Apparatus and method for storing and distributing encrypted digital content

• US 20060015945A1
• Filed: 07/13/2005
• Published: 01/19/2006
• Est. Priority Date: 07/13/2004
• Status: Active Grant

• Current Assignee: RPX Corporation
• Original Assignee: Daniel M. Fields, Karen L. Rooney
• Inventors: Fields, Daniel M.
• Granted Patent: US 7,254,837 B2
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching

Abstract

The present invention provides for a method and system for providing a type of Managed/Secured File Transfer between one or more computers arraigned in server-client or peer-to-peer configuration. This method and system takes digital content in the form of a file, shreds this file into separate pieces and encrypts each piece separately. Once encrypted, each piece is stored into a database. Client applications can then access these pieces of digital content over a network, decrypt and reassemble each piece to be played in the case of audio/video content, or viewed in the case of visual content. In some embodiments, the content requested by the client application is stored into a second database in a shredded and encrypted format, whereas in other embodiments the content is reassembled into the original non-encrypted and non-shredded file format. This method and system can reside on a computer system, hand held device, or other device.

Claims

1. A method for handling shredded and encrypted digital content comprising:

sending a request to a server computer system for digital content that has been organized as one or more pieces of the shredded and encrypted digital content in a database associated with the server;

receiving the content from the server into a client computer system;

sorting the received content from the server in a buffer residing in the client computer system;

decrypting the sorted received content using a decryption algorithm; and

forwarding the decrypted sorted received content from the buffer to another application.

2. The method of claim 1, further comprising assembling the one or more pieces of shredded and encrypted digital content in the client computer system, wherein the assembling includes:

executing the following actions so long as the end of a data table has not been reached and a file identifier value from a first database table equals a file identifier value from a second data base table;

reading a content field into a first buffer;

running a decryption function on the first buffer and storing the resulting data into a second buffer;

outputting the second buffer to an application or device; and

accessing a next content field.

3. The method of claim 1, further comprising assembling the one or more pieces of shredded and encrypted digital content in the client computer system, wherein the assembling includes:

executing the following actions so long as the end of a data structure containing records has not been encountered;

initializing a memory location;

reading a record containing data from a database into the initialized memory location;

adding the initialized memory location to a second data structure;

executing the following action, if a file identification value of the record stored in the memory location equals a file identification value of a next record;

initializing a second memory location,

reading the next record into the second memory location;

adding the second memory location to the second data structure; and

accessing a further next record.

4. The method of claim 1, further comprising:

randomizing an order in which the shredded and encrypted digital content is to be transmitted;

transmitting in the randomized order one or more pieces of shredded and encrypted digital content; and

assembling the one or more pieces of shredded and encrypted digital content in the client computer system.

5. The method of claim 1, wherein the forwarding includes forwarding sorted and decrypted digital content to a player application.

6. The method of claim 1, wherein the forwarding includes:

re-shredding and re-encrypting the digital content; and

sending the re-shredded and re-encrypted digital content to a database.

7. The method of claim 1, wherein the decrypting of received content is achieved using a private key that is an attribute of the received content, and wherein the received content is a binary large object.

8. A system for handling shredded and encrypted digital content comprising:

a client computer system that includes;

a transmitter that sends a request to a server for digital content that has been organized as one or more pieces of shredded and encrypted data and that is stored in a database associated with the server;

a receiver that receives the shredded and encrypted digital content from the server into the client computer system;

a sorter that sorts the received digital content;

a decryptor that decrypts the sorted digital content using a decryption algorithm;

a buffer; and

an assembler that assembles the decrypted digital content into the buffer.

9. The system of claim 8, further including an assembler that assembles the one or more pieces of shredded and encrypted digital content in the client computer system, wherein the assembler executes the following actions so long as the end of a data table has not been reached and a file identifier value from a first database table equals a file identifier value from a second data base table:

(reading a content field into a first buffer;

running a decryption function on the first buffer and storing the resulting data into a second buffer;

outputting the second buffer to an application or device; and

accessing a next content field).

10. The system of claim 8, further including an assembler that assembles the one or more pieces of shredded and encrypted digital content in the client computer system, wherein the assembler executes the following actions so long as the end of a data structure containing records has not been encountered:

(initializing a memory location;

reading a record containing data from a database into the initialized memory location;

adding the initialized memory location to a second data structure;

executing the following action, if a file identification value of the record stored in the memory location equals a file identification value of a next record;

(While(file-identification value of the record stored into the second data structure and the file-identification value of the next record are the same and not end-of-data-structure)

(initializing a second memory location,

reading the next record into the second memory location,

adding the second memory location to the second data structure)); and

accessing a further next record)).

11. The system of claim 8, further including a randomizer that randomizes an order in which the shredded and encrypted digital content is to be transmitted from the server to the client computer, wherein the transmitter transmits in the randomized order one or more pieces of shredded and encrypted digital content.

