Data copyright management system

• US 20030144963A1
• Filed: 01/28/2003
• Published: 07/31/2003
• Est. Priority Date: 09/30/1994
• Status: Active Grant

• Current Assignee: Piracy Protection LLC (LF Capital Partners, LLC)
• Original Assignee: Mitsubishi Corporation
• Inventors: Saito, Makoto
• Granted Patent: US 8,352,373 B2
• Time in Patent Office: Days
• US Class Current: 705/57
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 50/184 Intellectual property management
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26613 : for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4408 : involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A data copyright management system comprises a database for storing original data, a key control center for managing crypt keys, copyright management center for managing data copyrights, and a communication network for connecting these sections. Data supplied from the database to users is encrypted and distributed. The users decrypts the encrypted data by crypt keys obtained from the key control center or copyright management center. To supply data to users, there are the following two methods: a one way supplying of encrypted data to users by means of broadcasting or the like; and two-way supplying of encrypted data to users corresponding to users'"'"' requests. A crypt key system used for encrypting data uses a secret-key cryptosystem, a public-key cryptosystem or a cryptosystem combining a secret-key and a public-key and further uses a copyright control program to control data copyrights. When a user stores, copies, or transfers data, the data is encrypted by a crypt key different from a crypt key used for supplying the data. The former crypt key is supplied from the key control center or from the copyright management center, or generated by the copyright control program. The present invention can be applied to a data copyright management system for using not only single data but also a plurality of data supplied from a single database or a plurality of data supplied from a plurality of databases. Further, an apparatus to be used by the user to perform data copyright management is proposed.

Claims

1. A data copyright management system for managing the copyright of data which is encrypted and supplied from a database to a user, said data copyright management system having the database and a key control center;

wherein a key for decrypting said encrypted data is supplied from said key control center to said user;

said user uses said key for decrypting when said user displays or edits said data to decrypt said encrypted data; and

said data is re-encrypted when said user stores, copies or transfers said data or data which has been edited.

2. A data copyright management system according to claim 1 wherein said key used in said reencryption is different from said key for decryption.

3. A data copyright management system according to claims 1 or 2 wherein a copyright control program is further used for managing the copyright of said data.

4. A data copyright management system according to claim 3 wherein said data copyright control program is stored in a ROM of a device which said user uses.

5. A data copyright management system according to claim 3 wherein said data copyright control program is stored in system area controlled by an operating system of the device which said user uses.

6. A data copyright management system according to claims 1, 2, 4 or 5 wherein a copyright information which is not encrypted with respect to said data copyright is further used.

7. A data copyright management system according to claim 3 wherein a copyright information which is not encrypted with respect to said data copyright is further used.

8. A data copyright management system according to claims 1, 2, 4, 5 or 7 wherein said copyright information which is not encrypted added to said encrypted data as a copyright information label, said copyright information label being stored, copied or transmitted together with said data in the case where said data is stored, copied or transmitted.

9. A data copyright management system according to claim 3 wherein said copyright information which is not encrypted added to said encrypted data as a copyright information label, said copyright information label being stored, copied or transmitted together with said data in the case where said data is stored, copied or transmitted.

10. A data copyright management system according to claim 6 wherein said copyright information which is not encrypted added to said encrypted data as a copyright information label, said copyright information label being stored, copied or transmitted together with said data in the case where said data is stored, copied or transmitted.

11. A data copyright management system according to claim 8 wherein a digital signature is added to said copyright information label.

12. A data copyright management system according to claim 9 wherein a digital signature is added to said copyright information label.

13. A data copyright management system according to claim 10 wherein a digital signature is added to said copyright information label.

14. A data copyright management system for using data encrypted and supplied from a database to a user, said data copyright management system comprising the database, a key control center and a copyright management center,

wherein said data copyright management system uses secret-key, user information and copyright control program;

said database encrypts the data with first secret-key to distribute the data to a first user via communication network, communication and broadcasting satellite, and record medium;

said first user provides the first user information to said key control center to request the use;

said key control center transfers said first user information to said copyright management center;

said key control center transfers the copyright control program together with said first secret-key and second secret-key to said first user via said communication network;

said first user uses said first secret-key with said copyright control program to decrypts aid encrypted data for use; and

said data decrypted is re-encrypted in the case where said decrypted data is stored, copied or transmitted with said copyright control program by using said second secret-key, and uncrypted-first user information is added.

15. A data copyright management system according to claim 14 wherein said first secret-key and said second secret-key are disused with said copyright control program, when said decrypted data is copied or transmitted;

and

said first user requests for the retransfer of said second secret-key for the reuse of said reencrypted data to said copyright management center so that said second secret-key is retransmitted.

