System for controlling the distribution and use of digital works using digital tickets

• US 6,236,971 B1
• Filed: 11/10/1997
• Issued: 05/22/2001
• Est. Priority Date: 11/23/1994
• Status: Expired due to Term

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation), Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Pirolli, Peter L. T., Stefik, Mark J.
• Primary Examiner(s): Poinvil, Frantzy
• Application Number:
  US08/967,084
• Time in Patent Office: 1,289 Days
• Field of Search: 707/9, 707/10, 707/102, 707/200, 705/26, 705/27, 705/39, 705/1, 705/57, 705/59, 705/54, 380/232, 380/278, 380/279, 380/281
• US Class Current: 705/54
• CPC Class Codes: A61B 2017/0046 with a releasable handle; with handle and operating part separable
• CPC Class Codes: A61B 2034/301 for introducing or steering flexible instruments inserted into the body, e.g. catheters or endoscopes
• CPC Class Codes: A61B 2090/031 torque limiting
• CPC Class Codes: A61B 2090/376 using X-rays, e.g. fluoroscopy
• CPC Class Codes: A61B 34/30 Surgical robots
• CPC Class Codes: A61B 34/37 Master-slave robots A61B34/35 takes precedence
• CPC Class Codes: A61M 25/0113 Mechanical advancing means, e.g. catheter dispensers
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 10/101 Collaborative creation, e.g. joint development of products or services
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 50/184 : Intellectual property management
• CPC Class Codes: H04L 12/14 : Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1403 : Architecture for metering, charging or billing
• CPC Class Codes: H04L 12/146 : using digital cash
• CPC Class Codes: H04L 12/1485 : Tariff-related aspects
• CPC Class Codes: H04L 12/1496 : involving discounts
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 : Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 61/00 : Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/45 : Network directories; Name-to-address mapping
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 : using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/0807 : using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 63/104 : Grouping of entities
• CPC Class Codes: H04L 63/105 : Multiple levels of security
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3213 : using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: H04N 21/23412 : for generating or manipulating the scene composition of objects, e.g. MPEG-4 objects
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/26613 : for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/6332 : directed to client
• CPC Class Codes: H04N 21/6377 : directed to server one-way streaming services wherein the source is controlled by the destination H04L65/613
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 7/16 : Analogue secrecy systems; Analogue subscription systems
• CPC Class Codes: Y10S 707/99939 : Privileged access
• CPC Class Codes: Y10S 707/99945 : Object-oriented database structure processing

Abstract

A system for controlling the distribution and use of digital works using digital tickets. In the present invention, a “digital ticket” is used to entitle the ticket holder to exercise some usage right with respect to a digital work. Usage rights are used to define how a digital work may be used or distributed. Each usage right may specify a digital ticket which must be present before the right may be exercised. Digital works are stored in repositories which enforce a digital works usage rights. Each repository has a “generic ticket agent” which punches tickets. In some instances only the generic ticket agent is necessary. In other instances, punching by a “special ticket agent” residing on another repository may be needed.

Claims

1. A method for controlling access to digital works in a network of computer based systems comprising the steps of:

a) for a digital work requiring controlled access, attaching a plurality of usage rights to said digital work;

b) for an associated one of said attached plurality of usage rights, specifying that a digital ticket must be possessed by a requesting repository as a condition for performance of said corresponding usage right to be granted;

c) storing said digital work and attached usage rights in a first repository;

d) creating and storing said digital ticket in a second repository, said digital ticket itself being an instance of a digital work;

e) a third repository obtaining a copy of said digital ticket from said second repository;

f) said third repository transmitting a request to access said digital work to said first repository, said request for access specifying said associated one of said plurality of usage rights that specifies said digital ticket;

g) said first repository querying said third repository for said digital ticket;

h) said third repository confirming possession of said digital ticket to said first repository; and

i) said first repository validating said third repository possesses said digital ticket and transmitting said digital work to said third repository.

2. The method as recited in claim 1 further comprising the step of:

j) said first repository punching said digital ticket to indicate access by said third repository.

3. The method as recited as in claim 1 further comprising the step of said third repository copying said digital ticket from said second repository for a fee.

4. The method as recited in claim 3 wherein said digital ticket is comprised of a first timestamp part for storing a time when said digital ticket was copied and a second timestamp part for storing a timestamp when said digital ticket was punched and said step of copying said digital ticket from said second repository for a fee is further comprised of the step of said second repository marking said first timestamp part of said digital ticket with a copy timestamp indicating the time and date the copy of said digital ticket was made.

5. The method as recited in claim 4 further comprising the step of said first repository marking said second timestamp part of said digital ticket with a punch timestamp indicating the time and date the digital ticket was punched.

6. The method as recited in claim 5 wherein said method is further comprised of the step of said third repository refreshing said digital ticket to enable a subsequent reuse.

7. The method as recited in claim 6 therein said step of said third repository refreshing said digital ticket to enable a subsequent reuse is further comprised of the steps of:

k) said third repository making a copy of said digital ticket for a fee; and

l) said third repository marking said first timestamp part of said digital ticket with a copy timestamp indicating the time and date the digital ticket was refreshed.

8. In a computer controlled system for the distribution of digital works, a method for controlling the access to said digital works, said method comprising the steps of:

a) creating a digital work and a digital ticket, said digital ticket being an instance of a digital work;

b) defining a plurality of usage rights for said digital work, wherein a first of said usage rights specifies said digital ticket and a special ticket agent for punching said digital ticket;

c) storing said digital work in a first repository;

d) distributing said digital ticket to a second repository;

e) said second repository transmitting a request to access said digital work to said first repository, said request specifying said first usage right;

f) said first repository determining if said second repository has said digital ticket;

g) said second repository presenting said digital ticket to said first repository;

h) said first repository presenting said digital ticket to said special ticket agent;

i) said special ticket agent determining if said digital ticket is valid;

j) if said digital ticket is invalid, said special ticket agent causing said request to access to be denied;

k) if said digital ticket is valid, said special ticket agent punching said digital ticket; and

l) said first repository granting access to said digital work by said second repository.

9. In a computer controlled system for the distribution of digital works, a method for distribution of upgrades to said digital works, said method comprising the steps of:

a) creating a digital ticket, said digital ticket for permitting copying of an upgrade digital work, said digital ticket being an instance of a digital work;

b) distributing said digital ticket and a corresponding digital work to a first repository for a fee;

c) creating said upgrade digital work, said upgrade digital work having a copying right for permitting copying of said upgrade digital work to possessors of said digital ticket;

d) storing said upgrade digital work in a second repository;

e) said first repository transmitting a request to copy said upgrade digital work to said second repository;

f) said second repository determining if said first repository has said digital ticket;

g) said first repository presenting said digital ticket to said second repository;

h) said second repository determining if said digital ticket is valid;

i) if said digital ticket is invalid, said second repository causing said request to copy to be denied;

j) if said digital ticket is valid, said second repository punching said digital ticket; and

k) said second repository transmitting said upgrade digital work requested by said first repository.