Secure non-invasive method and system for distribution of digital assets

• US 20070242824A1
• Filed: 04/12/2006
• Published: 10/18/2007
• Est. Priority Date: 04/12/2006
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: Sbc Knowledge Ventures, L.P.
• Inventors: Vishik, Claire
• Granted Patent: US 8,565,424 B2
• Time in Patent Office: Days
• US Class Current: 380/200
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04N 21/4532 involving end-user characteristics, e.g. viewer profile, preferences monitoring of user activities for profile generation for accessing a video database G06F16/739; user profiles in network data switching protocols H04L67/306; processing of user preferences or user profiles in wireless networks H04W8/18
• CPC Class Codes: H04N 21/454 Content or additional data filtering, e.g. blocking advertisements

Abstract

A server computer system outputs a downloader component to a client computer. The downloader component enables the client computer to download an encrypted file. After outputting the downloader component, the server computer system cooperates with the downloader component to output the encrypted file to the client computer. The server computer system outputs a user profile to the client computer. The user profile contains a key to decrypt the encrypted file into a digital content item. The server computer system outputs a file management component to the client computer. The file management component is to manage usage of the encrypted file at the client computer based on one or more terms of usage associated with the encrypted file.

Claims

1. A method comprising:

outputting a first downloader component to a client computer, the first downloader component to enable the client computer to download a first encrypted file;

after said outputting the first downloader component, cooperating with the first downloader component to output the first encrypted file to the client computer;

outputting a first user profile to the client computer, the first user profile containing a first key to decrypt the first encrypted file into a first digital content item; and

outputting a first file management component to manage usage of the first encrypted file at the client computer based on one or more terms of usage associated with the first encrypted file.

2. The method of claim 1 further comprising:

outputting a second downloader component to the client computer, the second downloader component to enable the client computer to download a second encrypted file;

after said outputting the second downloader component, cooperating with the second downloader component to output the second encrypted file to the client computer;

outputting a second user profile to the client computer, the second user profile containing a second key to decrypt the second encrypted file into a second digital content item; and

outputting a second file management component to manage usage of the second encrypted file at the client computer based on one or more terms of usage associated with the second encrypted file.

3. The method of claim 1 wherein the first downloader component is usable by the client computer to download only the first encrypted file.

4. The method of claim 1 wherein the first user profile is usable by the client computer to decrypt only the first encrypted file.

5. The method of claim 1 wherein the first file management component is usable by the client computer to manage usage of only the first encrypted file.

6. The method of claim 1 wherein the first downloader component is usable by the client computer to download only the first encrypted file and at least component associated with the first encrypted file.

7. The method of claim 1 wherein the first user profile is usable by the client computer to decrypt only the first encrypted file and at least one component associated with the first encrypted file.

8. The method of claim 1 wherein the first file management component is usable by the client computer to manage usage of only the first encrypted file and at least one component associated with the first encrypted file.

9. The method of claim 1 wherein the first file management component comprise computer program code to cause the client computer to determine if usage of the first encrypted file is allowed based on its associated one or more terms of usage, to direct the first digital content item to an application program if the usage is allowed, and to prohibit usage of the first encrypted file if the usage is not allowed.

10. The method of claim 9 wherein the associated one or more terms of usage are not enforced by the application program.

11. A system comprising:

a server computer system comprising at least one processor and at least one port, the at least one port to;

output a first downloader component to a client computer, the first downloader component to enable the client computer to download a first encrypted file;

after outputting the first downloader component, cooperate with the first downloader component to output the first encrypted file to the client computer;

output a first user profile to the client computer, the first user profile containing a first key to decrypt the first encrypted file into a first digital content item; and

output a first file management component to manage usage of the first encrypted file at the client computer based on one or more terms of usage associated with the first encrypted file.

12. The system of claim 11 wherein the server computer system is further programmed to:

output a second downloader component to the client computer, the second downloader component to enable the client computer to download a second encrypted file;

after outputting the second downloader component, cooperate with the second downloader component to output the second encrypted file to the client computer;

output a second user profile to the client computer, the second user profile containing a second key to decrypt the second encrypted file into a second digital content item; and

output a second file management component to manage usage of the second encrypted file at the client computer based on one or more terms of usage associated with the second encrypted file.

13. The system of claim 11 wherein the first downloader component is usable by the client computer to download only the first encrypted file.

14. The system of claim 11 wherein the first user profile is usable by the client computer to decrypt only the first encrypted file.

15. The system of claim 11 wherein the first file management component is usable by the client computer to manage usage of only the first encrypted file.

16. The system of claim 11 wherein the first downloader component is usable by the client computer to download only the first encrypted file and at least component associated with the first encrypted file.

17. The system of claim 11 wherein the first user profile is usable by the client computer to decrypt only the first encrypted file and at least one component associated with the first encrypted file.

18. The system of claim 11 wherein the first file management component is usable by the client computer to manage usage of only the first encrypted file and at least one component associated with the first encrypted file.

19. The system of claim 11 wherein the first file management component comprise computer program code to cause the client computer to determine if usage of the first encrypted file is allowed based on its associated one or more terms of usage, to direct the first digital content item to an application program if the usage is allowed, and to prohibit usage of the first encrypted file if the usage is not allowed.

20. The system of claim 19 wherein the associated one or more terms of usage are not enforced by the application program.

21. A computer-readable medium having computer-readable program code to cause a server computer system to:

output a first downloader component to a client computer, the first downloader component to enable the client computer to download a first encrypted file;

after outputting the first downloader component, cooperate with the first downloader component to output the first encrypted file to the client computer;

output a first user profile to the client computer, the first user profile containing a first key to decrypt the first encrypted file into a first digital content item; and

output a first file management component to manage usage of the first encrypted file at the client computer based on one or more terms of usage associated with the first encrypted file.

22. A method comprising:

receiving a first downloader component by a client computer from a server computer system;

using the first downloader component to download a first encrypted file from the server computer system to the client computer;

receiving a first user profile by the client computer from the server computer system, the first user profile containing a first key;

using the first key to decrypt the first encrypted file into a first digital content item;

receiving a first file management component by the client computer from the server computer system; and

using the first file management component to manage usage of the first encrypted file at the client computer based on one or more terms of usage associated with the first encrypted file.