Media protection system and method and hardware decryption module used therein

• US 20030046568A1
• Filed: 01/09/2002
• Published: 03/06/2003
• Est. Priority Date: 09/06/2001
• Status: Abandoned Application

• Current Assignee: Christopher J. Riddick, Lan Huu Tran
• Original Assignee: Christopher J. Riddick, Lan Huu Tran
• Inventors: Riddick, Christopher J., Tran, Lan Huu
• Application Number:
  US10/041,981
• Publication Number:
  US 20030046568A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G11B 20/00115 wherein the record carrier stores a unique medium identifier
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00231 wherein the key is obtained from a local external medium, e.g. a card
• CPC Class Codes: G11B 20/00275 the key being stored on a chip attached to the record carrier
• CPC Class Codes: G11B 20/00514 wherein the entire content is encrypted with the same key, e.g. disc key or master key
• CPC Class Codes: G11B 20/00666 involving a step of erasing or nullifying data, e.g. data being overwritten with a random string
• CPC Class Codes: G11B 20/0071 involving a purchase action
• CPC Class Codes: G11B 20/00804 wherein the usage restriction limits the number of users or devices that are allowed to access a given content
• CPC Class Codes: G11B 20/00876 wherein physical copy protection means are attached to the medium, e.g. holograms, sensors, or additional semiconductor circuitry

Abstract

In a media protection system and method, an original media item is encrypted before it is distributed. A digital encryption key for the media item is stored on the consumer'"'"'s personal smart token. To play the media item, the user inserts the media item into his player along with his smart token, and the digital encryption key is extracted by a hardware decryption module (HDM) in the player (or host device), and is used to determine that the decryption key is linked to the HDM. Once that determination is made, the HDM decrypts the media item as it is played. The HDM provides a USB or other standard interface between a plug connected to the player (or host device) and a socket which receives the smart token. The HDM comprises a decryption processor, a control processor, an internal memory, an external interface, and a memory element, such as a read-only memory (ROM). The HDM is implemented as a self-contained, tamperproof subsystem of the media protection system with which it is associated.

Claims

1. A system for reading data from a protected media item, comprising:

a smart token carried by a user and containing a decryption key linked to a specific decryption device;

a hardware decryption module connectable to said smart token and functioning as a decryption device when the decryption key is linked to said hardware decryption module; and

a host device connectable to said hardware decryption module so that said hardware decryption module serves as a decryption device for said host device when the decryption key is linked to said hardware decryption module.

2. The system of claim 1, wherein said hardware decryption module reads the decryption key from the smart token when said smart token is connected to said hardware decryption module, determines whether the decryption key is linked to the hardware decryption module, and decrypts data from the protected media item prior to providing it to said host device when it is determined that the decryption key is linked to the hardware decryption module.

3. The system of claim 2, wherein said hardware decryption module comprises an external interface connected between said smart token and said host device.

4. The system of claim 3, wherein said hardware decryption module further comprises a control processor connected to said external interface for controlling operation of said hardware decryption module.

5. The system of claim 4, wherein said hardware decryption module further comprises a decryption processor connected to said control processor for decrypting the data from the protected media item prior to providing it to said host device.

6. The system of claim 5, wherein said hardware decryption module further comprises a memory for storing decryption key information for comparison with the decryption key from the smart token so as to determine whether the decryption key is linked to the hardware decryption module.

7. The system of claim 2, wherein said hardware decryption module comprises a control processor for controlling operation of said hardware decryption module.

8. The system of claim 7, wherein said hardware decryption module further comprises a decryption processor connected to said control processor for decrypting the data from the protected media item prior to providing it to said host device.

9. The system of claim 8, wherein said hardware decryption module further comprises a memory for storing decryption key information for comparison with the decryption key from the smart token so as to determine whether the decryption key is linked to the hardware decryption module.

10. The system of claim 2, wherein said hardware decryption module comprises a decryption processor for decrypting the data from the protected media item prior to providing it to said host device.

11. The system of claim 10, wherein said hardware decryption module further comprises a memory for storing decryption key information for comparison with the decryption key from the smart token so as to determine whether the decryption key is linked to the hardware decryption module.

12. The system of claim 2, wherein said hardware decryption module comprises a memory for storing decryption key information for comparison with the decryption key from the smart token so as to determine whether the decryption key is linked to the hardware decryption module.

13. The system of claim 1, wherein said hardware decryption module comprises an external interface connected between said smart token and said host device.

14. The system of claim 13, wherein said hardware decryption module further comprises a control processor connected to said external interface for controlling operation of said hardware decryption module.

15. The system of claim 14, wherein said hardware decryption module further comprises a decryption processor connected to said control processor for decrypting the data from the protected media item prior to providing it to said host device.

16. The system of claim 1, wherein said hardware decryption module further comprises a control processor connected to said external interface for controlling operation of said hardware decryption module.

17. The system of claim 16, wherein said hardware decryption module further comprises a decryption processor connected to said control processor for decrypting the data from the protected media item prior to providing it to said host device.

18. The system of claim 1, wherein said hardware decryption module further comprises a decryption processor connected to said control processor for decrypting the data from the protected media item prior to providing it to said host device.

19. The system of claim 1, wherein said hardware decryption module comprises a case having a surface in which a plug is formed for connection to said host device, said case having a socket formed therein for receiving the smart token.

20. The system of claim 1, wherein said hardware decryption module comprises a case, a plug for connection to said host device, and a cable interconnecting said case and said plug, said case having a socket formed therein for receiving the smart token.

21. The system of claim 1, wherein said hardware decryption module functions as a universal serial bus (USB) hub between said host device and said smart token, said hardware decryption module having a plug connectable to said host device and a socket for receiving said smart token.

22. The system of claim 1, wherein said host device sends to said hardware decryption module at least one of an initialize decrypt command, a decrypt data block command, a make copy command, and a retrieve player digital identifier (PDI) command.

23. The system of claim 1, wherein said hardware decryption module sends to said host device at least one of returned decrypted data, a returned encrypted record, and a returned hardware decryption module player digital identifier.

24. The system of claim 1, wherein said hardware decryption module comprises a self-contained device which is tamperproof so as to prevent compromise and copying of information stored therein.