Mobile memory system for secure storage and delivery of media content

• US 20070056042A1
• Filed: 12/30/2005
• Published: 03/08/2007
• Est. Priority Date: 09/08/2005
• Status: Abandoned Application

• Current Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Original Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Inventors: Caillon, Pascal, Holtzman, Michael, Jogand-Coulomb, Fabrice, McAvoy, Paul, Yuan, Po, Chang, Robert, Qawami, Bahman, Sabet-Sharghi, Farshid, Vargas, Pedro, Dwyer, Patricia
• Application Number:
  US11/322,766
• Publication Number:
  US 20070056042A1
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/1014 to tokens
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00094 involving measures which result in a restriction to authorised record carriers
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00253 wherein the key is stored on the record carrier
• CPC Class Codes: G11B 20/00724 wherein a prepaid credit balance is registered on the recording medium
• CPC Class Codes: G11B 20/00731 involving a digital rights management system for enforcing a usage restriction
• CPC Class Codes: G11B 20/00862 wherein the remote server can grant the permission to use a content
• CPC Class Codes: G11B 20/00985 the trial version being of lower quality than the original version
• CPC Class Codes: G11B 2220/61 wherein solid state memory is used for storing A/V content storing computer data in solid state memories G06F
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4184 providing storage capabilities, e.g. memory stick
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The memory device contains control structures that allow media content to be stored securely and distributed in a manner envisioned by the content owner, or service providers involved in the distribution. A wide variety of different avenues become available for distributing media content using such memory devices, such as where the devices contain one or more of the following: abridged preview media content, encrypted unabridged media content, prepaid content, rights and/or rules governing access to such content. The memory device has a type of control structures that enable a service provider (who can also be the content owner) to create a secure environment for media content distribution where end users and terminals register with the service provider, and gain access to the content in a manner controlled by the service provider. The various components to be loaded (e.g. abridged preview media content, encrypted unabridged media content, prepaid content, rights and/or rules governing access to such content) may be generated and loaded in a secure and efficient manner.

Claims

1. A non-volatile rewritable memory device, said device having a secure memory area and at least another memory area, said device comprising:

one or more content encryption key(s) stored in the secure memory area;

content stored in a memory area of the device, said content including a first set of media titles that have been encrypted by means of the content encryption key(s), selected portions of the media titles in the first set and/or lower quality versions of such titles being accessible without restriction; and

a controller controlling access to the media titles in the first set.

2. The device of claim 1, wherein the first set of encrypted media titles are not accessible without proof of purchase.

3. The device of claim 2, wherein the controller responds to authentication information and information concerning rights and/or rules for providing access to the content encryption key(s) for decrypting the encrypted media titles in the first set by storing such rights and/or rules in the secure memory area of the device.

4. The device of claim 3, wherein an application on a host operating the device is provided with said authentication information after proof of purchase has been given.

5. The device of claim 3, wherein the rights and/or rules permit access to the one or more content encryption keys for decrypting one or more encrypted media titles in the first set.

6. The device of claim 5, wherein an application on a host operates the device, and wherein the rights and/or rules permit the application to play the decrypted media titles.

7. The device of claim 5, wherein an application on a host operates the device, and wherein the rights and/or rules permit the application to export the decrypted media titles a limited number of times or make a limited number of copies for storage.

8. The device of claim 3, wherein the rights and/or rules are stored in a section of the secure memory area accessible to entities outside of the device during normal operation of the device when predetermined credentials are presented.

9. The device of claim 1, wherein the device comprises a flash memory card.

10. The device of claim 1, wherein copies of said selected portions of the media titles or lower quality versions of such titles in the first set are stored in files separate from the encrypted media titles in the first set.

11. The device of claim 1, wherein the one or more content encryption key(s) are stored in a section of the secure memory area not accessible to entities outside of the device during normal operation of the device.

12. The device of claim 1, said content further comprising a second set of media titles that have been encrypted by means of the content encryption key(s), said device further comprising rights and/or rules stored in the secure memory area of the device regarding the second set of media titles, such rights and/or rules specifying that the second set of the media titles are accessible a limited number of times.

