CONTENT BINDING AT FIRST ACCESS

• US 20110119767A1
• Filed: 11/16/2009
• Published: 05/19/2011
• Est. Priority Date: 11/16/2009
• Status: Active Grant

• Current Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Original Assignee: Sandisk Technologies Incorporated (Western Digital Corporation)
• Inventors: Tanik, Haluk Kent, Rasizade, Oktay, Jogand-Coulomb, Fabrice
• Granted Patent: US 8,752,193 B2
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]

Abstract

A method and system of binding content at first access is disclosed. A non-volatile storage device may provide a content access script and a content binding script in order to access protected content. An accessing application may attempt to access the protected content by executing a content access script. The accessing application must have permission to access and execute the content access script. If the accessing application cannot access or execute the content access script, the accessing application may access and execute the content binding script. The content binding script contains instructions that enable the accessing application to successfully execute the content access script. The content binding script, when executed, may disable itself from being executed again by moving critical information associated with the access to protected data. Thus, the content binding script may be executed once to enable an accessing application to successfully execute the content access script.

Claims

1. A method of accessing content in a non-volatile storage device, the method comprising:

in a processor executing an accessing application, the processor communicatively coupled to non-volatile storage device which storage device has (i) content and (ii) a content binding script associated with the content and including instructions to set access to the content, performing;

receiving a request to access the content in the non-volatile storage device;

attempting to access the content;

if the attempt to access the content is successful, accessing the content; and

if the attempt to access the content fails;

reading the content binding script from the non-volatile storage device; and

executing the content binding script, wherein the content binding script, when executed, sets the binding and permits access to the content.

2. The method of claim 1, wherein the content binding script, when executed, accesses the content.

3. The method of claim 1, further comprising:

contacting a entity if the content binding script fails to execute;

receiving an authorization from the entity; and

enabling the content binding script based on the received authorization.

4. The method of claim 1, wherein setting the binding comprises binding the content to a configuration of the accessing application.

5. The method of claim 1, wherein setting the binding further comprises setting the binding in accordance with the licensing terms.

6. A method of accessing content in a non-volatile storage device, the method comprising:

in a processor executing an accessing application, the processor communicatively coupled to non-volatile storage device which memory device has (i) content, (ii) a content access script associated with the content and including primary instructions to access the content, and (iii) a second script associated with the content and including second instructions to set access to the content, performing;

receiving a request to access the content in the non-volatile storage device;

reading the content access script from the non-volatile storage device;

attempting to execute the content access script;

if the content access script successfully executes, accessing the content with the content access script; and

if the content access script fails to execute;

reading the second script from the non-volatile storage device; and

executing the second script, wherein the second script, when executed, permits the content access script to access the content.

7. The method of claim 6, wherein the second script, when executed, results in binding the content to a configuration of the accessing application.

8. The method of claim 7, wherein the configuration of the accessing application comprises a value indicative of the identity of a network in communication with the processor.

9. The method of claim 7, wherein the configuration of the accessing application comprises a value indicative of the identity of a user of the processor.

10. The method of claim 7, wherein the configuration of the accessing application comprises an identification value of an accessing device comprising the processor.

11. The method of claim 7, wherein the configuration of the accessing application comprises a value indicative of the identity of a Subscriber Identity Module card in communication with the processor.

12. The method of claim 7, wherein the content comprises a file, and wherein the content is associated with a set of files stored in the non-volatile storage device.

13. The method of claim 8, wherein binding the content to the configuration of the accessing application comprises binding the set of files to the configuration of the accessing application.

14. The method of claim 6, wherein the second script, when executed, prevents an ability to re-execute successfully the second script.

15. The method of claim 14, wherein preventing the ability to re-execute successfully the second script comprises moving or deleting data required for successful re-execution of the second script.

16. The method of claim 14, further comprising restoring the ability to re-execute the second script after preventing the ability to re-execute.

17. The method of claim 16, wherein the content comprises an application, wherein the second script, when executed, installs the application, and wherein restoring the ability to re-execute the second script comprises uninstalling the application.

18. The method of claim 16, wherein restoring the ability to re-execute the second script comprises:

establishing a connection with a server;

receiving an authorization from the server; and

providing the authorization to the non-volatile storage device.

19. The method of claim 16, wherein restoring the ability to re-execute the second script comprises providing an activation code to the non-volatile storage device.

20. The method of claim 6, wherein the second script, when executed, updates a binding count value in the non-volatile storage device indicative of a number of times the second script has been executed, wherein executing the second script prevents an ability to re-execute the second script if the binding count value is equal to a predetermined value.

21. The method of claim 6, wherein the second script comprises a protected script.

22. A method of binding content to a content access account in a non-volatile storage device, the method comprising:

in a processor executing an accessing application that is communicatively coupled with a non-volatile storage device which has (i) content, (ii) a content access account, and (iii) a content binding script associated with the content and including instructions to associate the content access account with a permission to access the content, performing;

receiving a request to access the content using the content access account, wherein the content access account is not associated with the permission;

reading the content binding script from the non-volatile storage device; and

executing the content binding script, wherein the content binding script, when executed, associates the permission with the content access account and prevents an ability to re-execute successfully the content binding script.

23. The method of claim 22, further comprising:

after executing the content binding script, reading a content access script from the non-volatile storage device; and

executing the content access script, wherein the content access script, when executed, accesses the content in accordance with the request if the accessing application is authenticated to the content access account and authorized to access the content according to the permission.

24. The method of claim 23, wherein the accessing application comprises a configuration associated with the content access account.

25. The method of claim 24, wherein the configuration of the accessing application comprises a value indicative of the identity of a network in communication with the processor.

26. The method of claim 24, wherein the configuration of the accessing application comprises a value indicative of the identity of a user of the processor.

27. The method of claim 24, wherein the configuration of the accessing application comprises an identification value of an accessing device comprising the processor.

28. The method of claim 24, wherein the configuration of the accessing application comprises a value indicative of the identity of a Subscriber Identity Module card in communication with the processor.

29. The method of claim 22, wherein the permission comprises access to a content encryption key, and wherein the content stored on the non-volatile storage device comprises content encrypted with a content encryption key.

30. The method of claim 22, wherein the content comprises an application, the permission comprises an execute permission, and the request comprises a request to execute the application.

31. The method of claim 22, wherein reading the content binding script from the non-volatile storage device comprises:

authenticating to a content binding account in the non-volatile storage device; and

if authorized by a content binding script permission associated with the content binding account, reading the content binding script from the non-volatile storage device using the content binding account.

32. The method of claim 31, wherein executing the content binding script comprises removing an association between the content binding script permission and the content binding account.

33. The method of claim 31, wherein the content binding script permission comprises a content binding script encryption key.

34. The method of claim 33, wherein the content binding script comprises instructions encrypted with the content binding script encryption key.

35. The method of claim 22, further comprising restoring the ability to re-execute the content binding script after preventing the ability to re-execute successfully the content binding script.

36. The method of claim 22, wherein the content binding script, when executed, updates a binding count value in the non-volatile storage device indicative of a number of times the content binding script has been executed, wherein executing the content binding script prevents the ability to re-execute the content binding script if the binding count value is equal to a predetermined value.

37. The method of claim 36, further comprising restoring the ability to re-execute the content binding script after preventing the ability to successfully re-execute the content binding script.