Trusted Infrastructure Support Systems, Methods and Techniques for Secure Electronic Commerce Electronic Transactions and Rights Management

• US 20110047077A1
• Filed: 11/02/2010
• Published: 02/24/2011
• Est. Priority Date: 02/13/1995
• Status: Abandoned Application

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Ginter, Karl L., Weber, Robert P., Spahn, Francis J., Shear, Victor H., Van Wie, David M.
• Application Number:
  US12/938,211
• Publication Number:
  US 20110047077A1
• Time in Patent Office: Days
• US Class Current: 705/53
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/12 : Accounting
• CPC Class Codes: G06T 1/0021 : Image watermarking
• CPC Class Codes: G07F 9/026 : for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 : Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copyright
• CPC Class Codes: H04L 63/068 : using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/321 : involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/23476 : by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

An integrated, modular array of administrative and support services are provided for electronic commerce and electronic rights and transaction management. These administrative and support services supply a secure foundation for conducting transaction-related capabilities over electronic networks, and can also be adapted to the specific needs of electronic commerce value chains. In one embodiment a Distributed Commerce Utility having a secure, programmable, distributed architecture provides these administrative and support services. The Distributed Commerce Utility may comprise a number of Commerce Utility Systems. These Commerce Utility Systems provide a web of infrastructure support available to, and reusable by, the entire electronic community and/or many of its participants. Different support functions can be collected together in hierarchical and/or networked relationships to suit various business models or other objectives. Modular support functions can be combined in different arrays to form different Commerce Utility Systems for different design implementations and purposes.

Claims

1. A clearinghouse comprising:

means for receiving usage information from a first end user protected processing environment, the usage information relating to an end user'"'"'s use of protected electronic content in accordance with one or more rules associated with the protected electronic content;

means for determining an amount of payment due to one or more content providers based on the received usage information; and

means for causing one or more accounts associated with the one or more content providers to be credited for the end user'"'"'s use of the protected electronic content.

2. The clearinghouse of claim 1, further including means for causing a financial account associated with the end user to be debited for the end user'"'"'s use of the protected electronic content.

3. A system comprising:

a secure communications handler operable to facilitating communication with one or more end user electronic appliances over a telecommunications network;

a transaction processor operable to make a determination of amounts due to one or more providers of electronic content, the determination being made based at least in part on information regarding usage of electronic content at one or more end users'"'"' electronic appliances in accordance with one or more controls associated with the electronic content, the information regarding usage having been received from one or more end user electronic appliances via the secure communications handler; and

one or more interface blocks operable to communicate over a telecommunications network with one or more third party settlement services to facilitate crediting one or more financial accounts associated with the one or more providers of electronic content by the amounts determined by the transaction processor.

4. The system of claim 3, in which the secure communications handler is operable to facilitate real-time and/or asynchronous receipt of secure digital containers.

5. The system of claim 3, in which the secure communications handler is operable to facilitate transmission and/or receipt of secure digital containers having control information associated therewith, the control information specifying one or more permitted uses of the secure digital containers'"'"' contents.

6. The system of claim 3, in which the secure communications handler is operable to facilitate receipt of secure digital containers via electronic mail.

7. The system of claim 3, further comprising a protected processing environment including a secure processing unit.

8. The system of claim 3, further comprising:

a database storing information associated with credit limits and account information.

9. The system of claim 3, in which the third party settlement services comprise one or more credit card companies, automated clearinghouses, and/or banks.

10. The system of claim 3, in which the one or more interface blocks are further operable to communicate over a telecommunications network with one or more third party settlement services to facilitate debiting one or more financial accounts associated with the one or more end users.

11. A system comprising:

a plurality of end user electronic appliances, each of the end user electronic appliances comprising a protected processing environment and being operable to provide access to protected electronic content in accordance with one or more rules associated with the protected electronic content, and to collect information related to said access;

a financial clearinghouse, the financial clearinghouse being operable to receive information from said plurality of end user electronic appliances, the information regarding access to or other use of protected electronic content, and to effect a transfer of funds to one or more accounts associated with one or more providers of said protected electronic content; and

a communications network, the communications network being operable to facilitate communication between the financial clearinghouse and the plurality of end user electronic appliances.

