Digital content security system

• US 20060064605A1
• Filed: 11/07/2005
• Published: 03/23/2006
• Est. Priority Date: 12/27/2000
• Status: Active Grant

• Current Assignee: Proxense, LLC
• Original Assignee: Margent Development LLC
• Inventors: Giobbi, John J.
• Granted Patent: US 7,404,088 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/1014 to tokens
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/254 Management at additional data server, e.g. shopping server, rights management server arrangements for maintenance or administration in data networks H04L41/00; network services using third party service providers H04L67/53
• CPC Class Codes: H04N 21/4112 having fewer capabilities than the client, e.g. thin client having less processing power or no tuning capabilities
• CPC Class Codes: H04N 21/418 External card to be used in combination with the client device, e.g. for conditional access
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06

Abstract

A Personal Digital Key Digital Content Security System (PDK-DCSS) is used to protect computers from unauthorized use and protect the digital content stored on computers from being wrongfully accessed, copied, and/or distributed. The basic components of the PDK-DCSS are (1) a standard hard drive device, with the addition of a PDK Receiver/Decoder Circuit (PDK-RDC) optionally integrated into the hard drive'"'"'s controller, and (2) a PDK-Key associated with the PDK-RDC. The PDK-Key and RDC technology is utilized to provide two categories of protection: (1) hard drive access control for providing Drive-Level and Sector-Level protection and (2) operating system-level independent file protection for providing File-Level and Network-Level protection.

Claims

1. A method of securing a hard drive of a computer, comprising:

providing a portable, physical key adapted to be carried by a user;

detecting the portable, physical key with a receiver/decoder circuit communicating with the hard drive;

validating the detected key with the receiver/decoder circuit wherein validating includes determining whether or not the detected key is associated with the hard drive; and

permitting access to the hard drive or a portion thereof with the receiver/decoder circuit if the detected key is validated wherein digital content read from or written to the hard drive is decrypted or encrypted by the receiver/decoder circuit using the key associated with the hard drive in order to provide sector-level protection.

2. The method of claim 1, wherein the receiver/decoder circuit resides in the computer.

3. The method of claim 1, wherein the detecting step includes detecting the key over a secure wireless link.

4. The method of claim 1, wherein the validating step includes determining whether or not the detected key is associated with the hard drive.

5. The method of claim 1, wherein the receiver/decoder circuit enables the hard drive if the detected key is validated and disables the hard drive if the detected key is not validated in order to provide hard drive level protection.

6. The method of claim 5, wherein digital content stored on the drive is not encrypted with the key.

7. The method of claim 4, wherein digital content read from or written to the hard drive is decrypted or encrypted by the receiver/decoder circuit using the key associated with the hard drive in order to provide sector-level protection.

8. The method of claim 1, wherein the key associated with the hard drive is initially delivered with the hard drive.

9. A system for securing a hard drive of a computer, comprising:

a portable, physical key adapted to be carried by a user;

a hard drive; and

a receiver/decoder circuit communicating with the hard drive for detecting and validating the portable, physical key wherein the receiver/decoder circuit validates the key by determining whether or not the detected key is associated with the hard drive wherein the receiver/decoder circuit decrypts or encrypts digital content read from or written to the hard drive using the key associated with the hard drive in order to provide sector-level protection, and for permitting access to the hard drive or a portion thereof if the detected key is valid, the receiver/decoder circuit being associated with the hard drive.

10. The system of claim 9, wherein the receiver/decoder circuit resides in the computer.

11. The system of claim 9, wherein the receiver/decoder circuit detects the key over a secure wireless link.

12. The system of claim 9, wherein the receiver/decoder circuit validates the key by determining whether or not the detected key is associated with the hard drive.

13. The system of claim 9, wherein the receiver/decoder circuit enables the hard drive if the detected key is validated and disables the hard drive if the detected key is not validated in order to provide hard drive level protection.

14. The system of claim 9, wherein digital content stored on the computer is not encrypted with the key.

15. The system of claim 12, wherein the receiver/decoder circuit decrypts or encrypts digital content read from or written to the hard drive using the key associated with the hard drive in order to provide sector-level protection.

16. The system of claim 9, wherein the key associated with the hard drive is initially delivered with the hard drive.

17. A method of securing and accessing a computer file, comprising:

encrypting the file with a receiver/decoder circuit using a portable, physical key;

storing the encrypted file on a storage medium;

requesting the file with a playback mechanism;

detecting the key with the receiver/decoder circuit;

validating the detected key with the receiver/decoder circuit; and

if the detected key is validated, decrypting the file with the receiver/decoder circuit using the detected key, whereby the decrypted file can be played back with the playback mechanism.

18. The method of claim 17, wherein the storage medium is a hard drive of a computer, and the receiver/decoder circuit resides in the computer.

19. The method of claim 17, wherein a software driver in the computer'"'"'s operating system instructs the receiver/decoder circuit to perform the detecting, validating, and decrypting steps.

20. The method of claim 17, wherein the detecting step includes detecting the key over a secure wireless link.