Secure communication and real-time watermarking using mutating identifiers

• US 20050010536A1
• Filed: 05/26/2004
• Published: 01/13/2005
• Est. Priority Date: 02/27/2002
• Status: Active Grant

• Current Assignee: Imagine Software LLC
• Original Assignee: Imagine Software LLC
• Inventors: Cochran, William, Gustman, Samuel M.
• Granted Patent: US 7,376,624 B2
• Time in Patent Office: Days
• US Class Current: 705/76
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06T 1/005 Robust watermarking, e.g. average attack or collusion attack resistant

Abstract

A multiple party system for distributing content. In one embodiment, four parties are involved in the system: a consumer, a service provider, an authenticator, and a content provider. The distribution of content from the content provider to the consumer is carried out using a predefined protocol, mutating IDs, watermarks, and licenses. The authenticator controls the distribution of mutating IDs, verifies the identity of one or more participating parties, and provides tracking information for mapping service providers and consumers to particular, possibly watermarked, content items.

Claims

1. A method of distributing a content item by a content provider having a first mutating identifier, the method comprising:

assigning the content item a first label by a function;

creating a request for a key by encrypting the first label with the first mutating identifier;

sending the encrypted request to an authenticator;

receiving a key for the first label and a second mutating identifier from the authenticator;

encrypting the first label with the second mutating identifier;

encrypting the content item with the received key;

sending the encrypted first label to a consumer with an identity and a third mutating identifier;

creating a request for decryption by the consumer by encrypting the received encrypted first label with the third mutating identifier;

sending the request for decryption to the authenticator;

receiving a decryption key and a fourth mutating identifier from the authenticator; and

receiving the encrypted content item from the content provider.

2. The method claimed in claim 1, wherein the label contains no useful information concerning the content item.

3. The method claimed in claim 1, further comprising:

receiving the first label for the content item from the authenticator;

decrypting the encrypted content with the decryption key received from the authenticator;

creating a second label for the decrypted content with the function; and

verifying that the second label matches the first label.

4. The method claimed in claim 1, further comprising:

creating a receipt containing the first label, the identity of the consumer, and a fifth mutating identifier; and

sending the receipt to the content provider.

5. The method claimed in claim 4, wherein the receipt is encrypted with the second mutating identifier.

6. The method claimed in claim 4, further comprising marking the first, second, and third mutating identifiers as used.

7. The method claimed in claim 1, wherein the decryption key is the received key used to encrypt the content item.

8. A method of distributing content items, the method comprising:

assigning each content item a label;

generating a watermark for each content item;

applying a watermark to each content item to create watermarked content;

requesting from an authenticator a key for each watermarked content;

receiving a key for each watermarked content from the authenticator;

encrypting each watermarked content item with the received key;

sending each encrypted watermarked content to a service provider;

requesting a first mutating identifier having a first part and a key;

encrypting the label and a function of the watermark with the key from the first mutating identifier;

grouping the first part of the first mutating identifier with the previously encrypted label and function of the watermark to create a primary license;

sending the primary license to the service provider;

receiving a request for a content item from a consumer having an identity and a second mutating identifier;

transferring the primary license to the consumer;

verifying the primary license received by the consumer;

if the primary license received by the consumer is verified, sending the encrypted watermarked content from the service provider to the consumer; and

if the primary license received by the consumer is verified, sending a decryption key from the authenticator to the consumer.

9. The method claimed in claim 8, wherein each watermark is distinct.

10. The method claimed in claim 8, wherein the requested key is associated with a known identifier provided by the content provider.

11. The method claimed in claim 8, wherein the decryption key is the requested key used to encrypt the watermarked content.

12. The method claimed in claim 8, wherein each primary license is transferred to only one consumer.

13. The method claimed in claim 8, wherein verifying the primary license received by the consumer comprises:

encrypting the primary license with the second mutating identifier of the consumer;

sending the encrypted primary license to the authenticator;

decrypting the encrypted primary license to uncover the primary license;

decrypting the primary license to uncover the label and function of the watermark; and

generating a receipt for the service provider.

14. The method claimed in claim 13, wherein the receipt for the service provider contains the concatenation of the identity of the consumer and the primary license.

15. The method claimed in claim 13, further comprising encrypting the receipt for the service provider with a mutating identifier known to the service provider.

