Method and system for secure distribution and utilization of data over a network

• US 20080098223A1
• Filed: 10/04/2007
• Published: 04/24/2008
• Est. Priority Date: 08/02/2001
• Status: Active Grant

• Current Assignee: Thales DIS CPL USA, Inc. (Thales SA)
• Original Assignee: SafeNet Incorporated (Thales SA)
• Inventors: Cochran, Michael, Badia, Logan, Tan, Kaijun
• Granted Patent: US 8,055,769 B2
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A method of securely utilizing downloaded data includes the steps of opening a media player; opening a data file; requesting a portable token from and used by a client, the portable token being a physical device removeably coupleable to a client computer; reading a distinguishing number from the token; and verifying a digital message linking the data file to the token using the media player, the distinguishing number, and a private key in the token. The digital message is required to access the data.

Claims

1. A method of securely utilizing downloaded data comprising:

opening a media player;

opening a data file;

requesting a portable token from and used by a client, the portable token being a physical device removeably coupleable to a client computer;

reading a distinguishing number from the token;

verifying a digital message linking the data file to the token using the media player, the distinguishing number, and a private key in the token, wherein the digital message is required to access the data.

2. The method of claim 1, wherein in verifying a digital message, the media player reads the private key from the token to decrypt the digital message.

3. The method of claim 1, wherein in verifying a digital message, the media player sends the digital message to the token.

4. The method of claim 3, wherein the token decrypts an encrypted symmetric key using the private key.

5. The method of claim 1, wherein verifying a digital signature comprises verifying the distinguishing number read from the token;

verifying a time period associated with the data file;

decrypting an encrypted symmetrical key using the private key from the token; and

decrypting the data file using the symmetrical key.

6. The method of claim 1, wherein the distinguishing number is assigned to the token by a manufacturer.

7. The method of claim 6, wherein the distinguishing number is permanently assigned to the token.