Apparatus and method for the decryption of an encrypted electronic document

• US 20030177378A1
• Filed: 02/09/2002
• Published: 09/18/2003
• Est. Priority Date: 06/01/2001
• Status: Abandoned Application

• Current Assignee: Brainshield Technologies Incorporated
• Original Assignee: Brainshield Technologies Incorporated
• Inventors: Wittkotter, Erland
• Application Number:
  US10/071,544
• Publication Number:
  US 20030177378A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819

Abstract

Apparatus for decrypting of an encrypted electronic document by means of a key data file that is introduced or delivered from a server over a public data transmission network, preferably the Internet, whereby the decrypted electronic document is displayable on a local data processing appliances, which comprise a visualization unit or representation unit that enables an outputting of the unencrypted electronic document and which comprise a decryption unit that is used for combining or joining the encrypted document and the key data file for generating the decrypted document, characterized in that the decryption unit comprise in the state, which is capable for accomplishment, at least one function unit that is technically changeable by means of a program, which is capable to be configured by selecting of a key data file from a plurality of local or server sided available key data files or is capable to be configured by the performing of a necessary operation procedure of the decryption unit used for the combination or integration in the generating of the decrypted document or used for the configuration of a specific accessing on a server sided address that is comprised by a key data file and a decryption operation of the decryption unit is influenced in a manner, that only with a predetermined configuration of the function unit the combining or integrating in the decryption unit lead to the correct decrypted document, and whereby the predetermined configuration the function unit is installed or established with at least a single online-contact of the local data processing appliance with the server and which comprise a parameter setting of the function unit resp. decryption unit or an assignment of a program files resp. command components to the decryption unit or comprise a generating of the functions- or decryption unit.

Claims

1. Apparatus for decrypting of an encrypted electronic document by means of a key data file that is introduced or delivered from a server over a public data transmission network, preferably the Internet,

whereby the decrypted electronic document is displayable on a local data processing appliances, which comprise a visualization unit or representation unit that enables an outputting of the unencrypted electronic document

and which comprise a decryption unit that is used for combining or joining the encrypted document and the key data file for generating the decrypted document, characterized in that

the decryption unit comprise in the state, which is capable for accomplishment, at least one function unit that is technically changeable by means of a program, which is capable to be configured by selecting of a key data file from a plurality of local or server sided available key data files or is capable to be configured by the performing of a necessary operation procedure of the decryption unit used for the combination or integration in the generating of the decrypted document or used for the configuration of a specific accessing on a server sided address that is comprised by a key data file

and a decryption operation of the decryption unit is influenced in a manner, that only with a predetermined configuration of the function unit the combining or integrating in the decryption unit lead to the correct decrypted document,

and whereby the predetermined configuration the function unit is installed or established with at least a single online-contact of the local data processing appliance with the server and which comprise a parameter setting of the function unit resp. decryption unit or an assignment of a program files resp. command components to the decryption unit or comprise a generating of the functions- or decryption unit.

2. Apparatus as set forth in claim 1, characterized in that the visualization or representation unit is realized as browser and the decryption unit is used by a plug-in in the browser, or the decryption unit is integrated in the browser, or the decryption unit is arranged as an approachable local server unit on the local data processing appliance, or a function unit on the local data processing unit is connected for instance called over a Intranet-connection belongs to the decryption appliance of the remote data processing unit.

3. Apparatus as set forth in claim 1, characterized in that the function unit is realized as a program library of the decryption unit or a visualization or representation unit, as executable file or as command line or element of the decryption unit on an operation system platform of the local data processing appliances that is preferably managed or realized by a programming- or script language and in particular by means of a digital signature, that is formed on the function unit and that is capable to recognize that an execution operation of the decryption unit, is correct, not manipulated or properly known and thereby capable to be evaluated in a result influenced manner.

