Systems and methods for secure transaction management and electronic rights protection

• US 20070234069A1
• Filed: 05/25/2007
• Published: 10/04/2007
• Est. Priority Date: 02/13/1995
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Van Wie, David, Ginter, Karl, Spahn, Francis, Shear, Victor
• Granted Patent: US 7,984,509 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G07F 9/026 for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copyright
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/23476 : by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node. These techniques may be used to support an all-electronic information distribution, for example, utilizing the “electronic highway.”

Claims

1-90. -90. (canceled)

91. A method performed by a user'"'"'s electronic appliance, the method comprising:

receiving an electronic object, the electronic object including an encrypted piece of electronic content, the encrypted piece of electronic content including at least a first electronic fingerprint;

receiving control information specifying one or more permitted uses of the piece of electronic content; and

using, at least in part, tamper-resistant hardware and/or software to decrypt the encrypted piece of electronic content and to enable the user to make at least one of the one or more permitted uses of the piece of electronic content, the at least one of the one or more permitted uses of the piece of electronic content including releasing the piece of electronic content in clear form with at least the first electronic fingerprint embedded therein.

92. The method of claim 91, in which the first electronic fingerprint comprises information identifying the user.

93. The method of claim 91, in which the first electronic fingerprint comprises information identifying the user'"'"'s electronic appliance.

94. The method of claim 92, in which the first electronic fingerprint further comprises information identifying the user'"'"'s electronic appliance.

95. The method of claim 91, in which the first electronic fingerprint is encrypted, at least in part.

96. The method of claim 91, in which the electronic object and the control information are separately received at the user'"'"'s electronic appliance.

97. The method of claim 91, in which the electronic object includes the control information.

98. The method of claim 91, in which the encrypted piece of electronic content includes a plurality of copies of the first electronic fingerprint.

99. The method of claim 91, in which the first electronic fingerprint comprises information regarding time and/or date.

100. The method of claim 91, in which the first electronic fingerprint comprises information identifying the piece of electronic content.

101. The method of claim 91, in which the first electronic fingerprint is embedded in an obscure or generally concealed manner.

102. The method of claim 91, in which the piece of electronic content further comprises at least a second electronic fingerprint.

103. The method of claim 102, in which the second electronic fingerprint is more secure than the first electronic fingerprint.

104. The method of claim 102, in which the first electronic fingerprint is embedded in the piece of electronic content using a different technique from that used to embed the second electronic fingerprint.

105. The method of claim 102, in which the first electronic fingerprint is encrypted using a different encryption technique from that used to encrypt the second electronic fingerprint.

106. The method of claim 102, in which the first electronic fingerprint contains information different from that contained in the second electronic fingerprint.

107. The method of claim 91, in which the control information includes at least a second electronic fingerprint.

108. The method of claim 91, in which the electronic object comprises a secure container.

109. The method of claim 91, in which the control information comprises information regarding one or more locations within the piece of electronic content at which the first electronic fingerprint is embedded.

110. The method of claim 91, in which the piece of electronic content is selected from the group consisting of:

a piece of software, a movie, an audio recording, a piece of multimedia, an information database, and a piece of literary material.

111. The method of claim 91, in which the control information comprises information limiting the number of copies of the piece of electronic content that the user is authorized to make.

112. The method of claim 91, in which the first electronic fingerprint is inserted using at least one technique selected from the group consisting of:

pixel color variation, inaudible audio frequency variation, font variation, use of interchangeable code fragments, database field formatting variation, and background color variation.

113. The method of claim 91, in which the control information specifies that at least the first electronic fingerprint be embedded in the piece of electronic content before the content is released in clear form.

114. The method of claim 91, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving the piece of electronic content.

115. The method of claim 91, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying and printing the piece of electronic content.

116. A method performed by a user'"'"'s electronic appliance, the method comprising:

receiving an encrypted piece of electronic content;

receiving control information specifying one or more permitted uses of the piece of electronic content; and

using, at least in part, tamper-resistant hardware and/or software to (i) decrypt the encrypted piece of electronic content, (ii) embed an electronic fingerprint into the piece of electronic content, and (iii) make at least one of the one or more permitted uses of the piece of electronic content.

117. The method of claim 116, in which the electronic fingerprint comprises information identifying the user.

118. The method of claim 116, in which the electronic fingerprint comprises information identifying the user'"'"'s electronic appliance.

119. The method of claim 117, in which the electronic fingerprint further comprises information identifying the user'"'"'s electronic appliance.

120. The method of claim 116, in which the electronic fingerprint is encrypted, at least in part.

121. The method of claim 116, in which the encrypted piece of electronic content and the control information are separately received at the user'"'"'s electronic appliance.

