Method, apparatus, and computer program product for controlling copying and playback of digital data

• US 20060230463A1
• Filed: 04/07/2005
• Published: 10/12/2006
• Est. Priority Date: 04/07/2005
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Cawlfield, Kevin Joel, Mullen, Shawn Patrick, Tesauro, James Stanley
• Application Number:
  US11/101,618
• Publication Number:
  US 20060230463A1
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method, apparatus, and computer program product are disclosed for controlling copying and playback of digital data. Digital data is selected that is to be stored using a portable digital storage medium. Data that is stored using the medium is capable of being accessed only when the medium is inserted into a drive that can be accessed by a data processing system. During manufacturing of the medium: a unique identifier is stored within the medium where the unique identifier identifies only that one particular medium, a copy of the unique identifier is also stored in a tag that is affixed to a surface of the medium, a public key/private key pair is selected for encrypting and decrypting data where data that has been encrypted using the private key of the pair is capable of being decrypted using only the public key of the pair, the public key of the pair is stored within the tag, the digital data is encrypted using the private key of the pair, and the encrypted data is stored using the medium.

Claims

1. A method in a data storage device for controlling copying and playback of digital data, said method comprising:

selecting digital data to be stored using a portable digital storage medium, data that is stored using said medium capable of being accessed only when said medium is inserted into a drive that can be accessed by a data processing system; and

during manufacturing of said medium;

storing a unique identifier within said medium, said unique identifier identifying said medium;

storing a copy of said unique identifier in a first field in a tag that is affixed to a surface of said medium;

selecting a public key/private key pair for encryption and decryption of data, data that has been encrypted using said private key capable of being decrypted using only said public key;

storing said public key in a second field within said tag;

encrypting said digital data using said private key; and

storing said encrypted data using said medium.

2. The method according to claim 1, further comprising:

said digital storage medium being a CD-ROM.

3. The method according to claim 1, further comprising:

requiring said tag to be present in order to decrypt said encrypted data, said encrypted data being unable to be accessed without said tag being present.

4. The method according to claim 1, further comprising:

attempting to access said encrypted digital data that is stored utilizing said medium;

reading said unique identifier from said medium;

attempting to read data that is stored in said first field in said tag;

in response to reading data from said tag that is stored in said first field, determining whether said unique identifier that was read from said medium matches said data that was read from said first field in said tag;

in response to said unique identifier that was read from said medium being different from said data that was read from said first field in said tag, prohibiting access to said encrypted digital data.

5. The method according to claim 4, further comprising:

in response to said unique identifier that was read from said medium being the same as said data that that was read from said first field in said tag, reading data that is stored in said second field in said tag;

attempting to decrypt said encrypted data using said data that was read from said second field in said tag;

in response to successfully decrypting said encrypted data, accessing said successfully decrypted data; and

in response to unsuccessfully decrypting said encrypted data, prohibiting access to said encrypted data.

6. The method according to claim 5, further comprising:

attempting to copy said decrypted digital data to a second device;

retrieving a public key from said second device, said device storing a public key and private key pair, said public key being available to be read, said private key being kept private within said second device wherein said private key cannot be accessed read from a device that is outside of said second device;

generating a certificate;

storing an expiration date in said certificate said certificate being valid until said expiration date;

re-encrypting said decrypted data using said certificate and said public key that was retrieved from said second system; and

storing said re-encrypted data and said certificate in said second device.

7. The method according to claim 6, further comprising:

attempting, by said second device, to access said re-encrypted data;

searching for a certificate that is associated with said re-encrypted data;

in response to finding said certificate that is associated with said re-encrypted data, reading an expiration date that is stored in said certificate, said certificate being valid until said expiration date;

in response to said certificate being valid, attempting, by said second system, to decrypt said re-encrypted data using said certificate and a private key that is stored in said second system;

in response to successfully decrypting said re-encrypted data using said certificate and said private key, accessing said successfully decrypted data; and

in response to unsuccessfully decrypting said re-encrypted data using said certificate and said private key, prohibiting access to said re-encrypted data.

8. The method according to claim 7, further comprising:

in response to said certificate being invalid, prohibiting access to said encrypted data.

9. An apparatus for controlling copying and playback of digital data, said apparatus comprising:

digital data to be stored using a portable digital storage medium, data that is stored using said medium capable of being accessed only when said medium is inserted into a drive that can be accessed by a data processing system; and

during manufacturing of said medium;

a unique identifier being stored within said medium, said unique identifier identifying said medium;

a copy of said unique identifier being stored in a first field in a tag that is affixed to a surface of said medium;

a public key/private key pair for encryption and decryption of data selected for said medium, data that has been encrypted using said private key capable of being decrypted using only said public key;

said public key being stored in a second field within said tag;

said digital data encrypted using said private key; and

said medium for storing said encrypted data.

10. The apparatus according to claim 9, further comprising:

said digital storage medium being a CD-ROM.

11. The apparatus according to claim 9, further comprising:

said tag required to be present in order to decrypt said encrypted data, said encrypted data being unable to be accessed without said tag being present.

