Apparatus and method for data capsule generation

• US 6,336,189 B1
• Filed: 07/06/1998
• Issued: 01/01/2002
• Est. Priority Date: 07/10/1997
• Status: Expired due to Term

• Current Assignee: Fuji Xerox Company Limited (Fujifilm Holdings Corporation)
• Original Assignee: Fuji Xerox Company Limited (Fujifilm Holdings Corporation)
• Inventors: Takeda, Koji, Kigo, Kenichiro, Saito, Kazuo
• Primary Examiner(s): Beausoleil, Robert
• Assistant Examiner(s): Bonzo, Bryce P.
• Application Number:
  US09/110,270
• Time in Patent Office: 1,275 Days
• Field of Search: 713/200, 713/164, 713/167, 713/171, 713/193, 713/176, 713/181, 713/183
• US Class Current: 726/2
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

A data capsule comprises an encrypted data hold means which holds an encrypted version of data which is provided for use, a verification means which communicates with an external proving device to get proof data generated by it and verifies the legitimacy of the proof data, a usage control means which enables the use of the data based on the verification result provided by the verification means, and a decryption means which decrypts the data held by the data hold means. The data is decrypted for use in response to the successful verification of the proof data from the proving device.

Claims

1. A data capsule comprising:

data;

verification means for verifying a verification result by a one-way function from proof data generated and sent by a proving device external to the data capsule, wherein the one-way function generates values by using a random number generated for each verification result; and

usage control means for controlling use of the data based on the verification result provided by the verification means.

2. A data capsule comprising:

data;

verification means for verifying a verification result from authentication data generated by the verification means and sent to a proving device external to the data capsule, wherein the proving device generates and sends proof data based on the received authentication data to the verification means to provide a verification result, wherein the authentication data is generated by using values of an encrypted decryption key, a public key and a random number generated for each instance of sending verification data to an external proving device; and

usage control means that control use of the data based on the verification result provided by the verification means.

3. The data capsule according to claim 2, wherein the proof data generated by said proving device is a key for decrypting said encrypted data or data for generating the key, said decryption means decrypting the data by using the proof data.

4. The data capsule according to claim 3, wherein the authentication data generated by said verification means is a key for decrypting the encrypted data or data for generating the key, said proving device decrypts said encrypted key or data for generating the key.

5. The data capsule according to claim 2, wherein said data is a program, and said usage control means executes said program or a partial function of said program based on a verification result provided by the verification means.

6. The data capsule according to claim 5, wherein an executable portion of the program is encrypted, further comprising:

decryption means for decrypting the encrypted executable portion of the program based on the verification result provided by the verification means; and

load means for loading the program including the decrypted executable portion of the program into a memory for execution.

7. The data capsule according to claim 5, wherein an executable portion of the program is encrypted and is capable of loading to the memory by the load means, and based on a verification result provided by the verification means, the load means loads the program including the encrypted executable portion of the program into the memory where the decryption means decrypts the encrypted executable portion of the program based on the verification result provided by the verification means for program execution.

8. The data capsule according to claim 5, wherein at least one section of a unit function of the program is encrypted and is capable of loading to the memory by the load means, and based on a verification result provided by the verification means, the load means loads the program including the encrypted at least one section of a unit of the program into the memory where the decryption means decrypts the at least one section of a unit of the program based on the verification result provided by the verification means for program execution.

9. The data capsule according to claim 2, wherein said data comprises video information, audio information, or animation video information, and said usage control means implements a display, playback of printing of said data based on the verification result provided by the verification means.

10. The data capsule according to claim 2, wherein the data is encrypted, further comprising decryption means for decrypting the encrypted data, wherein the decryption means is controlled by the usage control means when the proof data is verified.

11. The data capsule according to claim 2, wherein the verification means and the usage control means are programs or sub-programs, wherein the usage control means controls use of the data based on the verification result provided by the verification means.

12. The data capsule according to claim 2, wherein the data capsule is stored in an electronic, optical, or magnetic storage medium.