Data copyright management system

• US 20070038575A1
• Filed: 07/31/2006
• Published: 02/15/2007
• Est. Priority Date: 09/30/1994
• Status: Abandoned Application

• Current Assignee: Piracy Protection LLC (LF Capital Partners, LLC)
• Original Assignee: Intarsia Software LLC (Intellectual Ventures LLC)
• Inventors: Saito, Makoto
• Application Number:
  US11/496,777
• Publication Number:
  US 20070038575A1
• Time in Patent Office: Days
• US Class Current: 705/59
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 50/184 Intellectual property management
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26613 : for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4408 : involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A data copyright management system comprises a database for storing original data, a key control center for managing crypt keys, copyright management center for managing data copyrights, and a communication network for connecting these sections. Data supplied from the database to users is encrypted and distributed. The users decrypts the encrypted data by crypt keys obtained from the key control center or copyright management center. To supply data to users, there are the following two methods: a one-way supplying of encrypted data to users by means of broadcasting or the like; and two-way supplying of encrypted data to users corresponding to users'"'"' requests. A crypt key system used for encrypting data uses a secret-key cryptosystem, a public-key cryptosystem or a cryptosystem combining a secret-key and a public-key and further uses a copyright control program to control data copyrights. When a user stores, copies, or transfers data, the data is encrypted by a crypt key different from a crypt key used for supplying the data. The former crypt key is supplied from the key control center or from the copyright management center, or generated by the copyright control program. The present invention can be applied to a data copyright management system for using not only single data but also a plurality of data supplied from a single database or a plurality of data supplied from a plurality of databases. Further, an apparatus to be used by the user to perform data copyright management is proposed.

Claims

1-70. -70. (canceled)

71. A terminal device comprising:

means for receiving a first encryption-key and a second encryption-key from a copy management system;

means for receiving encrypted data;

means for decrypting said encrypted data according to said first encryption-key for display; and

means for re-encrypting said displayed data according to said second encryption-key.

72. The terminal device according to claim 71, wherein said means for re-encrypting comprises means for encrypting said displayed data to re-encrypted data prior to said displayed data being stored, copied, and/or transferred.

75. The terminal device according to claim 71, further comprising:

means for requesting use of said data by presenting primary user information of the terminal device to said copy management system; and

means for combining the primary user information with the re-encrypted data.

76. The terminal device according to claim 71, further comprising means for combining copyright information with said encrypted data as a copyright information label.

77. The terminal device according to claim 71, further comprising means for combining a digital signature with said encrypted data.

78. The terminal device according to claim 71, wherein at least one of the decrypting means and/or the encrypting means comprises a microprocessor to execute a copy management program.

79. The terminal device according to claim 78, and further comprising a ROM to store said data copyright management program.

80. The terminal device according to claim 78, and further comprising an operating system to control execution of said data copyright management program.

81. The terminal device according to claim 78, further comprising means for receiving the data copyright management program from the copy management system.

82. The terminal device according to claim 71, wherein the first encryption-key and the second encryption-key are distinguishable from one another.

73. A terminal device comprising:

means for receiving a first encryption-key and a second encryption-key from a copy management system;

means for receiving encrypted data;

means for decrypting said encrypted data to decrypted data according to said first encryption-key;

means for processing said decrypted data; and

means for re-encrypting said processed data to re-encrypted data using said second encryption-key.

74. The terminal device according to claim 73, wherein said means for re-encrypting includes means for encrypting said processed data to re-encrypted data prior to said processed data being stored, copied and/or transferred.

83. A terminal device comprising:

means for receiving a decryption key to decrypt the encrypted data received from a copy management system;

means for decrypting said encrypted data to decrypted data for display according to said decryption key; and

means for encrypting said decrypted data to re-encrypted data according to an encryption key prior to said decrypted data being stored, copied and/or transferred.

84. A terminal device for communicating with a copy management system, said terminal device comprising:

means for receiving a decryption key from the copy management system;

means for decrypting encrypted data to decrypted data according to said decryption key;

means for processing said decrypted data; and

re-encrypting means for encrypting said processed data to re-encrypted data using an encryption key prior to the processed data being stored, copied and/or transferred.

85. A data copy management system, said data copy management system comprising:

a copy management center; and

a database comprising;

means for receiving a request of use, presenting primary user information from a primary user terminal;

means for transferring a first encryption-key, a second encryption key and an encrypted copy management program to the primary user terminal; and

means for transferring the primary user information to the copy management center.