12. The apparatus according to claim 9, further comprising:

said medium being inserted into a drive in a data processing system;

said system for attempting to access said encrypted digital data that is stored utilizing said medium;

said system for reading said unique identifier from said medium;

said system for attempting to read data that is stored in said first field in said tag;

in response to reading data from said tag that is stored in said first field, said system for determining whether said unique identifier that was read from said medium matches said data that was read from said first field in said tag;

in response to said unique identifier that was read from said medium being different from said data that was read from said first field in said tag, access to said encrypted digital data being prohibited.

13. The apparatus according to claim 12, further comprising:

in response to said unique identifier that was read from said medium being the same as said data that that was read from said first field in said tag, said system for reading data that is stored in said second field in said tag;

said system for attempting to decrypt said encrypted data using said data that was read from said second field in said tag;

in response to successfully decrypting said encrypted data, said system for accessing said successfully decrypted data; and

in response to unsuccessfully decrypting said encrypted data, access to said encrypted data being prohibited.

14. The apparatus according to claim 13, further comprising:

said system for attempting to copy said decrypted digital data to a second device;

said system for retrieving a public key from said second device, said device storing a public key and private key pair, said public key being available to be read, said private key being kept private within said second device wherein said private key cannot be accessed read from a device that is outside of said second device;

said system for generating a certificate;

said system for storing an expiration date in said certificate said certificate being valid until said expiration date;

said system for re-encrypting said decrypted data using said certificate and said public key that was retrieved from said second system; and

said second device for storing said re-encrypted data and said certificate.

15. The apparatus according to claim 14, further comprising:

said second device attempting to access said re-encrypted data;

said second device searching for a certificate that is associated with said re-encrypted data;

in response to finding said certificate that is associated with said re-encrypted data, said second device reading an expiration date that is stored in said certificate, said certificate being valid until said expiration date;

in response to said certificate being valid, said second system attempting to decrypt said re-encrypted data using said certificate and a private key that is stored in said second system;

in response to successfully decrypting said re-encrypted data using said certificate and said private key, said second device accessing said successfully decrypted data; and

in response to unsuccessfully decrypting said re-encrypted data using said certificate and said private key, access to said re-encrypted data being prohibited.

16. The apparatus according to claim 15, further comprising:

in response to said certificate being invalid, access to said encrypted data being prohibited.

17. A computer program product for controlling copying and playback of digital data, said product comprising:

instructions for selecting digital data to be stored using a portable digital storage medium, data that is stored using said medium capable of being accessed only when said medium is inserted into a drive that can be accessed by a data processing system; and

during manufacturing of said medium;

instructions for storing a unique identifier within said medium, said unique identifier identifying said medium;

storing a copy of said unique identifier in a first field in a tag that is affixed to a surface of said medium;

instructions for selecting a public key/private key pair for encryption and decryption of data, data that has been encrypted using said private key capable of being decrypted using only said public key;

instructions for storing said public key in a second field within said tag;

instructions for encrypting said digital data using said private key; and

instructions for storing said encrypted data using said medium.

18. The product according to claim 17, further comprising:

instructions for attempting to access said encrypted digital data that is stored utilizing said medium;

instructions for reading said unique identifier from said medium;

instructions for attempting to read data that is stored in said first field in said tag;

in response to reading data from said tag that is stored in said first field, instructions for determining whether said unique identifier that was read from said medium matches said data that was read from said first field in said tag;

in response to said unique identifier that was read from said medium being different from said data that was read from said first field in said tag, instructions for prohibiting access to said encrypted digital data;

in response to said unique identifier that was read from said medium being the same as said data that that was read from said first field in said tag, instructions for reading data that is stored in said second field in said tag;

instructions for attempting to decrypt said encrypted data using said data that was read from said second field in said tag;

in response to successfully decrypting said encrypted data, instructions for accessing said successfully decrypted data; and

in response to unsuccessfully decrypting said encrypted data, instructions for prohibiting access to said encrypted data.

19. The product according to claim 18, further comprising:

instructions for attempting to copy said decrypted digital data to a second device;

instructions for retrieving a public key from said second device, said device storing a public key and private key pair, said public key being available to be read, said private key being kept private within said second device wherein said private key cannot be accessed read from a device that is outside of said second device;

instructions for generating a certificate;

instructions for storing an expiration date in said certificate said certificate being valid until said expiration date;

instructions for re-encrypting said decrypted data using said certificate and said public key that was retrieved from said second system; and

instructions for storing said re-encrypted data and said certificate in said second device.

20. The product according to claim 19, further comprising:

instructions for attempting, by said second device, to access said re-encrypted data;

instructions for searching for a certificate that is associated with said re-encrypted data;

in response to finding said certificate that is associated with said re-encrypted data, instructions for reading an expiration date that is stored in said certificate, said certificate being valid until said expiration date;

in response to said certificate being valid, instructions for attempting, by said second system, to decrypt said re-encrypted data using said certificate and a private key that is stored in said second system;

in response to successfully decrypting said re-encrypted data using said certificate and said private key, instructions for accessing said successfully decrypted data; and

in response to unsuccessfully decrypting said re-encrypted data using said certificate and said private key, instructions for prohibiting access to said re-encrypted data.