16. The method claimed in claim 8, further comprising sending the consumer a third mutating identifier.

17. The method claimed in claim 16, further comprising marking the second mutating identifier as used.

18. The method claimed in claim 17, further comprising marking the first mutating identifier as used.

19. The method claimed in claim 8, further comprising generating a receipt for the content provider.

20. The method claimed in claim 19, wherein the receipt of the content provider is the concatenation of the identity of the consumer, the label, and the function of the watermark.

21. The method claimed in claim 19, further comprising encrypting the receipt for the content provider with a mutating identifier known to the content provider.

22. A method of distributing content items, the method comprising:

assigning each content item a label;

generating a watermark for each content item;

applying a watermark to each content item to create watermarked content;

requesting from an authenticator a key for each watermarked content;

receiving a key for each watermarked content from the authenticator;

encrypting each watermarked content item with the received key;

sending each encrypted watermarked content to a service provider;

requesting a first mutating identifier having a first part and a key;

encrypting the label and a function of the watermark with the key from the first mutating identifier;

grouping the first part of the first mutating identifier with the previously encrypted label and function of the watermark to create a primary license;

sending the primary license to the service provider;

requesting a second mutating identifier by the service provider having a first part and a key;

encrypting the primary license received from the content provider with the key from the second mutating identifier;

grouping the first part of the second mutating identifier with the previously encrypted primary license to create a distributable license;

receiving a request for a content item from a consumer having an identity and a third mutating identifier;

transferring the distributable license to the consumer;

verifying the distributable license received by the consumer;

if the distributable license received by the consumer is verified, sending the encrypted watermarked content from the service provider to the consumer; and

if the distributable license received by the consumer is verified, sending a decryption key from the authenticator to the consumer.

23. The method claimed in claim 22, wherein each watermark is distinct.

24. The method claimed in claim 22, wherein the requested key is associated with a known identifier provided by the content provider.

25. The method claimed in claim 22, wherein the step of sending a decryption key from the authenticator to the consumer comprises sending the requested key used to encrypt the watermarked content.

26. The method claimed in claim 22, wherein each distributable license is transferred to only one consumer.

27. The method claimed in claim 22, wherein verifying the distributable license received by the consumer comprises:

encrypting the distributable license with the third mutating identifier of the consumer;

sending the encrypted distributable license to the authenticator;

decrypting the encrypted distributable license to uncover the distributable license;

decrypting the distributable license to uncover the primary license;

decrypting the primary license to uncover the label and function of the watermark; and

generating a receipt for the service provider.

28. The method claimed in claim 22, wherein generating a receipt for the service provider comprises concatenating the public consumer identity to the primary license.

29. The method claimed in claim 22, further comprising encrypting the receipt for the service provider with a mutating identifier known to the service provider.

30. The method claimed in claim 22, further comprising sending the consumer a fourth mutating identifier.

31. The method claimed in claim 30, further comprising marking the third mutating identifier as used.

32. The method claimed in claim 22, further comprising marking the first and second mutating identifiers as used.

33. The method claimed in claim 22, further comprising generating a receipt for the content provider.

34. The method claimed in claim 33, wherein the receipt for the content provider contains the concatenation the consumer identity, the label, and the function of the watermark.

35. The method claimed in claim 33, further comprising encrypting the receipt for the content provider with a mutating identifier known to the content provider.

36. A method of distributing content items, the method comprising:

assigning a content item a label;

requesting a first key for the label from the authenticator;

encrypting the content item with the first requested key;

sending the encrypted content item to a service provider;

generating a watermark;

requesting a first mutating ID having a first part and a key;

encrypting the label and the watermark with the key from the first mutating ID;

grouping the first part of the first mutating ID with the previously encrypted label and watermark to create a first encrypted watermark;

receiving a request for a content item from a consumer having an identity and a second mutating identifier;

transferring the first encrypted watermark to an authenticator;

receiving the label, the watermark, the first requested key, and a second key from the authenticator;

decrypting the encrypted content with the first requested key;

applying the watermark;

encrypting the watermarked content with the second key to create encrypted watermarked content;

requesting a third mutating ID, the third mutating ID having a first part and a key;

encrypting the label and watermark with the key of the third mutating ID;

grouping the first part of the third mutating ID with the encrypted label and watermark previously encrypted with the key of the third mutating ID to create a second encrypted watermark;

transferring the second encrypted watermark to the consumer;

verifying the identity of the consumer;

if the identity of the consumer is verified, sending the encrypted watermarked content from the service provider to the consumer; and

if the identity of the consumer is verified, sending a decryption key from the authenticator to the consumer.

