Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels

• US 6,240,185 B1
• Filed: 02/10/1999
• Issued: 05/29/2001
• Est. Priority Date: 08/12/1996
• Status: Expired due to Term

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Weber, Robert P., Van Wie, David M.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US09/247,328
• Time in Patent Office: 839 Days
• Field of Search: 705/26, 705/30, 705/35, 705/39-44, 705/50, 705/51, 705/55-59, 705/52-54, 705/64, 705/76, 380/3, 380/4, 380/5, 380/9, 380/23, 380/24, 380/25, 380/49, 380/50, 380/54, 380/59, 380/201, 380/202, 380/203, 380/210, 380/221, 380/223, 380/227-234, 380/239, 380/241, 380/242 , 380/205-209, 382/100, 382/232, 382/233, 713/189, 713/193, 713/194, 713/200, 713/168, 713/176
• US Class Current: 380/232
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00159 Parental control systems
• CPC Class Codes: G11B 20/00188 involving measures which result in a restriction to authorised devices recording or reproducing contents to/from a record carrier
• CPC Class Codes: G11B 20/00195 using a device identifier associated with the player or recorder, e.g. serial numbers of playback apparatuses or MAC addresses
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00557 wherein further management data is encrypted, e.g. sector headers, TOC or the lead-in or lead-out areas
• CPC Class Codes: G11B 20/0071 involving a purchase action
• CPC Class Codes: G11B 20/00768 wherein copy control information is used, e.g. for indicating whether a content may be copied freely, no more, once, or never, by setting CGMS, SCMS, or CCI flags
• CPC Class Codes: G11B 20/0084 wherein the usage restriction can be expressed as a specific time or date
• CPC Class Codes: G11B 20/00884 involving a watermark, i.e. a barely perceptible transformation of the original data which can nevertheless be recognised by an algorithm
• CPC Class Codes: G11B 2020/10916 Seeking data on the record carrier for preparing an access to a specific address
• CPC Class Codes: G11B 2220/216 Rewritable discs
• CPC Class Codes: G11B 2220/218 Write-once discs
• CPC Class Codes: G11B 2220/2562 DVDs [digital versatile discs]; Digital video discs; MMCDs; HDCDs
• CPC Class Codes: G11B 2220/2575 DVD-RAMs
• CPC Class Codes: G11B 27/031 Electronic editing of digitised analogue information signals, e.g. audio or video signals
• CPC Class Codes: G11B 27/329 : on a disc [VTOC]
• CPC Class Codes: H04L 12/40104 : Security; Encryption; Content protection cryptographic protocols H04L9/00; protocols for network security H04L63/00
• CPC Class Codes: H04L 12/40117 : Interconnection of audio or video/imaging devices home automation networks H04L12/2803; bitstream network arrangements specially adapted for distribution of digital video signals H04N7/24
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04N 2005/91321 : the copy protection signal being a copy protection control signal, e.g. a record inhibit signal
• CPC Class Codes: H04N 2005/91328 : the copy protection signal being a copy management signal, e.g. a copy generation management signal [CGMS]
• CPC Class Codes: H04N 2005/91335 : the copy protection signal being a watermark
• CPC Class Codes: H04N 2005/91364 : the video signal being scrambled
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/42646 : for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4415 : using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/44236 : Monitoring of piracy processes or activities protecting computer platforms against harmful, malicious or unexpected behaviour or activities using intrusion detection and counter measures G06F21/566; computer virus detection and handling G06F21/56
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 5/765 : Interface circuits between an apparatus for recording and another apparatus
• CPC Class Codes: H04N 5/772 : the recording apparatus and the television camera being placed in the same enclosure
• CPC Class Codes: H04N 5/775 : between a recording apparatus and a television receiver
• CPC Class Codes: H04N 5/85 : on discs or drums
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/173 : with two-way working, e.g. subscriber sending a programme selection signal
• CPC Class Codes: H04N 9/8042 : involving data reduction

Abstract

Electronic steganographic techniques can be used to encode a rights management control signal onto an information signal carried over an insecure communications channel. Steganographic techniques ensure that the digital control information is substantially invisibly and substantially indelibly carried by the information signal. These techniques can provide end-to-end rights management protection of an information signal irrespective of transformations between analog and digital. An electronic appliance can recover the control information and use it for electronic rights management to provide compatibility with a Virtual Distribution Environment. In one example, the system encodes low data rate pointers within high bandwidth time periods of the content signal to improve overall control information read/seek times.

