Secure document access system

• US 6,298,441 B1
• Filed: 07/14/1998
• Issued: 10/02/2001
• Est. Priority Date: 10/03/1994
• Status: Expired due to Term

• Current Assignee: Synamedia Limited
• Original Assignee: News Datacom Ltd (Cisco Systems, Inc.)
• Inventors: Smith, Perry, Zucker, Arnold, Fink, David, Bar-On, Gerson, Handelman, Doron, Kranc, Moshe
• Primary Examiner(s): Swann, Tod
• Assistant Examiner(s): Callahan, Paul E.
• Application Number:
  US09/115,489
• Time in Patent Office: 1,176 Days
• Field of Search: 705/55, 705/65, 705/67, 705/52, 705/64, 705/77, 713/185, 713/192, 380/229, 380/231, 380/232
• US Class Current: 713/185
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06K 7/0004 Hybrid readers
• CPC Class Codes: G06K 7/0034 the connector being capable of simultaneously receiving a plurality of cards in the same insertion slot
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/229 Hierarchy of users of accounts
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04N 1/00283 with a television apparatus
• CPC Class Codes: H04N 1/00299 with a television transmission apparatus, e.g. a videophone, a teletext system or a digital television system
• CPC Class Codes: H04N 1/2104 for one or a few pictures
• CPC Class Codes: H04N 1/2158 using a detachable storage unit
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/23614 Multiplexing of additional data and video streams arrangements for simultaneous broadcast of plural pieces of information H04H20/28
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/4181 : for conditional access
• CPC Class Codes: H04N 21/4184 : providing storage capabilities, e.g. memory stick
• CPC Class Codes: H04N 21/42646 : for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4348 : Demultiplexing of additional data and video streams
• CPC Class Codes: H04N 21/4353 : involving decryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4623 : Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/8126 : involving additional data, e.g. news, sports, stocks, weather forecasts
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 5/445 : for displaying additional information H04N5/50 takes precedence
• CPC Class Codes: H04N 7/163 : by receiver means only
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17318 : Direct or substantially direct transmission and handling of requests

Abstract

A method for downloading a document via a communications medium operatively associated with a communications interface, the method including receiving the document from the communications medium, placing an information storage smart card in removable operative association with the communications interface, and conditionally transmitting the document from the communications interface to the information storage smart card and storing the document in the information storage smart card. Other related methods and apparatus are also provided.

Claims

1. A method for downloading a document via a communications medium operatively associated with a communications interface, the method comprising:

receiving the document from the communications medium;

placing an information storage smart card in removable operative association with the communications interface; and

conditionally transmitting the document from the communications interface to the information storage smart card and storing the document in the information storage smart card,

wherein the storing comprises updating previously stored formatting information stored in the information storage smart card,

and the updating previously stored formatting information comprises at least one of the following;

updating decryption information; and

updating general formatting information.

2. A method according to claim 1 and wherein the conditionally transmitting step comprises comparing a price associated with the document to a spending limit and transmitting the document only if the price is in accordance with the spending limit.

3. A method according to claim 1 and wherein the document comprises at least one of the following:

text;

graphics;

sound;

an animated scene;

multimedia information;

hypertext information;

navigation information;

a map;

a book;

a periodical; and

a game.

4. A method according to claim 1 and also comprising the step of sending a message from the information storage smart card to an information storage facility, wherein the message comprises at least one of the following:

a request for information; and

status information.

5. A method according to claim 4 and wherein the message comprises an encrypted message.

6. A method according to claim 5 and wherein the message comprises a signed message.

7. A method according to claim 1 and also comprising placing an authorization smart card in removable operative association with the communications interface,

wherein the conditionally transmitting step comprises transmitting the document to the information storage smart card only if the authorization smart card is authorized to access the item of information.

8. A method according to claim 1 and wherein the information storage smart card is paired with the communications interface.

9. A method according to claim 1 and also comprising:

removing the information storage smart card from operative association with the communications interface;

placing the information storage smart card in operative association with an information access device; and

utilizing the document stored in the information storage smart card with the information access device.

10. A method according to claim 9 and wherein the information access device comprises at least one of the following:

a document display device;

a personal computer;

a personal communications device;

a personal display device;

a television;

a radio;

a sound system; and

a guidance system.

11. A method according to claim 9 and wherein the utilizing step comprises conditionally utilizing the document.

12. A method according to claim 9 and wherein the utilizing step comprises formatting the document.

13. A method according to claim 12 and wherein the formatting step comprises formatting based on formatting information stored in the information storage smart card.