13. The device of claim 12, wherein the rights and/or rules regarding the second set of media titles permit access to the one or more content encryption keys a limited number of times for decrypting one or more encrypted media titles in the second set.

14. The device of claim 13, wherein an application on a host operates the device, and wherein the rights and/or rules permit the application to render the decrypted media titles the limited number of times.

15. The device of claim 1, wherein the media titles are organized into files, each file encrypted by a corresponding content encryption key, said device further comprising for each of at least some of the files an access control record that controls access to the corresponding content encryption key of such file.

16. The device of claim 15, each of said access control records comprising information on credentials required for gaining access to the content encryption key controlled by it, and permissions and/or restrictions for using such key.

17. The device of claim 16, wherein the permission(s) of at least one of said access control records comprises the permission to delegate permission of accessing a content encryption key to another access control record.

18. The device of claim 1, further comprising rights and/or rules stored in the secure memory area involving the first set of media titles;

wherein the rights and/or rules specify that only selected portions of at least some of the media titles in the first set or lower quality versions of such titles are accessible without restriction or such titles can be played for only a limited number of times;

said controller enforcing the rights and/or rules with respect to any media title in the first set stored in the device.

19. The device of claim 18, wherein an application on a host operates the device, and wherein the rights and/or rules permit the application to export the decrypted media titles in the first set a limited number of times.

20. The device of claim 18, wherein the controller alters the rights and/or rules to provide access to the content encryption key(s) in response to authentication information so as to permit access to one or more encrypted media titles in the first set stored in the device.

21. The device of claim 18, wherein the controller alters the rights and/or rules to permit access to the one or more content encryption keys for decrypting one or more encrypted media titles in the first set in response to authentication information.

22. The device of claim 21, wherein the controller alters the rights and/or rules to permit unrestricted access to one or more of the content encryption key(s) for decrypting said one or more media titles in the first set in response to authentication information.

23. The device of claim 18, wherein copies of selected portions of the media titles in the first set or lower quality versions of such titles are accessible without restriction and are stored in files separate from the encrypted media titles.

24. The device of claim 18, wherein the rights and/or rules specify that access to the one or more content encryption key(s) will be permitted only after proof of purchase of encrypted content is provided.

25. The device of claim 18, wherein the rights and/or rules can be changed to permit access to the one or more content encryption key(s) after proof of purchase of encrypted content is provided.

26. The device of claim 18, wherein the controller responds to authentication information and information concerning updates to the rights and/or rules for providing access to the content encryption key(s) for decrypting the encrypted media titles in the first set by updating such rights and/or rules in the secure memory area of the device.

27. The device of claim 18, wherein the updated rights and/or rules permit unrestricted or a more relaxed restriction in accessing the content encryption key(s) for decrypting the encrypted media titles in the first set.

28. A non-volatile rewritable memory device, said device comprising:

a first memory area for storing encrypted media content, and a second secure memory area for storing one or more control structures;

a system agent stored in the device, said agent enabling a service provider to create a control structure in the secure memory area of the device for controlling access to encrypted content stored in the first memory area; and

a controller that communicates with the service provider in a session to create the control structure in the secure memory area of the device.

29. The device of claim 28, further comprising a certification that enables a secure session with the service provider to be conducted for creating the control structure, said certification stored in the secure memory area of the device.

30. The device of claim 28, further comprising a certification that enables the device to be authenticated.

31. The device of claim 28, wherein said agent enables more than one service provider to create a corresponding control structure in the secure memory area of the device.

32. The device of claim 31, said device storing a plurality of control structures in the secure memory area of the device created for a corresponding plurality of service providers, wherein said plurality of service providers interact with the device independently of one another.

33. The device of claim 32, said device comprising separate partitions in the secure memory area for storing corresponding control structures created by different service providers, so that each partition stores only the control structure of its corresponding service provider.

34. The device of claim 33, wherein said partitions are such that each of at least some of the partitions is accessible to the corresponding service provider of the control structure stored in such partition and not to other service providers.

35. The device of claim 32, said device storing encrypted media content associated with at least some of the plurality of service providers in the first memory area, wherein access to the encrypted media content associated with each of the service providers is controlled exclusively by such service provider through its corresponding control structure.

