Copy protection of data

• US 20080016000A1
• Filed: 09/13/2007
• Published: 01/17/2008
• Est. Priority Date: 03/27/1997
• Status: Abandoned Application

• Current Assignee: Copy Protection LLC (Quarterhill Inc. (f/k/a Wi-LAN Inc.))
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: Sims, Matthew, Bramhill, Ian
• Application Number:
  US11/898,574
• Publication Number:
  US 20080016000A1
• Time in Patent Office: Days
• US Class Current: 705/57
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/103 applying security measure for protecting copy right protecting software against unauthorised usage in a vending or licensing environment, e.g. protection the software providers copyright G06F21/10; data processing systems or methods, specially adapted for payment schemes, architectures or protocols G06Q20/00; secrecy systems or subscription systems H04N7/16
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/08 specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A copyright protection scheme is provided in which data is downloaded from a server 1, typically over the World Wide Web 2 to a client 3, for presentation to a user. The downloaded data is cryptographically protected, by encryption and hashing. When displayed by the client, storing and copying functions are selectively disabled in respect of the data, in order to prevent unauthorised copying.

Claims

1-27. -27. (canceled)

28. A method of downloading data from a server to a client, the method comprising:

transmitting an applet from the server to the client, the applet including at least a hashing algorithm, an encryption algorithm, and an encryption key;

receiving, at the server, a file request for the data from the client, the file request being generated by execution of the applet at the client;

hashing, at the server, the requested data using a copy of hashing algorithm that was previously transmitted to the client as part of the applet;

encrypting, at the server, the requested data using a copy of the encryption algorithm and the encryption key that were previously transmitted to the client as part of the applet; and

wrapping the hashed and encrypted data in a file and transmitting the wrapped filed to the client.

29. The method as in claim 28 further comprising watermarking the requested data with an identifier associated with the client.

30. The method as in claim 28 wherein the requested data includes a header and embedded file information, and said wrapping the data includes:

generating a first hash value and including the first generated hash value in the header of the requested data to enable an integrity of a content of the header to be verified at the client; and

generating a second hash value and including the second generated hash value in the embedded file information of the requested data to enable an integrity of a content of the embedded file information to be verified at the client.

31. A server for downloading data to a client, said server comprising:

an output which transmits an applet to the client, the applet including at least a hashing algorithm, an encryption algorithm, and an encryption key;

an input which receives a file request for the data from the client, the file request being generated by execution of the applet at the client;

a processor which;

hashes the requested data using a copy of hashing algorithm that was previously transmitted to the client as part of the applet;

encrypts the requested data using a copy of the encryption algorithm and the encryption key that were previously transmitted to the client as part of the applet; and

wraps the hashed and encrypted data in a file and transmitting the wrapped filed to the client.

32. The server as in claim 31 wherein the processor watermarks the requested data with an identifier associated with the client.

33. The server as in claim 31 wherein the requested data includes a header and embedded file information, and the processor, when wrapping the data:

generates a first hash value and includes the first generated hash value in the header of the requested data to enable an integrity of a content of the header to be verified at the client; and

generates a second hash value and includes the second generated hash value in the embedded file information of the requested data to enable an integrity of a content of the embedded file information to be verified at the client.