited data content to said second user;

when said encrypted second edited data content is transferred, said second user specifies said data content name to said key center, presents the second user data and requests distribution of said third secret-key and a fourth secret-key;

when requested to distribute said third secret-key and said fourth secret-key, said key center confirms by said second scenario that said second user is a valid user, generates and stores said fourth secret-key, and distributes said third secret-key and said fourth secret-key to said second user;

when said third secret-key and said fourth secret-key are distributed, said second user decrypts said encrypted second edited data content using said third secret-key and uses said second edited data content thus decrypted, and said third secret-key is abandoned at this time;

when said second edited data content is stored, said second edited data content is re-encrypted using said fourth secret-key and is stored;

when the encrypted second edited data content is re-used, said encrypted second edited data content is decrypted using said fourth secret-key and is re-used;

when said second edited data content is stored again, said second edited data content is re-encrypted using said fourth secret-key and is stored again; and

the same operation is repeated thereafter.

3. A data management system, in which users utilize data content of a data center, whereby:

a data management center comprises a data center and a key center;

a first user specifies a data content name to said data management center, presents a user data, and requests a distribution of a first secret-key, a second secret-key and data content;

when requested to distribute said first secret-key, said second secret-key and said data content, said data management center generates said first secret-key and said second secret-key, stores said data content name, the first user data, said first secret-key and said second secret-key, enters said first user data as electronic watermark in said data content to edit said data content to a first edited data content, encrypts said first edited data content using said first secret-key to obtain an encrypted first edited data content, distributes said encrypted first edited data content to said first user, and stores a first scenario of editing process of said first edited data content;

when said first secret-key, said second secret-key and said encrypted first edited data content are distributed, said first user stores said first secret-key and said second secret-key distributed in a storage unit, and decrypts said encrypted first edited data content using said first secret-key and uses said first edited data content thus decrypted, and said first secret-key is abandoned at this time;

when said first edited data content is stored in the storage unit, said first edited data content is encrypted using said second secret-key and is stored;

when said encrypted first edited data content is re-used, said encrypted first edited data content is decrypted again using said second secret-key and re-used;

when said first edited data content is stored again in the storage unit, said first edited data content is re-encrypted using said second secret-key and is stored again;

when said first user transfers said first edited data content to a second user, said first user enters a second user data as electronic watermark in said first edited data content to edit said first edited data content to a second edited data content, encrypts said second edited data content using said second secret-key to obtain an encrypted second edited data content, transfers said encrypted second edited data content to said second user, and a second scenario of editing process of said second edited data content is transferred to said data management center and is registered;

when said encrypted second edited data content is transferred, said second user specifies said data content name to said data management center, presents said second user data, and requests distribution of said second secret-key and a third secret-key;

when requested to distribute said second secret-key and said third secret-key, said data management center confirms by said second scenario that said second user is a valid user, generates and stores said third secret-key, and distributes said second secret-key and said third secret-key to said second user;

when said second secret-key and said third secret-key are distributed, said second user decrypts said encrypted second edited data content using said second secret-key and uses said second edited data content thus decrypted, and said second secret-key is abandoned at this time;

when said second edited data content is stored, said second edited data content is re-encrypted using said third secret-key and is stored;

when said encrypted second edited data content is re-used, said encrypted second edited data content is decrypted using said third secret-key and is re-used;

when said second edited data content is stored again, said second edited data content is re-encrypted using said third secret-key and is stored again; and

the same operation is repeated thereafter.

4. A data management system, in which users utilize data of a data management center, whereby:

a data management program is designed as an object program which stores a user data and a secret-key in a slot;

a first user obtains an encrypted data content encrypted using a first secret-key;

when said encrypted data content is obtained, said first user obtains the data management program object stored in said slot with said first secret-key from said data management center, and stores the first user data in the slot of said data management program object;

when it is confirmed by the data management program that said first user data is already stored in the data management program object, an electronic watermark is generated based on said first user data;

said encrypted data content is decrypted using said first secret-key, and the data content thus decrypted is entered promptly said electronic watermark therein to be a first edited data content;

a second secret-key is generated by said data management program and is stored, and said first secret-key is abandoned at this time;

said first edited data content is then used;

when said first edited data content is stored, said first edited data content is encrypted first using said second secret-key to be an encrypted first edited data content;

when it is confirmed that said first edited data content has been the encrypted first edited data content, said encrypted first edited data content is stored;

when said first user re-uses said encrypted first edited data content, said encrypted first edited data content is decrypted using said second secret-key and is used;

when said first edited data content re-used by said first user is stored, said first edited data content is re-encrypted using said second secret-key, and said encrypted first edited data content is stored;

when said first user copies and transfers said first edited data content to a second user, said first edited data content is encrypted, and the encrypted first edited data content is copied and transferred; and

the same operation is repeated thereafter.