Cryptographic methods, apparatus and systems for storage media electronic right management in closed and connected appliances

• US 20060206397A1
• Filed: 05/16/2006
• Published: 09/14/2006
• Est. Priority Date: 02/13/1995
• Status: Abandoned Application

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Weber, Robert P., Sibert, W. Olin, Shear, Victor H., VanWie, David M.
• Application Number:
  US11/435,694
• Publication Number:
  US 20060206397A1
• Time in Patent Office: Days
• US Class Current: 705/28
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders

Abstract

A rights management arrangement for storage media such as optical digital video disks (DVDs, also called digital versatile disks) provides adequate copy protection in a limited, inexpensive mass-produceable, low-capability platform such as a dedicated home consumer disk player and also provides enhanced, more flexible security techniques and methods when the same media are used with platforms having higher security capabilities. A control object (or set) defines plural rights management rules for instance, price for performance or rules governing redistribution. Low capability platforms may enable only a subset of the control rules such as controls on copying or marking of played material. Higher capability platforms may enable all (or different subsets) of the rules. Cryptographically strong security is provided by encrypting at least some of the information carried by the media and enabling decryption based on the control set and/or other limitations. A secure “software container” can be used to protectively encapsulate (e.g., by cryptographic techniques) various digital property content (e.g., audio, video, game, etc.) and control object (i.e., set of rules) information. A standardized container format is provided for general use on/with various mediums and platforms. In addition, a special purpose container may be provided for DVD medium and appliances (e.g., recorders, players, etc.) that contains DVD program content (digital property) and DVD medium specific rules. The techniques, systems and methods disclosed herein are capable of achieving compatibility with other protection standards, such as for example, CGMA and Matsushita data protection standards adopted for DVDs. Cooperative rights management may also be provided, where plural networked rights management arrangements collectively control a rights management event on one or more of such arrangements.

Claims

1. A method comprising:

at a first site, packaging an electronic content item in a first secure digital container;

distributing the first secure digital container from the first site to an electronic appliance at a second site, the electronic appliance including tamper-resistant software and/or hardware operable to govern use of the electronic content item in accordance with one or more rules;

contacting a third site to obtain a first set of one or more rules expressing one or more permitted uses of the electronic content item;

receiving the first set of one or more rules at the electronic appliance;

receiving a request from a user of the electronic appliance to make a use of the electronic content item; and

using the tamper-resistant software and/or hardware to selectively grant the request in accordance with the first set of one or more rules.

2. The method of claim 1, further comprising:

at the first site, receiving an analog signal containing the electronic content item in analog form; and

converting the electronic content item to digital form in accordance with one or more control codes embedded in the analog signal.

3. The method of claim 2, further comprising:

associating a second set of one or more rules with the first secure digital container, the second set of one or more rules being based, at least in part, on the one or more control codes embedded in the analog signal;

in which the step of using the tamper-resistant software and/or hardware to selectively grant the request is further performed in accordance with the second set of one or more rules.

4. The method of claim 1, in which the request comprises a request to play the electronic content item, and in which at least one rule in the first set of one or more rules indicates that playing the electronic content item is permitted.

5. The method of claim 1, in which the request comprises a request to play the electronic content item, and in which at least one rule in the first set of one or more rules indicates that playing the electronic content item is permitted provided that a payment is sent to a fourth site.

6. The method of claim 5, in which the fourth site and the third site are the same.

7. The method of claim 1, in which the first site and the third site are different.

8. The method of claim 1, in which the first set of one or more rules are received at the electronic appliance in a second secure digital container.

9. The method of claim 1, further comprising:

at the first site, storing the first secure digital container on a portable electronic storage medium.

10. The method of claim 9, in which the portable electronic storage medium comprises a DVD.

11. A method performed by a first electronic appliance, the method comprising:

receiving, at the first electronic appliance, a protected electronic content item from a first remote site, the protected electronic content item being encrypted at least in part, the first electronic appliance including tamper-resistant software and/or hardware operable to govern use of the protected electronic content item in accordance with one or more electronic rules;

using a telecommunications network to contact a second electronic appliance to obtain a first set of one or more electronic rules, the first set of one or more electronic rules expressing one or more permitted uses of the protected electronic content item;

receiving the first set of one or more electronic rules at the first electronic appliance;

receiving a request from a user of the first electronic appliance to make a use of the protected electronic content item; and

using the tamper-resistant software and/or hardware to selectively grant the request in accordance with the first set of one or more electronic rules.

12. The method of claim 11, in which the request comprises a request to play the protected electronic content item, and in which at least one rule in the first set of one or more electronic rules indicates that playing the protected electronic content item is permitted.

13. The method of claim 11, in which the request comprises a request to play the protected electronic content item, and in which at least one rule in the first set of one or more electronic rules indicates that playing the protected electronic content item is permitted provided that a payment is sent to a second remote site.

14. The method of claim 13, in which the second remote site and the first remote site are the same.

15. The method of claim 11, in which the second electronic appliance is located at the first remote site.

16. The method of claim 13, in which the second electronic appliance is located at the second remote site.

17. The method of claim 11, in which the protected electronic content item is received at the first electronic appliance in a first secure digital container.

18. The method of claim 17, in which the first set of one or more electronic rules are received at the first electronic appliance in a second secure digital container.

19. The method of claim 11, in which the protected electronic content item is received at the first electronic appliance on a portable electronic storage medium.

20. The method of claim 19, in which portable electronic storage medium comprises a DVD.

21. The method of claim 11, in which the second electronic appliance comprises a rights and permissions clearinghouse.

22. The method of claim 11, in which the first remote site is associated with a first end user, and in which the first electronic appliance is associated with a second end user.

23. The method of claim 11, in which the first remote site is associated with a creator or commercial distributor of the protected electronic content item.

24. An electronic appliance comprising:

tamper-resistant software and/or hardware operable to govern use of a protected electronic content item in accordance with one or more electronic rules expressing one or more permitted uses of the protected electronic content item;

a network connection operable to obtain the one or more electronic rules from a first remote site;

memory for storing the one or more electronic rules;

a user input for receiving a request from a user to use the protected electronic content item; and

an output for presenting the protected electronic content item to the user.

25. The electronic appliance of claim 24, in which at least one of the one or more electronic rules indicates that playing the protected electronic content item is permitted.

26. The electronic appliance of claim 24, in which at least one of the one or more electronic rules indicates that playing the protected electronic content item is permitted provided that a payment is sent to a second remote site.

27. The electronic appliance of claim 24, in which the tamper-resistant software and/or hardware comprises a secure processing unit.

28. The electronic appliance of claim 24, further comprising means for receiving a protected electronic content item.

29. The electronic appliance of claim 28, in which the means for receiving a protected electronic content item comprises a DVD drive.

30. The electronic appliance of claim 24, in which the network connection is further operable to receive the protected electronic content item.