Secure online music distribution system

• US 6,868,403 B1
• Filed: 03/09/2000
• Issued: 03/15/2005
• Est. Priority Date: 02/06/1998
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Wiser, Philip R., Cherenson, Andrew R., Ansell, Steven T., Cannon, Susan A.
• Primary Examiner(s): Hayes, John W.
• Assistant Examiner(s): Reagan, James A.
• Application Number:
  US09/522,061
• Time in Patent Office: 1,832 Days
• Field of Search: 705/1, 705/51, 705/78, 705/76
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A computer implemented online music distribution system provides for the secure delivery of audio data and related media, including text and images, over a public communications network. The online music distribution system provides security through multiple layers of encryption, and the cryptographic binding of purchased audio data to each specific purchaser. The online music distribution system also provides for previewing of audio data prior to purchase. In one embodiment, the online music distribution system is a client-server system including a content manager, a delivery server, and an HTTP server, communicating with a client system including a Web browser and a media player. The content manager provides for management of media and audio content, and processing of purchase requests. The delivery server provides delivery of the purchased media data. The Web browser and HTTP server provide a communications interface over the public network between the content manager and media players. The media player provides for encryption of user personal information, and for decryption and playback of purchased media data. Security of purchased media data is enhanced in part by the use of a personal, digital passport in each media player. The digital passport contains identifying information that identifies the purchaser, along with confidential information, such as credit card number, and encryption data, such as the media player'"'"'s public and private keys. The media player encryption data is used to encrypt purchased media data, which is decrypted in real time by the media player. The media player also displays confidential information, such as the purchaser'"'"'s credit card number, during playback.

Claims

1. A computer-implemented online music distribution system for distributing digital media data files, including audio data, over a public communications network, comprising:

a content manager that transmits validation data uniquely associated with a purchase of a selected one of the media data files and a network address of a delivery server to deliver the selected media data file to a client computer system including a media player for playing back the audio data of the selected media data file;

the media player, storing encryption data assigned specifically to the media player, that receives the validation data from the content manager, and transmits the validation data to the delivery server specified by the network address in the validation data; and

the delivery server that verifies the validation data received from the media player using the content manager and receives the selected media data file from the content manager and securely transmits the selected media data file to the media player, wherein the selected media data file includes the audio data of the selected media data file encrypted using the encryption data of the media player, the media player adapted to decrypt the audio data of the selected media data file using the encryption data, and playback resulting decrypted audio data.

2. The system of claim 1, further comprising:

a media licensing center that generates for each of a plurality of purchasers a digital passport including;

(i) a public key/private key pair for a respective one of a plurality of media players, including the first-mentioned media player, used by the purchaser,

(ii) a consumer certificate,

(iii) personal information identifying the purchaser, and

(iv) confidential information of the purchaser;

and transmits the digital passport of each purchaser to the respective media player of the purchaser, wherein each of the respective media players stores the passport in a local memory, to provide a public key of the public key/private key pair to the content manager as part of the encryption data.

3. The system of claim 1, wherein:

the content manager receives from a merchant server a request to reserve the selected media data file for the purchase, and receives authorization from the merchant server to transmit the validation data to the client computer system.

4. The system of claim 1, wherein the content manager:

receives the selected media data file from an authoring tool, the selected media data file including one or more audio images encrypted with a media key, the media key encrypted with a public key of the content manager to form an encrypted media key;

parses the selected media data file and selectively imports data of the selected media data file into a database;

stores the selected media data file, and the encrypted media key in a local file system.

5. The system of claim 1, further comprising:

a media information database that stores information descriptive of each of the media data files; and

a media data file system that stores each of the media data files encrypted with a corresponding media key associated with the media data file, the media keys encrypted with the public key of the content manager.

6. The system of claim 1, wherein each of the media data files includes:

at least one encrypted audio image containing a full length high quality version of a song; and

at least one un-encrypted audio image containing a lower quality version of the song.

7. The system of claim 1, wherein:

the client computer system requests a preview of the selected media data file prior to the purchase of the selected media data file;

the content manager authorizes the delivery server to stream at least one un-encrypted audio image to the media player on the client computer system; and

the media player receives the un-encrypted audio image from the delivery server and plays the un-encrypted audio image as a preview of the media data file.

