Content states in a media network environment

• US 20040139022A1
• Filed: 10/15/2003
• Published: 07/15/2004
• Est. Priority Date: 12/17/2002
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Pictures Entertainment Incorporated (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Pictures Entertainment Incorporated (Sony Group Corp.)
• Inventors: Lakamp, Brian David, Singer, Mitch Fredrick
• Application Number:
  US10/686,955
• Publication Number:
  US 20040139022A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/2805 Home Audio Video Interoperability [HAVI] networks
• CPC Class Codes: H04L 12/2812 describing content present in a home automation network, e.g. audio video content retrieval from the Internet G06F16/95
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 41/509 wherein the managed service relates to media content delivery, e.g. audio, video or TV
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04N 21/2343 involving reformatting operations of video signals for distribution or compliance with end-user requests or end-user device requirements video transcoding H04N19/40; media packet handling at the source H04L65/762
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/2585 Generation of a revocation list, e.g. of client devices involved in piracy acts
• CPC Class Codes: H04N 21/41422 located in transportation means, e.g. personal vehicle arrangements specially adapted for transportation systems in broadcast systems H04H20/62
• CPC Class Codes: H04N 21/4147 PVR [Personal Video Recorder] H04N5/76 takes precedence ; arrangements for broadcast with accumulation-type receivers H04H20/40
• CPC Class Codes: H04N 21/433 Content storage operation, e.g. storage operation in response to a pause request, caching operations
• CPC Class Codes: H04N 21/4331 Caching operations, e.g. of an advertisement for later insertion during playback
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/43622 : Interfacing an external recording device
• CPC Class Codes: H04N 21/43637 : involving a wireless protocol, e.g. Bluetooth, RF or wireless LAN [IEEE 802.11] arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114
• CPC Class Codes: H04N 21/4367 : Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4402 : involving reformatting operations of video signals for household redistribution, storage or real-time display details of conversion of video standards at pixel level H04N7/01; video transcoding H04N19/40; adapting incoming signals to the display format of the display terminal G09G5/005; media handling at the source in data packet switching networks H04L65/764
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/44231 : Monitoring of peripheral device or external card, e.g. to detect processing problems in a handheld device or the failure of an external recording device configuring of peripheral devices in general G06F9/4411; reporting information sensed by appliance or service execution status of appliance services in a home automation network H04L12/2823; monitoring the status of connected device in data switched networks H04L43/0817
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/63345 : by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/163 : by receiver means only

Abstract

Methods and apparatus for managing devices and content in a network environment. In one implementation, a method of binding content to a hub network includes: receiving a request to bind a discrete version of content to a hub network including a server and a client as members of said hub network, wherein said discrete version includes discrete locked content data; disabling said discrete version; and creating a source version of said content stored on said server, wherein said source version includes source locked content data; creating a root license stored on said server, wherein said root license is bound to said hub network.

Claims

1. A method of binding content to a hub network, comprising:

receiving a request to bind a discrete version of content to a hub network including a server and a client as members of said hub network, wherein said discrete version includes discrete locked content data;

disabling said discrete version;

creating a source version of said content stored on said server, wherein said source version includes source locked content data; and

creating a root license stored on said server, wherein said root license is bound to said hub network.

2. The method of claim 1, further comprising:

receiving said discrete version stored on compliant media;

wherein compliant media is readable and writable electronic storage media.

3. The method of claim 1, wherein:

said discrete version has a corresponding discrete license.

4. The method of claim 3, wherein:

disabling said discrete version includes disabling said discrete license.

5. The method of claim 3, wherein:

creating said root license includes creating said root license according to said discrete license.

6. The method of claim 1, wherein:

said server will decrypt said discrete locked content data after disabling said discrete version upon request.

7. The method of claim 1, wherein:

said root license indicates said server has root responsibility for said source version.

8. The method of claim 1, further comprising:

creating a copy of said discrete locked content data; and

storing said copy as said source locked content data.

9. The method of claim 1, further comprising:

creating bound licensing authority data according to discrete licensing authority data;

wherein said discrete licensing authority data corresponds to said discrete version and said discrete licensing authority data indicates an external server is an external licensing authority,

said bound licensing authority data corresponds to said source version and said bound licensing authority data indicates said root license is a local licensing authority and said external server is an external licensing authority.

10. The method of claim 1, wherein:

said discrete version has a corresponding revocation list of one or more devices for which authorization to participate in a hub network has been revoked.

11. The method of claim 10, further comprising:

checking whether said server is in said revocation list before disabling said discrete version and creating said source version.

12. The method of claim 10, further comprising:

updating a server revocation list stored by said server according to said revocation list of said discrete version; and

checking whether said server is in said server revocation list before disabling said discrete version and creating said source version.

13. The method of claim 10, further comprising:

creating a revocation list corresponding to said source version by creating a copy of said revocation list corresponding to said discrete version.

14. The method of claim 1, wherein:

said server and said client are both compliant devices,

a compliant device will not decrypt locked content data without a license that is bound to a hub network of which the compliant device is a member.

