Secure content activation during manufacture of mobile communication devices

• US 20030226030A1
• Filed: 05/30/2002
• Published: 12/04/2003
• Est. Priority Date: 05/30/2002
• Status: Active Grant

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Tuoriniemi, Samuli, Hurst, Leon
• Granted Patent: US 7,367,059 B2
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method and apparatus for activating protected content on a portable memory device when the portable memory device is incorporated into a mobile terminal during the manufacture of the mobile terminal. During manufacturing, the portable memory device is coupled to the mobile terminal, and the mobile terminal is powered on. An activation program resident on the mobile terminal is executed upon power on of the mobile terminal. The activation program imports a secure rights database of rights files from the portable memory device, activates an active rights database resident on the mobile terminal based on the imported secure rights database, and disables the secure rights database on the portable memory device to prevent subsequent unauthorized use of the portable memory device.

Claims

1. A method for activating a mobile terminal for use with a portable memory device during production of the mobile terminal, the method comprising:

coupling the portable memory device to the mobile terminal;

powering on the mobile terminal; and

executing a mobile terminal-resident program which imports from the portable memory device a secure rights database of rights files, activates an active rights database resident on the mobile terminal based on the imported secure rights database, and disables the secure rights database on the portable memory device.

2. The method of claim 1, wherein coupling the portable memory device to the mobile terminal, powering on the mobile terminal, and executing a mobile terminal-resident program are performed as one or more assembly line functions during production of the mobile terminal.

3. The method of claim 1, further comprising powering down the mobile terminal after disabling the secure rights database on the portable memory device.

4. The method of claim 1, wherein executing a mobile terminal-resident program comprises executing a mobile terminal-resident program which activates the rights database by decrypting the imported secure rights database and updating the active rights database to include the rights files associated with the imported secure rights database.

5. The method of claim 4, wherein the mobile terminal-resident program further locates an encryption key hidden within the mobile terminal-resident program, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the encryption key.

6. The method of claim 4, wherein the mobile terminal-resident program further receives a memory device identifier unique to the portable memory device, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the memory device identifier.

7. The method of claim 4, wherein the mobile terminal-resident program further derives an encryption key from a plurality of parameters including a secret key hidden within the mobile terminal-resident program and a memory device identifier unique to the portable memory device, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the derived encryption key.

8. The method of claim 4, wherein the mobile terminal-resident program further locates a particular one of a plurality of encryption keys in an encryption key bank stored with the mobile terminal-resident program, wherein the particular encryption key was previously used to encrypt the secure rights databases stored on a group of portable memory devices including the portable memory device coupled to the mobile terminal, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the particular encryption key from the encryption key bank.

9. The method of claim 1, wherein executing a mobile terminal-resident program comprises executing a mobile terminal-resident program which imports the secure rights database and disables the secure rights database by moving the secure rights database to the mobile terminal-resident program, thereby leaving no secure rights database on the portable memory device.

10. The method of claim 1, wherein executing a mobile terminal-resident program comprises executing a mobile terminal-resident program that disables the secure rights database by deleting the secure rights database on the portable memory device.

11. The method of claim 1, wherein executing a mobile terminal-resident program comprises executing a mobile terminal-resident program that disables the secure rights database by obscuring data associated with the secure rights database on the portable memory device.

12. The method of claim 11, wherein obscuring data associated with the secure rights database comprises overwriting the data associated with the secure rights database with data different from the data associated with the secure rights database.

13. The method of claim 1, wherein executing a mobile terminal-resident program comprises executing a mobile terminal-resident program which further searches for and locates the secure rights database on the portable memory device prior to importing the secure rights database.

14. The method of claim 1, wherein executing a mobile terminal-resident program comprises automatically initiating the mobile terminal-resident program upon power on of the mobile terminal.

15. The method of claim 1, wherein executing a mobile terminal-resident program comprises semi-automatically initiating the mobile terminal-resident program by activating at least one user-interface mechanism on the mobile terminal.

16. The method of claim 1, wherein powering on the mobile terminal comprises applying power to the mobile terminal and turning on the mobile terminal after the portable memory device has been coupled to the mobile terminal.

17. The method of claim 1, wherein coupling the portable memory device to the mobile terminal comprises inserting the portable memory device into a receptacle on the mobile terminal configured to receive the portable memory device.

18. The method of claim 1, further comprising pre-programming the portable memory device to include protected content and the secure rights database.

19. The method of claim 1, further comprising activating protected content on the portable memory device for post-production use via the mobile terminal by utilizing at least one of the rights files in the active rights database to decrypt the protected content if the corresponding rights file authorizes use of the protected content.

20. A mobile terminal comprising:

a removable memory card having stored thereon one or more items of secure content, and a secure rights database of rights files for enabling use of the secure content;

an active rights database;

a storage module for storing an activation program;

a processor configured to execute the activation program upon initiation of the activation program during production of the mobile terminal, wherein execution of the activation program performs steps comprising;

(a) importing the secure rights database from the removable memory card;

(b) decrypting the imported secure rights database;

(c) updating the active rights database to include the rights files associated with the decrypted secure rights database; and

(d) disabling the secure rights database on the removable memory card.

21. The mobile terminal as in claim 20, wherein the processor is further configured to execute the activation program to perform the step comprising locating an encryption key hidden within the activation program, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the encryption key.

22. The mobile terminal as in claim 20, wherein the processor is further configured to execute the activation program to perform the step comprising receiving a memory card identifier unique to the removable memory card, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the memory card identifier.

23. The mobile terminal as in claim 20, wherein the processor is further configured to execute the activation program to perform the step comprising deriving an encryption key from a plurality of parameters including a secret key hidden within the activation program and a memory card identifier unique to the removable memory card, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the derived encryption key.

24. The mobile terminal as in claim 20, wherein the processor is further configured to execute the activation program to perform the step comprising locating a particular one of a plurality of encryption keys in an encryption key bank stored with the mobile terminal-resident program, wherein the particular encryption key was previously used to encrypt the secure rights databases stored on a group of removable memory cards including the removable memory card of the mobile terminal, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the particular encryption key from the encryption key bank.

25. The mobile terminal as in claim 20, wherein the mobile terminal is at least one of a mobile telephone, personal digital assistant, portable computing device, and mobile music player.

26. The mobile terminal as in claim 20, wherein the removable memory card is a read/write memory card capable of being read from and written to. The mobile terminal as in claim 20, wherein the removable memory card is a read-only memory (ROM).

27. An assembly line process for manufacturing mobile terminals, comprising:

installing an activation program on a mobile terminal, wherein the activation program is capable of performing steps comprising;

(a) importing from a portable memory device a secure rights database of rights files;

(b) activating an active rights database resident on the mobile terminal based on the imported secure rights database; and

(c) disabling the secure rights database on the portable memory device;

inserting the portable memory device into the mobile terminal;

powering on the mobile terminal and executing the activation program in response thereto; and

powering off the mobile terminal upon completion of execution of the activation program.