14. A method according to claim 13 and wherein the formatting information is comprised in the document.

15. A method according to claim 13 and wherein the formatting information comprises decryption information.

16. A method according to claim 12 and wherein the formatting step comprises formatting based on formatting information stored in the information access device.

17. A method according to claim 16 and also comprising updating the formatting information based on formatting update information stored in the information storage smart card.

18. A method according to claim 1 and wherein the conditionally transmitting step comprises transmitting the information to the information storage smart card only if the information storage smart card is authorized for use in the communications interface.

19. A method according to claim 1 and wherein the conditionally transmitting step comprises transmitting the document to the information storage smart card only if the information storage smart card is authorized to receive the document.

20. A method according to claim 1 and wherein the conditionally transmitting step comprises transmitting the document to the information storage smart card upon external authorization.

21. A method according to claim 1 and wherein said document is associated with a geographical region, and

the conditionally transmitting step comprises transmitting the document to the information storage smart card if the information storage smart card is associated with the geographical region.

22. A method according to claim 1 and wherein said document is associated with a geographical region, and

the conditionally transmitting step comprises preventing transmission of the document to the information storage smart card if the information storage smart card is associated with the geographical region.

23. A method according to claim 22 and wherein the document comprises authorization information comprising information indicating whether the information storage smart card is authorized to use the document.

24. A method according to claim 23 and wherein the conditionally transmitting step comprises transmitting the information to the information storage smart card only if the information storage smart card is authorized to use the document in accordance with the authorization information.

25. A method according to claim 1 and wherein the updating step comprises at least one of the following:

replacing the previously stored information;

changing the previously stored information;

deleting the previously stored information; and

supplementing the previously stored information.

26. A method according to claim 2 and also comprising placing an auxiliary card in removable operative association with the information access device.

27. A method according to claim 26 and wherein the auxiliary card comprises an authorization card, and

the utilizing step comprises utilizing the document in the information storage smart card only if the authorization card is authorized to access the document.

28. A method according to claim 27 and wherein the document stored in the information storage smart card comprises a plurality of stored documents, and

the utilizing step comprises utilizing at least one of the plurality of stored documents only if the authorization card is authorized to access the at least one of the plurality of stored documents.

29. A method according to claim 28 and wherein the authorization card comprises an authorization smart card.

30. A method according to claim 28 and wherein the plurality of stored documents comprises a plurality of versions of a single document.

31. A method according to claim 30 and wherein each one of the plurality of versions is encrypted according to at least one encryption parameter which differs for each one of the plurality of versions.

32. A method according to claim 26 and wherein the auxiliary card comprises an authorization card, and

the utilizing step comprises utilizing the document stored in the information storage smart card only if the authorization card is authorized to access the document.

33. A method according to claim 1 and wherein the document comprises parental control information, and

the conditionally transmitting comprises transmitting only in accordance with the parental control information.

34. A method according to claim 33 and wherein the parental control information is associated with only a portion of the document, and

the conditionally transmitting step comprises transmitting the portion of the document only in accordance with the parental control information.

35. A method for downloading a document via a communications medium attached to a communications interface, the method comprising:

receiving the document from the communications medium;

placing an information storage smart card in removable operative association with the communications interface;

placing an auxiliary card in removable operative association with the communications interface;

transmitting the document from the communications interface to the information storage smart card and storing the information in the information storage smart card; and

utilizing the document stored in the information storage smart card,

wherein the storing comprises updating previously stored formatting information stored in the information storage smart card,

and the updating previously stored formatting information comprises at least one of the following;

updating decryption information; and

updating general formatting information.

36. A method for downloading a document via a communications medium attached to a communications interface, the method comprising:

receiving, via a communications network, an authorization to receive the document via the communications medium;

placing an information storage smart card in removable operative association with the communications interface;

receiving the document from the communications medium; and

conditionally transmitting the document, in accordance with the authorization, from the communications interface to the information smart card and storing the information in the information storage smart card,

wherein the storing comprises updating previously stored formatting information stored in the information storage smart card,

and the updating previously stored formatting information comprises at least one of the following;

updating decryption information; and

updating general formatting information.

37. A method according to claim 36 and wherein the step of receiving an authorization comprises performing an authentication method.

38. A method according to claim 37 and wherein the authentication method comprises a zero-knowledge authentication method.

39. A method according to claim 38 and wherein the zero-knowledge authentication method comprises a Fiat-Shamir authentication method.

40. A document downloading system for downloading a document via a communications medium operatively associated with a communications interface, the system comprising:

document receiving apparatus for receiving the document from the communications medium; and

a document transmission module adapted to receive an information storage smart card in removable operative association therewith and to conditionally transmit the document to the information storage smart card for storage therein,

wherein the storage in the information storage smart card comprises updating previously stored formatting information stored therein,

and the updating previously stored formatting information comprises at least one of the following;

updating decryption information; and

updating general formatting information.