15. The method of claim 14, wherein:

a non-member compliant device that is not a member of said hub network will decrypt said discrete locked content data upon request while said discrete version is not disabled, but said non-member compliant device will not decrypt said discrete locked content data while said discrete version is disabled.

16. The method of claim 1, further comprising:

creating a source key by copying a discrete key;

wherein said discrete key is for decrypting said discrete locked content data, and

said source key is for decrypting said source locked content data.

17. The method of claim 16, wherein:

said discrete locked content data is encrypted using a content encryption technique,

said source locked content data is encrypted using said content encryption technique,

said discrete key is encrypted using a hub network encryption technique that is different from said content encryption technique, and

said source key is encrypted using said hub network encryption technique.

18. The method of claim 17, wherein:

said server stores a hub network key for decrypting data encrypted using said hub network encryption technique.

19. The method of claim 17, wherein:

said hub network encryption technique is different from said content encryption technique because said hub network encryption technique uses a different key for encrypting data than the key that said content encryption technique uses for encrypting data.

20. The method of claim 17, wherein:

said root license is encrypted using said hub network encryption technique.

21. A method of freeing content bound to a hub network, comprising:

receiving a request to free a source version of content from a hub network including a server and a client as members of said hub network, wherein said source version is stored on said server, includes source locked content data, and has a corresponding root license bound to said hub network;

disabling said source version; and

creating a discrete version of said content, wherein said discrete version includes discrete locked content data.

22. The method of claim 21, further comprising:

checking whether compliant media is available to store said discrete version before disabling said source version and creating said discrete version; and

storing said discrete version on available compliant media;

wherein compliant media is readable and writable electronic storage media.

23. The method of claim 21, further comprising:

disabling a sub-copy version of said content stored on said client;

wherein said sub-copy version includes a copy of said source locked content data.

24. The method of claim 21, wherein:

disabling said source version includes disabling said root license.

25. The method of claim 21, wherein:

said server will not decrypt said source locked content data after disabling said source version.

26. The method of claim 21, further comprising:

creating a discrete license corresponding to said discrete version according to said root license.

27. The method of claim 21, further comprising:

creating a copy of said source locked content data; and

storing said copy as said discrete locked content data.

28. The method of claim 21, further comprising:

creating discrete licensing authority data according to bound licensing authority data;

wherein said bound licensing authority data corresponds to said source version and said bound licensing authority data indicates said root license is a local licensing authority and an external server is an external licensing authority, and

said discrete licensing authority data corresponds to said discrete version and said discrete licensing authority data indicates said external server is an external licensing authority.

29. The method of claim 21, wherein:

said source version has a corresponding revocation list of one or more devices for which authorization to participate in a hub network has been revoked.

30. The method of claim 29, further comprising:

checking whether said server is in said revocation list before disabling said source version and creating said discrete version.

31. The method of claim 29, further comprising:

updating a server revocation list stored by said server according to said revocation list of said source version; and

checking whether said server is in said server revocation list before disabling said source version and creating said discrete version.

32. The method of claim 29, further comprising:

creating a revocation list corresponding to said discrete version by creating a copy of said revocation list corresponding to said source version.

33. The method of claim 21, wherein:

said server and said client are both compliant devices,

a compliant device will not decrypt locked content data without a license that is bound to a hub network of which the compliant device is a member.

34. The method of claim 21, further comprising:

creating a discrete key by copying a source key;

wherein said source key is for decrypting said source locked content data, and

said discrete key is for decrypting said discrete locked content data.

35. The method of claim 34, wherein:

said source locked content data is encrypted using a content encryption technique,

said discrete locked content data is encrypted using said content encryption technique,

said source key is encrypted using a hub network encryption technique that is different from said content encryption technique, and

said discrete key is encrypted using said hub network encryption technique.

36. The method of claim 35, wherein:

said hub network encryption technique is different from said content encryption technique because said hub network encryption technique uses a different key for encrypting data than the key that said content encryption technique uses for encrypting data.

37. The method of claim 35, wherein:

said root license is encrypted using said hub network encryption technique.

38. The method of claim 35, wherein:

said server stores a hub network key for decrypting data encrypted using said hub network encryption technique.

39. A method of binding content to a hub network, comprising:

receiving a request to bind a discrete instance to a hub network including a server and a client as members of said hub network, wherein said discrete instance includes discrete locked content data, a discrete license, and discrete licensing authority data;

disabling said discrete instance; and

creating a bound instance, wherein said bound instance includes source locked content data, a root license, and bound licensing authority data;

wherein said root license is bound to said hub network.

40. A method of freeing content bound to a hub network, comprising:

receiving a request to free a bound instance from a hub network including a server and a client as members of said hub network, wherein said bound instance includes source locked content data, a root license, and bound licensing authority data, wherein said root license is bound to said hub network;

disabling said bound instance; and

creating a discrete instance, wherein said discrete instance includes discrete locked content data, a discrete license, and discrete licensing authority data.

