Protection of Digital Data Content

• US 20100095383A1
• Filed: 12/17/2009
• Published: 04/15/2010
• Est. Priority Date: 08/23/2002
• Status: Active Grant

• Current Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Original Assignee: Sandisk Technologies Incorporated (Western Digital Corporation)
• Inventors: Fuchs, Eran, Halachmi, Aviraham, Harkabi, Dan, Elazar, Gidon, Camiel, Noam, Weingarten, Nehemiah
• Granted Patent: US 9,177,116 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 2005/91328 the copy protection signal being a copy management signal, e.g. a copy generation management signal [CGMS]
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4183 providing its own processing capabilities, e.g. external module for video decoding
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

Various embodiments include an apparatus, system, and method to control the distribution and usage of copyrighted digital content. The processing of a data file received over a communications network such as the Internet occurs both in a host digital appliance, such as a personal computer, notebook computer, audio player, video player, and the like, and in a very small digital rights management (DRM) module that is removably connected with the host. The processing makes it extremely difficult for the content of the data file to be obtained by an unauthorized person and/or utilized with an unauthorized DRM module.

Claims

1. A method of communicating digital data over a communications network, comprising:

separating the digital data into at least first and second units of data,

transmitting the at least first and second units of data over a communications network in a manner that the at least first and second units of data maintain their separate identities,

processing the at least first and second units of data received over the communications network in different respective ones of at least first and second electronic systems,

combining the processed units of data in the first electronic system, and

utilizing the combined units of data in the second electronic system.

2. The method of claim 1, wherein the first electronic system is formed as a hand-held device with a first connector that mechanically and electrically mates with a second connector on the second electronic system that includes a host digital appliance.

3. The method of claim 1, wherein the digital data include multimedia data having both video and audio components, and wherein the first unit includes compressed data of the video component without data of the audio component and the second unit includes compressed data of the audio component.

4. The method of claim 1, wherein the digital data are of a video signal having a plurality of color components, and wherein the first unit includes data of less than all the plurality of color components and the second unit includes data of at least another of the plurality of color components.

5. The method of claim 1, wherein the digital data include encoded data frames, and wherein the first unit includes at least key frames thereof and the second unit includes remaining inter-frames thereof.

6. The method of claim 1, wherein the digital data includes data of an audio signal, and wherein the first unit includes data of at least certain audio frequency ranges and the second unit includes data of remaining audio frequency ranges.

7. The method of claim 1, wherein the digital data includes data of an audio signal, and wherein the first unit includes the audio data plus dummy data and the second unit includes data of information necessary to remove the dummy data from the first unit.

8. The method of claim 1, wherein the digital data are of a time oriented signal, and wherein the first unit includes a time shuffled version of the digital data and the second unit includes data of information necessary to un-shuffle data of the first unit.

9. The method of claim 1, wherein the digital data are of a time oriented signal, and wherein the first unit includes the digital data with segments thereof missing and the second unit includes data of the missing segments.

10. The method of claim 1, wherein the digital data are of an encoded WAV audio file and divided into frames of data longer than a given length, and wherein the first unit includes data of the given length of the frames and the second unit includes remaining data of the frames.

11. The method of claim 1, wherein the digital data are of software, and wherein the first unit includes software code to be executed by the first electronic system and the second unit includes software code to be executed by the second electronic system.

12. The method of claim 1, wherein transmitting the at least first and second units of data over a communications network comprises transmitting the at least first and second units of data over the Internet.

13. The method of claim 1, wherein separating the digital data comprises separating the digital data into at least first and second units of simultaneously occurring data components of the digital data.

14. In a digital rights management (DRM) device mechanically and electrically connected to digital appliance in a manner to be removable therefrom, a method of processing a data file received by the digital appliance, comprising:

receiving by the DRM device of a first unit of data from the digital appliance, the data file having been received by the digital appliance in a form of at least the first unit and a second separate unit of data;

processing the first unit of data in the DRM device;

receiving by the DRM device the second unit of data as received and subsequently processed in the digital appliance;

subsequently combining the processed first and second units of data in the DRM device; and

providing the combined data from the DRM device to the digital appliance to be unutilized in the digital appliance.

15. The method of claim 14, wherein the processing include decrypting at least one of the first and second units of data.

16. The method of claim 14, wherein the first and second data units received by the digital appliance are encrypted, and wherein the processing includes decrypting the first unit of data in the DRM device and decrypting the second unit of data in the digital appliance.