122. The method of claim 121, in which the encrypted piece of electronic content is received in an electronic object, the electronic object further comprising one or more encrypted decryption keys for use in decrypting the piece of electronic content.

123. The method of claim 116, in which the electronic fingerprint comprises information regarding time and/or date.

124. The method of claim 116, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving the piece of electronic content.

126. The method of claim 116, in which the at least one of the one or more permitted uses includes releasing the piece of electronic content in clear form with the first electronic fingerprint embedded therein.

127. A method comprising:

inserting at least a first electronic fingerprint into a piece of electronic content;

encrypting the piece of electronic content;

packaging the piece of electronic content into an electronic object;

associating control information with the electronic object, the control information specifying one or more permitted uses of the piece of electronic content; and

distributing the electronic object and the control information to a user'"'"'s electronic appliance, wherein the user'"'"'s electronic appliance comprises tamper-resistant hardware and/or software operable to apply the control information to govern use of the piece of electronic content.

128. The method of claim 127, in which the first electronic fingerprint comprises information identifying the user.

129. The method of claim 127, in which the first electronic fingerprint comprises information identifying the user'"'"'s electronic appliance.

130. The method of claim 128, in which the first electronic fingerprint further comprises information identifying the user'"'"'s electronic appliance.

131. The method of claim 127, in which the first electronic fingerprint is encrypted, at least in part.

132. The method of claim 127, in which the electronic object and the control information are separately distributed to the user'"'"'s electronic appliance.

133. The method of claim 127, in which the electronic object includes the control information.

134. The method of claim 127, in which multiple copies of the first electronic fingerprint are inserted into the piece of electronic content.

135. The method of claim 127, in which the first electronic fingerprint comprises information regarding time and/or date.

136. The method of claim 127, in which the first electronic fingerprint comprises information identifying the piece of electronic content.

137. The method of claim 127, in which the first electronic fingerprint is inserted into the piece of electronic content such that the first electronic fingerprint is obscured or generally concealed.

138. The method of claim 127, further comprising:

inserting at least a second electronic fingerprint into the piece of electronic content.

139. The method of claim 138, in which the second electronic fingerprint is more secure than the first electronic fingerprint.

140. The method of claim 138, in which the first electronic fingerprint is inserted in the piece of electronic content using a different technique from that used to insert the second electronic fingerprint.

141. The method of claim 138, in which the first electronic fingerprint is encrypted using a different encryption technique from that used to encrypt the second electronic fingerprint.

142. The method of claim 138, in which the first electronic fingerprint contains information different from that contained in the second electronic fingerprint.

143. The method of claim 127, in which the control information includes at least a third electronic fingerprint.

144. The method of claim 127, in which the electronic object comprises a secure container.

145. The method of claim 127, in which the control information comprises information regarding one or more locations within the piece of electronic content at which the first electronic fingerprint is embedded.

146. The method of claim 127, in which the control information comprises information limiting the number of copies of the piece of electronic content that the user is authorized to make.

147. The method of claim 127, in which the first electronic fingerprint is inserted using at least one technique selected from the group consisting of:

pixel color variation, inaudible audio frequency variation, font variation, use of interchangeable code fragments, database field formatting variation, and background color variation.

148. The method of claim 127, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving the piece of electronic content.

149. The method of claim 127, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying and printing the piece of electronic content.

150. A method comprising:

receiving a first request for a piece of electronic content from a first user, the piece of electronic content having control information associated therewith, the control information specifying one or more permitted uses of the piece of electronic content;

inserting a first electronic fingerprint into a copy of the piece of electronic content to obtain a first fingerprinted piece of electronic content;

encrypting the first fingerprinted piece of electronic content;

distributing the encrypted first fingerprinted piece of electronic content to the first user;

receiving a second request for the piece of electronic content from a second user;

inserting a second electronic fingerprint into a copy of the piece of electronic content to obtain a second fingerprinted piece of electronic content;

encrypting the second fingerprinted piece of electronic content;

distributing the encrypted second fingerprinted piece of electronic content to the second user;

wherein the first electronic fingerprint and the second electronic fingerprint are different, at least in part.

151. The method of claim 150, in which at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving the piece of electronic content.

152. The method of claim 150, in which at least one of the one or more permitted uses is selected from the group consisting of:

displaying and printing the piece of electronic content.

153. The method of claim 150, further comprising:

distributing the control information to the first user; and

distributing the control information to the second user.

154. The method of claim 150, in which the first electronic fingerprint comprises information identifying the first user, and in which the second electronic fingerprint comprises information identifying the second user.

