Method of protecting electronically published materials using cryptographic protocols

• US 5,509,074 A
• Filed: 01/27/1994
• Issued: 04/16/1996
• Est. Priority Date: 01/27/1994
• Status: Expired due to Term

• Current Assignee: American Telephone & Telegraph Company (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Paul, Sanjoy, Schulzrinne, Henning G., Maxemchuk, Nicholas F., Choudhury, Abhijit K.
• Primary Examiner(s): Buczinski, Stephen C.
• Application Number:
  US08/187,580
• Time in Patent Office: 810 Days
• Field of Search: 380/23, 380/24, 380/25, 380/21
• US Class Current: 713/176
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A method for protecting electronically published documents involves operating a computer system and network for electronic publication of documents, and includes the steps of receiving requests for documents from users having computers with display devices or printers, including with the requests unique user identification for each of the user; authenticating the requests with a copyright server; using the copyright server to direct a document server to act upon proper authentication of each request; using the document server to create uniquely encoded, compressed and encrypted documents for each authenticated request, where the documents have unique encoding corresponding to each of the users, and forwarding the documents to each authenticated request user through the network to corresponding agents of each authenticated request user, with each of the agents being selected from display agents and printer agents; and decrypting and uncompressing the documents at each of the agents and making the documents available for use only in response to receiving correct secret keys provided by the authenticated request user to the agents.

Claims

1. A method of protecting electronically published documents, which comprises the step of:

operating a computer system, including a copyright server and a document server connected thereto, and a network for electronic publication of documents stored in the document server, and including therein the steps of;

a.) receiving requests for documents from a plurality of users having computers with display devices or printers, said computers being connected by said network to said computer system, said requests including unique user identification for each of said plurality of users;

b.) authenticating said requests from said plurality of users with the copyright server;

c.) using said copyright server to direct the document server to act upon proper authentication of each request;

d.) in response to direction from said copyright server, using the document server to create encrypted documents from an encoded document along with a unique identification for each authenticated request and forwarding said documents to each authenticated request user through said network to corresponding agents located at each authenticated request user, each of said agents being selected from display agents and printer agents;

e.) encoding a requested document as an encoded document using the document server so that each encoded document created is uniquely encoded based upon said unique identification; and

,

f.) decrypting said documents at each of said agents and making said documents available for use only in response to receiving correct secret keys provided by said authenticated request user to said agents.

2. The method of claim 1 wherein said document server also compresses said documents and said agents uncompress said documents in response to receiving a correct secret key provided by said authenticated request user.

3. The method of claim 1 wherein said agents are pre-installed as software into each of said plurality of users'"'"' computers.

4. The method of claim 1 wherein said agents are software programs which are transmitted to said plurality of users only after requests have been authenticated.

5. The method of claim 1 wherein said agents are pre-installed as computerware selected from hardware and firmware into user hardware selected from display devices and printers.

6. The method of claim 1 wherein each of said agents has a unique internal code corresponding to its user.

7. The method of claim 1 wherein each of said agents is capable of decrypting only a single, uniquely encoded version of documents published.

8. The method of claim 3 wherein each of said agents is capable of decrypting only a single, uniquely encoded version of documents published.

9. The method of claim 5 wherein each of said agents is capable of decrypting only a single, uniquely encoded version of documents published.

10. The method of claim 1 wherein said plurality of users have the same agents that uses an algorithm that derives a key from a system identifier to allow decryption and display in subsequent response to a unique, correct user secret key.

11. The method of claim 1 wherein said plurality of users receive agents with each document forwarded, all such agents being the same for a given document and different from publication to publication.

12. The method of claim 1 wherein said plurality of users receive agents with each document forwarded, all such agents being different from one another.

13. The method of claim 1 wherein said documents are uniquely encoded by the document server.

14. The method of claim 1 wherein said documents are uniquely encoded after being forwarded to each authenticated request user.

15. A method of protecting electronically published documents, which comprises the step of:

operating a computer system, including a copyright server and a document server connected thereto, and a network for electronic publication of documents stored in the document server and including therein, the steps of;

a.) receiving requests for documents from a plurality of users having computers with display devices or printers, said computers being connected by said network to said computer system, said requests including unique user identification for each of said plurality of users;

b.) authenticating said requests from said plurality of users with the copyright server;

c.) using said copyright server to direct the document server to act upon proper authentication of each request;

d.) in response to direction from said copyright server, using the document server to create compressed and encrypted documents from encoded documents for each authenticated request, and forwarding said documents to each authenticated request user through said network to corresponding agents located at each authenticated request user, each of said agents being selected from display agents and printer agents;

e.) encoding a requested document as an encoded document using the document server so that each encoded document created is uniquely encoded with encoding corresponding to each of said plurality of users; and

,

f.) decrypting and uncompressing said documents at each of said agents and making said documents available for use only in response to receiving correct secret keys provided by said authenticated request user to said agents.

16. The method of claim 15 wherein said agents are pre-installed as software into each of said plurality of users'"'"' computers.

17. The method of claim 15 wherein said agents are software programs which are transmitted to said plurality of users only after requests have been authenticated.

18. The method of claim 15 wherein said agents are pre-installed as computerware selected from hardware and firmware, into user hardware selected from display devices and printers.

19. The method of claim 15 wherein each of said agents has a unique internal code corresponding to its user.

20. The method of claim 15 wherein each of said agents is capable of decrypting only a single, uniquely encoded version of documents published.

21. The method of claim 15 wherein said agents are pre-installed as firmware into user hardware selected from display devices and printers, and wherein each of said agents is capable of decrypting only a single, uniquely encoded version of documents published.

22. The method of claim 15 wherein said documents are uniquely encoded by the document server.

23. The method of claim 15 wherein said documents are uniquely encoded after being forwarded to each authenticated request user.

24. An apparatus comprising:

a plurality of user computers associated with a respective users for transmitting a request for a document, with each request including unique user identification;

a copyright server operatively connected to the plurality of user computers for storing a directory of identifying information of each respective user, for receiving and authenticating a request from an authenticated request user, and for generating a message upon authentication of the request;

a document server for storing a plurality of documents in electronic form, for encoding a requested document to be uniquely encoded based upon a unique request identification, for encrypting a requested document along with a unique request identification for each authenticated request, and for forwarding the encrypted documents to each authenticated request user via a corresponding agent; and

a plurality of agents, each agent associated with a user computer for decrypting the encrypted document and, responsive to a correct secret key from an authenticated request user, for providing the decrypted document to the authenticated request user.

25. The apparatus of claim 24 further comprising:

a network for operatively connecting the plurality of user computers to the copyright server and the document server.