Cryptographic methods, apparatus and systems for storage media electronic rights management in closed and connected appliances

• US 20060212370A1
• Filed: 05/04/2006
• Published: 09/21/2006
• Est. Priority Date: 02/13/1995
• Status: Abandoned Application

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Weber, Robert P., Sibert, W. Olin, Shear, Victor H., VanWie, David M.
• Application Number:
  US11/429,385
• Publication Number:
  US 20060212370A1
• Time in Patent Office: Days
• US Class Current: 705/28
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 : Shopping for digital content
• CPC Class Codes: G06Q 20/1235 : with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/14 : specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 : Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/306 : using TV related infrastructures external card used for payment with client device H04N21/4185
• CPC Class Codes: G06Q 20/308 : using the Internet of Things
• CPC Class Codes: G06Q 2220/16 : Copy protection or prevention
• CPC Class Codes: G06Q 30/0273 : Determination of fees for advertising
• CPC Class Codes: G06Q 30/0283 : Price estimation or determination
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0609 : Buyer or seller confidence or verification
• CPC Class Codes: G06Q 40/02 : Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/04 : Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06Q 40/12 : Accounting
• CPC Class Codes: G06Q 50/184 : Intellectual property management
• CPC Class Codes: G06Q 50/188 : Electronic negotiation
• CPC Class Codes: G06T 1/0021 : Image watermarking
• CPC Class Codes: G07F 9/026 : for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 : Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copyright
• CPC Class Codes: H04L 63/02 : for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 : wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/16 : Implementing security features at a particular protocol layer
• CPC Class Codes: H04L 63/168 : above the transport layer
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/006 : involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0819 : Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0838 : Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3218 : using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 2005/91364 : the video signal being scrambled
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/23476 : by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/42646 : for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4325 : by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/163 : by receiver means only
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

A rights management arrangement for storage media such as optical digital video disks (DVDs, also called digital versatile disks) provides adequate copy protection in a limited, inexpensive mass-produceable, low-capability platform such as a dedicated home consumer disk player and also provides enhanced, more flexible security techniques and methods when the same media are used with platforms having higher security capabilities. A control object (or set) defines plural rights management rules for instance, price for performance or rules governing redistribution. Low capability platforms may enable only a subset of the control rules such as controls on copying or marking of played material. Higher capability platforms may enable all (or different subsets) of the rules. Cryptographically strong security is provided by encrypting at least some of the information carried by the media and enabling decryption based on the control set and/or other limitations. A secure “software container” can be used to protectively encapsulate (e.g., by cryptographic techniques) various digital property content (e.g., audio, video, game, etc.) and control object (i.e., set of rules) information. A standardized container format is provided for general use on/with various mediums and platforms. In addition, a special purpose container may be provided for DVD medium and appliances (e.g., recorders, players, etc.) that contains DVD program content (digital property) and DVD medium specific rules. The techniques, systems and methods disclosed herein are capable of achieving compatibility with other protection standards, such as for example, CGMA and Matsushita data protection standards adopted for DVDs. Cooperative rights management may also be provided, where plural networked rights management arrangements collectively control a rights management event on one or more of such arrangements.

Claims

1. An electronic appliance comprising:

a disk drive configured to read protected information from a removable storage medium;

an input for receiving user requests;

a protected processing environment communicatively coupled to the disk drive, the protected processing environment being configured to;

(a) access control information from the storage medium, the control information specifying one or more permitted or prohibited uses of the protected information;

(b) apply the control information to govern access to or other use of the protected information;

(c) use one or more decryption keys stored within the protected processing environment to decrypt one or more encrypted content decryption keys; and

(d) use the one or more content decryption keys to decrypt the protected information; and

an output for presenting the protected information to a user.

2. The electronic appliance of claim 1, in which the disk drive is further configured to retrieve the one or more encrypted content decryption keys from the removable storage medium.

3. The electronic appliance of claim 1, in which the protected processing environment includes a secure processing unit comprising internal memory, the internal memory storing the one or more decryption keys.

4. The electronic appliance of claim 1, in which the control information includes one or more controls selected from a group consisting of:

a control that prohibits copying of the protected information, a control that allows the protected information to be copied only once, and a control that allows the protected information to be copied multiple times.