155. The method of claim 150, in which the first electronic fingerprint comprises information identifying an electronic appliance associated with the first user, and in which the second electronic fingerprint comprises information identifying an electronic appliance associated with the second user.

156. The method of claim 154, in which the first electronic fingerprint comprises information identifying an electronic appliance associated with the first user, and in which the second electronic fingerprint comprises information identifying an electronic appliance associated with the second user.

157. The method of claim 150, in which the first electronic fingerprint and the second electronic fingerprint comprise information regarding time and/or date.

158. A computer-readable medium, the computer readable medium comprising computer code that, when executed by an electronic appliance comprising a protected processing environment, is operable to cause the electronic appliance to perform steps comprising:

decrypting an encrypted piece of electronic content in accordance with control information associated therewith, the control information specifying one or more permitted uses of the piece of electronic content, and

enabling a user to make at least one of the one or more permitted uses of the piece of electronic content, the at least one of the one or more permitted uses of the piece of electronic content including releasing the piece of electronic content in clear form with at least a first electronic fingerprint embedded therein.

159. The computer-readable medium of claim 158, in which the first electronic fingerprint comprises information identifying the user.

160. The computer-readable medium of claim 158, in which the first electronic fingerprint comprises information identifying the electronic appliance.

161. The computer-readable medium of claim 159, in which the first electronic fingerprint further comprises information identifying the electronic appliance.

162. The computer-readable medium of claim 158, in which the first electronic fingerprint is encrypted, at least in part.

163. The computer-readable medium of claim 158, in which the first electronic fingerprint comprises information regarding time and/or date.

164. The computer-readable medium of claim 158, in which the piece of electronic content further comprises at least a second electronic fingerprint.

165. The computer-readable medium of claim 164, in which the second electronic fingerprint is more secure than the first electronic fingerprint.

166. The computer-readable medium of claim 158, in which the control information comprises information limiting the number of copies of the piece of electronic content that the user is authorized to make.

167. The computer-readable medium of claim 158, in which the control information specifies that at least the first electronic fingerprint be embedded in the piece of electronic content before the content is released in clear form.

168. The computer-readable medium of claim 158, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving the piece of electronic content.

169. The computer-readable medium of claim 158, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying and printing the piece of electronic content.

170. The computer-readable medium of claim 158, further comprising computer code that, when executed by an electronic appliance comprising a protected processing environment, is operable to cause the electronic appliance to perform the step of embedding the first electronic fingerprint into the piece of electronic content.

171. A computer-readable medium, the computer readable medium comprising computer code that, when executed by an electronic appliance, is operable to cause the electronic appliance to perform steps comprising:

inserting at least a first electronic fingerprint into a piece of electronic content;

encrypting the piece of electronic content;

associating control information with the piece of electronic content, the control information specifying one or more permitted uses of the piece of electronic content; and

distributing the piece of electronic content and the control information to a user'"'"'s electronic appliance, wherein the user'"'"'s electronic appliance comprises tamper-resistant hardware and/or software operable to apply the control information to govern use of the piece of electronic content.

172. The computer-readable medium of claim 171, in which the first electronic fingerprint comprises information identifying the user.

173. The computer-readable medium of claim 171, in which the first electronic fingerprint comprises information identifying the user'"'"'s electronic appliance.

174. The computer-readable medium of claim 172, in which the first electronic fingerprint further comprises information identifying the user'"'"'s electronic appliance.

175. The computer-readable medium of claim 171, in which the first electronic fingerprint is encrypted, at least in part.

176. The computer-readable medium of claim 171, in which the piece of electronic content and the control information are separately distributed to the user'"'"'s electronic appliance.

177. The computer-readable medium of claim 171, in which the first electronic fingerprint comprises information regarding time and/or date.

178. The computer-readable medium of claim 171, in which the first electronic fingerprint comprises information identifying the piece of electronic content.

179. The computer-readable medium of claim 171, further comprising computer code that, when executed by the electronic appliance, is operable to cause the electronic appliance to perform the step of:

inserting at least a second electronic fingerprint into the piece of electronic content.

180. The computer-readable medium of claim 179, in which the second electronic fingerprint is more secure than the first electronic fingerprint.

181. The computer-readable medium of claim 179, in which the first electronic fingerprint is inserted in the piece of electronic content using a different technique from that used to insert the second electronic fingerprint.

182. The computer-readable medium of claim 179, in which the first electronic fingerprint contains information different from that contained in the second electronic fingerprint.

183. The computer-readable medium of claim 171, further comprising computer code that, when executed by an electronic appliance, is operable to cause the electronic appliance to perform the step of packaging the piece of electronic content into a secure container.