41. A document downloading system for downloading a document via a communications medium attached to a communications interface, the system comprising:

document receiving apparatus for receiving the document from the communications medium;

a document transmission module adapted to receive an information storage smart card in removable operative association therewith and to transmit the document to the information storage smart card for storage therein;

an auxiliary card module adapted to receive an auxiliary card in removable operative association therewith; and

utilization apparatus for utilizing the document stored in the information storage smart card,

wherein the storage in the information storage smart card comprises updating previously stored formatting information stored therein,

and the updating previously stored formatting information comprises at least one of the following;

updating decryption information; and

updating general formatting information.

42. A document downloading system for downloading a document via a communications medium attached to a communications interface, the system comprising:

authorization apparatus for receiving, via a communications network, an authorization to receive the document via the communications medium; and

a document transmission module adapted to receive an information storage smart card in removable operative association therewith and to transmit the document, in accordance with the authorization, to the information storage smart card for storage therein,

wherein the storage in the information storage smart card comprises updating previously stored formatting information stored therein,

and the updating previously stored formatting information comprises at least one of the following;

updating decryption information; and

updating general formatting information.

43. A method for downloading a document via a communications medium operatively associated with a communications interface, the method comprising:

receiving the document from the communications medium;

placing an information storage smart card in removable operative association with the communications interface;

conditionally transmitting the document from the communications interface to the information storage smart card and storing the document in the information storage smart card, wherein the conditionally transmitting step comprises comparing a price associated with the document to a spending limit and transmitting the document only if the price is in accordance with the spending limit;

placing an auxiliary card comprising an authorization card in removable operative association with the information access device; and

utilizing the document in the information storage smart card only if the authorization card is authorized to access the document,

wherein the document stored in the information storage smart card comprises a plurality of stored documents, and

the utilizing step comprises utilizing at least one of the plurality of stored documents only if the authorization card is authorized to access the at least one of the plurality of stored documents, and

the plurality of stored documents comprises a plurality of versions of a single document, and

each one of the plurality of versions is encrypted according to at least one encryption parameter which differs for each one of the plurality of versions.

44. A method according to claim 43 and wherein the document comprises at least one of the following:

text;

graphics;

sound;

an animated scene;

multimedia information;

hypertext information;

navigation information;

a map;

a book;

a periodical; and

a game.

45. A method according to claim 43 and also comprising the step of sending a message from the information storage smart card to an information storage facility, wherein the message comprises at least one of the following:

a request for information; and

status information.

46. A method according to claim 45 and wherein the message comprises an encrypted message.

47. A method according to claim 46 and wherein the message comprises a signed message.

48. A method according to claim 43 and wherein the conditionally transmitting step comprises transmitting the document to the information storage smart card only if the authorization smart card is authorized to access the item of information.

49. A method according to claim 43 and wherein the information storage smart card is paired with the communications interface.

50. A method according to claim 43 and also comprising:

removing the information storage smart card from operative association with the communications interface;

placing the information storage smart card in operative association with an information access device; and

utilizing the document stored in the information storage smart card with the information access device.

51. A method according to claim 50 and wherein the information access device comprises at least one of the following:

a document display device;

a personal computer;

a personal communications device;

a personal display device;

a television;

a radio;

a sound system; and

a guidance system.

52. A method according to claim 50 and wherein the utilizing step comprises conditionally utilizing the document.

53. A method according to claim 50 and wherein the utilizing step comprises formatting the document.

54. A method according to claim 53 and wherein the formatting step comprises formatting based on formatting information stored in the information storage smart card.

55. A method according to claim 54 and wherein the formatting information is comprised in the document.

56. A method according to claim 54 and wherein the formatting information comprises decryption information.

57. A method according to claim 53 and wherein the formatting step comprises formatting based on formatting information stored in the information access device.

58. A method according to claim 57 and also comprising updating the formatting information based on formatting update information stored in the information storage smart card.

59. A method according to claim 43 and wherein the conditionally transmitting step comprises transmitting the information to the information storage smart card only if the information storage smart card is authorized for use in the communications interface.

60. A method according to claim 43 and wherein the conditionally transmitting step comprises transmitting the document to the information storage smart card only if the information storage smart card is authorized to receive the document.

61. A method according to claim 43 and wherein the conditionally transmitting step comprises transmitting the document to the information storage smart card upon external authorization.

62. A method according to claim 43 and wherein said document is associated with a geographical region, and

the conditionally transmitting step comprises transmitting the document to the information storage smart card if the information storage smart card is associated with the geographical region.