16. A data copyright management system according to claim 15 wherein the copy or transmit of said encrypted data is registered in said copyright management center according to the retransfer of said second secret-key.

17. A data copyright management system according to claim 15 or 16 wherein second user presents said first user information to request the use to said copyright management center;

said copyright management center transfers said second secret-key and third secret-key, and said copyright control program to said second user after confirming the retransfer of said second secret-key to said first user;

said second user decrypts said encrypted data with said copyright control program by using said second secret-key; and

said data is reencrypted and redecrypted with said copyright control program by using said third secret-key when said decrypted data is stored, copied or transmitted.

18. A data copyright management system according to claims 14, 15, or 16 wherein said second secret-key is generated on the basis of any one or more of said first secret-key, said user information, and the usage frequency of said copyright control program with said copyright control program.

19. A data copyright management system according to claim 17 wherein said second secret-key is generated on the basis of any one or more of said first secret-key, said user information, and the usage frequency of said copyright control program with said copyright control program.

20. A data copyright management system for using data encrypted and supplied from a database to a user, said data copyright management system comprising a database, a key control center and a copyright management center;

wherein said data copyright management system uses secret-key, user information and copyright control program;

first user presents the first user information to the database to request the use of the data;

said database encrypts requested said data by using first secret-key and transfers it to said first user via said communication network together with said first secret-key, second secret-key and said copyright control program;

said key control center transfers said first user information to said copyright management center;

said key control center transfers the copyright control program together with said first and second secret-keys to said first user via said communication network;

said first user decrypts and uses said encrypted data with said copyright control program by using said first secret-key; and

said data decrypted is re-encrypted when said decrypted data is stored copied or transmitted with said copyright control program by using said second secret-key, and uncrypted first user information is added.

21. A data copyright management system according to claim 20 wherein said first and second secret-keys are disused with said copyright control program when said decrypted data is copied or transmitted;

said first user requests retransfer of said second secret-key for the reuse of the reencrypted data to said copyright management center; and

said second secret-key is retransferred.

22. A data copyright management system according to claim 21 wherein the copy or transmit of said encrypted data is registered in said copyright management center according to the retransfer of said second secret-key.

23. A data copyright management system according to claim 21 or 22 wherein second user presents said first user information, to request the use to said copyright management center;

said copyright management center transfers said second secret-key, third secret-key and said copyright control program to said second user after confirming the retransfer of said second secret-key to the first user;

said second user decrypts said encrypted data with said copyright control program by using said second secret-key; and

said data is reencrypted and redecrypted with said copyright control program by using said third secret-key in the case where said decrypted data is stored, copied or transmitted.

24. A data copyright management system according to claims 20, 21, or 22 wherein said second secret-key is generated on the basis of any one or more of said first secret-key, said user information, and the usage frequency of said copyright control program with said copyright control program.

25. A data copyright management system according to claim 23 wherein said second secret-key is generated on the basis of any one or more of said first secret-key, said user information, and the usage frequency of said copyright control program with said copyright control program.

26. A data copyright management system for using data encrypted and supplied from a database to a user, said data copyright management system comprising a database, a key control center and a copyright management center;

said data copyright management system uses secret-key, public-key and private-key;

first user presents first public-key, second public-key and first user information to request the use of the desired data to said key control center;

said database which receives the request for use encrypts said data by using first secret-key, encrypts said first secret-key by using said first public-key, and encrypts second secret-key by using said second public-key;

said encrypted data, said encrypted first secret-key, said encrypted second secret-key and said copyright control program are transmitted to said first user;

said first user decrypts said encrypted first secret-key by using first private-key, decrypts said encrypted data by using said decrypted first secret-key, and decrypts said encrypted second secret-key by using second private-key, with said copyright control program;

said data is encrypted and decrypted with said copyright control program by using the second secret-key in the case where said decrypted data is stored, copied or transmitted.

27. A data copyright management system according to claim 26 wherein said first and second secret-keys are disused with said copyright control program when said decrypted data is copied or transmitted;

said first user who reuses said encrypted data requests for the retransfer of said second secret-key for the reuse of said reencrypted data to said copyright management center; and

said second secret-key is retransferred.

28. A data copyright management system according to claim 27 wherein the copy or transmit of said encrypted data is registered in said copyright management center.

29. A data copyright management system according to claim 27 or 28 wherein second user presents said first user information to request the use to said copyright management center;

said copyright management center transfers said second secret-key, third secret-key, and said copyright control program to said second user after confirming the retransfer of said second secret-key to said first user;

said second user decrypts said encrypted data with said copyright control program by using said second secret-key; and

said data decrypted is reencypted and redecrypted with said copyright control program by using said third secret-key in the case where said decrypted data is stored, copied or transmitted.

