Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels

• US 6,618,484 B2
• Filed: 07/05/2002
• Issued: 09/09/2003
• Est. Priority Date: 08/12/1996
• Status: Expired due to Term

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Weber, Robert P., Van Wie, David M.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US10/189,231
• Publication Number:
  US 20030002673A1
• Time in Patent Office: 431 Days
• Field of Search: 380/210, 380/231, 380/232, 380/239, 380/240, 380/241, 380/242, 380/255, 380/54, 380/59, 382/100, 382/112, 382/115, 382/232, 713/168, 713/176, 713/189, 713/193, 713/194, 713/200, 705/50-79
• US Class Current: 380/232
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00159 Parental control systems
• CPC Class Codes: G11B 20/00188 involving measures which result in a restriction to authorised devices recording or reproducing contents to/from a record carrier
• CPC Class Codes: G11B 20/00195 using a device identifier associated with the player or recorder, e.g. serial numbers of playback apparatuses or MAC addresses
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00557 wherein further management data is encrypted, e.g. sector headers, TOC or the lead-in or lead-out areas
• CPC Class Codes: G11B 20/0071 involving a purchase action
• CPC Class Codes: G11B 20/00768 wherein copy control information is used, e.g. for indicating whether a content may be copied freely, no more, once, or never, by setting CGMS, SCMS, or CCI flags
• CPC Class Codes: G11B 20/0084 wherein the usage restriction can be expressed as a specific time or date
• CPC Class Codes: G11B 20/00884 involving a watermark, i.e. a barely perceptible transformation of the original data which can nevertheless be recognised by an algorithm
• CPC Class Codes: G11B 2020/10916 Seeking data on the record carrier for preparing an access to a specific address
• CPC Class Codes: G11B 2220/216 Rewritable discs
• CPC Class Codes: G11B 2220/218 Write-once discs
• CPC Class Codes: G11B 2220/2562 DVDs [digital versatile discs]; Digital video discs; MMCDs; HDCDs
• CPC Class Codes: G11B 2220/2575 DVD-RAMs
• CPC Class Codes: G11B 27/031 Electronic editing of digitised analogue information signals, e.g. audio or video signals
• CPC Class Codes: G11B 27/329 : on a disc [VTOC]
• CPC Class Codes: H04L 12/40104 : Security; Encryption; Content protection cryptographic protocols H04L9/00; protocols for network security H04L63/00
• CPC Class Codes: H04L 12/40117 : Interconnection of audio or video/imaging devices home automation networks H04L12/2803; bitstream network arrangements specially adapted for distribution of digital video signals H04N7/24
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04N 2005/91321 : the copy protection signal being a copy protection control signal, e.g. a record inhibit signal
• CPC Class Codes: H04N 2005/91328 : the copy protection signal being a copy management signal, e.g. a copy generation management signal [CGMS]
• CPC Class Codes: H04N 2005/91335 : the copy protection signal being a watermark
• CPC Class Codes: H04N 2005/91364 : the video signal being scrambled
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/42646 : for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4415 : using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/44236 : Monitoring of piracy processes or activities protecting computer platforms against harmful, malicious or unexpected behaviour or activities using intrusion detection and counter measures G06F21/566; computer virus detection and handling G06F21/56
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 5/765 : Interface circuits between an apparatus for recording and another apparatus
• CPC Class Codes: H04N 5/772 : the recording apparatus and the television camera being placed in the same enclosure
• CPC Class Codes: H04N 5/775 : between a recording apparatus and a television receiver
• CPC Class Codes: H04N 5/85 : on discs or drums
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/173 : with two-way working, e.g. subscriber sending a programme selection signal
• CPC Class Codes: H04N 9/8042 : involving data reduction

Abstract

Electronic steganographic techniques can be used to encode a rights management control signal onto an information signal carried over an insecure communications channel. Steganographic techniques ensure that the digital control information is substantially invisibly and substantially indelibly carried by the information signal. These techniques can provide end-to-end rights management protection of an information signal irrespective of transformations between analog and digital. An electronic appliance can recover the control information and use it for electronic rights management to provide compatibility with a Virtual Distribution Environment. In one example, the system encodes low data rate pointers within high bandwidth time periods of the content signal to improve overall control information read/seek times.

