Content distribution using set of session keys

• US 20060193474A1
• Filed: 01/31/2006
• Published: 08/31/2006
• Est. Priority Date: 12/16/2002
• Status: Active Grant

• Current Assignee: MIH Technology Holdings BV
• Original Assignee: Entriq Incorporated
• Inventors: Fransdonk, Robert W.
• Granted Patent: US 7,706,540 B2
• Time in Patent Office: Days
• US Class Current: 380/279
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 2463/103 applying security measure for protecting copyright
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method includes generating a set of session keys and encrypting content utilizing the set of session keys to generate encrypted content. The set of session keys is transmitted. The encrypted content is transmitted to a content destination, so as to enable the content destination, utilizing the set of session keys, to decrypt the encrypted content.

Claims

1. A method comprising:

generating a set of session keys and encrypting content utilizing the set of session keys to generate encrypted content;

transmitting the set of session keys; and

transmitting the encrypted content to a content destination, so as to enable the content destination, utilizing the set of session keys, to decrypt the encrypted content.

2. The method of claim 1 wherein the set of session keys comprises a time-varying set of session keys.

3. The method of claim 1 wherein the transmitting of the set of session keys includes:

encrypting the set of session keys utilizing a product key to generate a set of master encrypted keys;

communicating the set of master encrypted keys to a content distributor;

communicating the product key from the content distributor;

so as to enable the content distributor to decrypt the set of master encrypted keys utilizing the product key to extract the set of session keys.

4. The method of claim 3 wherein the product key is encrypted with a public key of the content distributor prior to communication of the product key from the content distributor so that the product key is only available to the content distributor.

5. A system comprising:

a generator to generate a set of session keys,

an encryptor to encrypt content utilizing the set of session keys to thereby generating encrypted content;

a transmitter to transmit the set of session keys to a content destination, so as to enable the content destination to decrypt of the encrypted content utilizing the set of session keys

6. The system of claim 5, wherein the set of session keys comprises a time-varying set

of session keys.

7. The system of claim 5, wherein the encryptor is to encrypt the set of session keys utilizing a product key to generate a set of master encrypted keys, the transmitter is to transmitter the set of master encrypted keys to a content distributor, and the transmitter is to transmitter the product key from to the content distributor, so as to enable the content distributor to decrypt the set of master encrypted keys utilizing the product key to extract the set of session keys.

8. The system of claim 7, wherein the encryptor is to encrypt the product key with a product key of the content distributor prior to communication of the product key to the content distributor so that the public key is only available to the content distributor.

9. A system comprising:

content provider means for generating a set of session keys, for encrypting content utilizing the set of session keys, and for communicate the set of session keys; and

content destination means for using the set of session keys to decrypt the encrypted content.

10. A machine-readable medium storing a set of instructions that, when executed by a machine, cause the machine to perform a method including:

generating a set of session keys and encrypting content utilizing the set of session keys to generate encrypted content;

transmitting the set of session keys; and

transmitting the encrypted content to a content destination, so as to enable the content destination, utilizing the set of session keys, to decrypt the encrypted content.

11. A method comprising:

receiving a sequence of session keys, the sequence of session keys encrypting encrypted content transmitted to a content destination; and

transmitting the sequence of session keys to the content destination so as to enable the content destination, utilizing the sequence of session keys, to decrypt the encrypted content.

12. The method of claim 11, including:

encrypting the sequence of session keys utilizing a user key to generate a set of encrypted keys;

transmitting the sequence of session keys as the set of encrypted keys to the content destination; and

transmitting the user key to the content destination so as to enable the content destination to decrypt the set of encrypted keys to extract the sequence of session keys.

13. The method of claim 11, wherein the sequence of session keys comprises a time-varying sequence of session keys.

14. The method of claim 11, wherein the receiving of the sequence of session keys includes:

receiving a set of master encrypted keys from a content provider, the set of master encrypted keys comprising the sequence of session keys encrypted utilizing a product key;

receiving the product key from the content provider; and

decrypting the set of master encrypted keys utilizing the product key to extract the sequence of session keys.

15. The method of claim 14, wherein the product key is encrypted with a product key of a content distributor prior to communication of the product key to the content distributor so that the public key is only available to the content distributor.

16. The method of claim 15, including issuing, to the content destination, a request for user secure device information.

17. The method of claim 16, including issuing, to the content provider, a request for subscription information.

18. The method of claim 17, including constructing an order request for the content based on the secure device information, access criteria and the subscription information and communicating the order request to the content destination for acceptance.

19. The method of claim 11, including creating a secure network session with the content destination, creating a user key, encrypting the user key with a public key of the content destination, and communicating the encrypted user key to the content destination utilizing a secure network session.