8. The system of claim 7, wherein:

upon request from the client computer system for the preview of the selected media data file, the content manager queries a database system for media descriptive data about the selected media data file to be provided to the media player; and

responsive to the media descriptive data being present in the database system, the content manager delivers the media descriptive data to the delivery server for subsequent transmission to the client computer system.

9. The system of claim 1, further comprising:

a secure transaction log that securely stores purchase information for each purchase of each of the media data files.

10. The system of claim 9, wherein the secure transaction log includes a plurality of log entries of purchases of the media data files, each log entry encrypted with an associated encryption key.

11. A computer implemented online music distribution system for distributing digital media data files, including audio data, over a public communications network, comprising:

a content manager that (i) stores a plurality of media data files, each media data file including at least one encrypted high quality full length audio data file and at least one unencrypted low quality audio data file, and (ii) transmits validation data uniquely associated with a preview of a selected one of the media data files and a network address of a delivery server to deliver the selected media data file to a client computer system including a media player for playing back the audio data of the previewed media data file;

the media player that receives the validation data from the content manager and transmits the validation data to the delivery server specified by the network address in the validation data; and

the delivery server that verifies the validation data received from the media player using the content manager to validate the preview of the media data file by the media player and receives the selected media data file from the content manager and retransmits the selected media data file to the media player, wherein the selected media data file includes the unencrypted low quality audio data, the media player adapted to playback the unencrypted low quality audio data as the preview of the selected media data file as the unencrypted audio data is received.

12. A method for distributing digital content through a computer network, the method comprising:

receiving a request to authorize delivery of one or more purchased items of digital content to a purchaser;

sending voucher data which authorizes delivery of the one or more purchased items of digital content to the purchaser and identifies a delivery server to conduct the delivery;

receiving a verification request from the delivery server to verify the voucher data;

verifying that the voucher data represents delivery to the purchaser; and

sending authorization to the delivery server to deliver the one or more purchased items of digital content to the purchaser after the delivery server verifies validation data received from a media player using a content manager and receives the one or more purchased items from the content manager, the delivery server securely retransmitting the one or more purchased items to the media payer.

13. The method of claim 12 wherein the one or more purchased items of digital content include audio content.

14. The method of claim 12 wherein the one or more purchased items of digital content include video content.

15. The method of claim 12 wherein the one or more purchased items of digital content include image content.

16. The method of claim 12 wherein the one or more purchased items of digital content include computer software.

17. The method of claim 12 wherein the voucher data identifies the one or more purchased items of digital content.

18. The method of claim 12 wherein the voucher data includes a transaction identifier which identifies a purchase transaction in which the purchaser has purchased the one or more purchased items of digital content.

19. The method of claim 12 wherein the voucher data identifies the one or more purchased items of digital content.

20. The method of claim 12 wherein verifying comprises:

decrypting a voucher identifier of the voucher data with a token of the voucher data.

21. The method of claim 12 wherein verifying comprises:

verifying a cryptographic signature of at least a part of the voucher data by the purchaser.

22. The method of claim 12 further comprising:

receiving a request from a merchant server indicating that the one or more items of digital content are the subject of a purchase transaction;

confirming the availability of the one or more items of digital content; and

sending delivery authorization data to the merchant server for use by the purchaser.

23. The method of claim 22 wherein confirming comprises:

sending confirmation data to the merchant server.

24. The method of claim 22 further comprising:

receiving notification from the merchant server that payment for the one or more items of digital content has been authorized.

25. The method of claim 22 wherein the authorization data is included in the request to authorize delivery.

26. A method for distributing digital content through a computer network, the method comprising:

receiving a delivery request to deliver one or more items of digital content to a purchaser wherein the delivery request includes transaction data which represents a transaction in which the purchaser purchased the one or more items of digital content;

submitting the transaction data to a content manager for verification of the authority of the purchaser to receive the one or more items of digital content; and

upon receiving the verification from the content manager, verifying validation data received from a media player using the content manager and receiving the one or more items of digital content from the content manager, and sending the one or more items of digital content to the purchaser.