63. A method according to claim 43 and wherein said document is associated with a geographical region, and

the conditionally transmitting step comprises preventing transmission of the document to the information storage smart card if the information storage smart card is associated with the geographical region.

64. A method according to claim 63 and wherein the document comprises authorization information comprising information indicating whether the information storage smart card is authorized to use the document.

65. A method according to claim 64 and wherein the conditionally transmitting step comprises transmitting the information to the information storage smart card only if the information storage smart card is authorized to use the document in accordance with the authorization information.

66. A method according to claim 43 and wherein the storing comprises updating previously stored information stored in the information storage smart card.

67. A method according to claim 66 and wherein the updating step comprises at least one of the following:

replacing the previously stored information;

changing the previously stored information;

deleting the previously stored information; and

supplementing the previously stored information.

68. A method according to claim 66 and wherein the formatting step comprises at least one of the following:

updating decryption information; and

updating general formatting information.

69. A method according to claim 43 and wherein the authorization card comprises an authorization smart card.

70. A method according to claim 43 and wherein the document comprises parental control information, and

the conditionally transmitting comprises transmitting only in accordance with the parental control information.

71. A method according to claim 70 and wherein the parental control information is associated with only a portion of the document, and

the conditionally transmitting step comprises transmitting the portion of the document only in accordance with the parental control information.

72. A method for downloading a document via a communications medium operatively associated with a communications interface, the method comprising:

receiving the document from the communications medium;

placing an information storage smart card in removable operative association with the communications interface;

conditionally transmitting the document from the communications interface to the information storage smart card and storing the document in the information storage smart card;

removing the information storage smart card from operative association with the communications interface;

placing the information storage smart card in operative association with an information access device; and

utilizing the document stored in the information storage smart card with the information access device,

wherein the utilizing step comprises formatting the document, and

the formatting comprises formatting based on formatting information stored in the information storage smart card, and

the formatting information comprises decryption information.

73. A method for downloading a document via a communications medium operatively associated with a communications interface, the method comprising:

receiving the document from the communications medium;

placing an information storage smart card in removable operative association with the communications interface;

conditionally transmitting the document from the communications interface to the information storage smart card and storing the document in the information storage smart card;

removing the information storage smart card from operative association with the communications interface;

placing the information storage smart card in operative association with an information access device; and

utilizing the document stored in the information storage smart card with the information access device,

wherein the utilizing step comprises formatting the document, and

the formatting step comprises formatting based on formatting information stored in the information access device,

and the method also comprises;

updating the formatting information based on formatting update information stored in the information storage smart card.

74. A method for downloading a document via a communications medium operatively associated with a communications interface, the method comprising:

receiving the document from the communications medium;

placing an information storage smart card in removable operative association with the communications interface; and

conditionally transmitting the document from the communications interface to the information storage smart card and storing the document in the information storage smart card,

wherein said document is associated with a geographical region, and

the conditionally transmitting step comprises transmitting the document to the information storage smart card if the information storage smart card is associated with the geographical region.

75. A method according to claim 74 and wherein the document comprises authorization information comprising information indicating whether the information storage smart card is authorized to use the document.

76. A method according to claim 75 and wherein the conditionally transmitting step comprises transmitting the document to the information storage smart card only if the information storage smart card is authorized to use the document in accordance with the authorization information.

77. A method for downloading a document via a communications medium operatively associated with a communications interface, the method comprising:

receiving the document from the communications medium;

placing an information storage smart card in removable operative association with the communications interface; and

conditionally transmitting the document from the communications interface to the information storage smart card and storing the document in the information storage smart card,

wherein said document is associated with a geographical region, and

the conditionally transmitting step comprises preventing transmission of the document to the information storage smart card if the information storage smart card is associated with the geographical region.

78. A method according to claim 77 and wherein the document comprises authorization information comprising information indicating whether the information storage smart card is authorized to use the document.

79. A method according to claim 78 and wherein the conditionally transmitting step comprises transmitting the document to the information storage smart card only if the information storage smart card is authorized to use the document in accordance with the authorization information.

80. A method for downloading a document via a communications medium operatively associated with a communications interface, the method comprising:

receiving the document from the communications medium;

placing an information storage smart card in removable operative association with the communications interface; and

conditionally transmitting the document from the communications interface to the information storage smart card and storing the document in the information storage smart card,

wherein the document comprises parental control information, and

the conditionally transmitting comprises transmitting only in accordance with the parental control information.

81. A method according to claim 80 and wherein the parental control information is associated with only a portion of the document, and

the conditionally transmitting step comprises transmitting the portion of the document only in accordance with the parental control information.