Method and system for secure network-based distribution of content

• US 20050050345A1
• Filed: 04/26/2004
• Published: 03/03/2005
• Est. Priority Date: 04/25/2003
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Computer Incorporated (Apple Inc.)
• Inventors: Dowdy, Thomas, Robbin, Jeffrey L., Heller, David, Tribble, Guy L.
• Granted Patent: US 7,895,661 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/1011 to devices

Abstract

A method and system for network-based distribution of content are disclosed. The distribution of content is not only secure but also controlled. The security restricts access to content within media files during downloads as well as while stored at a server or client. In one embodiment, each media file is encrypted with a different, randomly generated key. The control over the distribution of the media file can serve to limit the subsequent distribution of media files from clients to other clients. In another embodiment, the control can permit media files to be shared on a limited number of different clients affiliated with the same user. The clients can vary with application but generally are computing devices that have memory storage. Often, the clients are personal computers or other computing devices that are capable of storing and presenting content to their users.

Claims

1. A method for storing media files to a centralized media storage such that they are ready for download, said method comprising:

(a) receiving media files pertaining to media items, each of the media files having at least media content data;

(b) generating a download key for each of the media files, the download keys being different for each of the media files;

(c) encrypting each of the media files with the corresponding one of the download keys to produce encrypted media files; and

(d) storing the encrypted media files to the centralized media store.

2. A method as recited in claim 1,

wherein each of the media files has at least the media content data and metadata, the metadata describing characteristics of the associated media item, and

wherein said method further comprises:

(e) encrypting, prior to said encrypting (c), the metadata for each of the media files with a common key.

3. A method as recited in claim 1, wherein the centralized media storage is within or coupled to a media server.

4. A method as recited in claim 3, wherein the encrypted media files can be downloaded to users'"'"' local machines via a data network.

5. A method as recited in claim 1, wherein at least one of the user local machines is one of a portable computing device and a media player.

6. A method for acquiring a media file for usage at a local machine from a central server machine, said method comprising:

identifying a media file from a plurality of available media files, each of the media files having at least media content data;

purchasing access to the identified media file;

obtaining a download key that corresponds to the identified media file;

downloading the identified media file in its encrypted form to the local machine;

decrypting the identified media file to its unencrypted form using the download key;

obtaining at least one user key, the user key being associated with a user of the local machine;

generating a content key that is at least substantially random;

encrypting the media content data of the identified media file with the content key;

encrypting the content key with the user key to produce an encrypted content key;

modifying the identified media file to further include a user key reference and the encrypted content key; and

storing the modified media file to the local machine.

7. A method as recited in claim 6, wherein a plurality of media files are stored on the central server machine, each of the media files having at least metadata and media content data, the metadata describing characteristics of the associated media item.

8. A method as recited in claim 7, wherein said identifying (a) comprises:

(a1) browsing the media files stored on the server machine through use of the metadata for the media files; and

(a2) identifying one of the media files to be the identified media file.

9. A method as recited in claim 8, wherein said identifying of the one of the media files is performed by a user.

10. A method as recited in claim 6, wherein said storing operates to store the modified media file to a local storage associated with the local machine.

11. A method as recited in claim 10, wherein the local storage is a data storage device within the local machine.

12. A method as recited in claim 6, wherein the local machine connects to the central server machine over a network, and wherein the network comprises the Internet.

13. A method as recited in claim 6, wherein the central server machine stores an account for each of the users, each account having at least one user key assigned thereto, and

wherein the user key obtained by said obtaining is the at least one user key assigned to the account corresponding to the user.

14. A method as recited in claim 13, wherein the local machine associated with the user stores at least one user key assigned to the account corresponding to the user, and wherein said obtaining of the user key operates to obtain the user key from the local machine.

15. A method for acquiring a media file for usage at a local machine from a central server machine, said method comprising:

identifying a media file from a plurality of available media files, each of the media files having at least media content data;

purchasing access to the identified media file;

obtaining a download key that corresponds to the identified media file;

downloading the identified media file in its encrypted form to the local machine;

obtaining at least one user key, the user key being associated with a user of the local machine;

generating a content key that is at least substantially random;

transcrypting the media content data of the identified media file using the download key and the content key;

encrypting the content key with the user key to produce an encrypted content key;

modifying the identified media file to further include a user key reference and the encrypted content key; and

storing the modified media file to the local machine.