41. A discrete instance of content, comprising:

locked content data;

a key for decrypting said locked content data;

a license; and

licensing authority data;

wherein said discrete instance is stored on compliant media that is readable and writable storage media,

said locked content data is encrypted using a content encryption technique, and

said key is encrypted using a hub network encryption technique that is different from said content encryption technique.

42. The discrete instance of claim 41, wherein:

said hub network encryption technique is different from said content encryption technique because said hub network encryption technique uses a different key for encrypting data than the key that said content encryption technique uses for encrypting data.

43. The discrete instance of claim 41, wherein:

said licensing authority data is stored as header data for said locked content data.

44. The discrete instance of claim 41, wherein:

said licensing authority data indicates an external server is an external licensing authority.

45. The discrete instance of claim 41, wherein:

said license is encrypted using said hub network encryption technique.

46. The discrete instance of claim 41, wherein:

said license indicates said discrete instance is permitted to be bound to a hub network if said discrete instance is disabled.

47. The discrete instance of claim 41, wherein:

said license indicates copying said locked content data is permitted.

48. The discrete instance of claim 41, wherein:

said license indicates copying said license is not permitted.

49. An article of compliant media storing at least:

a discrete set of data including;

locked content data,

a key for decrypting said locked content data,

a license, and

licensing authority data;

wherein said locked content data is encrypted using a content encryption technique,

said key is encrypted using a hub network encryption technique that is different from said content encryption technique,

said compliant media is readable and writable storage media,

at least part of said discrete set of data is encrypted using a compliance encryption technique, such that a compliant device stores a compliance key for decrypting said encrypted at least part of said discrete set of data.

50. A bound instance of content, comprising:

source locked content data stored on a server that is a member of a hub network;

a source key stored on said server for decrypting said source locked content data;

a root license stored on said server; and

licensing authority data stored on said server;

wherein said root license is bound to said hub network,

said locked content data is encrypted using a content encryption technique, and

said source key is encrypted using a hub network encryption technique that is different from said content encryption technique.

51. The bound instance of claim 50, wherein:

said hub network encryption technique is different from said content encryption technique because said hub network encryption technique uses a different key for encrypting data than the key that said content encryption technique uses for encrypting data.

52. The bound instance of claim 50, wherein:

said server stores a hub network key for decrypting data encrypted using said hub network encryption technique.

53. The bound instance of claim 50, wherein:

said root license is encrypted using said hub network encryption technique.

54. The bound instance of claim 50, wherein:

said root license indicates said bound instance is permitted to be freed from said hub network if said bound instance is disabled.

55. The bound instance of claim 54, wherein:

freeing said bound instance includes creating a discrete instance that is not bound to said hub network.

56. The bound instance of claim 50, wherein:

said root license indicates decrypting said source locked content data is permitted for said server.

57. The bound instance of claim 50, wherein:

said root license indicates moving said source locked content data from said server to another member of said hub network is not permitted.

58. The bound instance of claim 50, wherein:

said root license indicates copying said source locked content data is permitted.

59. The bound instance of claim 50, wherein:

said root license indicates copying said root license is not permitted.

60. The bound instance of claim 50, wherein:

said root license indicates creating a sub-copy version of said source locked content data is permitted,

said root license defines permissions for a sub-copy license, and

said sub-copy version includes a copy of said source locked content data and has a corresponding sub-copy license indicating permissions according to said root license.

61. The bound instance of claim 50, wherein:

said licensing authority data is stored as header data for said source locked content data.

62. The bound instance of claim 50, wherein:

said licensing authority data indicates said server is a local licensing authority and an external server is an external licensing authority.

63. The bound instance of claim 50, further comprising:

sub-copy locked content data stored on a client that is a member of said hub network and connected to said server;

a sub-copy license stored on said client; and

a client copy of said licensing authority data stored on said client.

64. The bound instance of claim 63, wherein:

said sub-copy license indicates decrypting said sub-copy locked content data is permitted for said client.

65. The bound instance of claim 63, wherein:

said sub-copy license indicates decrypting said sub-copy locked content data is permitted for a member of said hub network.

66. The bound instance of claim 63, wherein:

said sub-copy license indicates moving said sub-copy locked content data from said client to another member of said hub network is permitted.

67. The bound instance of claim 63, wherein:

said sub-copy license indicates copying said sub-copy locked content data is permitted.

68. The bound instance of claim 63, wherein:

said sub-copy license indicates copying said sub-copy license is not permitted.

69. The bound instance of claim 63, wherein:

said sub-copy license indicates creating a sub-copy version of said sub-copy locked content data is permitted,

said sub-copy license defines permissions for another sub-copy license, and

said sub-copy version includes a copy of said sub-copy locked content data and has a corresponding second sub-copy license indicating permissions according to said sub-copy license.

70. The bound instance of claim 63, wherein:

said sub-copy license indicates creating a sub-copy version of said sub-copy locked content data is permitted,

said sub-copy license defines permissions for another sub-copy license, and

said sub-copy version includes a copy of said sub-copy locked content data and has a corresponding new client copy of said licensing authority data.