Systems and methods for secure transaction management and electronic rights protection

• US 20060069926A1
• Filed: 09/20/2005
• Published: 03/30/2006
• Est. Priority Date: 02/13/1995
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Ginter, Karl L., Spahn, Francis J., Shear, Victor H., Wie, David M. Van
• Granted Patent: US 7,844,835 B2
• Time in Patent Office: Days
• US Class Current: 713/194
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G07F 9/026 for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copy right protecting software against unauthorised usage in a vending or licensing environment, e.g. protection the software providers copyright G06F21/10; data processing systems or methods, specially adapted for payment schemes, architectures or protocols G06Q20/00; secrecy systems or subscription systems H04N7/16
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/23476 : by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node. These techniques may be used to support an all-electronic information distribution, for example, utilizing the “electronic highway.”

Claims

1. A system comprising:

an electronic appliance, the electronic appliance being operable to store a piece of electronic content and one or more electronic rules associated with the piece of electronic content, at least one of the one or more electronic rules comprising a data object that is distinct from the piece of electronic content and having been electronically transmitted to the electronic appliance independently of the piece of electronic content, each of said one or more electronic rules providing an indication of one or more uses of the piece of electronic content and one or more conditions that must be satisfied in order to make said one or more uses of the electronic content; and

tamper-resistant software operable to be executed by the electronic appliance to enforce the one or more electronic rules.

2. The system of claim 1, in which the electronic appliance further comprises a secure processing unit for assisting the tamper resistant software in enforcing the one or more electronic rules associated with the piece of electronic content.

3. The system of claim 2, in which the tamper resistant software is at least in part stored and executed in the secure processing unit.

4. The system of claim 1, in which at least one of the one or more electronic rules is transmitted to the electronic appliance from a remote server.

5. The system of claim 4, in which the remote server is different from a second remote server from which the piece of electronic content was received.

6. The system of claim 4, in which at least one of the one or more electronic rules includes an indication that rendering the piece of electronic content costs a predefined fee.

7. The system of claim 6, in which rendering the piece of electronic content includes at least one of printing, displaying, executing, or playing the piece of electronic content.

8. The system of claim 4, in which at least one of the one or more electronic rules includes an indication that copying the piece of electronic content costs a predefined fee.

9. The system of claim 4, in which at least one of the one or more electronic rules includes an indication that copying the piece of electronic content is allowed, provided that at least a predefined number of copies have not been previously made.

10. The system of claim 4, in which at least one of the one or more electronic rules includes an indication that rendering the piece of electronic content is allowed, provided that a predefined time period has not expired.

11. The system of claim 4, in which at least one of the one or more electronic rules includes an indication that rendering the piece of electronic content is allowed, provided that at least a predefined number of copies have not been previously made.

12. The system of claim 1, in which at least two electronic rules are associated with the piece of electronic content, and in which the tamper resistant software is operable to enforce both of said rules in combination.

13. The system of claim 1, in which the electronic appliance is a mobile phone.

14. The system of claim 1, in which the electronic appliance is selected from the group consisting of:

mobile phone, personal computer, and workstation.

15. A method performed at an electronic appliance, the method comprising:

electronically receiving a piece of electronic content from a first remote server;

electronically receiving, separately from the piece of electronic content, an object expressing one or more rights to the piece of electronic content and one or more corresponding conditions that must be satisfied in order to exercise said one or more rights;

receiving a request from a user to exercise at least one of said one or more rights;

executing tamper-resistant software to enforce the one or more conditions; and

granting the request if the one or more conditions are satisfied.

16. The method of claim 15, in which the object expressing one or more rights is received from a second remote server.

17. The method of claim 15, in which at least one of the one or more rights includes a right to render the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to render the piece of electronic content costs a predefined fee.

18. The method of claim 17, in which rendering the piece of electronic content includes at least one of printing, displaying, or playing the piece of electronic content.

19. The method of claim 15, in which at least one of the one or more rights includes a right to copy the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to copy the piece of electronic content costs a predefined fee.

20. The method of claim 15, in which at least one of the one or more rights includes a right to copy the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to copy the piece of electronic content is allowed, provided that at least a predefined number of copies have not been previously made.