16. A method as recited in claim 15, wherein a plurality of media files are stored on the central server machine, each of the media files having at least metadata and media content data, the metadata describing characteristics of the associated media item.

17. A method as recited in claim 16, wherein said identifying (a) comprises:

(a1) browsing the media files stored on the server machine through use of the metadata for the media files; and

(a2) identifying one of the media files to be the identified media file.

18. A method as recited in claim 17, wherein said identifying of the one of the media files is performed by a user.

19. A method as recited in claim 15, wherein said storing operates to store the modified media file to a local storage associated with the local machine.

20. A method as recited in claim 15, wherein the local machine connects to the central server machine over a network, and wherein the network comprises the Internet.

21. A method as recited in claim 15, wherein the central server machine stores an account for each of the users, each account having at least one user key assigned thereto, and

wherein the user key obtained by said obtaining is the at least one user key assigned to the account corresponding to the user.

22. A method as recited in claim 21, wherein the local machine associated with the user stores at least one user key assigned to the account corresponding to the user, and wherein said obtaining of the user key operates to obtain the user key from the local machine.

23. A method for acquiring a media file for usage at a local machine from a central server machine, said method comprising:

identifying a media file from a plurality of available media files, each of the media files having at least media content data;

purchasing access to the identified media file;

obtaining at least one user key, the user key being associated with a user of the local machine;

generating a content key that is at least substantially random;

encrypting the media content data of the identified media file with the content key;

encrypting the content key with the user key to produce an encrypted content key; and

modifying the identified media file to further include a user key reference and the encrypted content key.

24. A method as recited in claim 23, wherein said method further comprises:

subsequently downloading the identified media file in its encrypted form to the local machine; and

storing the modified media file to the local machine.

25. A method as recited in claim 24, wherein a plurality of media files are stored on the central server machine, each of the media files having at least metadata and media content data, the metadata describing characteristics of the associated media item.

26. A method as recited in claim 25, wherein said identifying (a) comprises:

(a1) browsing the media files stored on the server machine through use of the metadata for the media files; and

(a2) identifying one of the media files to be the identified media file.

27. A method as recited in claim 26, wherein said identifying of the one of the media files is performed by a user.

28. A method as recited in claim 24, wherein said storing operates to store the modified media file to a local storage associated with the local machine.

29. A method as recited in claim 28, wherein the local storage is a data storage device within the local machine.

30. A method as recited in claim 24, wherein the local machine connects to the central server machine over a network, and wherein the network comprises the Internet.

31. A method as recited in claim 24, wherein the central server machine stores an account for each of the users, each account having at least one user key assigned thereto, and

wherein the user key obtained by said obtaining is the at least one user key assigned to the account corresponding to the user.

32. A method as recited in claim 31, wherein the local machine associated with the user stores at least one user key assigned to the account corresponding to the user, and wherein said obtaining of the user key operates to obtain the user key from the local machine.

33. A method for presenting content data from a media file to a user, said method comprising:

(a) identifying a media file to be presented, the identified media file having at least encrypted media content data, a user key reference, and an encrypted content key;

(b) obtaining a user key based on the user key reference within the identified media file;

(c) obtaining the encrypted content key from the identified media file;

(d) decrypting the encrypted content key using the user key to obtain the content key;

(e) decrypting the encrypted media content data of the identified media file with the content key; and

(f) presenting the media content data of the identified media file.

34. A method as recited in claim 33, wherein the identified media file is stored on a local machine, and

wherein said presenting (f) presents the media content data of the identified media file at the local machine.

35. A method as recited in claim 34, wherein said obtaining (b) obtains the user key from the local machine based on the user key reference.

36. A method as recited in claim 33, wherein the local machine is a computing device.

37. A method as recited in claim 33, wherein the local machine is a media player.

38. A method as recited in claim 33, wherein said presenting (f) of the media content data comprises one or more of playing and displaying of the media content data.

39. A method as recited in claim 33, wherein the identified media file is an audio file with audio content data, an image file with visual content data, or a video file with video content data.

40. A method as recited in claim 33, wherein a plurality of media files are stored on a local machine, each of the media files having at least metadata, encrypted media content data, and an encrypted content key that are respectively different for different media files.

41. A method as recited in claim 40, wherein said identifying (a) comprises:

(a1) browsing the media files stored on the local machine though use of the metadata for the media files; and

(a2) identifying one of the media files to be presented.

