Digital rights management system with diversified content protection process

• US 20070220585A1
• Filed: 03/01/2006
• Published: 09/20/2007
• Est. Priority Date: 03/01/2006
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Fasoli, Gianpaolo, Farrugia, Augustin, Riendeau, Jean-Francois
• Application Number:
  US11/366,191
• Publication Number:
  US 20070220585A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]

Abstract

Some embodiments of the invention provide a digital rights management (DRM) method for distributing content to users over a network. Based on a first set of diversity indicia, the method identifies a first security element for distributing a set of content to a first computer. The set of content includes one or more pieces of content. Based on a second set of diversity indicia, the method identifies a second security element for distributing the set of content to a second computer. Based on the first security element, method protects the set of content for the first computer and sends the protected set of content to the first computer through the network. Based on the second security element, the method protects the set of content for the second computer and sends the protected set of content to the second computer through the network.

Claims

1. A digital rights management (DRM) method for protecting content, the method comprising:

a) based on a first set of diversity indicia, identifying a first security element for distributing a set of content to a first computer;

b) based on a second set of diversity indicia, identifying a second security element for distributing the set of content to a second computer;

c) based on the identified first security element, protecting the set of content for the first computer; and

d) based on the identified second security element, protecting the set of content for the second computer.

2. The method of claim 1 further comprising:

a) at a DRM computer, receiving the first set of diversity indicia from the first computer; and

b) at the DRM computer, receiving the second set of diversity indicia from the second computer.

3. The method of claim 1, wherein the DRM computer stores the diversity indicia for each computer.

4. The method of claim 1, wherein the DRM computer assigns at least partially the set of diversity indicia for each computer.

5. The method of claim 1, wherein the first computer is the computer of a first user and the second computer is the computer of a second user.

6. The method of claim 1, wherein each security element is a function used by the DRM computer to protect the content.

7. The method of claim 6, wherein the first and second functions are first and second encryption functions used by the DRM computer to encrypt the content.

8. The method of claim 6 further comprising:

a) using a first decryption function at the first computer to decrypt the content that was encrypted by using the first encryption function;

b) using a second decryption function at the second computer to decrypt the content that was encrypted by using the second encryption function, wherein the first and second decryption functions are different functions, the first decryption function is an appropriate decryption function for the first encryption function, and the second decryption function is an appropriate decryption function for the second encryption function

9. The method of claim 6, wherein the first and second functions are first and second integrity functions used by the DRM computer to sign the content.

10. The method of claim 9 further comprising:

a) using a first verification function at the first computer to verify the content that was signed by using the first integrity function;

b) using a second verification function at the second computer to verify the content that was signed by using the second integrity function, wherein the first and second verification functions are different functions, the first verification function is an appropriate verification function for the first integrity function, and the second verification function is an appropriate verification function for the second integrity function.

11. The method of claim 6, wherein the function is an encryption-key management function used by the DRM computer to manage keys for an encryption function that encrypts the content.

12. The method of claim 11, wherein managing keys comprises generating the keys.

13. The method of claim 11, wherein managing keys comprises encrypting the keys.

14. The method of claim 1, wherein identifying the first security element comprises selecting a first security element function from a set of different security element functions based on the first set of diversity indicia.

15. A digital rights management (DRM) system for distributing content, the system comprising:

a) a plurality of user computers;

b) a set of DRM computers communicatively coupled to the user computers, the set of DRM computers for receiving requests to access a particular content from a plurality of the user computers;

c) for each particular user computer that requests access to the particular content, the set of DRM computers for

1) identifying a particular security element function for distributing the particular content to the particular user computer based on a set of diversity indicia for the particular user computer;

2) protecting the particular content for the particular user computer, based on the identified security element function; and

3) sending the protected particular content to the particular user computer.

16. The system of claim 15, wherein the set of DRM computers receive a set of diversity indicia from each user computer.

17. The system of claim 15, wherein the security element function is an encryption function used by the DRM computer to encrypt the content.

18. The system of claim 15, wherein the security element function is an integrity function used by the DRM computer to sign the content.

19. The system of claim 15, wherein the security element function is an encryption-key management function used by the DRM computer to manage keys for an encryption function that encrypts the content.

20. The system of claim 19, wherein managing keys comprises generating the keys.

21. The system of claim 19, wherein managing keys comprises encrypting the keys.

22. The system of claim 15, wherein the set of DRM computers identifies the security element function for a particular user computer by selecting the security element function from a set of different security element functions based on the set of diversity indicia for the particular user computer.

23. The system of claim 15, wherein the set of DRM computers assigns the set of diversity indicia for each computer.

24. A method comprising:

a. identifying a set of diversity indicia; and

b. based on the identified set of diversity indicia, selecting a particular security element from a plurality of security elements, said particular security element for protecting content.

25. The method of claim 24, wherein the particular security element comprises a security function.

26. The method of claim 24, wherein the particular security element comprises an encryption function for encrypting the content.

27. The method of claim 24, wherein the particular security function comprises a key management function.

28. The method of claim 27, wherein the key management function is for generating cryptographic keys for encrypting the content.

29. The method of claim 27, wherein the key management function is for encrypting cryptographic keys for encrypting the content.