37. The method claimed in claim 36, wherein each watermark is distinct.

38. The method claimed in claim 36, wherein the requested key is associated with a known identifier provided by the content provider when requesting the key from the authenticator.

39. The method claimed in claim 36, wherein the decryption key is the second key used to encrypt the watermarked content.

40. The method claimed in claim 36, wherein each second encrypted watermark is transferred to only one consumer.

41. The method claimed in claim 36, wherein verifying the identity of the consumer comprises:

encrypting the second encrypted watermark with the second mutating identifier of the consumer to create a doubly-encrypted watermark;

sending the doubly-encrypted watermark to the authenticator;

decrypting the doubly-encrypted watermark to uncover the second encrypted watermark;

decrypting the second encrypted watermark to uncover the label and watermark; and

generating a receipt for the service provider.

42. The method claimed in claim 41, wherein the receipt for the service provider contains the concatenation the consumer identity and the second encrypted watermark.

43. The method claimed in claim 41, further comprising encrypting the receipt for the service provider with a mutating identifier known to the service provider.

44. The method claimed in claim 41, further comprising sending the consumer a fifth mutating identifier.

45. The method claimed in claim 44, further comprising marking the second mutating identifier as used.

46. The method claimed in claim 36, further comprising marking the first and third mutating identifiers as used.

47. The method claimed in claim 36, further comprising generating a receipt for the content provider.

48. The method claimed in claim 47, wherein the receipt for the content provider contains the concatenation of the consumer identity, the label, and the function of the watermark.

49. The method claimed in claim 47, further comprising encrypting the receipt for the content provider with a mutating identifier known to the content provider.

50. The method claimed in claim 36, further comprising requesting authorization from the consumer by the authenticator for the decryption key based on a known identifier associated with the decryption key.

51. A method of distributing content, the method comprising:

assigning a content item a label;

requesting a first key for the label from the authenticator;

encrypting the content item with the first requested key;

sending the encrypted content item to a service provider;

generating a watermark;

requesting a first mutating ID having a first part and a key;

encrypting the label and the watermark with the key from the first mutating ID;

grouping the first part of the first mutating ID with the previously encrypted label and watermark to create a first encrypted watermark;

requesting a second mutating identifier having a first part and a key;

encrypting the encrypted watermark with the key from the second mutating identifier;

grouping the first part of the second mutating identifier with the previously encrypted encrypted watermark to create a first doubly-encrypted watermark;

receiving a request for a content item from a consumer having an identity and a third mutating identifier;

transferring the first doubly-encrypted watermark to an authenticator;

returning the label, the watermark, the first requested key, and a second key;

decrypting the encrypted content with the first requested key;

applying the watermark;

encrypting the watermarked content with the second key to create encrypted watermarked content;

requesting a fourth mutating identifier, the fourth mutating identifier having a first part and a key;

encrypting the encrypted watermark with the key of the fourth mutating identifier;

grouping the first part of the fourth mutating identifier with the encrypted watermark previously encrypted with the key of the fourth mutating identifier to create a second doubly-encrypted watermark;

transferring the second doubly-encrypted watermark to the consumer;

verifying the identity of the consumer;

if the identity of the consumer is verified, sending the encrypted watermarked content from the service provider to the consumer; and

if the identity of the consumer is verified, sending a decryption key from the authenticator to the consumer.

52. The method claimed in claim 51, wherein each watermark is distinct.

53. The method claimed in claim 51, wherein the requested key is associated with a known identifier provided by the content provider when requesting the key from the authenticator.

54. The method claimed in claim 51, wherein the decryption key is the second key used to encrypt the watermarked content.

55. The method claimed in claim 51, wherein each second doubly-encrypted watermark is transferred to only one consumer.

56. The method claimed in claim 51, wherein verifying the identity of the consumer comprises:

encrypting the second doubly-encrypted watermark with the key from the third mutating identifier of the consumer to create a thrice-encrypted watermark;

sending the thrice-encrypted watermark to the authenticator;

decrypting the thrice-encrypted watermark to uncover the second doubly-encrypted watermark;

decrypting the second doubly-encrypted watermark to uncover the encrypted watermark;

decrypting the encrypted watermark to uncover the label and the watermark; and

generating a receipt for the service provider.