12. A method comprising:

receiving content usage information at a clearinghouse, the content usage information having been generated as a consequence of an end user'"'"'s access to or other use of protected content, the protected content having control information securely associated therewith, the control information indicating one or more permitted uses of the protected content;

determining a first amount of payment due to a first holder of rights in at least a first part of the protected content;

determining a second amount of payment due to a second holder of rights of at least a second part of the protected content; and

effecting payment of the first amount to the first holder of rights and the second amount to the second holder of rights.

13. The method of claim 12, further comprising:

effecting debiting of the end user'"'"'s account by a third amount.

14. The method of claim 13, in which the third amount is greater than or equal to a sum of the first amount and the second amount.

15. The method of claim 13, in which the third amount is greater than or equal to the sum of the first amount, the second amount, and a fourth amount, wherein the fourth amount corresponds to an amount owed to an operator of the clearinghouse.

16. The method of claim 12, in which the content usage information comprises information relating to an end user'"'"'s aggregate use of protected content over an interval of time.

17. The method of claim 12, in which the protected content comprises multiple content items, and in which the first part comprises a first content item and the second part comprises a second, separate content item.

18. The method of claim 17, in which the first content item comprises at least one of digital audio, video, and/or textual content;

and in which the second content item comprises digital audio, video, and/or textual content.

19. The method of claim 12, in which the one or more permitted uses of the protected content comprise one or more of:

copying at least part of the protected content;

modifying at least part of the protected content;

viewing at least part of the protected content; and

printing at least part of the protected content.

20. A method comprising:

receiving a first piece of electronic content;

receiving first control information specifying one or more permitted uses of the first piece of protected electronic content;

using the first piece of protected electronic content in accordance with the first control information; and

sending first information to a remote computing system, the first information for use in authorizing the remote computing system to cause a financial account associated with a first holder of rights in the first piece of protected electronic content to be credited by a first amount.

21. The method of claim 20, in which the first control information is received separately from the first piece of protected electronic content.

22. The method of claim 20, in which the first control information specifies a time period during which the first piece of protected electronic content, or a group of electronic content of which the first piece of protected electronic content is a part, may be used.

23. The method of claim 20, further comprising:

using a second piece of protected electronic content in accordance with second control information associated with the second piece of protected electronic content; and

sending second information to the remote computing system, the second information for use in authorizing the remote computing system to cause a financial account associated with a holder of rights in the second piece of protected electronic content to be credited by a second amount.

24. The method of claim 20, in which the first information is also for use in authorizing the remote computing system to cause a financial account associated with a second holder of rights in the first piece of electronic content to be credited by a second amount.

25. The method of claim 20, in which the first piece of protected electronic content is encrypted, the method further comprising:

using a decryption key retrieved from a secure processing unit to decrypt the first piece of protected electronic content.

26. A method comprising:

receiving, over a telecommunications network, first auditing information, the first auditing information relating to a first user'"'"'s use of two or more digital properties, each of the two or more digital properties having one or more controls associated therewith;

using the first auditing information to determine, at least in part, (a) a first amount due to a first entity holding rights in at least one of the digital properties, and (b) a second amount due to a second entity holding rights in at least another one of the digital properties;

causing a financial account associated with a first entity to be credited by the first amount; and

causing a financial account associated with a second entity to be credited by the second amount.

27. The method of claim 26, in which the first auditing information is received from an electronic appliance associated with the first user, the electronic appliance including a protected processing environment for governing use of digital properties in accordance with one or more controls.

28. The method of claim 26, in which the first auditing information is received from a clearinghouse.

29. The method of claim 26, in which the first auditing information is received from a clearinghouse, the clearinghouse having received the first auditing information from an electronic appliance associated with the first user, the electronic appliance including a protected processing environment for governing use of digital properties in accordance with one or more controls.

30. The method of claim 26, in which the first auditing information comprises information collected by a protected processing environment of an electronic appliance operated by the first user, the protected processing environment being resistant to tampering by the first user, the first auditing information relating to the first user'"'"'s aggregate use of the digital properties over a period of time.

31. The method of claim 26, in which the first auditing information is received in a secure electronic container.

32. The method of claim 26, further comprising:

receiving, over the telecommunications network, second auditing information, the second auditing information relating to a second consumer'"'"'s use of at least one digital property having one or more controls associated therewith.

33. The method of claim 26, further comprising:

using the second auditing information to determine, at least in part, the first amount and the second amount.

34. The method of claim 26, further comprising:

causing a financial account associated with the first user to be debited by a third amount.

35. The method of claim 34, in which the third amount is greater than or equal to a sum of the first amount, the second amount, and a fourth amount credited to an operator of a clearinghouse.