12. Computer-readable media having executable instructions stored thereon for causing a suitable programmed central processing unit to handle shredded and encrypted digital content by performing a method comprising:

sending a request to a server computer system for digital content that has been organized as one or more pieces of the shredded and encrypted digital content in a database associated with the server;

receiving the content from the server into a client computer system;

sorting the received content from the server in a buffer residing in the client computer system;

decrypting the sorted received content using a decryption algorithm; and

forwarding the decrypted sorted received content from the buffer to another application.

13. The computer-readable media of claim 12, further comprising instructions that facilitate assembling the one or more pieces of shredded and encrypted digital content in a buffer, wherein the assembling includes:

executing the following actions so long as the end of a data table has not been reached and a file identifier value from a first database table equals a file identifier value from a second data base table;

(reading a content field into a first buffer;

running a decryption function on the first buffer and storing the resulting data into a second buffer;

outputting the second buffer to an application or device; and

accessing a next content field).

14. The computer-readable media of claim 12, further comprising instructions that facilitate assembling the one or more pieces of shredded and encrypted digital content in a buffer, wherein the assembling includes:

executing the following actions so long as the end of a data structure containing records has not been encountered;

(initializing a memory location;

reading a record containing data from a database into the initialized memory location;

adding the initialized memory location to a second data structure;

executing the following action, if a file identification value of the record stored in the memory location equals a file identification value of a next record;

(initializing a second memory location,

reading the next record into the second memory location,

adding the second memory location to the second data structure; and

accessing a further next record)).

15. The computer-readable media of claim 12, further comprising instructions that facilitate assembling the one or more pieces of shredded and encrypted digital content in a buffer, wherein the assembling includes:

executing the following actions so long as the end of a data structure containing records has not been encountered;

(accessing a next record containing data from a database;

initializing a memory location;

reading the record containing data from a database into the initialized memory location;

adding the initialized memory location to a second data structure; and

executing the following action, if a file identification value of the record stored in the memory location has the same file identification value of a next record;

(initializing a second memory location,

reading the next record into the second memory location, and

adding the second memory location to the second data structure)).

16. The computer-readable media of claim 12, further comprising instructions to facilitate:

transmitting one or more pieces of shredded and encrypted digital content; and

randomizing the order in which the shredded and encrypted digital content is sent.

17. The computer-readable media of claim 12, further comprising instructions to facilitate forwarding instructions including:

re-shredding and encrypting the digital content; and

sending the digital content to a database.

18. The computer-readable media of claim 12, further comprising instructions wherein the decrypting of digital content is achieved using a private key that is an attribute of the digital content, and the digital content is a binary large object.

19. A computer-readable media having stored thereon a first data structure comprising:

(a descriptor that includes a unique value used to determine a record identity within a table;

a descriptor including a join value;

a descriptor that includes the number of chunks in each record;

a descriptor representing a predetermined size for each chunk; and

a descriptor that includes actual shredded and encrypted content derived based on the descriptor that includes the predetermined size for each chunk).

20. The computer-readable media of claim 19, further having stored thereon a second data structure including:

(a descriptor that includes a value representing a name of a content publisher;

a descriptor that includes a value representing a URL of a originating server;

a descriptor that includes a value representing a name of the originating server;

a descriptor that includes a value representing whether or not content may be edited;

a descriptor that includes a value representing whether a content item may be copied;

a descriptor that includes a value representing whether a content item may be viewed;

a descriptor that includes a value representing whether a content item may be forwarded to another user;

a descriptor that includes a value representing whether a content can be shared with others for read-only usage;

a descriptor that includes a value representing whether a content item may be placed on removable physical media;

a descriptor that includes a value representing the number of times a content item can be recorded to removable media;

a descriptor that includes a value representing whether a content item may be moved onto a portable device;

a descriptor that includes a value representing whether a content item is on-loan;

a descriptor that includes a value representing whether a content item is restricted until purchase;

a descriptor that includes a value representing when a demonstration usage expires; and

a descriptor that includes a value representing whether a user must login before accessing a content item);

and further having stored thereon a third data structure including;

(a descriptor that includes a value representing unique file identifier;

a descriptor that includes a value representing a file name and extension;

a descriptor that includes a value representing date and time when a record was created;

a descriptor that includes a value representing a total size of the file;

a descriptor that includes a value representing the name of a target file;

a descriptor that includes a value representing a file extension;

a descriptor that includes a value representing a number of chunks required to completely shred the target file;

a descriptor that includes the number of chunks within a record;

a descriptor that includes a predetermined size for each chunk; and

a descriptor that includes data having actual shredded and encrypted content derived based on the descriptor that includes the predetermined size for each chunk and the descriptor indicating the file size).