5. The electronic appliance of claim 1, in which the control information includes one or more controls selected from a group consisting of:

a control that allows a user or a class of users to play the protected information, and a control that allows a user or a class of users to extract or excerpt at least a part of the protected information

6. The electronic appliance of claim 3, in which the control information includes one or more controls selected from a group consisting of:

a control that prohibits copying of the protected information, a control that allows the protected information to be copied only once, a control that allows the protected information to be copied multiple times, a control that allows a user or a class of users to play the protected information, and a control that allows a user or a class of users to extract or excerpt at least a part of the protected information.

7. The electronic appliance of claim 1, in which the control information includes a requirement that the protected information can only be released to one or more types of devices.

8. The electronic appliance of claim 7, in which the one or more types of devices includes devices that are not configured to copy the protected information.

9. The electronic appliance of claim 7, in which the one or more types of devices includes devices that include a rights management component configured to enforce at least part of the control information.

10. The electronic appliance of claim 1, in which the control information includes a requirement that the protected information be fingerprinted prior to release by the electronic appliance.

11. The electronic appliance of claim 1, in which the control information includes a requirement that copies of the protected information be degraded in quality.

12. A method comprising:

receiving a removable storage medium in a disk drive of an electronic appliance, the removable storage medium containing at least a protected content item and one or more controls specifying one or more permitted or prohibited uses of the protected content item;

receiving, over a telecommunications network, one or more additional controls specifying one or more permitted or prohibited uses of the protected content item; and

using said one or more controls and/or said one or more additional controls to govern access to or other use of the protected content item.

13. The method of claim 12, further comprising receiving a request to copy the protected content item, in which the step of using said one or more controls and/or said one or more additional controls to govern access to or other use of the protected content item comprises determining that at least one control or additional control permits only a predefined number of copies of the protected content item to be made, determining that the predefined number of copies has not been made, and granting the request.

14. The method of claim 13, further comprising storing an indication that the request has been granted, the indication for use in responding to further requests to copy the protected content item.

15. The method of claim 12, in which at least one of the one or more controls or the one or more additional controls is selected from a group consisting of:

a control that prohibits copying of the protected content item, a control that allows the protected content item to be copied only once, and a control that allows the protected content item to be copied multiple times.

16. The method of claim 12, in which at least one of the one or more controls or the one or more additional controls is selected from a group consisting of:

a control that allows a user or a class of users to play the protected content item, and a control that allows a user or a class of users to extract or excerpt at least a part of the protected content item.

17. The method of claim 12, in which at least one of the one or more controls or the one or more additional controls includes a requirement that the protected content item can only be released in decrypted form to one or more types of devices.

18. The method of claim 17, in which the one or more types of devices includes devices that are not configured to copy the protected content item.

19. The method of claim 17, in which the one or more types of devices includes devices that are configured to apply at least part of the control information to govern access to and/or other use of the protected content item.

20. The method of claim 16, further comprising:

receiving a request from a user to play the protected content item; and

verifying a digital certificate associated with the user.

21. A DVD player comprising:

a disk drive for accepting DVDs;

a user interface for accepting input from a user of the DVD player; and

a protected processing environment communicatively coupled to the disk drive and the user interface, the protected processing environment being configured to access control information from a DVD and to apply the control information to govern access to and/or other use of protected information stored on the DVD, the control information specifying one or more permitted or prohibited uses of the protected information.

22. The DVD player of claim 21, in which the protected processing environment comprises one or more cryptographic keys for use in decrypting the protected information.

23. The DVD player of claim 21, in which the protected processing environment comprises one or more cryptographic keys for use in decrypting one or more encrypted content keys stored on the DVD, the one or more content keys for use in decrypting the protected information.

24. The DVD player of claim 21, in which the protected processing environment comprises a secure processing unit.

25. The DVD player of claim 24, in which the secure processing unit comprises a microprocessor and memory storing one or more cryptographic keys for use in decrypting the protected information and/or decrypting one or more encrypted cryptographic keys stored on the DVD.

26. The DVD player of claim 24, in which the secure processing unit comprises a microprocessor, memory storing one or more cryptographic keys, and a random number generator.

27. The DVD player of claim 21, in which the control information includes one or more controls selected from a group consisting of:

a control that prohibits copying of the protected information, a control that allows the protected information to be copied only once, and a control that allows the protected information to be copied multiple times.

28. The DVD player of claim 21, in which the control information includes one or more controls selected from a group consisting of:

a control that allows a user or a class of users to play the protected information, and a control that allows a user or a class of users to extract or excerpt at least a part of the protected information.

29. The DVD player of claim 21, in which the control information includes a requirement that the protected information can only be sent to one or more types of devices.