86. A method comprising:

receiving primary user information from a primary user terminal;

transferring a first encryption-key to encrypt requested data using the first encryption-key and to decrypt the encrypted data;

transferring a second encryption-key to re-encrypt the decrypted data;

transferring an encrypted copy management program to the primary user terminal; and

transferring the primary user information to the copy management center.

87. A terminal device comprising:

a key receiving unit to receive a first encryption-key and a second encryption-key from the copy management system;

a data receiving unit to receive encrypted data;

a decrypting unit to decrypt said encrypted data to provide decrypted data according to said first encryption-key in response to processing said encrypted data; and

an encrypting unit to re-encrypt said displayed data according to said second encryption-key.

88. A computer-readable storage medium having stored thereon machine-readable instructions operable to:

receive a first encryption-key and a second encryption-key;

receive encrypted data;

decrypt said encrypted data to decrypted data according to said first encryption-key in response to display of said encrypted data; and

re-encrypt said displayed data according to said second encryption-key.

89. The computer-readable storage medium according to claim 88, and further comprising instructions stored thereon to re-encrypt said displayed data in response to storing, copying and/or transferring said displayed data.

90. A computer-readable storage medium having machine-readable instructions stored thereon operable to:

receive a first encryption-key and a second encryption-key from a copy management system;

receive encrypted data;

decrypt said encrypted data to decrypted data according to said first encryption-key in response to processing said encrypted data; and

re-encrypt said processed data according to said second encryption-key.

91. The computer-readable storage medium of claim 90, and further comprising machine-readable instructions stored thereon to re-encrypt said processed data in response to said processed data being stored, copied or transferred.

92. A system comprising:

a terminal device capable of receiving data;

a copy management system is capable of managing a copying of data supplied as encrypted data from a database, wherein said database is capable of supplying an encrypted copy management system;

said copy management system capable of decrypting said encrypted data in response to processing of said encrypted data according to a first encryption key; and

said copy management system further is capable of re-encrypting said decrypted data to re-encrypted data according to a second encryption key.

93. The system according to claim 92, wherein said terminal device is further capable of formatting said decrypted data for display.

94. The system according to claim 92, wherein said terminal device is further capable of storing, copying and/or transferring said re-encrypted data.

95. The system of claim 92, wherein said terminal device is further capable of requesting use of said encrypted data by presenting primary user information of the terminal device to said copy management system and combining the primary user information with the re-encrypted data.

96. The terminal device according to claims 92, said terminal device being further adapted to combine copyrighted information with said encrypted data as a copy information label.

97. A method comprising:

communicating with a copy management system capable of managing copying of data;

supplying encrypted data from a database to a terminal device;

receiving a first encryption-key and a second encryption-key from the copy management system;

receiving encrypted data;

decrypting said encrypted data to provide decrypted data according to said first encryption-key in response to processing said encrypted data; and

re-encrypting said processed data according to said second encryption-key.

98. A method comprising:

receiving encrypted digital cash data;

decrypting the encrypted digital cash data according to a decryption key;

obtaining a re-encryption key; and

re-encrypting the decrypted digital cash data according to the re-encryption key by a system for handling storage, copy, and/or transmission of the decrypted digital cash data.

99. The method according to claim 98, wherein the system comprises at least a portion of an operating system for a personal computer.

100. The method according to claim 98, wherein the system comprises at least a portion of an operating system for a portable information terminal.

101. The method according to claim 98, wherein the system comprises at least a portion of an operating system for a set top box.

102. The method according to claim 98, wherein the system is in an operating system for a television set.

103. The method according to claim 98, wherein the system comprises at least a portion of an operating system for a portable telephone.

104. The method according to claim 98, wherein the system comprises at least a portion of an operating system for a personal digital assistant.

105. The method according to claim 98, wherein the system comprises at least a portion of an operating system for a personal handyphone system.

106. The method according to claim 98, wherein the system comprises at least a portion of an operating system for an intelligent telephone set.

107. The method according to claim 98, wherein the system comprises at least a portion of an operating system for a PC card.

108. The method according to claim 98, wherein the system comprises at least a portion of an operating system stored in ROM on the user terminal.

109. The method according to claim 98, wherein said decrypting and re-encrypting are controlled by a data copyright utilization software.