57. The method claimed in claim 56, wherein the receipt for the service provider contains the concatenation of the consumer identity and the encrypted watermark.

58. The method claimed in claim 56, further comprising encrypting the receipt with a mutating identifier known to the service provider.

59. The method claimed in claim 51, further comprising sending the consumer a fifth mutating identifier.

60. The method claimed in claim 59, further comprising marking the third mutating identifier as used.

61. The method claimed in claim 51, further comprising marking the first, second, and fourth mutating identifiers as used.

62. The method claimed in claim 51, further comprising generating a receipt for the content provider.

63. The method claimed in claim 62, wherein the receipt for the content provider contains the concatenation of the consumer identity, the label, and the function of the watermark.

64. The method claimed in claim 62, further comprising encrypting the receipt for the content provider with a mutating identifier known to the content provider.

65. The method claimed in claim 51, further comprising requesting authorization from the consumer by the authenticator for the decryption key based on a known identifier associated with the decryption key.

66. A method of distributing a content item, the method comprising:

obtaining a plurality of watermarks;

selecting a watermarking scheme;

generating a plurality of watermarked versions of a content item;

obtaining a plurality of keys for the plurality of watermarked versions of a content item;

assigning each one of the plurality of obtained keys to a single one of the plurality of watermarked versions of a content item;

associating a unique license with each one of the plurality of watermarked versions, where the license is based on a function of one of the plurality of watermarks and a function of the content item;

distributing the unique license to a consumer having an identity;

verifying the identity of the consumer;

distributing the watermarked content to the consumer;

distributing one of the plurality of keys to the consumer; and

mapping the identity of the consumer to a specific watermark.

67. The method claimed in claim 66, wherein each of the plurality of watermarks is distinct from one another.

68. The method claimed in claim 66, wherein each watermark is a single-use watermark.

69. The method claimed in claim 66, wherein the license is created with a mutating ID.

70. A system of distributing content, the system comprising:

a content provider having content items and one or more mutating identifiers and capable of allocating content items with recognizable characteristics;

a consumer who has a mutating identifier and an identity and capable of generating a request for content items; and

an authenticator who knows the one or more mutating identifiers of the content provider and the mutating identifier of the consumer and configured to associate the content item allocated by the content provider to the consumer.

71. The system claimed in claim 70, wherein the authenticator can associate the content item allocated by the content provider to the consumer by mapping the characteristic of the content item to the identity of the consumer.

72. The system claimed in claim 70, wherein the authenticator assigns the mutating identifiers to the content provider and the consumer.

73. The system claimed in claim 70, wherein the mutating identifier of the consumer is changed after a single use by the authenticator.

74. The system claimed in claim 70, wherein each mutating identifier of the content provider is used only once.

75. The system claimed in claim 70, wherein the identity of the consumer is known by the authenticator and the content provider.

76. The system claimed in claim 70, wherein the content provider does not know mutating identifier of the consumer and the consumer does not know the mutating identifier of the content provider.

77. A method of authorizing a consumer, the method comprising:

assigning a random, unrestricted content item a label by a content provider;

creating a request for a key by encrypting the label with a first mutating identifier of the content provider;

sending the request to an authenticator;

receiving the key and second mutating identifier from the authenticator;

encrypting the random, unrestricted content item with the requested key;

encrypting the label with the seconding mutating identifier;

sending the encrypted label to the consumer;

creating a decryption request by the consumer by encrypting the encrypted label with a third mutating identifier;

sending the decryption request to the authenticator;

receiving the decryption key and a fourth mutating identifier from the authenticator;

receiving the encrypted random, unrestricted content item from the content provider;

decrypting the random, unrestricted content item with the decryption key; and

sending the decrypted random, unrestricted content item to the content provider.

78. A system of distributing content, the system comprising:

a content provider having content items and one or more mutating identifiers and is capable of allocating content items with distinct, recognizable characteristics;

a service provider capable of receiving encrypted content items with distinct, recognizable characteristics and requests for content items;

a consumer who has a mutating identifier and an identity and is capable of generating a request for content items; and

an authenticator who knows the mutating identifier of the content provider and the mutating identifier of the consumer and configured to associate the content item allocated by the content provider to the consumer.