36. The device of claim 35, wherein the encrypted media content associated with each of the service providers is not accessible to any other service provider.

37. The device of claim 28, wherein said controller stores in the device media content provided by the service provider after the control structure has been created.

38. The device of claim 37, wherein access to the content provided by the service provider is controlled by the control structure.

39. The device of claim 28, wherein the device comprises an interface that is capable of supporting different digital rights management systems.

40. The device of claim 39, wherein a host operates the device for rendering the encrypted content stored in the device, and wherein the interface is capable of supporting different digital rights management systems, thereby enabling the device and host to render the encrypted content when the host lacks such capability.

41. The device of claim 28, said control structure including rights and/or rules for access to encrypted content stored in the first memory area, wherein the rights and/or rules permit a user or host or a group of users or hosts to access the encrypted content.

42. The device of claim 28, wherein the device comprises a unique ID.

43. The device of claim 28, further comprising one or more content encryption keys stored in the device for encrypting content stored in the device, said control structure controlling access to the one or more content encryption keys.

44. The device of claim 43, further comprising media titles stored in the device, wherein at least some of said media titles are encrypted using at least one of the one or more content encryption keys.

45. The device of claim 44, said control structure including rights and/or rules for access to the at least one content encryption key, wherein the rights and/or rules permit a user or host or a group of users or hosts to access the at least one content encryption key.

46. The device of claim 28, wherein the control structure specifies that access to encrypted media content stored in the first memory area is to be granted to an entity or entities for accessing encrypted media content when predetermined credentials are presented.

47. The device of claim 46, wherein the control structure comprises a hierarchical tree which comprises nodes at different levels controlling access to encrypted media content stored in the first memory area by a corresponding set of entities, wherein a node of the tree specifies permission(s) of a corresponding entity or entities for accessing encrypted media content when predetermined credentials are presented, wherein permission(s) at a node of the tree has a predetermined relationship to permission(s) at another node at a higher or lower level in the same tree.

48. The device of claim 47, wherein a node of the tree specifies permission(s) of a corresponding application trusted by the service provider for accessing encrypted media content.

49. The device of claim 48, further comprising one or more content encryption keys stored in the device useful for decrypting said encrypted media content, wherein said permission(s) of a corresponding trusted application permits such application to access said one or more content encryption keys for decrypting said encrypted media content when predetermined credentials for such application are presented to the device.

50. The device of claim 47, wherein said agent enables a plurality of service providers to each create a corresponding control structure in the second secure memory area of the device, each control structure comprising a corresponding hierarchical tree wherein there is no cross-talk between at least two of the trees, so that the two corresponding service providers who created such two trees interact with the device independently of each other.

51. A non-volatile rewritable memory device, said device comprising:

a first memory area for storing encrypted media content, and a second secure memory area for storing one or more control structures;

a system agent stored in the device, said agent having the capability to enable a service provider to create a control structure in the secure memory area of the device for controlling access to encrypted content stored in the first memory area; and

a controller that is capable of communicating with the service provider in a session to create the control structure in the secure memory area of the device.

52. A non-volatile rewritable memory device storing media titles that can be rendered by a plurality of hosts, said device comprising:

a first memory area for storing encrypted media titles, and a second secure memory area for storing control information that control access to the encrypted media titles, said control information including information on one or more accounts, each account associated with a set of encrypted media titles stored in the first memory area, each account having corresponding credentials;

a control structure stored in the secure memory area, said control structure permitting the set of encrypted media titles associated with a particular account to be visible and accessible only to a user who presents credentials corresponding to such account; and

a controller that communicates with the hosts and checks credentials presented by the hosts to determine whether encrypted media titles associated with a particular account should be visible and accessible.

53. The device of claim 52, further comprising a unique ID with associated credentials for each of the accounts associated with and granted by a service provider.

54. The device of claim 53, wherein the service provider controls access to encrypted media titles in the first memory area by the accounts through their IDs, associated credentials and the control structure.

55. The device of claim 52, wherein the device is operable by different hosts for rendering the media titles therein, and the control structure permits the different hosts to render the media titles associated with a particular account when credentials for such account are presented to the device through such hosts.

