System for controlling the distribution and use of digital works

• US 5,629,980 A
• Filed: 11/23/1994
• Issued: 05/13/1997
• Est. Priority Date: 11/23/1994
• Status: Expired due to Term

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Stefik, Mark J., Casey, Michalene M.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/344,042
• Time in Patent Office: 902 Days
• Field of Search: 380/4, 235/380
• US Class Current: 705/54
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1403 Architecture for metering, charging or billing
• CPC Class Codes: H04L 12/146 using digital cash
• CPC Class Codes: H04L 12/1485 Tariff-related aspects
• CPC Class Codes: H04L 12/1496 involving discounts
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A system for controlling use and distribution of digital works. In the present invention, the owner of a digital work attaches usage rights to that work. Usage rights are granted by the "owner" of a digital work to "buyers" of the digital work. The usage rights define how a digital work may be used and further distributed by the buyer. Each right has associated with it certain optional specifications which outline the conditions and fees upon which the right may be exercised. Digital works are stored in a repository. A repository will process each request to access a digital work by examining the corresponding usage rights. Digital work playback devices, coupled to the repository containing the work, are used to play, display or print the work. Access to digital works for the purposes of transporting between repositories (e.g. copying, borrowing or transfer) is carried out using a digital work transport protocol. Access to digital works for the purposes of replay by a digital work playback device (e.g. printing, displaying or executing) is carried out using a digital work playback protocol.

Claims

1. A system for secure distribution and control of digital works between repositories comprising:

means for creating usage rights, each instance of a usage right representing a specific instance of how a digital work may be used or distributed;

means for attaching a created set of usage rights to a digital work;

a communication medium for coupling repositories to enable exchange of repository transaction messages;

a plurality of general repositories for storing and securely exchanging digital works with attached usage rights, each of said general repositories comprising;

a storage means for storing digital works and their attached usage rights;

an identification certificate for indicating that the associated general repository is secure;

an external interface for removably coupling to said communications medium;

a session initiation transaction processing means for establishing a secure and trusted session with another repository, said session initiation transaction processing means using said identification certificate;

a usage transaction processing means having a requester mode of operation for generating usage repository transaction messages to request access to digital works stored in another general repository, said usage repository transaction message specifying a usage right, said usage transaction processing means further having a server mode of operation for determining if a request for access to a digital work stored in said storage means may be granted, said request being granted only if the usage right specified in said request is attached to said digital work; and

an input means coupled to said usage transaction processing means for enabling user created signals to cause generation of a usage repository transaction message to request access to digital works.

2. The system as recited in claim 1 further comprising a rendering system, said rendering system comprising:

a rendering repository for securely accessing digital works from a general repository, said rendering repository comprising;

a storage means for storing digital works and their attached usage rights;

an identification certificate, said identification certificate for indicating that the rendering repository is secure;

an external interface for removably coupling to said communications medium;

a session initiation transaction processing means for establishing a secure and trusted session with a general repository, said session initiation transaction processing means using said identification certificate;

a usage transaction processing means for generating usage repository transaction messages to request access to digital works stored in a general repository, said usage repository transaction message specifying a usage right;

an input means coupled to said usage transaction processing means for enabling user created signals to cause generation of usage repository transaction messages to request access to digital works;

a rendering device for rendering digital works.

3. The system as recited in claim 2 further comprising a master repository, said master repository comprising:

an identification certificate, said identification certificate for indicating that the rendering repository is secure;

an external interface for removably coupling to said communications medium;

a session initiation transaction processing means for establishing a secure and trusted session with a general repository, said session initiation transaction processing means using said identification certificate;

means for generating identification certificates for general repositories and rendering repositories.

4. The system as recited in claim 1 wherein said means for creating usage rights is further for the specification of different sets of usage rights to be attached to digital works when a corresponding usage right is exercised.

5. The system as recited in claim 4 wherein said usage transaction processing means in said server mode is further comprised of means for identifying and attaching a different set of usage rights to a distributed digital work responsive to a specification in an exercised usage right.

6. The system as recited in claim 1 wherein said usage rights grammar further defines means for specifying conditions which must be satisfied before a usage right may be exercised and said usage transaction processing means in said server mode is further comprised of means for determining if specified conditions for a usage right are satisfied before access is granted.

