Key encryption using a client-unique additional key for fraud prevention

• US 6,683,954 B1
• Filed: 10/23/1999
• Issued: 01/27/2004
• Est. Priority Date: 10/23/1999
• Status: Expired due to Fees

• Current Assignee: Irdeto USA Incorporated (MultiChoice Group Ltd.)
• Original Assignee: LockStream Corp. (MultiChoice Group Ltd.)
• Inventors: Searle, Scott
• Primary Examiner(s): Decady, Albert
• Assistant Examiner(s): JACK, TODD M
• Application Number:
  US09/425,861
• Time in Patent Office: 1,557 Days
• Field of Search: 380/44, 380/29, 380/30, 380/281, 380/284, 705/193, 713/176, 713/177
• US Class Current: 380/30
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G11B 20/00826 wherein a spoiler signal is added to degrade the signal quality
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

Encryption of a key using another key that is unique and particular to a given client is disclosed. In one embodiment, a computer-implemented method determines a first key that is unique and particular to the client, without user intervention. In varying embodiments, this key can be one or more of: a processor identifier, a network card address, an IP address, a checksum of a component, a serial number of a hard disk drive, a number of cylinders of a hard disk drive, and a user name in a registry file. At least a second key that provides access to information, such as multimedia information, is encrypted with this first key. The second key as encrypted with the first key may be stored on a storage.

Claims

1. A computer-implemented method for a client, comprising:

determining a first key unique and particular to the client without user intervention;

encrypting at least a second key with the first key;

storing the second key as encrypted with the first key on a storage;

retrieving the second key as encrypted with the first key from the storage;

redetermining the first key;

decrypting the second key with the first key as redetermined;

determining whether decrypting the second key was successful; and

upon determining that decrypting the second key was unsuccessful, indicating so to the user and requesting that the user reregister the first key with a registering authority.

2. The method of claim 1, wherein the first key comprises at least one of:

a processor identifier, a network card address, an IP address, a checksum of a component, a serial number of a hard disk drive, a number of cylinders of a hard disk drive, and a user name in a registry file.

3. A computer-implemented method for a client comprising:

determining a first key unique and particular to the client without user intervention;

encrypting at least a second key with the first key;

storing the second key as encrypted with the first key on a storage;

retrieving the second key as encrypted with the first key from the storage;

redetermining the first key;

decrypting the second key with the first key as redetermined;

determining whether decrypting the second key was successful; and

upon determining that decrypting the second key was unsuccessful, indicating so to the user; and

upon determining that decrypting the information was unsuccessful, requesting that the user reregister the first key with a registering authority.

4. The method of claim 3, wherein the first key comprises at least one of:

a processor identifier, a network card address, an IP address, a checksum of a component, a serial number of a hard disk drive, a number of cylinders of a hard disk drive, and a user name in a registry file.

5. A machine-readable medium having instructions stored thereon for execution by a processor of a client to perform a method comprising:

determining a first key unique and particular to the client without user intervention;

encrypting at least a second key with the first key;

storing the second key as encrypted with the first key on a storage;

retrieving the second key as encrypted with the first key from the storage;

redetermining the first key;

decrypting the second key with the first key as redetermined;

determining whether decrypting the second key was successful; and

upon determining that decrypting the second key was unsuccessful, indicating so to the user and requesting that the user reregister the first key with a registering authority.

6. The medium of claim 5, wherein the first key comprises at least one of:

a processor identifier, a network card address, an IP address, a checksum of a component, a serial number of a hard disk drive, a number of cylinders of a hard disk drive, and a user name in a registry file.

7. An apparatus comprising;

a storage;

at least one component having an identifier particularly and uniquely identifying the apparatus; and

means for;

determining a first key from the identifier;

encrypting at least a second key with the first key; and

,

storing the second key as encrypted on the storage, wherein the means is further for retrieving the second key as encrypted from the storage and redetermining the first key from the identifier; and

decrypting the second key with the first key as redetermined, wherein the means is further for determining whether decrypting the second key was successful and wherein the means is further for, upon determining that decrypting the second key was unsuccessful, indicating so to the user and requesting that the user reregister the first key with a registering authority.

8. The apparatus of claim 7, wherein the at least one component comprises at least one of:

a hard disk drive, a processor, a network card, and a registry file.