Systems and methods for the prevention of unauthorized use and manipulation of digital content

• US 20080178299A1
• Filed: 01/10/2008
• Published: 07/24/2008
• Est. Priority Date: 05/09/2001
• Status: Active Grant

• Current Assignee: SCA IPLA Holdings Incorporated (Sony Group Corp.)
• Original Assignee: ECD Systems Incorporated
• Inventors: Merkle, James A., Hart, John J., Goldman, Daniel M., Howard, Daniel G., Lee, Andrew R., LeVine, Richard B., Pagliarulo, Jeffrey A., Bouza, Jose L.
• Granted Patent: US 8,117,667 B2
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: G06F 12/08 in hierarchically structured memory systems, e.g. virtual memory systems
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures

Abstract

A number of systems and methods, alone, or in combination, achieve various levels of protection against unauthorized modification and distribution of digital content. This encompasses at least unauthorized study, modification, monitoring, reconstruction, and any other means for subversion from the originally intended purpose and license model of the digital content. The invention combines a number of techniques that in whole, or in part, serve to protect such content from unauthorized modification, reconstructive engineering, or monitoring by third parties. This is accomplished by means of methods which protect against subversion by specific tools operating on specific platforms as well as general tools operating on general platforms. Specific time domain attacks are identified, code modification can be identified and reversed, and virtual and emulated systems are identified. In addition, identification of in-circuit emulator tools (both software and hardware), debuggers, and security threats to running programs can be achieved.

Claims

1. A method for preventing unauthorized use of digital content data in a computer system comprising:

examining system devices that are operational in the system to determine features that characterize the system devices;

generating a signature representative of the system based on the features; and

assigning the signature to the digital content data.

2. The method of claim 1 wherein the features comprise at least one of memory capacity, firmware version, clock rate, bus rate, bus type, component type, component version, and firmware version.

3. The method of claim 1 further comprising encrypting the signature before assigning the signature to the digital content data.

4. The method of claim 1 wherein the signature comprises combined multiple features corresponding to like multiple system devices.

5. The method of claim 1 further comprising controlling installation of the digital content data based on the assigned signature.

6. The method of claim 1 further comprising controlling operation of the digital content data on the system based on the assigned signature.

7. A method for preventing unauthorized use of digital content data in a computer system comprising:

requesting an installation of the digital content data at a client;

transmitting the request for installation to a server;

verifying, at the server, whether the requested installation is authorized, if the installation is unauthorized, transmitting an installation denial message to the client, and if the installation is authorized, transmitting an installation authorization message to the client;

installing the digital content data at the client if the requested installation is authorized.

8. The method of claim 7 wherein verifying comprises determining whether the number of previously authorized installations exceeds a predetermined number.

9. The method of claim 7 wherein the client examines system devices on the client that are operational in the system to determine features that characterize the system devices, generates a signature representative of the system based on the feature, and transmits the signature to the server with the request for installation.

10. The method of claim 9 wherein the server verifies authorization of the installation based on the signature.

11. A method for preventing unauthorized use of digital content data in a computer system comprising:

requesting use of the digital content data at a client;

transmitting the request for use to a server;

verifying, at the server, whether the requested use is authorized, if the installation is unauthorized, transmitting a use denial message to the client, and if the installation is authorized, transmitting a use authorization message to the client;

utilizing the digital content data at the client if the requested installation is authorized.

12. The method of claim 11 wherein verifying comprises determining whether the number of previously authorized uses exceeds a predetermined number.

13. The method of claim 11 wherein the client examines system devices on the client that are operational in the system to determine features that characterize the system devices, generates a signature representative of the system based on the feature, and transmits the signature to the server with the request for use.

14. The method of claim 13 wherein the server verifies authorization of the use based on the signature.