79. The system claimed in claim 78, wherein the content provider only uses a single mutating identifier once.

80. The system claimed in claim 78, wherein the authenticator can associate the content item allocated to the consumer by mapping the characteristic of the content item to the identity of the consumer.

81. The system claimed in claim 78, wherein the authenticator assigns the mutating identifiers to the content provider and the consumer.

82. The system claimed in claim 78, wherein the mutating identifier of the consumer is changed after a single use by the authenticator.

83. The system claimed in claim 78, wherein the identity of the consumer is known by the authenticator, the content provider, and the service provider.

84. The system claimed in claim 78, wherein the service provider has one or more mutating identifiers.

85. The system claimed in claim 84, wherein the authenticator knows the one or more mutating identifiers of the service provider.

86. The system claimed in claim 84, wherein the authenticator assigns the one or more mutating identifiers to the service provider.

87. The system claimed in claim 84, wherein each mutating identifier of the service provider is used only once.

88. A method of verifying the geographic location of a consumer, the method comprising:

sending a message encrypted with a mutating identifier of the consumer;

sending the encrypted message to an authenticator; and

verifying that the mutating identifier of the consumer is known to the authenticator.

89. A method of authenticating a first entity with a second entity of a system the method comprising:

encrypting the credentials of the first entity with a first mutating ID;

sending the encrypted credentials to the second entity;

encrypting the received encrypted credentials with a second mutating ID;

sending the doubly-encrypted credentials of the first entity to an authenticator;

decrypting the doubly-encrypted credentials of the first entity;

verifying the credentials of the first entity;

sending the first entity a third mutating identifier and a communication key; and

sending the second entity a fourth mutating identifier and the communication key.

90. A device for requesting content, the device comprising:

an input/output interface capable of displaying content selection options to a user, and receiving selection data from the user; and

a processor configured to generate a request for content based on the selection data from the user, receive a license for the content requested, encrypt the license with a first mutating identifier, send the encrypted license to an authenticator, receive encrypted content, receive a decryption key, and receive a second mutating identifier.

91. A method of requesting a content item, the method comprising:

generating a request for the content item;

sending the request;

receiving a license for the content item;

encrypting the license with a first mutating identifier;

sending the encrypted license;

receiving an encrypted content item;

receiving a decryption key for the encrypted content item; and

receiving a second mutating identifier.

92. A device for providing content items, the device comprising:

an input/output interface capable of displaying content selection options to a content consumer, receiving selection data from the content consumer, and displaying receipts for the content items; and

a processor configured to generate a request for a plurality of mutating identifiers, create a license for each of the plurality of mutating identifiers, send the licenses, and receive receipts for the content items.

93. A method of providing content, the method comprising:

requesting a plurality of mutating identifiers;

creating a license for each of the plurality of mutating identifiers;

sending the licenses; and

receiving receipts for the licenses.

94. A device for authenticating a content item, the device comprising:

a processor configured to assign a key to the content item, assign a mutating identifier to an entity, receive an encrypted license for the content item, send the key assigned to the content item, and generate a receipt for the content item.

95. A method for authenticating a content item, the method comprising:

assigning a key to the content item;

assigning a plurality of mutating identifiers to the content item;

receiving an encrypted license for the content item;

sending the key assigned to the content item; and

generating a receipt for the content item.

96. A system for distributing a content item, the system comprising:

means for assigning the content item a label;

means for applying a watermark to the content item to create watermarked content;

means for acquiring a key for the watermarked content item;

means for encrypting the watermarked content item with the key;

means for creating a license for the label with a mutating identifier;

means for distributing the license;

means for authenticating the license;

means for distributing the encrypted watermarked content; and

means for distributing the key.

97. A method of watermarking using mutating identifiers.

98. The method of claim 97, wherein the method comprises:

generating a plurality of watermarked versions of a content item;

obtaining a plurality of keys for the plurality of watermarked versions of a content item;

assigning each one of the plurality of obtained keys to a single one of the plurality of watermarked versions of a content item; and

associating a unique license with each one of the plurality of watermarked versions.

99. The method of claim 98, wherein the unique license comprises a mutating identifier.

100. The method of claim 97, wherein using mutating identifiers comprises:

obtaining a first mutating identifier have a first part and a key;

encrypting data with the key from the first mutating identifier; and

grouping the first part of mutating identifier with the previously encrypted data.

101. The method of claim 100, wherein the first mutating identifier is only used once.