30. A data copyright management system according to claims 26, 27, or 28 wherein said second secret-key is generated on the basis of any one or more of said first secret-key, said user information, and the usage frequency of said copyright control program.

31. A data copyright management system according to claim 29 wherein said second secret-key is generated on the basis of any one or more of said first secret-key, said user information, and the usage frequency of said copyright control program.

32. A data copyright management system for using a plurality of data encrypted each by different secret-keys and supplied from database to a user, said system using a secret-key, user information and a copyright control program, said data copyright management system comprising:

first user obtaining from a copyright management center a plurality of copyright control programs unique to original said plurality of data and a plurality of first secret-keys to decrypt said plurality of original data with a plurality of said first secret-keys;

one or a plurality of second secret-keys being generated with a plurality of copyright control programs unique to said plurality of original data;

wherein said plurality of original data which are used or edited are encrypted with said one or a plurality of second secret-keys with said plurality of copyright control programs unique to said plurality of original data to be stored, copied or transmitted together with the edition process data; and

said plurality of original data or said plurality of edited data encrypted with said one or plurality of second secret-keys are decrypted with said one or plurality of second secret-keys and said plurality of copyright control programs obtained from said copyright management center for second user to use and edit by using said edition process.

33. A data copyright management system according to claim 32 wherein said second secret-key is generated with said copyright control program on the basis of any one or more of said first secret-keys and said user information.

34. A data copyright management system for using data encrypted and supplied from a database to a user, using a crypt key, user information and a copyright control program, comprising:

said user presenting user information to said database;

said database supplying said data encrypted with first crypt key to first user;

said first user generating a second crypt key based on said first crypt key with said copyright control program;

said encrypted data being decrypted by using said first crypt key in the case where said first user uses said encrypted data; and

said decrypted data being reencrypted by using said second crypt key in the case where said first user stores, copies or transmits said decrypted data.

35. A data copyright management system according to claim 34 wherein said crypt key is a secret-key.

36. A data copyright management system according to claim 34 wherein said crypt key is a public-key and a private-key.

37. A digital cash management system for using digital cash encrypted and supplied from a financial organization to first user, comprising:

said financial organization supplying a key for decrypting said encrypted digital cash data to said first user;

said digital cash data being decrypted by using said decrypting key in the case where said first use confirms said digital cash data; and

said data being reencrypted in the lase where said first user stores said decrypted digital cash case where changed digital cash data is stored, or in the case where digital cash data is transmitted to said second user.

38. A digital cash management system according to claim 37 wherein the key used in said reencryption is a crypt key which is different from said decrypting key.

39. A digital cash management system according to claims 37 or 38 wherein a digital cash management program is further used for managing said digital cash.

40. A digital cash management system according to claims 37 or 38 wherein first user information which is not encrypted is further used.

41. A digital cash management system according to claim 39 wherein first user information which is not encrypted is further used.

42. A digital cash management system according to claims 37 or 38 wherein said first user information which is not encrypted is added to said encrypted digital cash data as the first user information label to be stored or transmitted together with said digital cash data in the case where said digital cash data is stored, in the case where changed digital cash data is stored, or in the case where said digital cash data is transmitted to the second user.

43. A digital cash management system according to claim 39 wherein said first user information which is not encrypted is added to said encrypted digital cash data as the first user information label to be stored or transmitted together with said digital cash data in the case where said digital cash data is stored, in the case where changed digital cash data is stored, or in the case where said digital cash data is transmitted to the second user.

44. A digital cash management system according to claim 40 wherein said first user information which is not encrypted is added to said encrypted digital cash data as the first user information label to be stored or transmitted together with said digital cash data in the case where said digital cash data is stored, in the case where changed digital cash data is stored, or in the case where said digital cash data is transmitted to the second user.

45. A digital cash management system according to claim 41 wherein said first user information which is not encrypted is added to said encrypted digital cash data as the first user information label to be stored or transmitted together with said digital cash data in the case where said digital cash data is stored, in the case where changed digital cash data is stored, or in the case where said digital cash data is transmitted to the second user.

46. A digital cash management system according to claim 42 wherein a digital signature is added to said first user information label.

47. A digital cash management system according to claim 43 wherein a digital signature is added to said first user information label.

48. A digital cash management system according to claim 44 wherein a digital signature is added to said first user information label.

49. A digital cash management system according to claim 45 wherein a digital signature is added to said first user information label.

