System and methods for secure transaction management and electronics rights protection

• US 20060224903A1
• Filed: 05/23/2006
• Published: 10/05/2006
• Est. Priority Date: 02/13/1995
• Status: Active Grant

• Current Assignee: David M. Van Wie, Francis J. Spahn, Karl L. Ginter, Victor M. Shear
• Original Assignee: David M. Van Wie, Francis J. Spahn, Karl L. Ginter, Victor M. Shear
• Inventors: Shear, Victor M., Ginter, Karl L., Spahn, Francis J., Van Wie, David M.
• Granted Patent: US 8,543,842 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 : Shopping for digital content
• CPC Class Codes: G06Q 20/1235 : with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/14 : specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 : Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/306 : using TV related infrastructures external card used for payment with client device H04N21/4185
• CPC Class Codes: G06Q 20/308 : using the Internet of Things
• CPC Class Codes: G06Q 2220/16 : Copy protection or prevention
• CPC Class Codes: G06Q 30/0273 : Determination of fees for advertising
• CPC Class Codes: G06Q 30/0283 : Price estimation or determination
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0609 : Buyer or seller confidence or verification
• CPC Class Codes: G06Q 40/02 : Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/04 : Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06Q 40/12 : Accounting
• CPC Class Codes: G06Q 50/184 : Intellectual property management
• CPC Class Codes: G06Q 50/188 : Electronic negotiation
• CPC Class Codes: G06T 1/0021 : Image watermarking
• CPC Class Codes: G07F 9/026 : for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 : Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copyright
• CPC Class Codes: H04L 63/02 : for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 : wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/16 : Implementing security features at a particular protocol layer
• CPC Class Codes: H04L 63/168 : above the transport layer
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/006 : involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0819 : Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0838 : Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3218 : using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 2005/91364 : the video signal being scrambled
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/23476 : by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/42646 : for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4325 : by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/163 : by receiver means only
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node. These techniques may be used to support an all-electronic information distribution, for example, utilizing the “electronic highway.”

Claims

1-90. -90. (canceled)

91. A method comprising:

creating an electronic document at a first user'"'"'s electronic appliance;

at the first user'"'"'s electronic appliance, securely associating control information with the electronic document, the control information indicating that the electronic document may be used only by one or more designated users and only in one or more authorized ways, the control information being configured to be enforced by tamper-resistant software and/or hardware to govern use of the electronic document;

distributing the electronic document and the control information to a second user'"'"'s electronic appliance;

determining that the second user is one of said one or more designated users; and

at the second user'"'"'s electronic appliance, securely enabling the second user to make at least one use of the electronic document in accordance with the control information, in which software and/or hardware at the second user'"'"'s electronic appliance is operable to perform, at least in part, said securely enabling step, said software and/or hardware at the second user'"'"'s electronic appliance being resistant to tampering by the second user with the performance of said securely enabling step.

92. The method of claim 91, further comprising:

sending a request from the second user, the request seeking a modification to the control information;

receiving a modified set of control information in response to the request.

93. The method of claim 92, in which the modified set of control information indicates that the electronic document may be used by a set of designated users that differs at least in part from the one or more designated users.

94. The method of claim 92, in which the modified set of control information indicates that the document may be used only in a modified set of authorized ways that differs at least in part from the one or more authorized ways.

95. The method of claim 92, in which the request is sent to the first user'"'"'s electronic appliance.

96. The method of claim 91, in which the one or more designated users comprise a group of users, and in which the control information identifies the group of users.

97. The method of claim 91, in which the control information includes a requirement that a return receipt be sent to the first user from a recipient of the electronic document, the method further comprising:

sending a return receipt from the second user'"'"'s electronic appliance to the first user'"'"'s electronic appliance in accordance with the control information.

98. The method of claim 91, in which the control information specifies one or more auditing requirements, the method further comprising:

at the second user'"'"'s electronic appliance, complying with the one or more auditing requirements.

99. The method of claim 98, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication of how the electronic document has been used.

100. The method of claim 98, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been printed by the recipient.

101. The method of claim 98, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been viewed by the recipient.

102. The method of claim 98, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has edited by the recipient.

103. The method of claim 91, in which the control information specifies that certain or all information in the electronic document may be extracted by an authorized recipient.

104. The method of claim 91, in which the control information specifies that the electronic document may be redistributed by an authorized recipient.

105. The method of claim 91, in which the at least one use comprises viewing the electronic document.

106. The method of claim 91, in which the at least one use comprises printing, copying, extracting text from, or embedding text within the electronic document.

107. The method of claim 91, in which the control information is configured to govern at least two of the following uses of the electronic document:

viewing the electronic document, printing the electronic document, copying the electronic document, or modifying the electronic document.