56. A non-volatile rewritable memory card, said card having a memory area, said card comprising:

media content stored in the memory area of the card, said content including only selected unencrypted portions of at least some media titles or lower quality unencrypted versions of such media titles; and

a controller that enables access to the media content stored in the card, said controller enabling said media content to be rendered by means of a host.

57. The card of claim 56, said card further comprising:

a secure memory area; and

one or more content encryption key(s) and rights and/or rules involving encrypted media content that is to be stored in the card, wherein the rights and/or rules are stored in the secure memory area;

said controller enforcing the rights and/or rules with respect to any encrypted media titles stored in the card.

58. The card of claim 57, said card further comprising said at least some media titles that have been encrypted by means of said one or more content encryption key(s) and that are stored in the card, wherein the rights and/or rules specify that such titles can be played for only a limited number of times using the one or more content encryption key(s).

59. The card of claim 56, said card further comprising said at least some media titles that have been encrypted by means of one or more content encryption key(s).

60. The card of claim 59, said card further comprising a secure memory area;

said controller receiving said one or more content encryption key(s) and rights and/or rules involving said encrypted media titles, wherein said controller stores said rights and/or rules in the secure memory area and enforces the rights and/or rules with respect to said encrypted media titles.

61. The card of claim 60, wherein the rights and/or rules permits the controller to provide access to the content encryption key(s) in response to authentication information so as to permit access to said encrypted media titles.

62. A non-volatile rewritable memory card, said card having a memory area, said card comprising:

media content stored in the memory area of the card, said content including at least some media titles encrypted using one or more content encryption key(s); and

a controller that enables access to the first content stored in the card when said one or more content encryption key(s) are provided to the card.

63. The card of claim 62, further comprising:

a secure memory area; and

said one or more content encryption key(s) and rights and/or rules involving encrypted content stored in the card, wherein the rights and/or rules are stored in the secure memory area.

64. The card of claim 63, said controller enforcing the rights and/or rules with respect to said at least some encrypted media titles.

65. The card of claim 63, further comprising a tracking agent that tracks access to the media content stored in the card and records in the card an access profile with respect to the media content, wherein the rights and/or rules require connection between the card and a server periodically for downloading said access profile.

66. The card of claim 65, wherein the rights and/or rules grant time limited access to media content stored in the card, said time limited access being extendable upon successful connection between the card and a server and successful downloading of said access profile.

67. The card of claim 65, wherein the rights and/or rules grant access to media content stored in the card by granting access to said one or more content encryption key(s).

68. A non-volatile rewritable memory card, said card having a memory area, said card comprising:

a secure memory area; and

one or more content encryption key(s) and rights and/or rules involving encrypted content stored in the card, wherein the rights and/or rules are stored in the secure memory area.

69. The card of claim 68, further comprising:

media content stored in the memory area of the card, said content including at least some media titles encrypted using said one or more content encryption key(s); and

a controller that enables access to the first content stored in the card when said one or more content encryption key(s) are provided to the card.

70. A non-volatile rewritable memory device, comprising:

a first memory area for storing encrypted media content;

a second secure memory area; and

at least one rights object stored in the second memory area for controlling access to encrypted media content stored in the first memory area;

wherein said second memory area is accessible for backup and restoration of said at least one rights object only by authorized applications.

71. The device of claim 70, wherein said second memory area is a partition hidden from and not accessible by all applications except those with predetermined credentials.

72. The device of claim 71, wherein accessibility to said second memory area for backup and restoration of said at least one rights object requires presentation of credentials different from those required to be presented for accessing said second memory area for read functions.

73. The device of claim 70, wherein said second memory area is accessible for read functions by first applications, and for backup and restoration of said at least one rights object only by second applications different from the first applications.

74. The device of claim 70, wherein said rights object is accessible for read only functions when first credentials are presented to the device and accessible to be modified or erased or for backup/restore when second credentials different from the first credentials are presented to the device.

75. The device of claim 70, wherein said second memory area is accessible for modification, erasure, updating and/or backup and restoration of said at least one rights object only by host applications with DRM and/or CPRM capability.