7. The system as recited in claim 1 wherein a first usage right enables copying of a digital work and specification of a revenue owner who is paid a fee whenever a copy of said digital work is made.

8. The system as recited in claim 7 wherein said first usage right further specifies a distributor license which must be in place prior to said copy being made and that subsequent distributions of said digital work will not have attached said first usage right.

27. The system as recited in claim 2 wherein said rendering device of said rendering system is a printing device.

28. The system as recited in claim 2 wherein said rendering device of said rendering system is a display device.

29. The system as recited in claim 2 wherein said rendering device of said rendering system is a video playback device.

30. The system as recited in claim 2 wherein said rendering device of said rendering system is an audio playback device.

31. The system as recited in claim 1 wherein said rendering system is for rendering multimedia digital works and is further comprised of one or more other rendering devices.

9. A method for controlling distribution and use of digital works comprising the steps of:

a) attaching a set of usage rights to a digital work, each of said usage rights defining a specific instance of how a digital work may be used or distributed, said usage right specifying one or more conditions which must be satisfied in order for said usage right to be exercised and a next set of usage rights to be attached to a distributed digital work;

b) storing said digital work and its attached usage rights in a first repository;

c) a second repository initiating a request to access said digital work in said first repository, said request identifying a usage right representing how said second repository desires to use said digital work;

d) said first repository receiving said request from said second repository;

e) said first repository determining if the identified usage right is attached to said digital work;

f) said first repository denying access to said digital work if said identified usage right is not attached to said digital work;

g) if said identified usage right is attached to said digital work, said first repository determining if conditions specified by said usage right are satisfied;

h) if said conditions are not satisfied, said first repository denying access to said digital work;

i) if said conditions are satisfied, said first repository attaching a next set of usage rights to said digital work, said next set of usage rights specifying how said second repository may use and distribute said digital work; and

j) said first repository transmitting said digital work and said attached next set of usage rights to said second repository.

10. The method as recited in claim 9 wherein said step of a second repository initiating a request to access said digital work in said first repository is further comprised of the steps of:

c1) said second repository initiating establishment of a trusted session with said first repository;

c2) said first repository performing a set of registration transaction steps with said second repository, successful completion of said set of registration transaction steps indicating that said first repository is a trusted repository;

c3) said second repository performing said set of registration transaction steps with said first repository, successful completion of said set of registration transaction steps indicating that said second repository is a trusted repository;

c4) if said first repository and said second repository each successfully complete said set of registration steps, said first and second repository exchanging session encryption and decryption keys for secure transmission of subsequent communications between said first and second repository; and

c5) if said first repository or said second repository cannot successfully complete said set of registration transaction steps, terminating said session.

11. The method as recited in claim 10 wherein said one or more conditions specified by said usage right includes a security class condition, access conditions, copy count conditions, fee conditions and time restriction conditions and said step of said first repository determining if conditions specified by said usage right are satisfied is further comprised of the step of:

f1) said first repository determining if all specified security class conditions are satisfied;

f2) said first repository determining if all specified access conditions are satisfied;

f3) said first repository determining if all specified copy count conditions are satisfied;

f4) said first repository determining if all fee conditions are satisfied; and

f5) said first repository determining if all specified time restriction conditions are satisfied.

12. A system for controlling distribution and use of digital works comprising:

means for attaching usage rights to said digital work, said usage rights indicating how a recipient may use and subsequently distribute said digital work;

a communications medium for coupling repositories to enable distribution of digital works;

a plurality of repositories for managing exchange of digital works based on usage rights attached to said digital works, each of said plurality of repositories comprising;

a storage means for storing digital works and their attached usage rights;

a processor operating responsive to coded instructions;

a memory means coupled to said processor for storing coded instruction to enable said processor to operate in a first server mode for processing access requests to digital works and for attaching usage rights to digital works when transmitted to another of said plurality of repositories, a second requester mode for initiating requests to access digital works, and a session initiation mode for establishing a trusted session with another of said plurality of repositories over said communications medium;

a clock;

a repository interface for coupling to said communications medium.