108. A method comprising:

receiving an electronic document at a first user'"'"'s electronic appliance, the electronic document having been sent from a second user'"'"'s electronic appliance;

receiving, at the first user'"'"'s electronic appliance, control information associated with the electronic document, the control information indicating that the electronic document may be used only in one or more authorized ways; and

using a software application running on the first user'"'"'s electronic appliance to enable the first user to make at least one use of the electronic document in accordance with the control information, wherein the software application is configured to be resistant to attempts by users of the first electronic appliance to use the electronic document in unauthorized ways.

109. The method of claim 108, in which control information is received separately from the electronic document.

110. The method of claim 108, in which the control information is received at the first user'"'"'s electronic appliance from the second user'"'"'s electronic appliance together with the electronic document.

111. The method of claim 110, in which control information is received together with the electronic document in a secure electronic container.

112. The method of claim 111, in which the electronic document is encrypted within the secure electronic container, and in which the secure electronic container includes an unencrypted header.

113. The method of claim 108, in which the control information further indicates that the electronic document may be used only by one or more designated users, the method further comprising:

using the software application on the first user'"'"'s electronic appliance to determine that the first user is one of said one or more designated users.

114. The method of claim 108, in which the first user'"'"'s electronic appliance comprises a secure processing unit, and in which the software application is operable to communicate with the secure processing unit to obtain information necessary to decrypt the electronic document.

115. The method of claim 114, in which the secure processing unit comprises a processor, memory storing one or more cryptographic keys, and memory interface logic that is operable to prevent unauthorized access to the memory from outside the secure processing unit.

116. The method of claim 108, in which the software application comprises a word processor.

117. The method of claim 108, in which the software application comprises an electronic mail program.

118. The method of claim 117, in which the electronic document comprises an electronic mail message.

119. The method of claim 108, in which the electronic document comprises an electronic memorandum, an electronic mail message, a text file, and/or a multimedia file.

120. The method of claim 108, in which the control information includes a requirement that a recipient of the electronic document contact the second user before using the electronic document, the method further comprising:

sending a request from the first user to the second user for permission to use the electronic document; and

receiving permission from the second user.

121. The method of claim 108, further comprising:

sending a request from the first user'"'"'s electronic appliance to the second user'"'"'s electronic appliance, the request seeking a modification to the control information;

receiving at the first user'"'"'s electronic appliance from the second user'"'"'s electronic appliance a modified set of control information in response to the request.

122. The method of claim 108, in which the control information specifies one or more auditing requirements, the method further comprising:

sending auditing information to the second user'"'"'s electronic appliance in compliance with the auditing requirements.

123. The method of claim 122, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication of how the electronic document has been used.

124. The method of claim 122, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been printed by the recipient.

125. The method of claim 122, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been viewed by the recipient.

126. The method of claim 122, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been stored by the recipient.

127. The method of claim 122, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been edited by the recipient.

128. The method of claim 108, in which the control information specifies that certain or all information in the electronic document may be extracted by an authorized recipient.

129. The method of claim 108, in which the control information specifies that the electronic document may be redistributed by an authorized recipient.

130. The method of claim 108, in which the one or more authorized ways include viewing the electronic document.

131. The method of claim 108, in which the one or more authorized ways include printing the electronic document.

132. The method of claim 108, in which the one or more authorized ways include copying the electronic document.

133. The method of claim 108, in which the one or more authorized ways include extracting text from, and/or embedding text within, the electronic document.

134. The method of claim 108, in which the one or more authorized ways include redistributing the electronic document.

135. The method of claim 108, in which the control information is configured to govern at least two of the following uses of the electronic document:

viewing the electronic document, printing the electronic document, copying the electronic document, or modifying the electronic document.

136. A method performed at a first user'"'"'s electronic appliance, the method comprising:

creating an electronic document;

associating first control information with the electronic document, the first control information indicating that the electronic document may be used only in one or more authorized ways, the first control information being configured to be enforced by tamper-resistant software and/or hardware to govern use of the electronic document, and the electronic document being configured to be resistant to attempts to access or otherwise use its contents unless permitted by said tamper-resistant software and/or hardware; and

distributing the electronic document and the first control information to a second user'"'"'s electronic appliance.

137. The method of claim 136, in which the first control information further indicates that the electronic document may be used only by one or more designated users, the method further comprising:

determining that the second user is one of said one or more designated users prior to performing said distributing step.

138. The method of claim 136, further comprising:

receiving a request from the second user'"'"'s electronic appliance for additional control information;

sending additional control information to the second user'"'"'s electronic appliance, the additional control information being configured to authorize at least one additional use of the electronic document not authorized by the first control information.

139. The method of claim 136, in which the first control information includes a requirement that a return receipt be sent to the first user from a recipient of the electronic document, the method further comprising:

receiving a return receipt from the second user'"'"'s electronic appliance in accordance with the first control information.

140. The method of claim 136, in which the first control information specifies one or more auditing requirements, the method further comprising:

receiving auditing information generated at the second user'"'"'s electronic appliance in compliance with the auditing requirements.

141. The method of claim 140, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication of how the electronic document has been used.

