Encryption system with transaction coded decryption key

• US 5,889,860 A
• Filed: 11/08/1996
• Issued: 03/30/1999
• Est. Priority Date: 11/08/1996
• Status: Expired due to Fees

• Current Assignee: Sunhawk Corporation Incorporated
• Original Assignee: Sunhawk Corporation Incorporated
• Inventors: Mills, Brent R., Eller, Marlin J.
• Primary Examiner(s): Hayes, Gail O.
• Assistant Examiner(s): Laufer, Pinchus M.
• Application Number:
  US08/744,430
• Time in Patent Office: 872 Days
• Field of Search: 380/4, 380/21, 380/49, 395/186, 395/187.01, 395/188.01, 705/26, 705/27
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07F 17/0014 for vending, access and use of specific services not covered anywhere else in G07F17/00 meter-controlled dispensing of liquid, gas or electricity G07F15/00
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G10H 1/0058 Transmission between separate instruments or between individual components of a musical system G10H1/0083 takes precedence
• CPC Class Codes: G10H 2240/026 File encryption of specific electrophonic music instrument file or stream formats, e.g. MIDI, note oriented formats, sound banks, wavetables digital rights management [DRM] G06F21/00; encryption H04L9/00
• CPC Class Codes: G10H 2240/305 Internet or TCP/IP protocol use for any electrophonic musical instrument data or musical parameter transmission purposes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 69/03 Protocol definition or specification protocol conformance testing H04L1/244
• CPC Class Codes: H04L 69/26 Special purpose or proprietary protocols or architectures network applications for proprietary or special purpose networking environments H04L67/12
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

The encryption secured computer system (10) includes a server (12) that communicates with clients (14-20) across a public network (21) using a novel transaction coded decryption key technology that discourages wrongful redistribution of protected information such as digital musical scores, and allows for tracking of infringing activity. In one implementation, the server (12) distributes access software and partially encrypted musical scores to clients upon request. A client can sample the partially encrypted scores prior to consummating a transaction. When a score is selected, the client enters payment information and is assigned a password that is specific to the client and transaction. The password functions as a decryption key to enable use of the musical score by the client employing the access software. Any subsequent wrongful redistribution of the musical score together with the decryption password can be traced due to client identifying information encoded into the password.

Claims

1. A method for use in monitoring distribution of copies of information items accessible through a public network to a plurality of network clients, said information items included in a database at a server of said public network, comprising the steps of:

for each request for an information item by a network client of the plurality of network clients;

assigning a password to the network client for uniquely encrypting and decrypting the information item, the password including an identifier for identifying the client;

uniquely encrypting at least a portion of said information item using a key-based encryption system and the password to produce a uniquely encrypted information portion, wherein said key-based encryption system requires entry of the password to decrypt said uniquely encrypted information portion;

transmitting the uniquely encrypted information portion to the network client; and

transmitting said password to the network client, wherein said password can be used to monitor distribution of said information item on a client-specific basis, wherein the step of transmitting said uniquely encrypted information portion to said client is prior to said step of transmitting said password.

2. A method as set forth in claim 1 wherein said information item comprises a digital musical score and said step of encrypting at least a portion of said information item comprises retaining a second portion of said digital musical score in an unencrypted form so as to allow for sampling of said digital musical score prior to decryption.

3. A method as set forth in claim 1 wherein said step of assigning said password comprises acquiring identification information regarding said client and encoding said password using said acquired identification information.

4. A method as set forth in claim 3 wherein said password comprises a password that is indexed to a client database including said acquired identification information.

5. A method as set forth in claim 3 wherein said password includes information for identifying client equipment.

6. A method as set forth in claim 3 wherein said password includes information for identifying a client user.

7. A method as set forth in claim 1, further comprising receiving payment/purchase information from the network client before transmitting the password to the network client.

8. A method as set forth in claim 1, further comprising the step of transmitting accessing software to the client, said accessing software being operative for allowing said client to access said information in said database.

9. A method as set forth in claim 8, further comprising the step of employing said accessing software to print an unencrypted copy of said uniquely encrypted information portion.

10. A method as set forth in claim 8 wherein said information item comprises a digital musical representation of a musical score, and said method further comprises the step of employing said accessing software to decrypt the uniquely encrypted information portion and play back said musical score.

11. A method as set forth in claim 8, further comprising the step of displaying said information.

12. A method as set forth in claim 1, further comprising the steps of storing said uniquely encrypted information portion in a first area of memory of the network client and storing said password in a second area of memory of the network client separate from said first area, wherein said uniquely encrypted information portion and said password can be separately accessed.

13. A method as set forth in claim 1, further comprising the steps of storing said uniquely encrypted information portion in a client memory in encrypted form, receiving a request to output said uniquely encrypted information portion, and decrypting said encrypted information in response to said output request.

14. A method as set forth in claim 1, further comprising the step of using said password to track subsequent redistribution of said uniquely encrypted information portion.

15. A method as set forth in claim 1, further comprising the steps of outputting an output copy of said uniquely encrypted information portion and embedding identification information in said output copy, wherein said identification information facilitates tracking of redistribution of said information item.