SYSTEM AND METHOD FOR USING DIGITAL STRINGS TO PROVIDE SECURE DISTRIBUTION OF DIGITAL CONTENT

• US 20100228673A1
• Filed: 05/18/2010
• Published: 09/09/2010
• Est. Priority Date: 07/20/2006
• Status: Active Grant

• Current Assignee: Marek Pesl
• Original Assignee: Marek Pesl
• Inventors: Pesl, Marek
• Granted Patent: US 8,463,708 B2
• Time in Patent Office: Days
• US Class Current: 705/54
• CPC Class Codes: G06F 21/1011 to devices
• CPC Class Codes: G06F 21/1083 Partial license transfers

Abstract

A method and system for secure distribution of digital content, using a disintegration tool under control of a distributor of the digital content to divide the digital content into protected and unprotected segments, delivering the unprotected segments to the customer along with installation software and identification information. The segments to be protected are modified using the identification information on the distribution medium and hardware information unique to a particular customer device. Upon communication of this information from the customer device, the modified segments are sent to the customer device for integration with the unprotected segments to generate a modified digital content operable only on the particular customer device.

Claims

1-20. -20. (canceled)

21. A computer implemented method for secure distribution of digital content, the method comprising:

disintegrating by a hardware server the digital content into a plurality of segments;

selecting, from the plurality of segments, segments to he protected, the remaining unselected segments being unprotected;

including the remaining unselected segments in a medium for distribution, the selected segments to be protected being omitted from the medium for distribution, the medium also including installation software and distribution identification information;

distributing to a particular customer device the remaining unselected segments, the installation software and the distribution identification information, the installation software being capable of extracting from the particular customer device hardware identification information unique to the particular customer device;

receiving, by the hardware server, the distribution identification information and hardware identification information unique to the particular customer device;

modifying, by the hardware server, the selected segments to be protected so as to include the distribution identification information and hardware identification information unique to the particular customer device; and

injecting, by the hardware server, the modified segments to the particular customer device.

22. The method of claim 21, wherein the installation software is capable of integrating, on the particular customer device, the remaining unselected segments with the modified segments, thereby generating on the particular customer device modified digital content operable only on the particular customer device.

23. The method of claim 21, the modifying further comprising:

confirming the distribution identification information, and for each segment of the selected segments to be protected;

replacing an assembler level call instruction with a pointer to a call protection routine; and

altering one or more assembler level instructions that follow the replaced call instruction,

wherein the call protection routine is capable of confirming that hardware components corresponding to the hardware identification information are present on the particular customer device and, in response to said confirming, restoring the replaced assembler level instructions that follow the replaced call instruction.

24. The method of claim 21, wherein the hardware identification information is obtained by the hardware server over the Internet in a transmission from the particular customer device, under direction from the installation software made resident on the customer device from the medium for distribution.

25. The method of claim 21, the modifying further comprising including in the selected segments a routine for testing whether the device running the modified digital content has hardware corresponding to the hardware identification information.

26. The method of claim 25, further comprising:

receiving by the hardware server a request from the particular customer device for authorization, where the testing routine includes dynamic criteria; and

providing authorization by repeating the modifying and injecting steps.

27. The method of claim 25, wherein the routine for testing includes only static criteria, and wherein the customer device connects to the hardware server for authorization only once at initial load.

28. The method of claim 22, wherein the injecting further comprises:

transmitting the modified segments to the particular customer device over the Internet in response to an authorization request from the particular customer device,

wherein the installation software is capable of combining the unprotected segments and the modified segments at the particular customer device to produce a load file, the load file being able to generate an executable for running the digital content.

29. A computer implemented method for secure distribution of digital content, the method comprising:

receiving at a particular customer device from a hardware server via a medium for distribution installation software and distribution identification information, the medium for distribution also including unprotected segments of the digital content, the unprotected segments being the segments remaining after the hardware server has disintegrated the digital content into a plurality of segments and selected segments to be protected;

executing the installation software on the particular customer device, the installation software extracting from the particular customer device hardware identification information unique to the particular customer device;

transmitting to the hardware server the distribution identification information and the unique hardware identification information extracted from the particular customer device;

receiving at the particular customer device from the hardware server the selected segments modified to include the distribution identification information and the unique hardware identification information extracted from the particular customer device;

integrating on the particular customer device the remaining unselected segments with the modified segments, thereby generating on the particular customer device modified digital content operable only on the particular customer device.

30. The method of claim 29, further comprising executing the modified digital content, wherein the modified segments include a routine for testing whether the particular customer device has hardware corresponding to the hardware identification information.

31. The method of claim 30, further comprising sending a request to the hardware for authorization, where the testing routine includes dynamic criteria and authorization must be obtained whenever the dynamic criteria are

32. The method of claim 30, wherein the routine for testing includes only static criteria, and wherein the customer device connects to the hardware server for authorization only once at initial load.

33. A computer implemented system for secure distribution of digital content, the system comprising:

means for disintegrating the digital content into a plurality of segments;

means for selecting, from the plurality of segments, segments to be protected, the remaining unselected segments being unprotected;

means for including the remaining unselected segments in a medium for distribution, the selected segments to be protected being omitted from the medium for distribution, the medium also including installation software and distribution identification information;

means for distributing to a particular customer device the remaining unselected segments, the installation software and the distribution identification information, the installation software being capable of extracting from the particular customer device hardware identification information unique to the particular customer device;

means for receiving the distribution identification information and hardware identification information unique to the particular customer device;

means for modifying the selected segments to be protected so as to include the distribution identification information and hardware identification information unique to the particular customer device; and

means for injecting the modified segments to the particular customer device.

34. The system of claim 33, wherein the installation software is capable of integrating, on the particular customer device, the remaining unselected segments with the modified segments, thereby generating on the particular customer device modified digital content operable only on the particular customer device.

35. The system of claim 33, the means for modifying further comprising:

means for confirming the distribution identification information, and for each segment of the selected segments to be protected;

means for replacing an assembler level call instruction with a pointer to a call protection routine; and

means for altering one or more assembler level instructions that follow the replaced call instruction,

wherein the call protection routine is capable of confirming that hardware components corresponding to the hardware identification information are present on the particular customer device and, in response to said confirming, restoring the replaced assembler level instructions that follow the replaced call instruction.

36. The system of claim 33 wherein the hardware identification information is obtained over the Internet in a transmission from the particular customer device, under direction from the installation software made resident on the customer device from the medium for distribution.

37. The system of claim 33, the means for modifying further comprising means for including in the selected segments a routine for testing whether the device running the modified digital content has hardware corresponding to the hardware identification information.

38. The system of claim 37, further comprising:

means for receiving by the hardware server a request from the particular customer device for authorization, where the testing routine includes dynamic criteria; and

means for providing authorization by using the means for modifying and the means for injecting.

39. The system of claim 37, wherein the routine for testing includes only static criteria, and wherein the customer device connects to the hardware server for authorization only once at initial load.

40. The method of claim 34, wherein the means for injecting further comprises:

means for transmitting the modified segments to the particular customer device over the Internet in response to an authorization request from the particular customer device,

wherein the installation software is capable of combining the unprotected segments and the modified segments at the particular customer device to produce a load file, the load file being able to generate an executable for running the digital content.