142. The method of claim 140, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been printed by the recipient.

143. The method of claim 140, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been viewed by the recipient.

144. The method of claim 140, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been edited by the recipient.

145. The method of claim 136, in which the first control information specifies that certain or all information in the electronic document may be extracted by an authorized recipient.

146. The method of claim 136, in which the first control information specifies that the electronic document may be redistributed by an authorized recipient.

147. The method of claim 136, in which the one or more authorized ways include viewing the electronic document.

148. The method of claim 136, in which the one or more authorized ways include printing the electronic document.

149. The method of claim 136, in which the one or more authorized ways include copying the electronic document.

150. The method of claim 136, in which the one or more authorized ways include extracting text from, and/or embedding text within, the electronic document.

151. The method of claim 136, in which the one or more authorized ways include redistributing the electronic document.

152. The method of claim 136, in which the first control information is configured to govern at least two of the following uses of the electronic document:

viewing the electronic document, printing the electronic document, copying the electronic document, and modifying the electronic document.

CPP (recipient)

153. A computer-readable medium containing a software application comprising executable program instructions, the executable program instructions including instructions for:

receiving an electronic document and first control information associated with the electronic document, the first control information indicating that the electronic document may be used only in one or more authorized ways;

separately receiving second control information associated with the electronic document; and

applying the first control information and the second control information to enable at least one use of the electronic document in accordance with the first control information and the second control information;

wherein the software application is configured to be resistant to attempts to use the electronic document in unauthorized ways.

154. The computer-readable medium of claim 153, in which the first control information further indicates that the electronic document may be used by one or more designated users, and in which the second control information indicates that the electronic document may be used by one or more additional users.

155. The computer-readable medium of claim 153, in which the second control information indicates that the electronic document may be used in one or more additional authorized ways.

156. The computer-readable medium of claim 153, in which the first control information includes a first expiration date, and in which the second control information includes a second expiration date after the first expiration date.

157. The computer-readable medium of claim 153, in which the executable program instructions further include instructions for decrypting the electronic document using at least one cryptographic key retrieved from a secure processing unit.

158. The computer-readable medium of claim 153, in which the first control information includes a requirement that a return receipt be sent to a remote electronic appliance, and in which the executable program instructions further include instructions for sending a return receipt to a remote electronic appliance from which the electronic document was received.

159. The computer-readable medium of claim 153, in which the first control information includes one or more auditing requirement, and in which the executable program instructions further include instructions for complying with the auditing requirements.

160. The computer-readable medium of claim 159, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication of how the electronic document has been used.

161. The computer-readable medium of claim 159, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been printed by the recipient.

162. The computer-readable medium of claim 159, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been viewed by the recipient.

163. The computer-readable medium of claim 159, in which the one or more auditing requirements include a requirement that a recipient of the electronic document send an indication if the electronic document has been edited by the recipient.

164. The computer-readable medium of claim 153, in which the first control information specifies that certain or all information in the electronic document may be extracted by an authorized recipient.

165. The computer-readable medium of claim 153, in which the first control information specifies that the electronic document may be redistributed by an authorized recipient.

166. The computer-readable medium of claim 153, in which the one or more authorized ways include viewing the electronic document.

167. The computer-readable medium of claim 153, in which the one or more authorized ways include printing the electronic document.

168. The computer-readable medium of claim 153, in which the one or more authorized ways include copying the electronic document.

169. The computer-readable medium of claim 153, in which the one or more authorized ways include extracting text from, or embedding text within, the electronic document.

170. The computer-readable medium of claim 153, in which the one or more authorized ways include redistributing the electronic document.

171. The computer-readable medium of claim 153, in which the first control information is configured to govern at least two of the following uses of the electronic document:

viewing the electronic document, printing the electronic document, copying the electronic document, or modifying the electronic document.

172. The computer-readable medium of claim 153, in which the software application comprises a word processor or an electronic mail program.

173. A method comprising:

creating an electronic document at a first user'"'"'s electronic appliance;

at the first user'"'"'s electronic appliance, securely associating control information with the electronic document, the control information indicating that the electronic document may be used only in one or more authorized ways, the control information being configured to be enforced by tamper-resistant software and/or hardware to govern use of the electronic document;

distributing the electronic document and the control information to a second user'"'"'s electronic appliance; and

at the second user'"'"'s electronic appliance, securely enabling the second user to make at least one use of the electronic document in accordance with the control information, in which software and/or hardware at the second user'"'"'s electronic appliance is operable to perform, at least in part, said securely enabling step, said software and/or hardware at the second user'"'"'s electronic appliance being resistant to tampering by the second user with the performance of said securely enabling step.

174. The method of claim 173, further comprising:

sending a request from the second user, the request seeking a modification to the control information; and

receiving a modified set of control information in response to the request.

175. The method of claim 173, in which the one or more authorized ways include at least two of the following:

viewing the electronic document, printing the electronic document, copying the electronic document, or modifying the electronic document.

176. The method of claim 173, in which the control information specifies that the electronic document may be redistributed by an authorized recipient.