Claims

1. A method including the following:

at a first apparatus, receiving a first secure digital container including a controlled item, said controlled item including a file and information steganographically encoded into said file;

at said first apparatus, receiving a first control set made up of at least one control separately from said first secure digital container;

at said first apparatus, opening said first secure digital container; and

at said first apparatus, using said first control set to control at least one aspect of access to or use of at least a portion of said controlled item, including

determining user information related to the age of a user of said first apparatus;

determining whether said user'"'"'s age is equal to or greater than a threshold;

allowing said user to complete at least one access to or use of at least a portion of said controlled item if said user'"'"'s age is equal to or greater than said threshold; and

blocking said user from completion of at least one access to or use of at least a portion of said controlled item if said user'"'"'s age is less than said threshold.

2. A method including the following:

at a first apparatus, receiving a first secure digital container including a controlled item, said controlled item including a file and information steganographically encoded into said file;

at said first apparatus, receiving a first control set made up of at least one control separately from said first secure digital container;

at said first apparatus, opening said first secure digital container; and

at said first apparatus, using said first control set to control at least one aspect of access to or use of at least a portion of said controlled item, said use including

determining whether a conversion of at least a portion of said controlled item is authorized;

converting said portion of said controlled item if said conversion is authorized and storing said converted portion; and

failing to convert said portion if said conversion is not authorized.

3. A method as in claim 2, in which converting includes:

converting said controlled item portion from a first format to a second format.

4. A method as in claim 3, in which said first format comprises a digital format and said second format comprises an analog format.

5. A method as in claim 3, in which said first format comprises an analog format and said second format comprises a digital format.

6. A method including the following:

at a first apparatus, receiving a first secure digital container including a controlled item, said controlled item including a file and information steganographically encoded into said file;

at said first apparatus, receiving a first control set made up of at least one control separately from said first secure digital container;

at said first apparatus, opening said first secure digital container; and

at said first apparatus, using said first control set to control at least one aspect of access to or use of at least a portion of said controlled item, said use including;

gaining access to information regarding at least one aspect of a second apparatus;

determining whether transmitting said portion of said controlled item is authorized based at least in part on said second apparatus information; and

if transmitting is authorized, transmitting said portion of said controlled item from said first apparatus to said second apparatus.

7. A method as in claim 6, in which said second apparatus information includes information relating to the level of security, integrity, or copy protection present at second apparatus.

8. A method including the following:

at a first apparatus, receiving a first secure digital container including a controlled item, said controlled item including a file and information steganographically encoded into said file;

at said first apparatus, receiving a first control set made up of at least one control separately from said first secure digital container;

at said first apparatus, opening said first secure digital container; and

at said first apparatus, using said first control set to control at least one aspect of access to or use of at least a portion of said file, said use including directly or indirectly providing payment-related information to a second apparatus.

9. A method including:

at a first apparatus, receiving a first secure digital container including a controlled item, said controlled item including a file and information steganographically encoded into said file, said information including a first control set made up of at least one control;

at said first apparatus, retrieving at least a portion of said controlled item from said first secure digital container;

at said first apparatus, steganographically recovering said first control set from said controlled item; and

at said first apparatus, using said first control set to control at least one aspect of access to or use of at least a portion of said controlled item, said use including;

determining user information related to the age of a user of said apparatus;

determining whether said user'"'"'s age is equal to or greater than a threshold;

allowing said user to complete at least one access to or use of at least a portion of said controlled item if said user'"'"'s age is equal to or greater than said threshold; and

blocking said user from completion of at least one access to or use of at least a portion of said controlled item if said user'"'"'s age is less than said threshold.

10. A method including:

at a first apparatus, receiving a first secure digital container including a controlled item, said controlled item including a file and information steganographically encoded into said file, said information including a first control set made up of at least one control;

at said first apparatus, retrieving at least a portion of said controlled item from said first secure digital container;

at said first apparatus, steganographically recovering said first control set from said controlled item; and

at said first apparatus, using said first control set to control at least one aspect of access to or use of at least a portion of said controlled item, including

determining whether a conversion of at least a portion of said controlled item is authorized;

converting said portion of said controlled item if said conversion is authorized and storing said converted portion; and

failing to perform said conversion if said conversion is not authorized.

11. A method as in claim 10, in which converting includes:

converting at least a portion of said controlled item from a first format to a second format.

12. A method as in claim 11, in which said first format comprises a digital format and said second format comprises an analog format.

13. A method as in claim 11, in which said first format comprises an analog format and said second format comprises a digital format.

14. A method including:

at a first apparatus, receiving a first secure digital container including a controlled item, said controlled item including a file and information steganographically encoded into said file, said information including a first control set made up of at least one control;

at said first apparatus, retrieving at least a portion of said controlled item from said first secure digital container;

at said first apparatus, steganographically recovering said first control set from said controlled item; and

at said first apparatus, using said first control set to control at least one aspect of access to or use of at least a portion of said controlled item, including;

gaining access to information regarding at least one aspect of a second apparatus;

determining whether transmitting said portion of said controlled item to said second apparatus is authorized based at least in part on said second apparatus information; and

if transmission is authorized, transmitting said portion from said first apparatus to said second apparatus.