27. The method of claim 26 wherein the one or more items of digital content include audio content.

28. The method of claim 26 wherein the one or more items of digital content include video content.

29. The method of claim 26 wherein the one or more items of digital content include image content.

30. The method of claim 26 wherein the one or more items of digital content include computer software.

31. The method of claim 26 wherein the transaction data includes a transaction identifier which identifies the transaction.

32. The method of claim 26 wherein the transaction data identifies the one or more items of digital content.

33. The method of claim 26 wherein verifying comprises:

decrypting a transaction identifier of the transaction data with a token of the transaction data.

34. The method of claim 26 wherein verifying comprises:

verifying a cryptographic signature of at least a part of the transaction data by the purchaser.

35. A method for distributing digital content through a computer network, the method comprising:

receiving a request to authorize delivery of one or more preview items of digital content to a user;

sending voucher data which authorizes delivery of the one or more preview items of digital content to the user and identifies a delivery server to conduct the delivery;

receiving a verification request from the delivery server to verify the voucher data;

verifying that the voucher data represents delivery to the user; and

sending authorization to the delivery server to deliver the one or more preview items of digital content to the user, after the delivery service verifies validation data received from a media player using a content manager and receives the one or more preview items of digital content from the content manager, the delivery server retransmitting the one or more preview items of digital content to the media player.

36. The method of claim 35 wherein the one or more preview items of digital content include audio content.

37. A method for distributing digital content through a computer network, the method comprising:

receiving a delivery request to deliver one or more items of digital content to a user wherein the delivery request includes transaction data which represents a transaction in which the user has requested preview of the one or more items of digital content;

submitting the transaction data to a content manager for verification of the authority of the user to preview the one or more items of digital content;

upon receiving the verification from the content manager, verifying validation data received from a media player using the content manager and receiving the preview data of one or more items of digital content from the content manager, and sending preview data of the one or more items of digital content to the user.

38. The method of claim 37 wherein the one or more items of digital content include audio content.

39. A computer readable medium useful in association with a computer which includes a processor and a memory, the computer readable medium including computer instructions which are configured to cause the computer to distribute digital content through a computer network by:

receiving a request to authorize delivery of one or more purchased items of digital content to a purchaser;

sending voucher data which authorizes delivery of the one or more purchased items of digital content to the purchaser and identifies a delivery server to conduct the delivery;

receiving a verification request from the delivery server to verify the voucher data;

verifying that the voucher data represents delivery to the purchaser; and

sending authorization to the delivery server to deliver the one or more purchased items of digital content to the purchaser after the delivery server verifies validation data received from a media player using a content manager and receives the one or more purchased items from the content manager, the delivery server securely retransmitting the one or more purchased items to the media payer.

40. The computer readable medium of claim 39 wherein the one or more purchased items of digital content include audio content.

41. The computer readable medium of claim 39 wherein the one or more purchased items of digital content include video content.

42. The computer readable medium of claim 39 wherein the one or more purchased items of digital content include image content.

43. The computer readable medium of claim 39 wherein the one or more purchased items of digital content include computer software.

44. The computer readable medium of claim 39 wherein the voucher data identifies the one or more purchased items of digital content.

45. The computer readable medium of claim 39 wherein the voucher data includes a transaction identifier which identifies a purchase transaction in which the purchaser has purchased the one or more purchased items of digital content.

46. The computer readable medium of claim 39 wherein the voucher data identifies the one or more purchased items of digital content.

47. The computer readable medium of claim 39 wherein verifying comprises:

decrypting a voucher identifier of the voucher data with a token of the voucher data.

48. The computer readable medium of claim 39 wherein verifying comprises:

verifying a cryptographic signature of at least a part of the voucher data by the purchaser.

49. The computer readable medium of claim 39 wherein the computer instructions are configured to cause the computer to distribute digital content through a computer network by also:

receiving a request from a merchant server indicating that the one or more items of digital content are the subject of a purchase transaction;

confirming the availability of the one or more items of digital content; and

sending delivery authorization data to the merchant server for use by the purchaser.

50. The computer readable medium of claim 49 wherein confirming comprises:

sending confirmation data to the merchant server.

51. The computer readable medium of claim 49 wherein the computer instructions are configured to cause the computer to distribute digital content through a computer network by also:

receiving notification from the merchant server that payment for the one or more items of digital content has been authorized.

