Parallel distribution and fingerprinting of digital content

• US 20070106901A1
• Filed: 09/18/2006
• Published: 05/10/2007
• Est. Priority Date: 07/09/2002
• Status: Active Grant

• Current Assignee: Kaleidescape Incorporated
• Original Assignee: Kaleidescape Incorporated
• Inventors: Malcolm, Michael, Watson, Stephen, Collens, Daniel
• Granted Patent: US 7,568,105 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06T 1/005 Robust watermarking, e.g. average attack or collusion attack resistant
• CPC Class Codes: G06T 2201/0063 in relation to collusion attacks, e.g. collusion attack resistant
• CPC Class Codes: H04N 1/32144 embedded in the image data, i.e. enclosed or integrated in the image, e.g. watermark, super-imposed logo or stamp

Abstract

Distributing information, including the steps of watermarking the digital content, distributing the digital content using a multi-source system, and partially fingerprinting digital content at each stage of moving information from a point of origin to the viewer. “Adaptation” of the digital content to the recipient includes maintaining the digital content in encrypted form at each such intermediate device, including decrypting the digital content with a key unique to both the device and the specific movie, selecting a portion of the watermark locations into which to embed information, embedding fingerprinting information into those locations sufficient to identify the recipient, and encrypting the fingerprinted digital content with a new such key.

Claims

1-20. -20. (canceled)

21. A multi-source system that includes a plurality of sources, comprising:

at least one point of origin that generates, in response to digital content, watermarked digital content having a set of locations therein at which fingerprinting information can be embedded;

at least one intermediate device disposed between said point of origin and an end viewer, wherein said device partially fingerprints said digital content when sending information for presentation to said end viewer, whereby said partially-fingerprinted digital content is generated at each said intermediate device and includes information sufficient to identify that intermediate device and a recipient of that partially-fingerprinted digital content from that intermediate device.

22. A system as in claim 21, wherein said digital content includes a representation of a media stream.

23. A system as in claim 21, wherein said plurality of sources are disposed in a tiered structure.

24. A system as in claim 23, wherein an amount of fingerprinting at each source is responsive to a position of that source in said tiered structure.

25. A system as in claim 23, wherein locations for adding said set of fingerprinting information at each intermediate device is responsive to a position of that intermediate device in said tiered structure.

26. A system as in claim 23, wherein said tiered structure includes more than one intermediate device.

27. A system as in claim 26, wherein an amount of fingerprinting at each intermediate device is responsive to a position of that source in said tiered structure.

28. A system as in claim 26, wherein locations for adding said set of fingerprinting information at each intermediate device is responsive to a position of that intermediate device in said tiered structure.

29. A system as in claim 23, wherein points of origin occupy a highest tier, any intermediate devices are organized into a series of lower tiers, and said end viewer occupies a lowest tier.

30. A system as in claim 29, wherein said intermediate devices cache said partially-fingerprinted digital content, end viewer requests for said digital content are forwarded to successively higher tiers until a source with a copy of said digital content is found, and said digital content is sent to said end viewer after said source partially fingerprints said digital content with said fingerprinting information to identify said end viewer.

31. A system as in claim 23, wherein intermediate devices obtain a copy of said digital content from said point of origin or another intermediate device at a same tier or a higher tier as that intermediate device, either in response to a request for such content, or in anticipation of such requests.

32. A system as in claim 21, wherein partially fingerprinting includes steps of:

decrypting said digital content with a first key, whereby decrypted digital content is generated;

partially fingerprinting said decrypted digital content with a set of fingerprinting information that identifies the digital content'"'"'s sender and is also sufficient to identify the recipient, whereby the partially-fingerprinted digital content is generated; and

encrypting said fingerprinted digital content with a second key.

33. A system as in claim 32, wherein the steps of decrypting and partially fingerprinting are performed prior to any other processing of the digital content and the fingerprinted digital content.

34. A system as in claim 32, wherein the steps of decrypting and partially fingerprinting are performed substantially prior to any other processing of the digital content and the fingerprinted digital content.

35. A system as in claim 32, wherein said first key and said second key are supplied by a key server.

36. A system as in claim 35, wherein for each intermediate device, said first key and said second key are supplied in a message encrypted with a third key.