42. A method as recited in claim 41, wherein said identifying (a2) is performed by a user.

43. A method as recited in claim 40, wherein said obtaining (b) of the user key comprises:

(b1) determining whether the local machine stores at least one user key;

(b2) retrieving the user key based on the user key reference within the identified media file when said determining (b1) determines that the local machine stores at least one user key; and

(b3) establishing a user account for the user of the local machine when said determining (b1) determines that the local machine does not store at least one user key.

44. A method as recited in claim 43, wherein said establishing (b3) causes the at least one user key to be stored to the local machine.

45. A computer readable medium including at least computer program code for storing media files to a centralized media store associated with a central server machine, as well as acquiring a media file for usage at a local machine from the central server machine, said computer readable medium comprising:

computer program code for receiving media files pertaining to media items, each of the media files having at least media content data;

computer program code for generating a download key for each of the media files, the download keys being different for each of the media files;

computer program code for encrypting each of the media files with the corresponding one of the download keys to produce encrypted media files;

computer program code for storing the encrypted media files to the centralized media store;

computer program code for identifying a media file to be purchased from a plurality of available media files, each of the media files having at least media content data;

computer program code for purchasing access to the identified media file;

computer program code for obtaining a download key that corresponds to the identified media file; and

computer program code for downloading the identified media file in its encrypted form to the local machine.

46. A computer readable medium including at least computer program code for acquiring a media file for usage at a local machine from a central server machine, said computer readable medium comprising:

computer program code for receiving a particular media file at the local machine from the server machine, the particular media file having at least media content data;

computer program code for decrypting the particular media file to its unencrypted form using the download key;

computer program code for obtaining at least one user key, the user key being associated with a user of the local machine;

computer program code for generating a content key that is at least substantially random;

computer program code for encrypting the media content data of the particular media file with the content key;

computer program code for encrypting the content key with the user key to produce an encrypted content key;

computer program code for modifying the particular media file to further include a user key reference and the encrypted content key; and

computer program code for storing the modified media file to the local machine.

47. A computer readable medium as recited in claim 46, wherein said computer readable medium further comprises:

computer program code for identifying a media file to be presented, the identified media file having at least encrypted media content data, a user key reference, and an encrypted content key;

computer program code for obtaining a user key based on the user key reference within the identified media file;

computer program code for obtaining the encrypted content key from the identified media file;

computer program code for decrypting the encrypted content key using the user key to obtain the content key;

computer program code for decrypting the encrypted media content data of the identified media file with the content key; and

computer program code for presenting the media content data of the identified media file.

48. A computer readable medium as recited in claim 47,

wherein each of the media files has at least the media content data and metadata, the metadata describing characteristics of the associated media item;

wherein the identified media file is stored on a local machine, and

wherein said computer program code for presenting presents the media content data of the identified media file at the local machine.

49. A computer readable medium including at least computer program code for usage of a media file at a local machine from a central server machine, said computer readable medium comprising:

computer program code for identifying a media file from a plurality of available media files, each of the media files having at least media content data;

computer program code for purchasing access to the identified media file;

computer program code for obtaining a download key that corresponds to the identified media file;

computer program code for downloading the identified media file in its encrypted form to the local machine;

computer program code for obtaining at least one user key, the user key being associated with a user of the local machine;

computer program code for generating a content key that is at least substantially random;

computer program code for transcrypting the media content data of the identified media file using the download key and the content key;

computer program code for encrypting the content key with the user key to produce an encrypted content key;

computer program code for modifying the identified media file to further include a user key reference and the encrypted content key; and

computer program code for storing the modified media file to the local machine.

50. A computer readable medium including at least computer program code for acquiring a media file for usage at a local machine from a central server machine, said computer readable medium comprising:

computer program code for identifying a media file from a plurality of available media files, each of the media files having at least media content data;

computer program code for purchasing access to the identified media file;

computer program code for obtaining at least one user key, the user key being associated with a user of the local machine;

computer program code for generating a content key that is at least substantially random;

computer program code for encrypting the media content data of the identified media file with the content key;

computer program code for encrypting the content key with the user key to produce an encrypted content key; and

computer program code for modifying the identified media file to further include a user key reference and the encrypted content key.

51. A media distribution system, comprising:

a media store that stores a plurality of media files, each of the media files having at least media content data; and

a media server operatively connected to said media store, said media server operates to generate a download key for each of the media files to be stored, the download keys being different for each of the media files, to encrypt each of the media files with the corresponding one of the download keys to produce encrypted media files, and to store the encrypted media files to said media store.