17. The method of claim 14, wherein the DRM device has at least one encapsulated integrated circuit including a non-volatile memory and a microprocessor, and an external connector extending from the at least one encapsulated integrated circuit, the connector being configured to electrically and mechanically mate with a connector of the digital appliance.

18. The method of claim 17, wherein the DRM device connector and connector of the digital appliance are USB connectors.

19. The method of claim 17, wherein the DRM device connector and connector of the digital appliance conform to those of a SD card standard.

20. The method of claim 17, wherein the DRM device connector and connector of the digital appliance conform to those of a TransFlash card standard.

21. The method of claim 17, wherein the DRM device connector and connector of the digital appliance conform to those of a Memory Stick card standard.

22. The method of claim 14, wherein the communication of data between the digital appliance and the DRM device is done wirelessly.

23. In a digital appliance having a digital rights management (DRM) device mechanically and electrically connected thereto in a manner to be removable therefrom, a method of processing a data file received by the digital appliance, comprising:

receiving the data file in a form of at least first and second separate units of data;

providing the first unit of data to the DRM device for processing therein;

processing the second unit of data in the digital appliance;

providing the processed second unit of data to the DRM device;

subsequently receiving from the DRM device the processed first and second units of data as combined therein, and

utilizing the combined data in the digital appliance.

24. The method of claim 23, wherein the processing includes decrypting at least one of the first and second units of data.

25. The method of claim 23, wherein the first and second data units received by the digital appliance are encrypted, and wherein the processing includes decrypting the first unit of data in the DRM device and decrypting the second unit of data in the digital appliance.

26. A digital rights management (DRM) module, comprising:

a microprocessor,

a semiconductor memory,

an interface for communicating data into and out of the module, and

software code stored within the memory and executed by the microprocessor to;

extract at least first and second parts from a data file received through the interface,

process the first part of the received data file to form a processed first part,

send the second part of the received data file back through the interface,

receive the second part of the data file through the interface after processing as a processed second part,

combine the processed first and second parts of the data file, and

send at least a representation of the combined processed parts of the data file back though the interface.

27. The module of claim 26, wherein the processing includes decryption of the first and second parts of the data file received through the interface circuit.

28. The module of claim 26, wherein at least the microprocessor and semiconductor are encapsulated.

29. The module of claim 26, wherein the interface includes a mechanical connector having electrical contacts accessible from outside of the module.

30. The module of claim 29, wherein the connector includes an USB connector.

31. The module of claim 29, wherein the connector includes electrical contacts according to an SD memory card standard.

32. The module of claim 29, wherein the connector includes electrical contacts according to a TransFlash memory card standard.

33. The module of claim 29, wherein the connector includes electrical contacts according to a Memory Stick memory card standard.

34. The module of claim 26, wherein the interface includes two mechanical connectors accessible from outside of the module.

35. The module of claim 34, wherein the two mechanical connectors include an USB connector and a set of electrical contacts according to an existing memory card standard.

36. The module of claim 26, wherein the interface for communicating data into and out of the module includes a wireless transceiver.

37. The module of claim 26, wherein the software code stored within the memory and executed by the microprocessor to extract at least first and second parts from the data file comprises extracting first and second parts of simultaneously occurring data components of the data file.

38. A system for serving digital content, comprising:

at least one server storing at least two units of data derived from digital content such that the digital content cannot be reconstructed from any one of the units alone but rather requires that processing be performed and the results of the processing combined in order to reconstruct the digital content, and

an interface adapted to send the derived at least two units of data as a single data stream over a network in response to a request received over the network for the digital content.

39. The system of claim 38, wherein said at least one server additionally stores data of rights to use the digital content, and the interface is further adapted to send the rights data of the digital content over the network along with the units of data.

40. The system of claim 38, additionally comprising a plurality of digital appliances with DRM devices connected thereto for receiving the at least two units of data from said at least one server over the network, wherein the processing of one of the units of data takes place in the DRM device and the processing of another of the units of data takes place in the digital appliance, and the results of this processing are combined to reconstruct the digital content file for utilization by the digital appliance.

41. The system of claim 40, wherein the DRM device functions to issue the request for the digital content and send it over the network.

42. The system of claim 38, wherein the amount of processing and memory capacity required to process an amount of one of the units of data is one-half or less than that required to process an amount of another one of the units of data.

43. The system of claim 38, wherein the at least two units of data are derived from the digital content in a manner such that their processing is to be done in at least two different hardware devices connected with each other and then the results of the processing combined in one of the hardware devices.

44. The system of claim 38, wherein said at least one server stores at least one of the units of data in a compressed form.

45. The system of claim 38, wherein said at least one server stores at least one of the units of data in an encrypted form.