184. The computer-readable medium of claim 171, in which the control information comprises information limiting the number of copies of the piece of electronic content that the user is authorized to make.

185. The computer-readable medium of claim 171, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving the piece of electronic content.

186. The computer-readable medium of claim 171, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying and printing the piece of electronic content.

187. A computer-readable medium, the computer readable medium comprising computer code that, when executed by an electronic appliance, is operable to cause the electronic appliance to perform steps comprising:

receiving a first request for a piece of electronic content from a first user, the piece of electronic content having control information associated therewith, the control information specifying one or more permitted uses of the piece of electronic content;

inserting a first electronic fingerprint into a copy of the piece of electronic content to obtain a first fingerprinted piece of electronic content;

encrypting the first fingerprinted piece of electronic content;

distributing the encrypted first fingerprinted piece of electronic content to the first user;

receiving a second request for the piece of electronic content from a second user;

inserting a second electronic fingerprint into a copy of the piece of electronic content to obtain a second fingerprinted piece of electronic content;

encrypting the second fingerprinted piece of electronic content;

distributing the encrypted second fingerprinted piece of electronic content to the second user; and

wherein the first electronic fingerprint and the second electronic fingerprint are different, at least in part.

188. The computer-readable medium of claim 187, in which at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving the piece of electronic content.

189. The computer-readable medium of claim 187, in which at least one of the one or more permitted uses is selected from the group consisting of:

displaying and printing the piece of electronic content.

190. The computer-readable medium of claim 187, further comprising computer code that, when executed by the electronic appliance, is operable to cause the electronic appliance to perform the steps of:

distributing the control information to the first user; and

distributing the control information to the second user.

191. The computer-readable medium of claim 187, in which the first electronic fingerprint comprises information identifying the first user, and in which the second electronic fingerprint comprises information identifying the second user.

192. The computer-readable medium of claim 187, in which the first electronic fingerprint comprises information identifying an electronic appliance associated with the first user, and in which the second electronic fingerprint comprises information identifying an electronic appliance associated with the second user.

193. The computer-readable medium of claim 191, in which the first electronic fingerprint comprises information identifying an electronic appliance associated with the first user, and in which the second electronic fingerprint comprises information identifying an electronic appliance associated with the second user.

194. The computer-readable medium of claim 187, in which the first electronic fingerprint and the second electronic fingerprint comprise information regarding time and/or date.

195. An electronic appliance comprising:

means for receiving an electronic object, the electronic object including an encrypted piece of electronic content;

means for receiving control information specifying one or more permitted uses of the piece of electronic content; and

tamper-resistant hardware and/or software for decrypting the encrypted piece of electronic content and enabling a user to make at least one of the one or more permitted uses of the piece of electronic content, the at least one of the one or more permitted uses of the piece of electronic content including releasing the piece of electronic content in clear form with at least a first electronic fingerprint embedded therein.

196. The electronic appliance of claim 195, in which the first electronic fingerprint comprises information identifying the user.

197. The electronic appliance of claim 195, in which the first electronic fingerprint comprises information identifying the user'"'"'s electronic appliance.

198. The electronic appliance of claim 196, in which the first electronic fingerprint further comprises information identifying the user'"'"'s electronic appliance.

199. The electronic appliance of claim 195, in which the first electronic fingerprint is encrypted, at least in part.

200. The electronic appliance of claim 195, in which the electronic object and the control information are separately received at the user'"'"'s electronic appliance.

201. The electronic appliance of claim 195, in which the encrypted piece of electronic content includes a plurality of copies of the first electronic fingerprint.

202. The electronic appliance of claim 195, in which the first electronic fingerprint comprises information regarding time and/or date.

203. The electronic appliance of claim 195, in which the first electronic fingerprint is embedded in an obscure or generally concealed manner.

204. The electronic appliance of claim 195, in which the piece of electronic content further comprises at least a second electronic fingerprint.

205. The electronic appliance of claim 204, in which the second electronic fingerprint is more secure than the first electronic fingerprint.

206. The electronic appliance of claim 204, in which the first electronic fingerprint is embedded in the piece of electronic content using a different technique from that used to embed the second electronic fingerprint.

207. The electronic appliance of claim 204, in which the first electronic fingerprint contains information different from that contained in the second electronic fingerprint.

208. The electronic appliance of claim 195, in which the control information includes at least a second electronic fingerprint.

209. The electronic appliance of claim 195, in which the control information comprises information regarding one or more locations within the piece of electronic content at which the first electronic fingerprint is embedded.