4. Apparatus as set forth in claim 1, characterized in that the encrypted electronic document is realized by means of a encryption procedure, in which the encrypted document and the key data file are generated from the decrypted document that correspond to original amount of data, which comprise a sequence of information component of a meta language in form of a written language, a number system or information components from a predetermined uniform format structure of arranged or ordered data elements, in particular image-, sound- or program information, that data elements are stored in a plurality of electronic addressable storage areas and that the encrypted document is generated by following operations:

Exchanging or removing of an information component in the amount of data or attaching of an information component at a predetermined position in the sequence of information components or replacing of an information components against a preferred information component that is not contained in the original amount of data not contained,

whereby the key data file comprise specific information about the exchanged, removed, inserted, attached or interchanged information component and is thereby arranged in manner that a reconstruction of the original amount of data is permitted.

5. Apparatus as set forth in claim 4, characterized in that the decryption unit is realized as a reconstruction unit, so that the processing of the encrypted amount of data and the key data file is arranged for generating of the decrypted document.

6. Apparatus as set forth in claim 4, characterized in that each encrypted document is assigned to a plurality of usable key data files by the decryption unit, whereby at least one is usable to generate the decrypted electronic document, and at least one is usable to generate a document that is for a user seemingly correct, however which is not arranged or designed as the correct decrypted document that is corresponding to the electronic document.

7. Apparatus as set forth in claim 1, characterized in that for generating of the decrypted document a plurality of key data file is necessary.

8. Apparatus as set forth in claim 1, characterized in that the necessary operation procedure that is used for the combination or integration for the generation or creation of the decrypted document comprise the selecting of a key data file from a plurality of key data files or comprise the producing of a sequence of successive decryption steps or comprise the needed key data files used for the combination or integration.

9. Apparatus as set forth in claim 1, characterized in that the predetermined configuration is designed in a document specific manner, in particular after expiring of a predetermined period of usage time a decrypted electronic document requires a renewed decryption after renewed configuration.

10. Apparatus as set forth in claim 1, characterized in that the predetermined configuration is dependent from the local data processing appliance and in particular specifically designed or arranged for the appliance.

11. Apparatus as set forth in claim 1, characterized in that the decryption unit is designed or arranged in an manner that a repeated or new decryption of the encrypted document occurs by means of a configuration of the function unit, which differ from the configuration of a foregoing decryption process and in particular is influenced by operation or status data of the foregoing decryption process.

12. Apparatus as set forth in claim 1, characterized in that the decryption unit is assigned to a plurality of function units, whereby the decryption unit comprise the configuration, the selecting of one of the function units and its assigning to a decryption operation.

13. Apparatus as set forth in claim 12, characterized in that the corresponding function unit from the plurality of function units is different with regard to its effect on the decryption operation of the encryption unit and which are preferably realized as binary files resp. modules.

14. Apparatus as set forth in claim 1, characterized in that the key data file is realized as an executable program, which is acting as a function unit of the decryption unit, whereby in particular information for generation of the decrypted document arises from interactions between components, internal variables or other program parameters of the executable program and are acting on the encrypted document.

15. Apparatus as set forth in claim 1, characterized in that the electronic document is selected from the group, which consist of audio-, music-, video-, program-, multimedia-, animations-, 3D-, text-, image- or game files.

16. Apparatus as set forth in claim 1, characterized in that server sided of a server unit comprise a proxy unit that is installed in front of the server unit, which is approachable or callable by function of the function unit and which execute an identification or authentification process of the called local data processing appliance, in particular for comparing document related usage right of the user on the local data processing appliance with the server sided introducible or deliverable key data files.

17. Method for decrypting of an encrypted electronic document by means of a key data file that is introduced or delivered from a server over a public data transmission network, preferably the Internet, in particular method for operating the apparatus as set forth in claim 1,

whereby the decrypted electronic document is displayable on a local data processing appliances, which comprise a visualization unit or representation unit that enables an outputting of the unencrypted electronic document

and which comprise a decryption unit that is used for combining or joining the encrypted document and the key data file for the generating of the decrypted document, with the steps:

transmitting of the key data file partly or completely over the data transmission network,

transmitting of at least one predetermined function unit of the decryption unit as file, command components or script over the data transmission network to the local data processing appliance,

activating of the decryption unit,

decrypting of the encrypted document by electronic processing of a data stream that is corresponding to the key data file or to the encrypted document by means of the predetermined function unit and

displaying of the decrypted document by means of the visualization or representation unit.