Method for Secure Storage and Delivery of Media Content

• US 20100138673A1
• Filed: 01/29/2010
• Published: 06/03/2010
• Est. Priority Date: 09/08/2005
• Status: Abandoned Application

• Current Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Original Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Inventors: CHANG, Robert C., HOLTZMAN, Michael, YUAN, Po, McAVOY, Paul, JOGAND-COULOMB, Fabrice
• Application Number:
  US12/697,001
• Publication Number:
  US 20100138673A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/1014 to tokens
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00094 involving measures which result in a restriction to authorised record carriers
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00253 wherein the key is stored on the record carrier
• CPC Class Codes: G11B 20/00724 wherein a prepaid credit balance is registered on the recording medium
• CPC Class Codes: G11B 20/00731 involving a digital rights management system for enforcing a usage restriction
• CPC Class Codes: G11B 20/00862 wherein the remote server can grant the permission to use a content
• CPC Class Codes: G11B 20/00985 the trial version being of lower quality than the original version
• CPC Class Codes: G11B 2220/61 wherein solid state memory is used for storing A/V content storing computer data in solid state memories G06F
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4184 providing storage capabilities, e.g. memory stick
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The memory device contains control structures that allow media content to be stored securely and distributed in a manner envisioned by the content owner, or service providers involved in the distribution. A wide variety of different avenues become available for distributing media content using such memory devices, such as where the devices contain one or more of the following: abridged preview media content, encrypted unabridged media content, prepaid content, rights and/or rules governing access to such content. The memory device has a type of control structures that enable a service provider (who can also be the content owner) to create a secure environment for media content distribution where end users and terminals register with the service provider, and gain access to the content in a manner controlled by the service provider. The various components to be loaded (e.g. abridged preview media content, encrypted unabridged media content, prepaid content, rights and/or rules governing access to such content) may be generated and loaded in a secure and efficient manner.

Claims

1. A method for distributing media titles by a non-volatile memory device, the method comprising:

performing the following in a non-volatile memory device;

receiving a request and a credential from an entity to access an encrypted media title stored in a first memory area in the non-volatile memory device, wherein access to the encrypted media title is controlled by control information stored in a second secure memory area in the non-volatile memory device, the control information comprising information on an account having a corresponding credential, wherein the account is associated with the encrypted media title;

checking the credential received from the entity against the account credential;

determining whether the requested encrypted media title should be accessible; and

decrypting the requested encrypted media title and supplying the decrypted media title to the entity when the credential presented by the entity matches the account credential.

2. The method of claim 1, wherein access to the encrypted media title is associated with and controlled by a service provider, wherein the control information further comprises identification information for identifying the encrypted media title as controlled by the service provider, the method further comprising:

checking the credential received from the entity against the identification information to determine whether the encrypted media title should be accessible to the entity; and

decrypting the requested encrypted media title and supplying the decrypted media title to the entity when the credential received from the entity corresponds to the identification information.

3. The method of claim 2, wherein the credential presented by the entity comprises the identification information of the service provider.

4. The method of claim 2, wherein the account is associated with a set of encrypted media titles and the identification information is associated with an account, wherein the encrypted media title is decrypted and supplied to the entity when such encrypted media title is determined to be within the set and when the credential received from the entity corresponds to the identification information associated with the account.

5. The method of claim 4, wherein the account is associated with a family of end users, the identification information of the account comprises identification information for the family of end users, and wherein the checking comprises checking whether the credential received from the entity comprises identification information of any one of the family of end users.

6. The method of claim 4, wherein the account is associated with an individual end user, the identification information of the account comprises identification information for the individual end user, and wherein the checking comprises checking whether the credential received from the entity comprises identification information of the individual end user.