210. The electronic appliance of claim 195, in which the control information comprises information limiting the number of copies of the piece of electronic content that the user is authorized to make.

211. The electronic appliance of claim 195, in which the control information specifies that at least the first electronic fingerprint be embedded in the piece of electronic content before the piece of electronic content is released in clear form.

212. The electronic appliance of claim 195, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving t he piece of electronic content.

213. The electronic appliance of claim 195, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying and printing the piece of electronic content.

214. The electronic appliance of claim 195, in which the tamper-resistant hardware and/or software is further operable to embed the first electronic fingerprint into the piece of electronic content.

215. A system comprising:

means for inserting at least a first electronic fingerprint into a piece of electronic content;

means for encrypting the piece of electronic content;

means for associating control information with the piece of electronic content, the control information specifying one or more permitted uses of the piece of electronic content; and

means for distributing the piece of electronic content and the control information to a user'"'"'s electronic appliance, wherein the user'"'"'s electronic appliance comprises tamper-resistant hardware and/or software operable to apply the control information to govern use of the piece of electronic content.

216. The system of claim 215, in which the first electronic fingerprint comprises information identifying the user.

217. The system of claim 215, in which the first electronic fingerprint comprises information identifying the user'"'"'s electronic appliance.

218. The system of claim 216, in which the first electronic fingerprint further comprises information identifying the user'"'"'s electronic appliance.

219. The system of claim 215, in which the first electronic fingerprint is encrypted, at least in part.

220. The system of claim 215, in which the piece of electronic content and the control information are separately distributed to the user'"'"'s electronic appliance.

221. The system of claim 215, in which the means for inserting at least a first electronic fingerprint is operable to insert multiple copies of the first electronic fingerprint into the piece of electronic content.

222. The system of claim 215, in which the first electronic fingerprint comprises information regarding time and/or date.

223. The system of claim 215, further comprising:

means for inserting at least a second electronic fingerprint into the piece of electronic content.

224. The system of claim 223, in which the first electronic fingerprint is inserted in the piece of electronic content using a different technique from that used to insert the second electronic fingerprint.

225. The system of claim 223, in which the first electronic fingerprint contains information different from that contained in the second electronic fingerprint.

226. The system of claim 215, in which the control information includes at least a second electronic fingerprint.

227. The system of claim 215, further comprising means for packaging the piece of electronic content into a secure container.

228. The system of claim 215, in which the control information comprises information regarding one or more locations within the piece of electronic content at which the first electronic fingerprint is embedded.

229. The system of claim 228, in which the control information comprises information limiting the number of copies of the piece of electronic content that the user is authorized to make.

230. The system of claim 215, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving the piece of electronic content.

231. The system of claim 215, in which the at least one of the one or more permitted uses is selected from the group consisting of:

displaying and printing the piece of electronic content.

232. A system comprising:

means for receiving a first request for a piece of electronic content from a first user, the piece of electronic content having control information associated therewith, the control information specifying one or more permitted uses of the piece of electronic content;

means for inserting a first electronic fingerprint into a copy of the piece of electronic content to obtain a first fingerprinted piece of electronic content;

means for encrypting the first fingerprinted piece of electronic content;

means for distributing the encrypted first fingerprinted piece of electronic content to the first user;

means for receiving a second request for the piece of electronic content from a second user;

means for inserting a second electronic fingerprint into a copy of the piece of electronic content to obtain a second fingerprinted piece of electronic content;

means for encrypting the second fingerprinted piece of electronic content;

means for distributing the encrypted second fingerprinted piece of electronic content to the second user; and

wherein the first electronic fingerprint and the second electronic fingerprint are different, at least in part.

233. The system of claim 232, in which at least one of the one or more permitted uses is selected from the group consisting of:

displaying, printing, communicating, extracting, and saving the piece of electronic content.

234. The system of claim 232, in which at least one of the one or more permitted uses is selected from the group consisting of:

displaying and printing the piece of electronic content.

235. The system of claim 232, further comprising:

means for distributing the control information to the first user and the second user.

236. The system of claim 232, in which the first electronic fingerprint comprises information identifying the first user, and in which the second electronic fingerprint comprises information identifying the second user.

237. The system of claim 232, in which the first electronic fingerprint comprises information identifying an electronic appliance associated with the first user, and in which the second electronic fingerprint comprises information identifying an electronic appliance associated with the second user.

238. The system of claim 236, in which the first electronic fingerprint comprises information identifying an electronic appliance associated with the first user, and in which the second electronic fingerprint comprises information identifying an electronic appliance associated with the second user.

239. The system of claim 232, in which the first electronic fingerprint and the second electronic fingerprint comprise information regarding time and/or date.