Method and system for secure distribution and utilization of data over a network

• US 20080092220A1
• Filed: 10/04/2007
• Published: 04/17/2008
• Est. Priority Date: 08/02/2001
• Status: Abandoned Application

• Current Assignee: SafeNet Incorporated (Thales SA)
• Original Assignee: SafeNet Incorporated (Thales SA)
• Inventors: Cochran, Michael, Badia, Logan, Tan, Kaijun
• Application Number:
  US11/906,929
• Publication Number:
  US 20080092220A1
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A method for distributing data over a network includes the steps of establishing a secure connection between a client and a server; receiving a request from the client for data to be downloaded; generating a message associated with the data being downloaded to the client and associated with at least part of a distinguishing number for a portable token of the client and used by the client, and distributing the data and the associated message to the client. The portable token is a physical device removeably coupleable to a client computer. The step of generating a message further includes placing in the message a data identification number, including in the message a period of time for which the data may be used by the client, and including in the message a symmetrical key used to encrypt the data when distributing data from the server to the client over the network.

Claims

1. A method for distributing data over a network comprising:

establishing a secure connection between a client and a server;

receiving a request from the client for data to be downloaded;

generating a message associated with the data being downloaded to the client and associated with at least part of a distinguishing number for a portable token of the client and used by the client, the portable token being a physical device removeably coupleable to a client computer, the step of message generating comprising;

including in the message a data identification number,

including in the message a period of time for which the data may be used by the client, and

including in the message a symmetrical key used to encrypt the data when distributing data from the server to the client over the network;

and

distributing the data and the associated message to the client.

2. The method of claim 1, wherein establishing a secure connection comprises establishing a secure connection using a security protocol.

3. The method of claim 2, wherein the security protocol is the secure socket layer protocol.

4. The method of claim 1, wherein establishing a secure connection comprises

requesting authentication information from the client;

and

sending authentication information from the server.

5. The method of claim 4, wherein requesting authentication information from the client comprises

requesting a certificate from the client;

and

requesting a digital signature from the client.

6. The method of claim 4, wherein sending authentication information from the server comprises:

sending a certificate from the server; and

sending a digital signature from the server.

7. The method of claim 5, wherein requesting a certificate comprises reading the certificate from the token used by the client.

8. The method of claim 1, wherein generating a message further comprises generating a message using a public key (asymmetric) cryptographic algorithm.

9. The method of claim 1, wherein the distinguishing number for the portable token is assigned to the token by a manufacturer.

10. The method of claim 9, wherein the distinguishing number for the token is permanently assigned to the token.

11. The method of claim 1, wherein the generating step further comprises linking the data being downloaded to the client with at least part of the distinguishing number for the portable token of the client and used by the client.