37. A system as in claim 36, wherein said third key for each intermediate device is stored in a secure portion of said intermediate device.

38. A system as in claim 32, wherein said first key is distinct from said second key.

39. A system as in claim 21, wherein partially fingerprinting includes steps of:

decrypting said digital content with a first key, whereby decrypted digital content is generated;

partially fingerprinting said decrypted digital content with a set of fingerprinting information that identifies the digital content'"'"'s sender and is also sufficient to identify a transaction in distributing said digital content, whereby the partially-fingerprinted digital content is generated; and

encrypting said fingerprinted digital content with a second key.

40. A system as in claim 39, wherein the steps of decrypting and partially fingerprinting are performed prior to any other processing of the digital content and the fingerprinted digital content.

41. A system as in claim 39, wherein the steps of decrypting and partially fingerprinting are performed substantially prior to any other processing of the digital content and the fingerprinted digital content.

42. A system as in claim 39, wherein said first key and said second key are supplied by a key server.

43. A system as in claim 42, wherein for each intermediate device, said first key and said second key are supplied in a message encrypted with a third key.

44. A system as in claim 43, wherein said third key for each intermediate device is stored in a secure portion of said intermediate device.

45. A system as in claim 39, wherein said first key is distinct from said second key.

46. A system as in claim 21, wherein playback of the digital content to said end viewer is responsive to a playback certificate.

47. A system as in claim 46, wherein said playback certificate is issued by a key server.

48. A system as in claim 47, wherein said playback certificate is encrypted with a playback certificate key.

49. A system as in claim 48, wherein said playback certificate key is stored in a secure portion of an end viewer premises disposed to present said digital content to said end viewer.

50. A system as in claim 47, wherein said key server issues said playback certificate responsive to business rules.

51. A system as in claim 50, wherein said business rules are responsive to said digital content and to said end viewer.

52. A system as in claim 21, wherein each intermediate device maintains said partially-fingerprinted digital content in anticipation of requests, and in response to requests for digital content not available at one intermediate device, requests a copy of said digital content from another intermediate device or from said point of origin.

53. A system as in claim 21, wherein said set of fingerprinting information added by each point of origin or intermediate device is sufficient to identify both that point of origin or intermediate device and said end viewer.

54. A system as in claim 21, wherein said set of fingerprinting information uniquely identifies a specific instance of transmission of said digital content to said end viewer.

55. A system as in claim 21, wherein an amount of said fingerprinting information added at each intermediate device is responsive to a number of potential recipients of said digital content from that intermediate device.

56. A system as in claim 21, wherein said at least one intermediate device includes at least one caching authority;

and wherein said point of origin or said caching authority stores one or more versions of said partially-fingerprinted digital content, said fingerprinting information is unique to said end viewer, and said fingerprinting information is added in advance of requests for said digital content being received.

57. A system as in claim 21, wherein different portions of said digital content are to be delivered from a point of origin to distinct intermediate devices, and a single end viewer receives those different portions from those distinct intermediate devices.

58. A system as in claim 21, wherein different portions of said digital content are to be delivered from a point of origin to distinct intermediate devices, and a single end viewer receives those different portions substantially separately from those distinct intermediate devices.

59. A source in a multi-source system that includes a plurality of sources, said source comprising a point of origin that generates, in response to digital content, watermarked digital content having a set of locations therein at which fingerprinting information can be embedded.

60. A source as in claim 59, wherein said digital content includes a representation of a media stream.

61. A source as in claim 59, wherein said set of fingerprinting information added by said point of origin is sufficient to identify said point of origin and an end viewer.

62. A source as in claim 59, wherein said set of fingerprinting information uniquely identifies a specific instance of transmission of said digital content to an end viewer.

63. A source in a multi-source system that includes a plurality of sources, said source comprising at least one intermediate device disposed between a point of origin for watermarked digital content generated from digital content and an end viewer, said watermarked digital content having a set of locations therein at which fingerprinting information can be embedded, wherein said intermediate device partially fingerprints said digital content when sending information for presentation to said end viewer, whereby said partially-fingerprinted digital content is generated at each said intermediate device and includes information sufficient to identify that intermediate device and a recipient of that partially-fingerprinted digital content from that intermediate device.