30. The method of claim 24, wherein the particular security function comprises an integrity function for generating a signature for the content.

31. The method of claim 24 further comprising using the particular security element to protect the content.

32. The method of claim 31 further comprising distributing the protected content to a user of the content.

33. The method of claim 32, wherein the set of diversity indicia is associated with the user of the content.

34. The method of claim 32, wherein the set of diversity indicia is associated with a device of the user of the content.

35. The method of claim 24, wherein the set of diversity indicia is associated with a user that is to receive the content.

36. The method of claim 35, wherein the set of diversity indicia is associated with a particular user account.

37. The method of claim 24, wherein the set of diversity indicia is associated with a device of a user that is to receive the content.

38. The method of claim 24, wherein selecting the particular security element comprises:

a. receiving at least one diversity indicia that identifies a user that is requesting the particular content; and

b. generating an index based on the diversity indicia, the index identifying the particular security element.

39. The method of claim 24 further comprising:

a. performing a financial transaction; and

b. distributing the protected content to a user of the content.

40. The method of claim 24, wherein the content is protected for distribution to a first user of the content and the selected security element is a first security element, the method further comprising

a. identifying another set of diversity indicia;

and

b. based on the identified other set of diversity indicia, selecting a second security element from the plurality of security elements, said second security element for protecting the content for distribution to a second user, said second security element different than the first security element.

41. The method of claim 24, wherein the selecting comprises selecting at least two security elements from the plurality of security elements, the two security elements for protecting the content during distribution.

42. The method of claim 24, wherein the method is for content distribution and the particular security element is for protecting content during distribution.

43. A computer readable medium storing a computer program executable by at least one processor, the computer program comprising sets of instructions for:

a. identifying a set of diversity indicia;

b. based on the identified set of diversity indicia, selecting a particular security element from a plurality of security elements, said particular security element for protecting content.

44. The computer readable medium of claim 43, wherein the particular security element comprises an encryption function for encrypting the content.

45. The computer readable medium of claim 43, wherein the particular security element comprises a key management function.

46. The computer readable medium of claim 45, wherein the key management function is for generating cryptographic keys for encrypting the content.

47. The computer readable medium of claim 46, wherein the key management function is for encrypting cryptographic keys for encrypting the content.

48. The computer readable medium of claim 43, wherein the particular security element comprises an integrity function for generating a signature for the content.

49. The computer readable medium of claim 43, wherein the set of diversity indicia is associated with a user that is to receive the content.

50. The computer readable medium of claim 49, wherein the set of diversity indicia is associated with a particular user account.

51. The computer readable medium of claim 43, wherein the set of diversity indicia is associated with a device of a user that is to receive the content.

52. The computer readable medium of claim 43, wherein the set of instructions for selecting the particular security element comprises sets of instructions for:

a. receiving at least one diversity indicia that identifies a user that is requesting the particular content; and

b. generating an index based on the diversity indicia, the index identifying the particular security element.

53. The computer readable medium of claim 43, wherein the set of instructions for selecting comprises a set of instructions for selecting at least two security elements from the plurality of security elements, the two security elements for protecting the content during distribution.

54. The computer readable medium of claim 43, wherein the computer program is for protecting content during distribution and the particular security element is for protecting content during distribution.

55. A method for accessing content that is protected by using a security element that is based on a set of diversity indicia, the method comprising:

a. identifying a particular access function that is associated with the set of diversity indicia; and

b. accessing the content by using the particular access function.

56. The method of claim 55, wherein the particular access function comprises a decryption function for decrypting the content.

57. The method of claim 55, wherein the particular access function comprises a key generation function.

58. The method of claim 55, wherein the particular access function comprises a verification function for verifying a signature for the content.

59. The method of claim 55 further comprising supplying the set of diversity indicia before receiving the content.

60. The method of claim 59, wherein supplying the set of diversity indicia comprises supplying the set of indicia to a computer for identifying the security element from a plurality of security elements based on the supplied set of indicia.

61. The method of claim 59, wherein the set of diversity indicia is supplied for more than one pieces of content.

62. A computer readable medium storing a computer program for accessing content that is protected by using a security element that is based on a set of diversity indicia, said computer program executable by at least one processor, the computer program comprising sets of instructions for:

a. identifying a particular access function that is associated with the set of diversity indicia; and

b. accessing the content by using the particular access function.

63. The computer readable medium of claim 62, wherein the particular access function comprises a decryption function for decrypting the content.

64. The computer readable medium of claim 62, wherein the particular access function comprises a key generation function.

65. The computer readable medium of claim 62, wherein the particular access function is appropriate for verifying a protection that is applied to the particular content by the security function.

66. The computer readable medium of claim 62, wherein the computer program further comprises a set of instructions for supplying the set of diversity indicia before receiving the content.

67. The computer readable medium of claim 66, wherein the set of instructions for supplying the set of diversity indicia comprises a set of instructions for supplying the set of indicia to a computer for identifying the security element from a plurality of security elements based on the supplied set of indicia.

68. The computer readable medium of claim 66, wherein the set of diversity indicia is supplied for more than one pieces of content.