30. The DVD player of claim 29, in which the one or more types of devices includes devices that are not configured to copy the protected information.

31. The DVD player of claim 29, in which the one or more types of devices includes devices that are configured to apply at least part of the control information to govern access to and/or other use of the protected information.

32. An electronic appliance comprising:

an input for receiving protected information and control information associated therewith, the control information specifying one or more permitted or prohibited uses of the protected information;

a user interface for receiving user requests;

a rights management component configured to;

(a) access the control information;

(b) apply the control information to govern access to or other use of the protected information;

(c) use one or more decryption keys stored within the electronic appliance to decrypt one or more encrypted content decryption keys; and

(d) use the one or more content decryption keys to decrypt the protected information; and

an output for presenting the protected information to a user.

33. The electronic appliance of claim 32, in which the rights management component includes a secure processing unit comprising internal memory, the internal memory storing the one or more decryption keys.

34. The electronic appliance of claim 32, in which the control information includes one or more controls selected from a group consisting of:

a control that prohibits copying of the protected information, a control that allows the protected information to be copied only once, and a control that allows the protected information to be copied multiple times.

35. The electronic appliance of claim 32, in which the control information includes one or more controls selected from a group consisting of:

a control that allows a user or a class of users to play the protected information, and a control that allows a user or a class of users to extract or excerpt at least a part of the protected information.

36. The electronic appliance of claim 32, further comprising a network interface, wherein the rights management component is further configured to process key revocation information received via the network interface.

37. A method performed by an electronic appliance, the method comprising:

receiving protected information and control information associated therewith, the control information specifying one or more permitted or prohibited uses of the protected information;

receiving a request from a user to play the protected information;

securely applying the control information to determine that the request can be granted;

decrypting one or more encrypted content decryption keys using one or more decryption keys stored within memory of the electronic appliance;

decrypting the protected information using the one or more content decryption keys; and

playing the protected information for the user.

38. The method of claim 37, in which the electronic appliance includes a secure processing unit comprising internal memory, the internal memory storing the one or more decryption keys.

39. The method claim 37, in which the control information includes one or more controls selected from a group consisting of:

a control that prohibits copying of the protected information, a control that allows the protected information to be copied only once, and a control that allows the protected information to be copied multiple times.

40. The method of claim 37, in which the control information includes one or more controls selected from a group consisting of:

a control that allows a user or a class of users to play the protected information, and a control that allows a user or a class of users to extract or excerpt at least a part of the protected information.

41. The method of claim 40, further comprising:

verifying a digital certificate associated with the user.

42. The method of claim 37, further comprising:

receiving key revocation information, and using the key revocation information to revoke one or more of the decryption keys.

43. The method of claim 37, further comprising:

receiving one or more additional decryption keys.

44. A computer-readable medium comprising a plurality of computer-readable objects, the computer readable objects including:

encrypted digital content;

control information specifying one or more permitted or prohibited uses of the digital content, the control information being securely associated with the digital content and being configured to be interpreted by tamper-resistant software and/or hardware to securely govern use of the digital content; and

one or more encrypted decryption keys, the decryption keys being configured to decrypt the digital content.

45. The computer-readable medium of claim 44, in which the control information includes a first set of one or more controls for use on a first class of electronic appliances, and a second set of one or more controls for use on a second class of electronic appliances.

46. The computer-readable medium of claim 45, in which the first class of electronic appliances comprises electronic appliances having at least a first security capability, and the second class of electronic appliances comprises electronic appliances that do not have said at least first security capability.

47. The computer-readable medium of claim 46, in which the at least first security capability comprises an enhanced capability to use rights management information.

48. The computer-readable medium of claim 47, in which the enhanced capability comprises an ability to audit use of the digital content.

49. The computer-readable medium of claim 45, in which the first class of electronic appliances comprises electronic appliances having at least a first technical capability, and the second class of electronic appliances comprises electronic appliances that do not have said at least first technical capability.

50. The computer-readable medium of claim 49, in which the at least first technical capability comprises a network connection.

51. The computer-readable medium of claim 44, in which the control information includes one or more controls selected from a group consisting of:

a control that prohibits copying of the digital content, a control that allows the digital content to be copied only once, and a control that allows the digital content to be copied multiple times.

52. The computer-readable medium of claim 44, in which the control information includes one or more controls selected from a group consisting of:

a control that allows a user or a class of users to play the digital content, and a control that allows a user or a class of users to extract or excerpt at least a part of the digital content.