64. A source as in claim 63, wherein said digital content includes a representation of a media stream.

65. A source as in claim 63, wherein said intermediate device is disposed in a tiered structure of said plurality of sources.

66. A source as in claim 65, wherein an amount of fingerprinting at said intermediate device is responsive to a position of said intermediate device in said tiered structure.

67. A source as in claim 65, wherein a location for adding said set of fingerprinting information at said intermediate device is responsive to a position of said intermediate device in said tiered structure.

68. A source as in claim 65, wherein said tiered structure includes more than one intermediate device.

69. A source as in claim 68, wherein an amount of fingerprinting at each intermediate device is responsive to a position of that source in said tiered structure.

70. A source as in claim 68, wherein a location for adding said set of fingerprinting information at said intermediate device is responsive to a position of said intermediate device in said tiered structure.

71. A source as in claim 65, wherein points of origin occupy a highest tier, said intermediate device is in a lower tier, and said end viewer occupies a lowest tier.

72. A source as in claim 65, wherein said intermediate device obtains a copy of said digital content from said point of origin or another intermediate device at a same tier or a higher tier as said intermediate device, either in response to a request for such content, or in anticipation of such requests.

73. A source as in claim 63, wherein said intermediate device caches said partially-fingerprinted digital content.

74. A source as in claim 63, wherein partially fingerprinting includes steps of:

decrypting said digital content with a first key, whereby decrypted digital content is generated;

partially fingerprinting said decrypted digital content with a set of fingerprinting information that identifies the digital content'"'"'s sender and is also sufficient to identify the recipient, whereby the partially-fingerprinted digital content is generated; and

encrypting said fingerprinted digital content with a second key.

75. A source as in claim 74, wherein the steps of decrypting and partially fingerprinting are performed prior to any other processing of the digital content and the fingerprinted digital content.

76. A source as in claim 74, wherein the steps of decrypting and partially fingerprinting are performed substantially prior to any other processing of the digital content and the fingerprinted digital content.

77. A source as in claim 74, wherein said first key and said second key are supplied by a key server.

78. A source as in claim 77, wherein said first key and said second key are supplied to said intermediate device in a message encrypted with a third key.

79. A source as in claim 78, wherein said third key is stored in a secure portion of said intermediate device.

80. A source as in claim 74, wherein said first key is distinct from said second key.

81. A source as in claim 63, wherein partially fingerprinting includes steps of:

decrypting said digital content with a first key, whereby decrypted digital content is generated;

partially fingerprinting said decrypted digital content with a set of fingerprinting information that identifies the digital content'"'"'s sender and is also sufficient to identify a transaction in distributing said digital content, whereby the partially-fingerprinted digital content is generated; and

encrypting said fingerprinted digital content with a second key.

82. A source as in claim 81, wherein the steps of decrypting and partially fingerprinting are performed prior to any other processing of the digital content and the fingerprinted digital content.

83. A source as in claim 81, wherein the steps of decrypting and partially fingerprinting are performed substantially prior to any other processing of the digital content and the fingerprinted digital content.

84. A source as in claim 81, wherein said first key and said second key are supplied by a key server.

85. A source as in claim 84, wherein said first key and said second key are supplied to said intermediate device in a message encrypted with a third key.

86. A source as in claim 85, wherein said third key is stored in a secure portion of said intermediate device.

87. A source as in claim 81, wherein said first key is distinct from said second key.

88. A source as in claim 63, wherein said intermediate device maintains said partially-fingerprinted digital content in anticipation of requests, and in response to requests for digital content not available at said intermediate device, requests a copy of said digital content from another intermediate device or from said point of origin.

89. A source as in claim 63, wherein said set of fingerprinting information added by said intermediate device is sufficient to identify both said intermediate device and said end viewer.

90. A source as in claim 63, wherein said set of fingerprinting information uniquely identifies a specific instance of transmission of said digital content to said end viewer.

91. A source as in claim 63, wherein an amount of said fingerprinting information added at said intermediate device is responsive to a number of potential recipients of said digital content from said intermediate device.

92. A source as in claim 63, wherein said intermediate device includes at least one caching authority;

and wherein said point of origin or said caching authority stores one or more versions of said partially-fingerprinted digital content, said fingerprinting information is unique to said end viewer, and said fingerprinting information is added in advance of requests for said digital content being received.