50. A digital cash management system for using digital cash encrypted and supplied from a financial organization to a first user, said system using a crypt key, user information and digital cash management program, comprising:

said first user presenting the first user information to said financial organization;

said financial organization providing said first user with said digital cash data encrypted by the first crypt key;

wherein said first user generates a second crypt key on the basis of said first crypt key with said digital cash management program;

said encrypted digital cash data is decrypted by using said first crypt key in the case where said first user confirms said encrypted digital cash data;

said digital cash data decrypted is reencrypted by using said second crypt key to be stored said first user;

said decrypted digital cash data is reencrypted by using said second crypt key and said digital cash data reencrypted is transmitted to second user together with said first user information in the case where said decrypted digital cash data is transmitted to said second user;

said first user information is presented to said financial organization from said second user;

said financial organization generates said second crypt key based on said first user information and transfers said second crypt key to said second user; and

said second user decrypts said reencrypted digital cash data with said digital cash management program by using said second crypt key which is transferred.

51. A digital cash management system according to claim 50 wherein said crypt key is a secret-key.

52. A digital cash management system according to claim 50 wherein said crypt key is-a public-key and a private-key.

53. A digital cash management system for using a digital cash encrypted and supplied from a financial organization to first user, said system using a public-key and a private-key, comprising:

said first user presenting first public-key to said financial organization;

said financial organization encrypting digital cash data with said first public-key to supply to said first user;

said first user decrypting said digital cash data by using first private-key;

second user presenting second public-key to said first user;

said first user encrypting said digital cash data which is decrypted with said second public-key to transfer to said second user; and

said second user decrypting said digital cash data by using second private-key.

54. A video conference data management system for using video conference data encrypted and supplied from first user to second user, comprising:

a key for decrypting said encrypted video conference data being supplied from said first user to said second user;

said encrypted video conference data being decrypted by using said decrypting key in the case where said second user uses said video conference data; and

said data being reencrypted in the case where said second user stores decrypted said video conference data, in the case where edited video conference data is stored, or in the case where said video conference data is transmitted to third user.

55. A video conference data management system according to claim 54 wherein a crypt key used for said re-encryption is different from said decrypting key.

56. A video conference data management system according to claims 54 or 55 wherein a video conference data management program for managing said video conference data is further used.

57. A video conference data management system according to claims 54 or 55 wherein first user information which is not encrypted is further used.

58. A video conference data management system according to claim 56 wherein first user information which is not encrypted is further used.

59. A video conference copyright management system according to claims 54 or 55 wherein said uncrypted first user information is added to said encrypted video conference data as the first user information label which is copied or transmitted together with said video conference data in the case where said video conference data is stored, in the case where the edited video conference data is stored, or in the case where the video conference data is transmitted to third user.

60. A video conference copyright management system according to claim 56 wherein said uncrypted first user information is added to said encrypted video conference data as the first user information label which is copied or transmitted together with said video conference data in the case where said video conference data is stored, in the case where the edited video conference data is stored, or in the case where the video conference data is transmitted to third user.

61. A video conference copyright management system according to claim 57 wherein said uncrypted first user information is added to said encrypted video conference data as the first user information label which is copied or transmitted together with said video conference data in the case where said video conference data is stored, in the case where the edited video conference data is stored, or in the case where the video conference data is transmitted to third user.

62. A video conference copyright management system according to claim 58 wherein said uncrypted first user information is added to said encrypted video conference data as the first user information label which is copied or transmitted together with said video conference data in the case where said video conference data is stored, in the case where the edited video conference data is stored, or in the case where the video conference data is transmitted to third user.

63. A video conference data management system according to claim 59 wherein a digital signature is added to said first user information label.

64. A video conference data management system according to claim 60 wherein a digital signature is added to said first user information label.

65. A video conference data management system according to claim 61 wherein a digital signature is added to said first user information label.

66. A video conference data management system according to claim 62 wherein a digital signature is added to said first user information label.

67. A video conference data management system for using video conference data encrypted and supplied from first user to second user, said system using a crypt key, user information, and video conference data management program:

wherein said second user presents second user information to said first user;

said first user supplies to said second user said video conference data encrypted with the first crypt key;

said second user uses said video conference data management program to generate the second crypt key based on said first crypt key;

said encrypted video conference data is decrypted by using said first crypt key in the case where said second user uses said encrypted video conference data; and

said decrypted video conference data is reencrypted by using said second crypt key in the case where said second user stores, copies or transmits said decrypted video conference data.

68. A video conference data management system according to claim 67 wherein said crypt key is a secret-key.

69. A video conference data management system according to claim 67 wherein said crypt key is a public-key and a private-key.

70. A data copyright management apparatus connected for use to a system bus in main body of user terminal, comprising a microprocessor, a read only memory, reading and writing memory and EEPROM connected to a microprocessor bus: