Systems and methods for secure transaction management and electronic rights protection

• US 20050177716A1
• Filed: 03/24/2005
• Published: 08/11/2005
• Est. Priority Date: 02/13/1995
• Status: Abandoned Application

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Ginter, Karl L., Spahn, Francis J., Shear, Victor H., Van Wie, David M.
• Application Number:
  US11/090,982
• Publication Number:
  US 20050177716A1
• Time in Patent Office: Days
• US Class Current: 713/157
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G07F 9/026 for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copyright
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node. These techniques may be used to support an all-electronic information distribution, for example, utilizing the “electronic highway.”

Claims

1-90. -90. (canceled)

91. A method of securely managing a document to protect the rights of a first entity having rights to the document, the method comprising:

securely receiving the document from the first entity at an electronic appliance of a second entity, the document having one or more electronic controls associated therewith, the controls expressing one or more conditions that must be satisfied in order to make at least one use of the document; and

allowing the second entity to make use of the document in accordance with the one or more controls;

wherein the electronic appliance or software running thereon is operable to impede the second entity from making the at least one use of the document without satisfying the one or more conditions.

92. The method of claim 91, wherein at least one of the one or more conditions relates to a period of time during which access by the second entity may be allowed.

93. The method of claim 91, further comprising:

removing the document from the second entity after expiry of a set period of time.

94. The method of claim 91, further comprising:

rendering the document unusable by the second entity.

95. The method of claim 91, wherein at least one of the one or more conditions relates to a right to transfer the document to a third entity.

96. The method of claim 95, further comprising:

notifying the first entity of a transfer of the document to the third entity.

97. The method of claim 96, wherein the notifying occurs before the transfer of the document to the third entity.

98. The method of claim 91, wherein software running on the electronic appliance is operable to perform said allowing step.

99. The method of claim 98, wherein the electronic appliance or software running thereon is operable to impede the second entity from tampering with the electronic appliance'"'"'s performance of said allowing step.

100. A method of controlling access to an electronic file by at least a first entity, a second entity having rights to the electronic file, the method comprising:

delivering a secure electronic copy of the file to an electronic appliance associated with the first entity;

assessing a level of access that the first entity will have to the secure electronic copy, the assessment based, at least in part, on at least one control delivered to the electronic appliance in connection with the secure electronic copy; and

granting the first entity access to the secure electronic copy, the access limited, at least in part, in accordance with the assessed level of access, thereby protecting the rights of the second entity.

101. The method of claim 100, wherein the level of access granted includes at least the right to view the contents of the secure electronic copy.

102. The method of claim 101, wherein the level of access is limited such that the first entity can view the contents of the secure electronic copy no more than a set number of times.

103. The method of claim 100, wherein the secure electronic copy includes contents that may be printed in human-readable format, the level of access granted including at least a right to print the contents.

104. The method of claim 100, wherein delivering a secure electronic copy of the electronic file includes authenticating the first entity.

105. The method of claim 104, wherein authenticating the first entity comprises accessing at least one identifier associated with the first entity;

and wherein granting the first entity access to the secure electronic copy further comprises;

determining the level of access based, at least in part, on the identifier.

106. A method comprising:

securely receiving an electronic file at a first organization;

associating one or more controls with the electronic file;

determining the rights of a second organization to the electronic file based, at least in part, on the one or more controls;

transferring a copy of the electronic file to the second organization; and

receiving at the first organization a notification that the second organization has accessed or otherwise used the copy of the electronic file, thereby permitting the first organization to monitor access to or other use of the copy of the electronic file by the second organization.

107. The method of claim 106, further comprising:

billing for one or more uses of the copy of the electronic file by the second organization.

108. The method of claim 106, wherein the rights of the second organization include a right to modify the copy of the electronic file.

109. The method of claim 108, further comprising:

maintaining the electronic file, or a copy thereof, at the first organization.

110. The method of claim 109, wherein when the copy of the electronic file is modified at the second organization, the modifications are also subsequently made to the electronic file, or the copy thereof, maintained at the first organization.

111. The method of claim 110, wherein when the electronic file, or the copy thereof, maintained at the first organization is modified, the first organization transfers a modified copy of the electronic file to at least a third organization.

112. The method of claim 110, further comprising:

receiving at the first organization a notification that the second organization has modified the copy of the electronic file.

113. A computer program package stored on a computer readable medium, the computer program package including instructions that, if executed by a computer system, cause the computer system to perform operations comprising:

requesting from a first entity rights to an electronic document;

receiving from the first entity a secure electronic copy of the document;

receiving from the first entity a control set associated with the secure electronic copy of the document, the control set expressing a set of one or more rights to the electronic copy of the document; and

accessing or otherwise using the electronic copy of the document in accordance with the set of one or more rights.

114. The computer program package of claim 113, wherein at least one right in the set of rights is limited in duration.

115. The computer program package of claim 113, wherein the control set and the electronic copy of the document are received together in a secure container.

116. The computer program package of claim 113, further comprising instructions that, if executed by a computer system, cause the computer system to:

render the document unusable by the first entity.

117. The computer program package of claim 113, wherein the set of rights includes the right to transfer a copy of the document to a second entity.

118. The computer program package of claim 117, further comprising instructions that, if executed by a computer system, cause the system to:

notify the first entity of a transfer of the document to the second entity.

119. The computer program package of claim 118, wherein the notification of the first entity occurs before the transfer of the copy of the document to the second entity.