System and method for authenticating digital content

• US 20040039929A1
• Filed: 08/26/2002
• Published: 02/26/2004
• Est. Priority Date: 08/26/2002
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Decime, Jerry
• Granted Patent: US 7,509,683 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

A system and method for authenticating digital content is described. In one implementation, digital content recorded by a recording device is stored in a secure section of a memory device. A control system is configured to block access to the digital content stored in the secure section except to permit one or more portions of the digital content to be transmitted to a certification and validation authority where the one or more portions of the digital content is maintained in a secure repository in the event the authenticity of the digital content is questioned.

Claims

1. A system for authenticating digital content recorded by a recording device;

comprising;

a memory device including a secure section configured to store the digital content, and a control system configured to block access to the digital content stored in the secure section except to permit one or more portions of the digital content to be transmitted to a certification and validation authority where the one or more portions of the digital content is maintained in a secure repository if the authenticity of the digital content is questioned.

2. The system as recited in claim 1, wherein the control system is further configured to permit one or more portions of the digital content to be read and/or deleted from the secure section of the memory device by an entity other than the certification and validation authority, when the control system receives an authorization reply from the certification and vailidation authority acknowledging that the one or more portions of the digital content were received.

3. The system as recited in claim 1, wherein the certification and validation authority maintains the one or more portions of the digital content in a secure database, and if requested, is organized to produce the one or more portions of the digital content for evidentiary purposes in the event the authenticity of the digital content is questioned.

4. The system as recited in claim 1, wherein the memory device further includes a public section configured to store the digital content so that the digital content is accessible to host devices.

5. The system as recited in claim 1, further comprising a secure communication channel interface to transmit the one or more portions of the digital content to the certification and validation authority.

6. The system as recited in claim 1, wherein the recording device is one of a camera, a computer, a portable device and a digital audio recorder.

7. The system as recited in claim 1, wherein the memory device is a memory card.

8. The system as recited in claim 1, wherein the one or more portions of the digital content include metadata associated with digital content.

9. A system for authenticating digital content recorded by a recording device, comprising:

a memory device having secure section configured to store one or more portions of the digital content; and

a control system configured to block access to the one or more portions of the digital content stored in the secure section and permit metadata associated with the one or more portions of the digital content to be transmitted to a certification and validation authority.

10. The system as recited in claim 9, wherein the control system is further configured to permit one or more portions of the digital content to be read and/or deleted from the secure section of the memory device by an entity other than the certification and validation authority, when the control system receives an authorization reply from the certification authority acknowledging that the metadata was received.

11. The system as recited in claim 9, wherein the certification and validation authority maintains the metadata in a secure database, and if requested, is organized to produce the metadata for evidentiary purposes.

12. The system as recited in claim 9, wherein the memory device further includes a public section configured to store the digital content so that the digital content is accessible to host devices.

13. The system as recited in claim 9, further comprising a secure communication channel interface to transmit the metadata to the certification and validation authority.

14. The system as recited in claim 9, wherein the recording device is one of a camera, a computer, a portable device and a digital audio recorder.

15. The system as recited in claim 9, wherein the memory device is a memory card.

16. A memory device for digital recording device, comprising:

a public section configured to store digital content received from the recording device and permit other devices connected to the memory device, direct access to the digital data stored therein; and

a secure section also configured to store the digital content received from the recording device prior to be retrieved from the memory device, the secure section configured to block access to the digital data stored in the secure section until the digital data is conveyed to a certification and validation authority and the certification and validation authority acknowledges receipt of the digital content.

17. The memory device as recited in claim 16, wherein the security section includes a manifest configured to store metadata associated with the digital content received from the recording device.

18. The memory device as recited in claim 16, further comprising interface logic configured to provide read and delete only access between the secure section of the memory device and a host device, after the certification and validation authority acknowledges receipt of the digital content.

19. The memory device as recited in claim 16, further comprising an intrusion detection system configured to monitor communication to and from the secure section and record potential security abnormalities in a manifest.

20. The memory device as recited in claim 16, wherein an encrypted communication channel is established between the memory device and the certification and validation authority.

21. The memory device as recited in claim 16, wherein the secure section is contained on a memory card.

22. An authentication system, comprising:

a memory device, configured to maintain an image recorded by digital device in a secure region of the memory device; and

a certification and validation authority, configured to receive information associated with the image read from the secure region of the memory device, and maintain the information in a database in the event that authenticity of the image recorded by the digital device is questioned.

23. The authentication system as recited in claim 22, where the information includes metadata associated with the image.

24. The authentication system as recited in claim 22, wherein the information includes checksum data.

25. The authentication system as recited in claim 22, wherein the information includes global positioning information.

26. The authentication system as recited in claim 22, further including a host device operating software configured to interface with the memory device and the certification and validation authority.

27. The authentication system as recited in claim 22, wherein the certification and validation authority is further configured to receive a copy of the image from the secure region of the memory device and maintain the image in a database in the event that the authenticity of the image recorded by the digital device is questioned.

28. A method for authenticating digital content recorded by a digital recording device, comprising:

storing the digital content in a secure section of a memory device;

restricting access to the digital content in the secure section; and

transmitting to a certification and validation authority, one of (i) information associated with the digital content, (ii) the digital content and (iii) information associated with the digital content and the digital content, wherein the certification and validation authority serves as a secure repository in the event authenticity of the digital content is questioned.

29. The method as recited in claim 28, further comprising permitting access to the restricted access to the digital content in the secure section, after the certification and validation authority acknowledged receipt of the one of (i) information associated with the digital content, (ii) the digital content and (iii) information associated with the digital content and the digital content.

30. The method as recited in claim 28, wherein the information associated with the digital content includes metadata that can be used for checksum purposes.

31. An authentication system, comprising:

a certification and validation authority organized to;

(i) receive information associated with digital content recorded by a digital recording device;

(ii) maintain the information in a secure environment, inaccessible to the public; and

(iii) produce the information for a questioning body in the event that the authenticity of the image recorded by the digital device is questioned.

32. The authentication system as recited in claim 31, wherein the information includes metadata associated with the digital content that can be used for checking purposes.

33. The authentication system as recited in claim 31, wherein the questioning body is one of a court, an administrative agency, a detective agency, an intelligence agency, a police agency, an insurance agency and a medical agency.