53. The computer-readable medium of claim 44, in which the control information includes a requirement that the digital content can only be released in decrypted form to one or more types of devices.

54. The computer-readable medium of claim 53, in which the one or more types of devices includes devices that are not configured to copy the digital content.

55. The computer-readable medium of claim 53, in which the one or more types of devices includes devices that have a rights management component configured to enforce at least part of the control information.

56. The computer-readable medium of claim 44, in which the control information includes a requirement that the digital content be fingerprinted prior to release in decrypted form by an electronic appliance.

57. The computer-readable medium of claim 44, in which the control information includes a requirement that copies of the digital content be degraded in quality.

58. The computer-readable medium of claim 55, in which the digital content comprises a movie.

59. The computer-readable medium of claim 58, in which the computer-readable medium comprises a DVD.

60. A method comprising:

receiving, at a first electronic appliance, a first electronic content item and a first identifier associated with the first electronic content item;

receiving a request to copy or transfer the first electronic content item to a second electronic appliance;

accessing the first identifier; and

denying the request to copy or transfer the first electronic content item to a second electronic appliance based on said first identifier.

61. The method of claim 60, in which the first identifier identifies the first electronic appliance.

62. The method of claim 60, in which the first identifier identifies a third electronic appliance, the third electronic appliance having sent the first electronic content item to the first electronic appliance.

63. The method of claim 60, in which the first identifier comprises a code indicating that the first electronic content item is a copy.

64. The method of claim 63, in which the first electronic content item has a second identifier associated therewith.

65. The method of claim 64, in which the second identifier identifies the first electronic appliance.

66. The method of claim 64, in which the second identifier identifies a third electronic appliance, the third electronic appliance having sent the first electronic content item to the first electronic appliance.

67. The method of claim 60, in which the first electronic content item and the first identifier are received in a tamper-resistant electronic container.

68. The method of claim 60, in which the first electronic content item is received in encrypted form.

69. The method of claim 60, further comprising:

receiving, at the first electronic appliance, a second electronic content item;

receiving a request to access the second electronic content item;

determining that the second electronic content item has a second identifier associated therewith; and

granting the request to access the second electronic content item based at least in part on said second identifier.

70. The method of claim 69, in which the second identifier identifies at least one of the first electronic appliance or an electronic appliance that sent the second electronic content item to the first electronic appliance.

71. A method comprising:

receiving, at a first electronic appliance, an electronic content item and an identifier associated with the electronic content item, the identifier identifying a second electronic appliance authorized to play the electronic content item;

receiving, at the first electronic appliance, a request to play the electronic content item;

accessing the identifier; and

denying the request to play the electronic content item based on said identifier.

72. The method of claim 71, in which the electronic content item and the identifier are received in a secure electronic container.

73. The method of claim 71, in which the electronic content item further has control information associated therewith, the control information being configured to be interpreted by tamper-resistant software and/or hardware to securely govern use of the electronic content item, and in which the control information includes one or more controls selected from a group consisting of:

a control that prohibits copying of the electronic content item, a control that allows the electronic content item to be copied only once, a control that allows the electronic content item to be copied multiple times, a control that allows a user or a class of users to play the electronic content item, and a control that allows a user or a class of users to extract or excerpt at least a part of the electronic content item.

74. A method comprising:

receiving, at a first electronic appliance, an electronic content item, the electronic content item having an identifier associated therewith, the identifier identifying the first electronic appliance, the first electronic appliance being configured to check the identifier before playing the electronic content item;

sending the electronic content item and the identifier from the first electronic appliance to a second electronic appliance;

receiving the electronic content item and the identifier at the second electronic appliance, the second electronic appliance being configured to check the identifier before playing the electronic content item;

receiving, at the second electronic appliance, a request to play the electronic content item;

accessing the identifier; and

denying the request to play the electronic content item at the second electronic appliance.

75. The method of claim 74, in which the electronic content item and the identifier are received at the first electronic appliance in a secure electronic container.

76. The method of claim 74, in which the electronic content item further has control information associated therewith, the control information being configured to be interpreted by tamper-resistant software and/or hardware to securely govern use of the electronic content item, and in which the control information includes one or more controls selected from a group consisting of:

a control that prohibits copying of the electronic content item, a control that allows the electronic content item to be copied only once, a control that allows the electronic content item to be copied multiple times, a control that allows a user or a class of users to play the electronic content item, and a control that allows a user or a class of users to extract or excerpt at least a part of the electronic content item.