52. The computer readable medium of claim 49 wherein the authorization data is included in the request to authorize delivery.

53. A computer readable medium useful in association with a computer which includes a processor and a memory, the computer readable medium including computer instructions which are configured to cause the computer to distribute digital content through a computer network by:

receiving a delivery request to deliver one or more items of digital content to a purchaser wherein the delivery request includes transaction data which represents a transaction in which the purchaser purchased the one or more items of digital content;

submitting the transaction data to a content manager for verification of the authority of the purchaser to receive the one or more items of digital content; and

upon receiving the verification from the content manager, verifying validation data received from a media player using the content manager and receiving the one or more items of digital content from the content manager, and sending the one or more items of digital content to the purchaser.

54. The computer readable medium of claim 53 wherein the one or more items of digital content include audio content.

55. The computer readable medium of claim 53 wherein the one or more items of digital content include video content.

56. The computer readable medium of claim 53 wherein the one or more items of digital content include image content.

57. The computer readable medium of claim 53 wherein the one or more items of digital content include computer software.

58. The computer readable medium of claim 53 wherein the transaction data includes a transaction identifier which identifies the transaction.

59. The computer readable medium of claim 53 wherein the transaction data identifies the one or more items of digital content.

60. The computer readable medium of claim 53 wherein verifying comprises:

decrypting a transaction identifier of the transaction data with a token of the transaction data.

61. The computer readable medium of claim 53 wherein verifying comprises:

verifying a cryptographic signature of at least a part of the transaction data by the purchaser.

62. A computer readable medium useful in association with a computer which includes a processor and a memory, the computer readable medium including computer instructions which are configured, to cause the computer to distribute digital content through a computer network by:

receiving a request to authorize delivery of one or more preview items of digital content to a user,

sending voucher data which authorizes delivery of the one or more preview items of digital content to the user and identifies a delivery server to conduct the delivery;

receiving a verification request from the delivery server to verify the voucher data;

verifying that the voucher data represents delivery to the user, and

sending authorization to the delivery server to deliver the one or more preview items of digital content to the user, after the delivery service verifies validation data received from a media player using a content manager and receiving the one or more preview items of digital content from the content manager and retransmitting the one or more preview items of digital content to the media player.

63. The computer readable medium of claim 62 wherein the one or more preview items of digital content include audio content.

64. A computer readable medium useful in association with a computer which includes a processor and a memory, the computer readable medium including computer instructions which are configured to cause the computer to distribute digital content through a computer network by:

receiving a delivery request to deliver one or more items of digital content to a user herein the delivery request includes transaction data which represents a transaction in which the user has requested preview of the one or more items of digital content;

submitting the transaction data to a content manager for verification of the authority of the user to preview the one or more items of digital content;

upon receiving the verification from the content manager, verifying validation data received from a media player using the content manager and receiving the one or more items of digital content from the content manager receiving preview data of the one or more items of digital content; and

sending preview data of the one or more items of digital content to the user.

65. The computer readable medium of claim 64 wherein the one or more items of digital content include audio content.

66. A computer system comprising:

a processor;

a memory operatively coupled to the processor; and

a content manager (i) which executes in the processor from the memory and {ii) which, when executed by the processor, causes the computer to distribute digital content through a computer network by;

receiving a request to authorize delivery of one or more purchased items of digital content to a purchaser;

sending voucher data which authorizes delivery of the one or more purchased items of digital content to the purchaser and identifies a delivery server to conduct the delivery;

receiving a verification request from the delivery server to verify the voucher data;

verifying that the voucher data represents delivery to the purchaser; and

sending authorization to the delivery server to deliver the one or more preview items of digital content to the user, after the delivery service verifies validation data received from a media player using a content manager and receiving the one or more preview items of digital content from the content manager and retransmitting the one or more preview items of digital content to the media player.

67. The computer system of claim 66 wherein the one or more purchased items of digital content include audio content.

68. The computer system of claim 66 wherein the one or more purchased items of digital content include video content.

69. The computer system of claim 66 wherein the one or more purchased items of digital content include image content.

70. The computer system of claim 66 wherein the one or more purchased items of digital content include computer software.

71. The computer system of claim 66 wherein the voucher data identifies the one or more purchased items of digital content.

