Securing digital content system and method

• US 20070033397A1
• Filed: 10/20/2004
• Published: 02/08/2007
• Est. Priority Date: 10/20/2003
• Status: Active Grant

• Current Assignee: Digital Reg of Texas, LLC (DRM Technologies LLC)
• Original Assignee: DRM Technologies LLC
• Inventors: Ornstein, Seth, Phillips II, Eugene
• Granted Patent: US 7,421,741 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system and method of encrypting digital content in a digital container and securely locking the encrypted content to a particular user and/or computer or other computing device is provided. The system uses a token-based authentication and authorization procedure and involves the use of an authentication/authorization server. This system provides a high level of encryption security equivalent to that provided by public key/asymmetric cryptography without the complexity and expense of the associated PKI infrastructure. The system enjoys the simplicity and ease of use of single key/symmetric cryptography without the risk inherent in passing unsecured hidden keys. The secured digital container when locked to a user or user'"'"'s device may not open or permit access to the contents if the digital container is transferred to another user'"'"'s device. The digital container provides a secure technique of distributing electronic content such as videos, text, data, photos, financial data, sales solicitations, or the like.

Claims

1. A method of securely delivering data, comprising the steps of:

creating a container having electronic content and a container identifier;

encrypting at least one data block of the electronic content using a symmetric encryption technique and encrypting a header associated with a first data block of the electronic content using an asymmetric encryption technique, the header including a symmetric decryption key; and

re-keying the header using data associated with a user or a user'"'"'s device to lock at least a portion of the electronic content to the user or the user'"'"'s device,

wherein the locked at least a portion of the electronic content can only be decrypted and accessed by the user or on the user'"'"'s device when the user or user'"'"'s device has been authenticated against at least the container identifier.

2. A system for securely delivering data, comprising at least one component to:

create a container having electronic content and a container identifier;

encrypt at least one data block of the electronic content using a symmetric encryption technique and to encrypt a header associated with a first data block of the electronic content using an asymmetric encryption technique, the header including a symmetric decryption key; and

re-key the header using data associated with a user or a user'"'"'s device to lock at least a portion of the electronic content to the user or the user'"'"'s device,

wherein the locked at least a portion of the electronic content can only be decrypted and accessed by the user or on the user'"'"'s device when the user or user'"'"'s device has been authenticated against at least the container identifier.

3. A computer program product comprising a computer usable medium having readable program code embodied in the medium, the computer program product includes at least one component to:

create a container having electronic content and a container identifier;

determining at least one data block for partitioning the electronic content;

encrypt the at least one data block of the electronic content using a symmetric encryption technique and to encrypt a header associated with a first data block of the electronic content using an asymmetric encryption technique, the header including a symmetric decryption key;

re-key the header using data associated with a user or a user'"'"'s device to lock at least a portion of the electronic content to the user or the user'"'"'s device, wherein the locked at least a portion of the electronic content can only be decrypted and accessed by the user or on the user'"'"'s device when the user or user'"'"'s device has been authenticated against at least the container identifier; and

decrypt the locked portion of the electronic content when the user or user'"'"'s device has been authenticated.