Process and apparatus for securing and retrieving digital data with a Portable Data Storage Device (PDSD) and Playback Device (PD)

• US 20080279533A1
• Filed: 04/25/2008
• Published: 11/13/2008
• Est. Priority Date: 04/26/2007
• Status: Abandoned Application

• Current Assignee: David B. Buttars
• Original Assignee: David B. Buttars
• Inventors: Buttars, David B.
• Application Number:
  US12/150,151
• Publication Number:
  US 20080279533A1
• Time in Patent Office: Days
• US Class Current: 386/94
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04N 21/41407 embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection

Abstract

The invention is a process and apparatus for securing and retrieving digital data with a Portable Data Storage Device (PDSD) and Playback Device (PD). The PDSD-PD employs software and hardware security and encryption as barriers to those desiring illicit access to the stored data. Data is prepared with a Digital Rights Management (DRM) application which assigns a license object to the data and encrypts it using a Private Key managed Advanced Encryption Standard (AES) algorithm with 256-bit complexity. Private Keys are stored inside secured Field PGAs, PDSD, or PD. Another layer of AES encryption with 256-bit complexity is applied to the DRM license object using Public Key Infrastructure. Initial docking between a PDSD and PD initiates a sequence of routines and authentication. Interruption of the key exchange, authentication, or physical security measures may result in a lockout and/or the deletion of PDSD data. Potential applicable physical security measures are described.

Claims

1. An apparatus for securing, retrieving, playing and encrypting digital data, the apparatus comprising:

(a) a processor-enabled, non-volatile media, data storage device with a secured FPGA or similar structure for storing encryption keys, and;

(b) a processor-enabled playback device with a secured FPGA or similar structure for storing encryption keys; and

(c) a processor-enabled distribution Kiosk with a secured FPGA or similar structure for storing encryption keys, which Kiosk stores encrypted Content files for distribution to Storage Devices upon demand, such that the integral combination of storage device, playback device and distribution kiosk acts as an apparatus for securing and retrieving digital data.

3. The invention of claim 1 or 2, or a combination thereof wherein the docking of the Storage Device into the Playback Device or Kiosk initiates a processor-driven verification of the impedance-levels across the interface pins and compares them against a pre-measured value, and;

if the measured value is not within tolerances, the devices will not allow data to transfer between the devices, and the on-board processor of the Storage Device executes a ‘

hard-delete’

of all content stored on the Storage Device.

4. The invention of claim 1 or 2 or a combination thereof wherein the result of the method of claim 3 is a successful comparison of impedance values, the Data Storage device and the Playback Device or Kiosk both initiate a transfer of a Randomly Generated Number (RGN) sequence from the Storage Device to the Playback Device or Kiosk, which sequence is then used to assign some number of interface pins as “

data transfer”

pins for that docking session.

5. The invention of claim 1 or 2 or a combination thereof wherein the completion of the method of claim 3 initiates transfer of data between the devices across the “

data transfer”

pins, and the simultaneous generation of false data which is transferred (transferring) across all pins not assigned as “

data transfer”

pins.

6. The invention of claim 1 or 2 or a combination thereof wherein the Kiosk is loaded with previously-encrypted Content, and corresponding encryption keys, and wherein the Kiosk processor encrypts the Content'"'"'s encryption keys with it'"'"'s own Public Encryption Key so that only the Kiosk can decrypt and use the key.

7. The invention of claim 1 or 2 or a combination thereof wherein at the demand of a Storage Device user, the Kiosk creates and encrypts a License Object defining the Content use parameters, integrally associating with the corresponding Content, and subsequently transferring the encrypted License Object to the Storage Device prior to initiating the transfer of the previously-encrypted Content to the Storage Device.

8. The invention of claim 1 or 2 or a combination thereof wherein the License Object is transferred from the Storage Device to the Playback Device and the License Object is decrypted using the encryption keys stored on the Playback Device.

9. The invention of claim 1 or 2 or a combination thereof wherein the Content is transferred to the Playback Device to the Playback Device and the Content is decrypted using the encryption keys stored on the Playback Device.

10. The invention of claim 1 or 2 or a combination thereof wherein the Storage Device monitors the expiry parameters of the License Object, and, upon expiry of the License Object, the on-board processor of the Storage Device executes a re-formatting of the section of the non-volatile memory holding the associated Content, resulting in a complete erasure of that associated Content.

2. Method for securing, retrieving, playing and encrypting digital data, the method comprising:

(a) a processor-enabled, non-volatile media, data storage device with a secured FPGA or similar structure used as a mechanism for storing encryption keys; and

(b) a processor-enabled playback device with a secured FPGA or similar structure used as a mechanism for storing encryption keys; and

(c) a processor-enabled distribution Kiosk with a secured FPGA or similar structure used as a mechanism for storing encryption keys, which Kiosk stores encrypted Content files for distribution to Storage Devices upon demand, such that the integral combination of storage device, playback device and distribution kiosk acts as an apparatus for securing, retrieving, playing and scrambling digital data.