72. The computer system of claim 66 wherein the voucher data includes a transaction identifier which identifies a purchase transaction in which the purchaser has purchased the one or more purchased items of digital content.

73. The computer system of claim 66 wherein the voucher data identifies the one or more purchased items of digital content.

74. The computer system of claim 66 wherein verifying comprises:

decrypting a voucher identifier of the voucher data with a token of the voucher data.

75. The computer system of claim 66 wherein verifying comprises:

verifying a cryptographic signature of at least a part of the voucher data by the purchaser.

76. The computer system of claim 66 wherein the content manager, when executed, causes the computer to distribute digital content through a computer network by also:

receiving a request from a merchant server indicating that the one or more items of digital content are the subject of a purchase transaction;

confirming the availability of the one or more items of digital content; and

sending delivery authorization data to the merchant server for use by the purchaser.

77. The computer system of claim 76 wherein confirming comprises:

sending confirmation data to the merchant server.

78. The computer system of claim 76 wherein the content manager, when executed, causes the computer to distribute digital content through a computer network by also:

receiving notification from the merchant server that payment for the one or more items of digital content has been authorized.

79. The computer system of claim 76 wherein the authorization data is included in the request to authorize delivery.

80. A computer system comprising:

a processor;

a memory operatively coupled to the processor, and

a delivery server (i) which executes in the processor from the memory and (ii) which, when executed by the processor, causes the computer to distribute digital content through a computer network by;

receiving a delivery request to deliver one or more items of digital content to a purchaser wherein the delivery request includes transaction data which represents a transaction in which the purchaser purchased the one or more items of digital content;

submitting the transaction data to a content manager for verification of the authority of the purchaser to receive the one or more items of digital content; and

upon receiving the verification from the content manager, verifying validation data received from a media player using the content manager and receiving the one or more items of digital content from the content manager, and sending the one or more items of digital content to the purchaser.

81. The computer system of claim 80 wherein the one or more items of digital content include audio content.

82. The computer system of claim 80 wherein the one or more items of digital content include video content.

83. The computer system of claim 80 wherein the one or more items of digital content include image content.

84. The computer system of claim 80 wherein the one or more items of digital content include computer software.

85. The computer system of claim 80 wherein the transaction data includes a transaction identifier which identifies the transaction.

86. The computer system of claim 80 wherein the transaction data identifies the one or more items of digital content.

87. The computer system of claim 80 wherein verifying comprises:

decrypting a transaction identifier of the transaction data with a token of the transaction data.

88. The computer system of claim 80 wherein verifying comprises:

verifying a cryptographic signature of at least a part of the transaction data by the purchaser.

89. A computer system comprising:

a processor;

a memory operatively coupled to the processor; and

a content manager (i) which executes in the processor from the memory and (ii)which, when executed by the processor, causes the computer to distribute digital content through a computer network by;

receiving a request to authorize delivery of one or more preview items of digital content to a user;

sending voucher data which authorizes delivery of the one or more preview items of digital content to the user and identifies a delivery server to conduct the delivery;

receiving a verification request from the delivery server to verify the voucher data;

verifying that the voucher data represents delivery to the user; and

sending authorization to the delivery server to deliver the one or more preview items of digital content to the user, after the delivery service verifies validation data received from a media player using a content manager and receiving the one or more preview items of digital content from the content manager and retransmitting the one or more preview items of digital content to the media player.

90. The computer system of claim 89 wherein the one or more preview items of digital content include audio content.

91. A computer system comprising:

a processor,

a memory operatively coupled to the processor; and

a delivery server (i) which executes in the processor from the memory and (ii) which, when executed by the processor, causes the computer to distribute digital content through a computer network by;

receiving a delivery request to deliver one or more items of digital content to a user wherein the delivery request includes transaction data which represents a transaction in which the user has requested preview of the one or more items of digital content;

submitting the transaction data to a content manager for verification of the authority of the user to preview the one or more items of digital content;

upon receiving the verification from the content manager, verifying validation data received from a media player using the content manager and receiving the one or more items of digital content from the content manager receiving preview data of the one or more items of digital content; and

sending preview data of the one or more items of digital content to the user.

92. The computer system of claim 91 wherein the one or more items of digital content include audio content.