13. The system as recited in claim 12 further comprising a plurality of rendering systems for rendering of digital works, each of said rendering systems comprising:

a repository for secure receipt of a digital work; and

a rendering device having means for converting digital works to signals suitable for rendering of said digital works.

14. The system as recited in claim 13 wherein said memory means further stores coded instructions for said processor in said first server mode of operation for examining usage rights attached to a digital work to determine if an access request can be granted.

15. The system as recited in claim 14 wherein said memory means further stores coded instruction for said processor in said first server mode of operation for updating a usage rights status for a digital work responsive to a granted access request.

16. The system as recited in claim 13 wherein said rendering device is an audiovisual device for rendering audiovisual works.

17. The system as recited in claim 13 wherein said rendering device is an audio device for rendering audio works.

18. The system as recited in claim 12 wherein each of said plurality of repositories is further comprised of an enclosure for housing said repository and further for providing physical integrity for said repository.

19. A method for secure access of digital works stored on a server repository, said digital works having associated therewith one or more usage rights for specifying how said digital work may be used or distributed, said method comprising the steps of:

a) a requesting repository performing a first registration transaction with a server repository, said first registration transaction for establishing to said server repository that said requesting repository is trustworthy;

b) concurrently with step a), said server repository responding with a second registration transaction, said second registration transaction for establishing to said requesting repository that said server repository is trustworthy;

c) if either said first registration transaction or said second registration transaction fails, said server repository denying access to said digital work;

d) if said first registration transaction and said second registration transaction are successful, said requesting repository initiating a usage transaction with respect to a digital work stored in said server repository, said usage transaction indicating a request to access a digital work and specifying a particular usage right;

e) determining if said usage transaction may be completed by comparing said particular usage right specified in said usage transaction and usage rights associated with said digital work;

f) if said particular usage right is not one of said usage rights associated with said digital work, denying access to said digital work; and

g) if said particular usage right is one of said usage rights associated with said digital work, granting access to said digital work and performing usage transaction steps associated with said particular usage right.

20. The method as recited in claim 19 wherein said step of a requesting repository performing a first registration transaction with a server repository is further comprised of the steps of:

a1) said requesting repository transmitting a registration message to said server repository, said registration message containing information identifying said requesting repository;

a2) said server repository verifying the identity of said requesting repository; and

a3) if said requesting repository identification cannot be verified, denying access to said digital work.

21. The method as recited in claim 20 wherein said step of a requesting repository performing a first registration transaction with a server repository is further comprised of the steps of:

a4) checking the identification information from said requesting repository against a hotlist of compromised repositories; and

a5) if said requesting repository identification information is on said hotlist, denying access to said digital work.

22. The method as recited in claim 21 wherein said step of said server repository responding with a second registration transaction is further comprised of the steps of:

b1) said server repository transmitting a registration message to said requesting repository, said registration message containing information identifying said server repository;

b2) said requesting repository verifying the identity of said server repository; and

b3) if said server repository identification cannot be verified, denying access to said digital work.

23. The method as recited in claim 22 wherein said step of a server repository performing a first registration transaction with a requesting repository is further comprised of the steps of:

b4) checking the identification information from said server repository against a hotlist of compromised repositories; and

b5) if said server repository identification information is on said hotlist, denying access to said digital work.

24. The method as recited in claim 23 wherein said step of a requesting repository performing a first registration transaction with a server repository is further comprised of the steps of:

a6) said requesting repository generating a first session key pair, a first key of said first session key pair for said requesting repository to encrypt subsequent messages to said sever repository and a second key of said first session key pair for said server repository to decrypt subsequent messages from said requesting repository; and

a7) said requesting repository transmitting said second key of said first session key pair to said server repository.

25. The method as recited in claim 24 wherein said step of a server repository responding with a second registration transaction is further comprised of the steps of:

b6) said server repository generating a second session key pair, a first key of said second session key pair for said server repository to encrypt subsequent messages to said requesting repository and a second key of said second session key pair for said requesting repository to decrypt subsequent messages from said server repository; and

b7) said server repository transmitting said second key of said second session key pair to said requesting repository.

26. The method as recited in claim 25 further comprising the step of said requesting repository and said server repository synchronizing respective clocks.