15. A method as in claim 14, in which said second apparatus information includes information relating to the level of security, integrity, or copy protection present at said second apparatus.

16. A method including:

at a first apparatus, receiving a first secure digital container including a controlled item, said controlled item including a file and information steganographically encoded into said file, said information including a first control set made up of at least one control;

at said first apparatus, retrieving at least a portion of said controlled item from said first secure digital container;

at said first apparatus, steganographically recovering said first control set from said controlled item; and

at said first apparatus, using said first control set to control at least one aspect of access to or use of at least a portion of said controlled item, including directly or indirectly providing payment-related information to a second apparatus.

17. An apparatus including the following elements:

a portable memory reader;

a processing unit;

a memory; and

a portable memory including;

a first secure digital container,

a controlled item and information steganographically encoded in said controlled item; and

control information relating to at least one aspect of control of said controlled item, including a control based at least in part based on information relating to the age of a user of said apparatus.

18. An apparatus including the following elements:

a portable memory reader;

a processing unit;

a memory; and

a portable memory including;

a first secure digital container,

a controlled item and information steganographically encoded in said controlled item; and

control information including at least one control at least in part controlling when at least a portion of said item is capable of being converted from a first format to a second format and of being stored in said second format.

19. An apparatus as in claim 18, in which said first format comprises a digital format and said second format comprises an analog format.

20. An apparatus as in claim 18, in which said first format comprises an analog format and said second format comprises a digital format.

21. A secure digital container including:

an encrypted controlled item comprising digital information;

first control information steganographically encoded into said controlled item;

second control information;

said first or second control information including information relating to the age of a user; and

a cryptographic key capable of being used to at least in part decrypt said controlled item.

22. A secure digital container including:

an encrypted controlled item comprising digital information;

first control information steganographically encoded into said controlled item;

second control information;

said first or second control information including at least one control at least in part controlling whether at least a portion of said item is capable of being converted from a first format to a second format and of being stored in said second format; and

a cryptographic key capable of being used to at least in part decrypt said controlled item.

23. A secure digital container as in claim 22, in which said first format comprises a digital format and said second format comprises an analog format.

24. A secure digital container as in claim 22, in which said first format comprises an analog format and said second format comprises a digital format.

25. A secure digital container including:

encrypted controlled contents comprising digital information;

a first digital control of a first entity, said first digital control controlling at least one aspect of access to or use of at least a portion of said controlled contents;

a second digital control of a second entity different from said first entity, said second digital control controlling at least one aspect of access to or use of at least a portion of said controlled contents;

said first or second digital controls including at least one control based at least in part on information relating to the age of a user; and

information steganographically encoded in said controlled contents.

26. A secure digital container including:

encrypted controlled contents comprising digital information;

a first digital control of a first entity, said first digital control controlling at least one aspect of access to or use of at least a portion of said controlled contents;

a second digital control of a second entity different from said first entity, said second digital control controlling at least one aspect of access to or use of at least a portion of said controlled contents;

said first or second digital controls including at least one control at least in part controlling whether at least a portion of said item is capable of being converted from a first format to a second format and of being stored in said second format; and

information steganographicalIV encoded in said controlled contents.

27. A secure digital container as in claim 26, in which said first format comprises a digital format and said second format comprises an analog format.

28. A secure digital container as in claim 26, in which said first format comprises an analog format and said second format comprises a digital format.

29. A secure digital container including:

a controlled item comprising digital information, said controlled item being at least in part encrypted;

a first control steganographically encoded into at least a portion of said controlled item, said first control controlling at least one aspect of access to or use of at least a portion of said controlled item;

a second control controlling at least one aspect of access to or use of at least a portion of said controlled item;

said second control being different from said first control;

said first or second controls including at least one control based at least in part on information relating to the age of a user of said apparatus.

30. A secure digital container including:

a controlled item comprising digital information, said controlled item being at least in part encrypted;

a first control steganographically encoded into at least a portion said controlled item, said first control controlling at least one aspect of access to or use of at least a portion of said controlled item;

a second control controlling at least one aspect of access to or use of at least a portion of said controlled item;

said second control being different from said first control

said first or second controls including at least one control at least in part controlling whether at least a portion of said item is capable of being converted from a first format to a second format and of being stored in said second format.

31. A secure digital container as in claim 30, in which said first format comprises a digital format and said second format comprises an analog format.

32. A secure digital container as in claim 30, in which said first format comprises an analog format and said second format comprises a digital format.