Method for Secure Storage and Delivery of Media Content

• US 20100131774A1
• Filed: 01/29/2010
• Published: 05/27/2010
• Est. Priority Date: 09/08/2005
• Status: Abandoned Application

• Current Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Original Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Inventors: Holtzman, Michael, Jogand-Coulomb, Fabrice
• Application Number:
  US12/696,985
• Publication Number:
  US 20100131774A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/1014 to tokens
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00094 involving measures which result in a restriction to authorised record carriers
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00253 wherein the key is stored on the record carrier
• CPC Class Codes: G11B 20/00724 wherein a prepaid credit balance is registered on the recording medium
• CPC Class Codes: G11B 20/00731 involving a digital rights management system for enforcing a usage restriction
• CPC Class Codes: G11B 20/00862 wherein the remote server can grant the permission to use a content
• CPC Class Codes: G11B 20/00985 the trial version being of lower quality than the original version
• CPC Class Codes: G11B 2220/61 wherein solid state memory is used for storing A/V content storing computer data in solid state memories G06F
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4184 providing storage capabilities, e.g. memory stick
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The memory device contains control structures that allow media content to be stored securely and distributed in a manner envisioned by the content owner, or service providers involved in the distribution. A wide variety of different avenues become available for distributing media content using such memory devices, such as where the devices contain one or more of the following: abridged preview media content, encrypted unabridged media content, prepaid content, rights and/or rules governing access to such content. The memory device has a type of control structures that enable a service provider (who can also be the content owner) to create a secure environment for media content distribution where end users and terminals register with the service provider, and gain access to the content in a manner controlled by the service provider. The various components to be loaded (e.g. abridged preview media content, encrypted unabridged media content, prepaid content, rights and/or rules governing access to such content) may be generated and loaded in a secure and efficient manner.

Claims

1. A method for distributing media titles by a non-volatile memory device, the method comprising:

performing the following in a non-volatile memory device;

providing device information to enable the device to be certified as genuine; and

using a system agent stored in the device to enable a first service provider to create a first corresponding control structure in the device for controlling rights and/or rules involving access to an encrypted media title stored in the device.

2. The method claim 1, further comprising using the system agent to enable at least an additional service provider different from the first service provider to create an additional corresponding control structure in the device different from the first control structure.

3. The method of claim 2, wherein each of the control structures specifies rights and/or rules for access to encrypted media titles stored in the device, the method further comprising enabling each of the service providers to have exclusive control over the rights and/or rules specified by its corresponding control structure.

4. The method of claim 3, wherein the service providers interact with the device independently of one another, so that the rights and/or rules specified by the corresponding control structure of one service provider is not accessible by another service provider.

5. The method claim 1, further comprising receiving an media title associated with the first service provider at the device and storing the media title at the device.

6. The method of claim 1, further comprising:

receiving a predetermined credential from an entity; and

decrypting the encrypted media title and supplying the decrypted media title to the entity.

7. The method of claim 6, wherein the device stores a credential, wherein the decryption and the supplying occur only when the received predetermined credential is acceptable when compared to the stored credential.

8. The method of claim 1, further comprising establishing a secure channel between the device and an entity in communication with the first service provider for receiving data from the first service provider to create the first control structure.

9. The method of claim 1, further comprising:

receiving entity information from an entity to enable the entity to be certified as genuine;

authenticating the entity as genuine using the entity information; and

establishing a secure connection between the device and the entity.

10. The method of claim 1, wherein the device storing a content encryption key used to encrypt the media title stored in the device, the first control structure specifying rights and/or rules for access to the content encryption key for the decrypting the encrypted media title, the method further comprising:

receiving from an entity a request to access a media title stored in the device; and

granting access to the content encryption keys if permitted by the rights and/or rules.

12. The method of claim 1, the first control structure specifying the rights and/or rules so that access to the content encryption key is subscription based.

11. The method of claim 11, wherein granting access to the content encryption key comprises decrypting the media title using the content encryption key, the method further comprising supplying the decrypted media title to the entity.