52. A media distribution system as recited in claim 51, wherein said media server further operates to receive a request to purchase a particular media file to be purchased from those of the encrypted media files stored in said media store;

to purchase access to the identified media file, and to download the particular media file in its encrypted form and a download key corresponding to the particular media file.

53. A media distribution system as recited in claim 51, wherein said media distribution system further comprises:

a plurality of user machines that can couple to said media server via a network,

wherein said download of the particular media file and the download key is to a particular one of said user machines.

54. A media distribution system as recited in claim 53, wherein said media server further operates to store a plurality of user keys for each of a plurality of authorized users, and

wherein said media server further operates to download a user key to the particular user machine, the user key being specifically associated with a particular one of the authorized users as well as the particular user machine.

55. A media distribution system as recited in claim 54, wherein the particular user machine operates to decrypt the particular media file to its unencrypted form using the download key, to generate a content key that is at least substantially random, to encrypt the media content data of the particular media file with the content key, to encrypt the content key with the user key to produce an encrypted content key, to modify the particular media file to further include a user key reference and the encrypted content key, and to store the modified media file to the local machine.

56. A media distribution system as recited in claim 55, wherein the particular user machine further operates to subsequently present the particular media file at the particular user machine.

57. A media distribution system as recited in claim 56, wherein, when presenting the particular media file, the particular user machine operates to:

obtain a user key based on the user key reference within the identified media file, to obtain the encrypted content key from the identified media file, to decrypt the encrypted content key using the user key to obtain the content key, to decrypt the encrypted media content data of the identified media file with the content key; and

to present the media content data of the identified media file.

58. A media distribution system as recited in claim 51, wherein the content within the media file pertains to at least one of music, photos or videos.

59. A media distribution system as recited in claim 51, wherein each of the media files have at least the media content data and metadata, the metadata describing characteristics of the associated media item.

60. A media distribution system, comprising:

a media store that stores a plurality of media files, each of the media files having at least encrypted media content data; and

a media server operatively connected to said media store, said media server operates to distribute the media files to machines in a secure manner such that the media files can be presented on only those user machines that have been authorized by user accounts maintained by said media server.

61. A media distribution system as recited in claim 60, wherein each of the user accounts can be associated with a predetermined, limited number of user machines.

62. A media distribution system as recited in claim 61, wherein each of the user accounts contain at least one user key that is associated with the corresponding user account.

63. A media distribution system as recited in claim 60, wherein each of the media files further include at least encrypted media content data, a user key reference, and an encrypted content key.

64. A media distribution system as recited in claim 63, wherein the user key reference identifies a user key, and wherein in order to access the media file, the user key must be available to the user by way of the associated user account of the user.

65. A media distribution system as recited in claim 63, wherein to access a particular media file at a user machine, the user machine must have a user key referenced by the user key reference.

66. A media distribution system as recited in claim 65, wherein the particular media file can be presented at the user machine by performing the acts of:

decrypting the encrypted content key using the user key to obtain the content key, and decrypting the encrypted media content data of the particular media file with the content key.

67. A media distribution system as recited in claim 66, wherein the presenting of the particular media file involves playing the particular media file at the user machine.

68. In a media distribution system, wherein a set of the media files that have been purchased by a particular user can be authorized for use on a limited number of machines associated with the particular user.

69. A computer readable medium including at least computer program code for presenting a media file at a local machine, said computer readable medium comprising:

computer program code for identifying a media file to be presented, the identified media file having at least encrypted media content data, a user key reference, and an encrypted content key;

computer program code for obtaining a user key based on the user key reference within the identified media file;

computer program code for obtaining the encrypted content key from the identified media file;

computer program code for decrypting the encrypted content key using the user key to obtain the content key;

computer program code for decrypting the encrypted media content data of the identified media file with the content key; and

computer program code for presenting the media content data of the identified media file.

70. A computer readable medium as recited in claim 69,

wherein a user requests that the media content data of the identified media file be presented, and

wherein a central server machine stores an account for each of the users, each account having at least one user key assigned thereto, and

wherein the user key obtained by said obtaining is the at least one user key assigned to the account corresponding to the user requesting that the media content data of the identified media file be presented.

71. A method as recited in claim 70, wherein the local machine associated with the user stores the at least one user key assigned to the account corresponding to the user, and wherein said obtaining of the user key operates to obtain the user key from the local machine.