System and method of distributing and controlling rights of digital content

• US 20040243815A1
• Filed: 05/28/2003
• Published: 12/02/2004
• Est. Priority Date: 05/28/2003
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Tsukamura, Yoshihiro
• Application Number:
  US10/447,404
• Publication Number:
  US 20040243815A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A system and method for distributing and controlling digital content are described. The invention allows the authentication of the identity of the user, purchase of licenses for digital content, and playback of digital content by the user on selected player devices. In one embodiment, the system includes distribution center server configured for storing a key for encrypted content; a licensee device configured for communicating with the distribution center server and for storing the key for the encrypted content and a digital certificate of the licensee device; and a gatekeeper device configured for communicating with the licensee device and for receiving the key for the encrypted content and the digital certificated of the licensee device, wherein the gatekeeper device is configured to decrypt the encrypted content, wherein the key for the encrypted content is capable of communicating with multiple gatekeeper devices.

Claims

1. A system comprising:

distribution center server configured for storing a key for encrypted digital content;

a licensee device configured to communicate with the distribution center server and to store the key for the encrypted digital content and a digital certificate of the licensee device; and

at least one gatekeeper device configured to communicate with the licensee device, to receive the key for the encrypted content and the digital certificate of the licensee device, and to decrypt the encrypted digital content.

2. The system according to claim 1 wherein the licensee device further comprises an identity authentication module configured to authenticate a user.

3. The system according to claim 2 wherein the identity authentication module is configured to receive a personal identification number.

4. The system according to claim 2 wherein the identity authentication module is configured to receive a biometric parameter from a biometric device.

5. The system according to claim 4 wherein the biometric device is selected from the group consisting of a fingerprint scanner, a retinal scanner, a voice recognition device, and a palm scanner.

6. The system according to claim 4 wherein the authentication module is configured to receive a password.

7. The system according to claim 1 further comprising a player device configured to communicate with the at least one gatekeeper device and to render decrypted content.

8. The system according to claim 1 further comprising a registration and certification authority configured to communicate with the distribution center server and to authenticate the licensee device.

9. A method comprising:

receiving a welcome kit wherein the welcome kit includes a client application;

installing the client application; and

registering a licensee device with a registration and certification authority wherein the licensee device is configured to authenticate content with at least one gatekeeper device.

10. The method according to claim 9 further transmitting a payment to a distribution center server.

11. The method according to claim 9 further authenticating an identity of a user.

12. The method according to claim 9 further programming the licensee device with a user identification.

13. The method according to claim 12 wherein the user identification is a biometric parameter.

14. The method according to claim 12 wherein the user identification is a personal identification number.

15. The method according to claim 9 further generating a public key and a private key within the licensee device.

16. The method according to claim 15 further transmitting the public key to the registration authority and certification authority module.

17. The method according to claim 15 further validating the public key at the registration authority and certification authority module.

18. The method according to claim 15 further transmitting a digital certificate in response to the public key received by the registration authority and certification authority module.

19. A method comprising:

means for receiving a welcome kit wherein the welcome kit includes a client application;

means for installing the client application; and

means for registering a licensee device with a registration authority and certification authority module wherein the licensee device is configured to authenticate content among multiple gatekeeper modules.

20. A method comprising:

transmitting a payment to a distribution center server for content;

transmitting information to the distribution center server wherein the information corresponds to a license for the content;

transmitting a key for the content to a licensee device in response to the information; and

transmitting a license to the licensee device, wherein the license authorizes the content to be rendered.

21. The method according to claim 20 wherein the license specifies a time period that the license is effective.

22. The method according to claim 20 wherein the license specifies a number of player devices that the license is effective with.

23. The method according to claim 20 wherein the license specifies the licensee device that the license is effective with.

24. The method according to claim 20 wherein the key is a symmetric key.

25. The method according to claim 20 further comprising storing the key and the license within the licensee device.

26. A method comprising:

means for transmitting a payment to a distribution center server for content;

means for transmitting information to the distribution center server wherein the information corresponds to a license for the content;

means for transmitting a key for the content to a licensee device in response to the information; and

means for transmitting a license to the licensee device, wherein the license authorizes the content to be rendered.

27. A method comprising:

authenticating an identity of a licensee device with a gatekeeper device;

transmitting a key for content from the licensee device to the gatekeeper device;

transmitting a license from the licensee device to the gatekeeper device; and

decrypting the content in response to the license.

28. The method according to claim 27 wherein authenticating further comprising generating a random number within the gatekeeper module and transmitting the random number to the licensee device.

29. The method according to claim 28 wherein authenticating further comprising generating signing the random number with a private key of the licensee device and transmitting the random number signed by the private key and a public key certificate of the licensee device to the gatekeeper device.

30. The method according to claim 29 wherein authenticating further comprising decrypting the random number with a public key of the licensee device and verifying validity of the public key certificate of the licensee device with a registration authority and certification authority module.

31. The method according to claim 27 further comprising loading the decrypted content to a player device wherein the player device is configured to render the decrypted content in an analog form.

32. A method comprising:

means for authenticating an identity of a licensee device with a gatekeeper device;

means for transmitting a key for content from the licensee device to the gatekeeper device;

means for transmitting a license from the licensee device to the gatekeeper device; and

means for decrypting the content in response to the license.