110. The method according to claim 98, wherein said decrypting and re-encrypting are controlled by a copyright control program.

111. The method according to claim 98, wherein said decrypting and re-encrypting are controlled by a copyright control program using a system area inaccessible by a user program or an application program.

112. The method according to claim 98, and further comprising receiving the decryption key from a financial organization.

113. The method according to claim 98, and further comprising receiving the re-encryption key from a financial organization.

114. The method according to claim 98, wherein the re-encryption key is generated by the system.

115. The method according to claim 98, further comprising combining unencrypted user information with the re-encrypted digital cash data.

116. The method according to claim 98, further comprising combining unencrypted user information and a digital signature with the re-encrypted digital cash data.

117. A method comprising:

receiving first user information;

transmitting encrypted digital cash data in response to said receiving;

decrypting the encrypted digital cash data according to a first crypt key;

generating a second crypt key on the basis of the first crypt key; and

re-encrypting the decrypted digital cash data using the second crypt key by a digital cash management program capable of handling storage, copy, and/or transmission of the decrypted digital cash data.

118. The method according to claim 117, wherein the digital cash management program comprises at least a portion of an operating system for a personal computer.

119. The method according to claim 117, wherein the-digital cash management program comprises at least a portion of an operating system for a portable information terminal.

120. The method according to claim 117, wherein the-digital cash management program comprises at least a portion of an operating system for a set top box.

121. The method according to claim 117, wherein the-digital cash management program comprises at least a portion of an operating system for an intelligent television set.

122. The method according to claim 117, wherein the-digital cash management program comprises at least a portion of an operating system for a portable telephone.

123. The method according to claim 117, wherein the-digital cash management program comprises at least a portion of an operating system for a personal digital assistant.

124. The method according to claim 117, wherein the-digital cash management program comprises at least a portion of an operating system for a personal handyphone system.

125. The method according to claim 117, wherein the-digital cash management program comprises at least a portion of an operating system for an intelligent telephone set.

126. The method according to claim 117, wherein the-digital cash management program comprises at least a portion of an operating system for a PC card.

127. The method according to claim 117, wherein the-digital cash management program comprises at least a portion of an operating system stored in ROM on the user terminal.

128. The method according to claim 117, wherein said decrypting and re-encrypting are controlled by a data copyright utilization software in the-digital cash management program.

129. The method according to claim 117, wherein said decrypting and re-encrypting are controlled by a copyright control program in the-digital cash management program.

130. The method according to claim 117, wherein said decrypting and re-encrypting are controlled by a copyright control program in the digital cash management program using a system area inaccessible by a user program or an application program.

131. The method according to claim 117, wherein the first crypt key is received from a financial organization.

132. The method according to claim 117, further comprising combining the first user information, unencrypted, with the re-encrypted digital cash data.

133. The method according to claim 117, further comprising:

combining the first user information, unencrypted, with the re-encrypted digital cash data;

receiving the first user information from a second user;

generating the second crypt key based at least in part, on the first user information;

transmitting the second crypt key from the financial organization; and

decrypting the re-encrypted digital cash data using the second crypt key.

135. The method according to claim 117, wherein the first and second crypt keys comprise public-private key pairs.

136. A method comprising:

presenting a first public key to a financial organization;

receiving encrypted digital cash data from the financial organization in response to said presenting;

decrypting the encrypted digital cash data using a first private key by a digital cash management program;

receiving a second public key;

re-encrypting the decrypted digital cash data using the second public key;

transmitting the re-encrypted digital cash data; and

decrypting the re-encrypted digital cash data using a second private key by a-digital cash management program.

137. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system for a personal computer.

138. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system for a portable information terminal.

139. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system for a set top box.

140. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system for an intelligent television set.

141. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system for a portable telephone.

142. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system for a personal digital assistant.

143. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system for a personal handyphone system.

144. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system for an intelligent telephone set.

145. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system for a PC card.

146. The method according to claim 136, wherein the digital cash management program comprises at least a portion of an operating system stored in ROM on a user terminal.

147. The method according to claim 136, wherein said decrypting and re-encrypting are controlled by data copyright utilization software in the digital cash management program.

148. The method according to claim 136, wherein said decrypting and re-encrypting are controlled by a copyright control program in the digital cash management program.

149. The method according to claim 136, wherein said decrypting and re-encrypting are controlled by a copyright control program in the digital cash management program using a system area inaccessible by a user program or an application program.