21. The method of claim 15, in which at least one of the one or more rights includes a right to render the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to render the piece of electronic content is allowed, provided that a predefined time period has not expired.

22. The method of claim 15, in which at least one of the one or more rights includes a right to render the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to render the piece of electronic content is allowed, provided that at least a predefined number of copies have not been previously made.

23. The method of claim 15, in which the electronic appliance is a mobile phone.

24. The method of claim 15, in which the electronic appliance is selected from the group consisting of:

mobile phone, personal computer, and workstation.

25. A computer readable medium storing a tamper resistant computer program package, the tamper resistant computer program package comprising instructions that, when executed by a processor of an electronic appliance, are operable to cause the electronic appliance to take actions including:

electronically receiving a piece of electronic content from a first remote server;

electronically receiving, separately from the piece of electronic content, an object expressing one or more rights to the piece of electronic content and one or more corresponding conditions that must be satisfied in order to exercise said one or more rights;

receiving a request from a user to exercise at least one of said one or more rights;

enforcing the one or more corresponding conditions; and

granting the request if the one or more corresponding conditions are satisfied.

26. The computer readable medium of claim 25, in which the tamper resistant computer program package further comprises instructions that, when executed by a processor of an electronic appliance, are operable to cause the electronic appliance to take actions including:

determining that the object expresses a right to render the piece of electronic content and a corresponding condition indicating that exercising the right to render the piece of electronic content costs a predefined fee; and

ensuring that the predefined fee is paid before granting a request to render the piece of electronic content.

27. The computer readable medium of claim 25, in which the tamper resistant computer program package further comprises instructions that, when executed by a processor of an electronic appliance, are operable to cause the electronic appliance to take actions including:

determining that the object expresses a right to copy the piece of electronic content and a corresponding condition indicating that exercising the right to copy the piece of electronic content costs a predefined fee; and

ensuring that the predefined fee is paid before granting a request to copy the piece of electronic content.

28. The computer readable medium of claim 25, in which the tamper resistant computer program package further comprises instructions that, when executed by a processor of an electronic appliance, are operable to cause the electronic appliance to take actions including:

determining that the object expresses a right to copy the piece of electronic content and a corresponding condition indicating that exercising the right to copy the piece of electronic content is allowed, provided that at least a predefined number of copies have not been previously made;

ensuring that the predefined number of copies have not been made before granting a request to copy the piece of electronic content; and

updating a record of the number of copies that have been made.

29. The computer readable medium of claim 25, in which the tamper resistant computer program package further comprises instructions that, when executed by a processor of an electronic appliance, are operable to cause the electronic appliance to take actions including:

determining that the object expresses a right to render the piece of electronic content and a corresponding condition indicating that exercising the right to render the piece of electronic content is allowed, provided that a predefined time period has not expired; and

ensuring that the predefined time period has not expired before granting a request to render the piece of electronic content.

30. A method comprising:

electronically sending a piece of electronic content to an electronic appliance; and

electronically sending to the electronic appliance, separately from the piece of electronic content, an object expressing one or more rights to the piece of electronic content and one or more corresponding conditions that must be satisfied in order to exercise said one or more rights, the electronic appliance being operable to execute tamper resistant software to grant requests to exercise the one or more rights only if the one or more corresponding conditions are satisfied.

31. The method of claim 30, in which at least one of the one or more rights includes a right to render the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to render the piece of electronic content costs a predefined fee.

32. The method of claim 30, in which at least one of the one or more rights includes a right to copy the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to copy the piece of electronic content costs a predefined fee.

33. The method of claim 30, in which at least one of the one or more rights includes a right to copy the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to copy the piece of electronic content is allowed, provided that at least a predefined number of copies have not been previously made.

34. The method of claim 30, in which at least one of the one or more rights includes a right to render the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to render the piece of electronic content is allowed, provided that a predefined time period has not expired.

35. The method of claim 30, in which at least one of the one or more rights includes a right to render the piece of electronic content, and in which at least one of the corresponding conditions indicates that exercising the right to render the piece of electronic content is allowed, provided that at least a predefined number of copies have not been previously made.

36. The method of claim 30, in which the electronic appliance is a mobile phone.

37. The method of claim 30, in which the electronic appliance is selected from the group consisting of:

mobile phone, personal computer, and workstation.