Method and system to secure content for distribution via a network

• US 20030167392A1
• Filed: 12/16/2002
• Published: 09/04/2003
• Est. Priority Date: 06/16/2000
• Status: Active Grant

• Current Assignee: MIH Technology Holdings BV
• Original Assignee: Entriq Incorporated
• Inventors: Fransdonk, Robert W.
• Granted Patent: US 6,961,858 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A method and system to secure content for distribution via a communications network commences when a user device authentication process is associated with content from a content provider. A copy-protected device authentication process is associated with the content. The user device authentication process and the copy-protected device authentication process are separate authentication processes to protect the content from unauthorized access.

Claims

1. A method of securing content for distribution via a network, the method including:

associating a user device authentication process with the content; and

associating a copy-protected device authentication process with the content,

wherein the user device authentication process and the copy-protected device authentication process comprise separate authentication processes to protect the content from unauthorized access.

2. The method of claim 1 wherein the user device authentication process includes verification of a user device certificate.

3. The method of claim 2 wherein the verification of the user device certificate occurs at an agent remote from a user device.

4. The method of claim 2 wherein the verification of the user device certificate occurs at a user device.

5. The method of claim 1 wherein the user device authentication process includes verification of the user credentials against content access criteria.

6. The method of claim 1 wherein the copy-protected device authentication process includes verification of a copy-protected device certificate.

7. The method of claim 6 wherein the verification of the copy-protected device certificate occurs at an agent remote from a copy-protected device.

8. The method of claim 6 wherein the verification of the copy-protected device certificate occurs at a copy-protected device.

9. The method of claim 1 including, upon successful completion of the user device and copy-protected device authentication processes, encrypting a product key, with which the content is encrypted, with a public key of a copy-protected device.

10. The method of claim 1 wherein the associating of both the user device and copy-protected device authentication processes with the content includes encrypting a product key, to access the content, with both a public key of a user device and a public key of a copy-protected device to create a twice-encrypted product key.

11. The method of claim 10 wherein the twice-encrypted product key is first encrypted with the public key of a user device to create a once-encrypted product key, and second encrypted with the public key of a copy-protected device to create the twice-encrypted product key.

12. The method of claim 10 wherein the twice-encrypted product key is included within a license associated with the content.

13. The method of claim 12 wherein the license includes any one of a group of data items including the user device public key, a certificate serial number, and issuer authentication information.

14. The method of claim 13 wherein the issuer authentication information includes a signature by a license issuer and a certificate of the license issuer.

15. The method of claim 10 wherein the user device authentication process includes decryption of the twice-encrypted product key by the user device to reveal a once-encrypted product key.

16. The method of claim 15 wherein the user device decrypts the twice-encrypted product key utilizing a private key of a user device.

17. The method of claim 16 wherein the copy-protected device issues a request to the user device to decrypt the twice-encrypted product key, the request including a challenge to the twice-encrypted product key.

18. The method of claim 17 wherein the challenge includes a private key of the user device.

19. The method of claim 15 wherein the copy-protected device authentication process includes decryption of the once-encrypted product key by the copy-protected device to reveal the product key.

20. The method of claim 15 wherein the copy-protected device decrypts the once-encrypted product key utilizing a private key of the copy-protected device.

21. A system to secure content for distribution via a network, the system including:

a user device;

a copy-protected device; and

a content distributor, coupled via the network to both the user and copy-protected devices, to perform a user device authentication process and a copy-protected device authentication process with respect to the content,

wherein the user device authentication process and the copy-protected device authentication process comprise separate authentication processes to protect the content from unauthorized access.

22. The system of claim 21 wherein the user authentication process includes verification of a user device certificate associated with the user device.

23. The system of claim 21 wherein the user device authentication process includes verification of the user credentials against content access criteria.

24. The system of claim 21 wherein the copy-protected device authentication process includes verification of a copy-protected device certificate associated with the copy-protected device.

25. The system of claim 24 wherein the verification of the copy-protected device certificate occurs at an agent remote from the copy-protected device.

26. The system of claim 24 wherein the verification of the copy-protected device certificate occurs at the copy-protected device.

27. The system of claim 21 wherein the content distributor, upon successful completion of the user device and copy-protected device authentication processes, is to encrypt a product key, with which the content is encrypted, with a public key of the copy-protected device.

28. The system of claim 21 wherein the content distributor, upon successful completion of the user device and copy-protected device authentication processes, is to encrypt a product key, with which the content is encrypted, with both a public key of the user device and a public key of the copy-protected device to create a twice-encrypted product key.

29. The system of claim 28 wherein the twice-encrypted product key is first encrypted with the public key of the user device to create a once-encrypted product key, and second encrypted with the public key of the copy-protected device to create the twice-encrypted product key.

30. The system of claim 28 wherein the content distributor is to include the twice-encrypted product key within a license associated with the content.

31. The system of claim 30 wherein the license includes any one of a group of data items including a user device public key, a certificate serial number, and issuer authentication information.

32. The system of claim 31 wherein the issuer authentication information includes a signature by a license issuer and a certificate of the license issuer.

33. The system of claim 29 wherein the user device authentication process includes decryption of the twice-encrypted product key by the user device to reveal the once-encrypted product key.

34. The system of claim 33 wherein the user device decrypts the twice-encrypted product key utilizing a private key of the user device.

35. The system of claim 28 wherein the copy-protected device issues a request to the user device to decrypt the twice-encrypted product key, the request including a challenge to the twice-encrypted product key.

36. The system of claim 35 wherein the challenge includes a private key of the user device.

37. The system of claim 33 wherein the copy-protected device authentication process includes decryption of the once-encrypted product key by the copy-protected device to reveal the product key.

38. The system of claim 29 wherein the copy-protected device is to decrypt the once-encrypted product key utilizing a private key of the copy-protected device.

39. A system to secure content for distribution via a network, the system including:

a user device;

a copy-protected device; and

a content distributor means, coupled via the network to both the user and copy-protected devices, to perform a user device authentication process and a copy-protected device authentication process with respect to the content, wherein the user device authentication process and the copy-protected device authentication process comprise separate authentication processes to protect the content from unauthorized access.

40. A computer readable medium a method of securing content for distribution via a network, the method including:

associating a user device authentication process with the content; and

associating a copy-protected device authentication process with the content,

wherein the user device authentication process and the copy-protected device authentication process comprise separate authentication processes to protect the content from unauthorized access.