Claims

1. A computer-readable medium containing instructions, which when executed by an electronic appliance, are operable to cause the electronic appliance to perform actions including the following:

receiving

(1) a secure digital container including a file and information steganographically-encoded into the file, and

(2) a first control set made up of at least one control;

opening the secure digital container to retrieve at least a first portion of the file, the step of opening being at least in part controlled by the first control set; and

recording information relating to the opening of the secure digital container, the recording occurring at least in part under control of the first control set.

2. The computer-readable medium as in claim 1, in which:

the recorded information includes usage information relating to the date or time of the opening of the secure digital container.

3. The computer-readable medium as in claim 1, in which:

the recorded information includes usage information relating to the identity of a user of the electronic appliance.

4. The computer-readable medium as in claim 1, in which the file comprises said first portion and a second portion, the computer program package further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

receiving a second control set made up of at least one control, the second control set at least in part governing access to or other use of the second portion, but not governing the first portion.

5. The computer-readable medium as in claim 4, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

opening the secure digital container to retrieve at least the second portion of the file, the step of opening being at least in part controlled by the second control set.

6. The computer-readable medium as in claim 5, in which:

the second portion of the file contains a description of the first portion of the file.

7. The computer-readable medium as in claim 1, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

steganographically decoding the file to recover at least a portion of the steganographically-encoded information.

8. The computer-readable medium as in claim 1, in which:

the steganographically-encoded information includes information relating to the number of times the file may be accessed or used.

9. The computer-readable medium as in claim 1, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

transmitting at least a portion of the file to a second apparatus, the transmission being at least in part controlled by the first control set.

10. A computer-readable medium containing instructions, which when executed by an electronic appliance, are operable to cause the electronic appliance to perform actions including the following:

receiving

(1) a secure digital container including a file and information steganographically-encoded into the file, and

(2) a control set made up of at least one control;

opening the secure digital container to retrieve at least a portion of the file, the opening being at least in part controlled by the control set; and

transmitting information relating to the opening of the secure digital container to a remote site, the transmission occurring at least in part under control of the control set.

11. The computer-readable medium as in claim 10, in which:

the transmitted information includes usage information relating to the date or time of the opening of the secure digital container.

12. The computer-readable medium as in claim 10, in which:

the transmitted information includes usage information relating to the identity of a user of the electronic appliance.

13. The computer-readable medium as in claim 10, in which:

the control set includes a first control governing a first portion of the file and a second control governing a second portion of the file.

14. The computer-readable medium as in claim 10, in which:

the first file portion contains a description of at least a portion of the second file portion.

15. The computer-readable medium as in claim 10, in which:

the transmitted information includes usage information relating to the number of times the file has been accessed or used.

16. The computer-readable medium as in claim 10, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

steganographically decoding the file to recover at least a portion of the steganographically-encoded information.

17. The computer-readable medium as in claim 10, in which:

the steganographically-encoded information includes information relating to the number of times the file may be accessed or used.

18. The computer-readable medium as in claim 10, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

transmitting at least a portion of the file to a second electronic appliance, the transmission being at least in part controlled by the control set.

19. The computer-readable medium as in claim 18, in which:

the transmitted file portion includes at least a portion of the steganographically-encoded information.

20. A computer-readable medium containing instructions, which when executed by an electronic appliance, are operable to cause the electronic appliance to perform actions including the following:

receiving a first secure digital container including a file and information steganographically-encoded into the file,

receiving a first control set made up of at least one control; and

performing the following steps at least in part under the control of the first control set;

(a) locating at least a portion of the steganographically-encoded information;

(b) retrieving at least a portion of the steganographically-encoded information;

(c) evaluating at least a portion of the retrieved information;

(d) based at least in part on the evaluation, determining whether a user of the first apparatus may access or otherwise use at least a portion of the file; and

(e) based on the determination, authorizing or blocking use of the file.

