DATA PROCESSING SYSTEM ANDMETHOD THEREFOR

• US 20100281056A1
• Filed: 07/15/2010
• Published: 11/04/2010
• Est. Priority Date: 09/17/1999
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Ezaki, Tadashi, Nonaka, Akira
• Granted Patent: US 8,095,578 B2
• Time in Patent Office: Days
• US Class Current: 707/770
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G10K 15/02 Synthesis of acoustic waves synthesis of speech G10L13/00
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A data providing system for distributing content data from a data providing apparatus to a data processing apparatus and managing said data providing apparatus and said processing apparatus by a management apparatus. In the system, the management apparatus is configured to provide a key file in which is stored content key data and usage control policy data indicating a content of rights, including permission conditions of the content data. At least a part of said key file is encrypted. The data providing apparatus is configured to provide the content data encrypted by using the content key data stored in the key file. The data processing apparatus is configured to decrypt the key file to obtain the content key data from the key file and determine handling of the content data based on the usage control policy data stored in the key file.

Claims

1. A data providing system for distributing content data from a data providing apparatus to a data processing apparatus and managing said data providing apparatus and said processing apparatus by a management apparatus, wherein:

said management apparatus is configured to provide a key file in which is stored content key data and usage control policy data indicating a content of rights, including permission conditions of said content data,

at least a part of said key file is encrypted,

said data providing apparatus is configured to provide said content data encrypted by using said content key data stored in said key file, and

said data processing apparatus is configured to decrypt said key file to obtain said content key data from said key file and determine handling of said content data based on said usage control policy data stored in said key file.

2. The data providing system according to claim 1, wherein said key file is encrypted by a key file key for encrypting at least said content key stored in said key file.

3. The data providing system according to claim 1, wherein said key file is distributed to a secure module in the data providing system in advance of encryption of said content data.

4. A method of distributing encrypted content data from a data providing apparatus to a data processing apparatus and managing said data providing apparatus and said processing apparatus by a management apparatus, said method comprising the steps of:

encrypting at least part of a key file in which is stored content key data and usage control policy data indicating a content of rights, including permission conditions of said content data;

encrypting said content data using said content key data stored in said key file;

communicating said encrypted content data from said data providing apparatus to said data providing apparatus;

decrypting said key file using said data providing apparatus to obtain said content key data from said key file; and

determining handling of said content data based on usage control policy data stored in said key file.

5. The method of claim 4, wherein the key file is encrypted by a key file key for encrypting at least said content key stored in the key file.

6. The method of claim 4, further comprising the step of distributing said key to a secure module in said data providing system in advance of said step of encrypting said content data.