20. A system comprising:

a receiver to receive a sequence of session keys, the sequence of session keys encrypting encrypted content transmitted to a content destination; and

a transmitter to transmit the sequence of session keys to the content destination, so as to enable the content destination, utilizing the sequence of session keys, to decrypt the encrypted content.

21. The system of claim 20, wherein the sequence of session keys comprises a time-varying sequence of session keys.

22. The system of claim 20, wherein the receiver is to receive a set of master encrypted keys from a content provider, and is to receive a product key from the content provider, the system including a decryptor to decrypt the set of master encrypted keys utilizing the product key to extract the sequence of session keys.

23. The system of claim 22, wherein the product key is encrypted with a public key of a content distributor prior to communication of the product key to the content distributor so that the product key is only available to the content distributor.

24. The system of claim 20, wherein the receiver is to receive a request for delivery of the encrypted content to the content destination.

25. The system of claim 24, wherein the receiver is to receive a user certificate in association with the request for delivery.

26. The system of claim 24, wherein the receiver is to receive a copy-protected device certificate in association with the request for delivery.

27. The system of claim 22, including a request generator to generate a request for access criteria and the product key, and the receiver is to communicate the request for the access criteria to the content provider.

28. The system of claim 20, wherein the transmitter is to transmit, to the content destination, a request for user secure device information.

29. The system of claim 20, wherein the transmitter is to transmit, to a content provider, a request for subscription information.

30. The system of claim 29, including a request module to generate an order request for the content based on the secure device information, access criteria and the subscription information and the receiver is to communicate the order request to the content destination for acceptance.

31. A system comprising:

first means for receiving a sequence of session keys, the sequence of session keys encrypting encrypted content transmitted to a content destination; and

second means for transmitting the sequence of session keys to the content destination, so as to enable the content destination, utilizing the sequence of session keys, to decrypt the encrypted content.

32. A machine-readable medium storing a sequence of instructions that, when executed by a machine, cause the machine to perform a method including:

receiving a sequence of session keys, the sequence of session keys encrypting encrypted content transmitted to a content destination; and

transmitting the sequence of session keys to the content destination so as to enable the content destination, utilizing the sequence of session keys, to decrypt the encrypted content.

33. A method comprising:

receiving a sequence of session keys at a content destination;

receiving encrypted content at the content destination, the encrypted content being encrypted utilizing the sequence of session keys; and

decrypting the encrypted content, at the content destination, utilizing the sequence of session keys.

34. The method of claim 33, wherein the receiving of the sequence of session keys includes receiving the sequence of session keys as a set of encrypted keys, encrypted using a user key, an wherein the method includes receiving the user key at the content destination, and decrypting the set of encrypted keys, using the user key, to extract the sequence of session keys.

35. The method of claim 33, wherein the sequence of session keys comprises a time-varying sequence of session keys.

36. The method of claim 33, including transmitting a request to deliver the content to the content destination.

37. The method of claim 36, including transmitting a user certificate in association with the request.

38. The method of claim 37, including transmitting a copy-protected device certificate in association with the request.

39. The method of claim 33, including generating an order, signing the order utilizing a user signature and communicating the order to a content distributor.

40. The method of claim 39, wherein the content distributor, responsive to receipt of the order, verifies access criteria and the user signature within a physically secure environment.

41. The method of claim 39, wherein the content distributor creates a secure network session with the content destination, creates a user key, encrypts the user key with a public key of the content destination, and communicates the encrypted user key to the content destination utilizing secure network session.

42. The method of claim 41, including receiving the encrypted user key via the secure network session from the content distributor, and decrypting the encrypted user key utilizing a private key associated with the content destination to extract the user key for a purpose of decrypting the set of encrypted keys.

43. A system comprising:

a receiver to receive a sequence of session keys at a content destination, and to receive encrypted content at the content destination, the encrypted content being encrypted utilizing the sequence of session keys; and

a decryptor to decrypt the encrypted content, at the content destination, utilizing the sequence of session keys.

44. The system of claim 43, wherein the receiver is to receive the sequence of session keys as a set of encrypted keys, encrypted using a user key, and is to receive the user key at the content destination, and the decryptor is to decrypt the set of encrypted keys, using the user key, to extract the sequence of session keys.

45. The system of claim 43, wherein the sequence of session keys comprises a time-varying sequence of session keys.

46. A system comprising:

first means for receiving a sequence of session keys at a content destination, and for receiving encrypted content at the content destination, the encrypted content being encrypted utilizing the sequence of session keys; and

second means for decrypting the encrypted content, at the content destination, utilizing the sequence of session keys.

47. A machine-readable medium storing a sequence of instructions that, when executed by a machine, cause the machine to perform a method including:

receiving a sequence of session keys at a content destination;

receiving encrypted content at the content destination, the encrypted content being encrypted utilizing the sequence of session keys; and

decrypting the encrypted content, at the content destination, utilizing the sequence of session keys.