21. The computer-readable medium as in claim 20, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

(f) if use of the file is authorized, transmitting at least a portion of the file to a second electronic appliance.

22. The computer-readable medium as in claim 20, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

(f) if use of the file is authorized, converting at least a portion of the file to a different format.

23. The computer-readable medium as in claim 20, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

(f) if use of the file is authorized, transmitting information relating to the use of the file to a remote location.

24. The computer-readable medium as in claim 23, in which:

the transmitted information includes usage information.

25. The computer-readable medium as in claim 24, in which:

the usage information includes information relating to relating to a user of the first apparatus.

26. The computer-readable medium as in claim 25, in which:

the usage information includes information relating to the date or time of the opening of the secure digital container.

27. The computer-readable medium as in claim 26, in which:

the steganographically-encoded information includes information relating to the number of times the file may be accessed or used.

28. The computer-readable medium as in claim 20, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

transmitting at least a portion of the file to a second electronic appliance, the transmission being at least in part controlled by the first control set.

29. The computer-readable medium as in claim 20, in which:

the steganographically-encoded information includes a second control set made up of at least one control.

30. A computer-readable medium containing instructions, which when executed by an electronic appliance, are operable to cause the electronic appliance to perform actions including the following:

receiving a signal including governed information and a steganographically-encoded first rule;

steganographically decoding the signal to recover the first rule;

receiving a second rule in a communication with a second electronic appliance; and

using the first rule or the second rule to govern an aspect of access to or other use of at least a portion of the governed information.

31. The computer-readable medium as in claim 30, in which:

the first rule specifies a first payment amount; and

the second rule specifies a second payment amount.

32. The computer-readable medium as in claim 30, in which:

the first rule, includes a requirement related to a digital certificate; and

the second rule relates to a payment method.

33. The computer-readable medium as in claim 32, in which:

the digital certificate includes information relating to the capabilities of a device.

34. The computer-readable medium as in claim 30, in which:

the first rule and the second rule each relate to the number of times at least a portion of the governed information may be used.

35. The computer-readable medium as in claim 30, in which:

the first rule relates to a payment; and

the second rule relates to permission for a user or class of users to use at least a portion of the governed information.

36. The computer-readable medium as in claim 30, in which:

the governed information includes a first portion and a second portion;

the first rule governs use of the first portion; and

the second rule governs use of the second portion.

37. The computer-readable medium as in claim 36, in which:

the first rule relates to the number of times the first portion may be used.

38. The computer-readable medium as in claim 36, in which:

the first rule relates to transmission of the first portion to a third electronic appliance.

39. The computer-readable medium as in claim 36, in which:

the first rule relates to conversion of the first portion from a first format to a second format.

40. A computer-readable medium containing instructions, which when executed by an electronic appliance, are operable to cause the electronic appliance to perform actions including the following:

receiving a signal including governed information and a steganographically-encoded first rule, the first rule requiring payment to a remote site prior to an access to or other use of at least a portion of the governed information;

initiating an attempt to access at least a portion of the governed information; and

communicating payment information to a remote second electronic appliance, the payment information relating to the access to the governed information portion.

41. The computer-readable medium as in claim 40, further including instructions that, if executed by the electronic appliance, are operable to cause the electronic appliance to perform actions comprising:

making an analog copy of at least a portion of the governed information; and

steganographically incorporating a second rule into the analog copy, the second rule at least in part governing use of the analog copy.

42. The computer-readable medium as in claim 40, in which:

the signal also includes a steganographically-encoded watermark.

43. The computer-readable medium as in claim 42, in which:

the watermark includes information relating to the identity of a user of the governed information.

44. The computer-readable medium as in claim 40, in which:

the signal also includes a steganographically-encoded copy indicator.

45. The computer-readable medium as in claim 40, in which:

the governed information includes a first portion and a second portion;

the first rule governs use of the first portion but not the second portion; and

the attempt to access and the payment both relate to use of the first portion.