System and method for protection of digital works

• US 6,885,748 B1
• Filed: 03/24/2000
• Issued: 04/26/2005
• Est. Priority Date: 10/23/1999
• Status: Expired due to Fees

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Inventors: Wang, Xin
• Primary Examiner(s): MOISE, EMMANUEL LIONEL
• Application Number:
  US09/536,089
• Time in Patent Office: 1,859 Days
• Field of Search: 380/212, 380/217, 380/201, 380/28, 380/42, 380/44, 380/45, 380/47, 358/1.2, 705/1, 705/57, 705/56, 705/51, 713/176, 713/160, 713/193, 382/100, 386/46
• US Class Current: 380/201
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled

Abstract

A method of protecting a digital work uses a format preserving encryption scheme to encrypt the digital work. This enables any native replay application or rendering application to transform an encrypted digital work into encrypted presentation data. The originator'"'"'s digital content is protected in its original form by not being decrypted. This method enables the rendering or replay application to process the encrypted document into encrypted presentation data without decrypting it first. Encrypted presentation data is then decrypted just before it is displayed to the user. An additive encryption scheme is a particular type of encryption scheme which preserves formatting of a digital work.

Claims

1. A method of protecting a digital work, z, during transformation by a transformation function, F, into presentation data F(z), wherein the digital work includes digital content and formatting information, comprising:

encrypting the digital work, z, in accordance with a format preserving encryption scheme, E, which preserves formatting information of the digital work;

transforming the encrypted digital work E(z) into encrypted presentation data, F(E(z)); and

decrypting the encrypted presentation data, F (E(z)), in accordance with a decryption function, D, to obtain the presentation data, F(z), wherein D(F(E(z)))=F(z).

2. The method of claim 1, wherein the encryption function E is an additive encryption scheme.

3. The method of claim 2, wherein the additive encryption scheme is selected from the group consisting of Mult, Exp, EG, OU, RSA and compositions thereof.

4. The method of claim 1, wherein F is any multivariate, integer coefficient affine functions and E is an additive encryption scheme.

5. The method of claim 1, wherein F comprises an affine type coordinate transformation in x- and y- coordinates of the form x′

=ax+bx+e and y′

=cy+dy+f, where a, b, c, d, e, and f are coefficients, (x, y) is the original location of an element in the digital work z and (x′

, y′

) is the transformed location.

6. The method of claim 5, wherein the encryption scheme E encrypts the variables x and y while leaving the coefficients (a, b, c, d, e, f) in the clear.

7. The method of claim 1, wherein the digital work comprises a token-based document comprising a dictionary T of token images, a table of coordinate location information corresponding to each page of the document, and the transformation function F includes a Lookup routine that accesses the table of coordinate location information.

8. The method of claim 7, wherein the table of coordinate location information is encrypted using an additive encryption scheme and the dictionary of token images is encrypted using any encryption scheme.

9. The method of claims 7, wherein the dictionary T consists of a collection of pairs, each comprising an identifier and an associated token, (id, t), the table of location information comprises a table of tuples, (id, x, y) each comprising an identifier id, an x-coordinate and a y-coordinate for each page of the document, and wherein the transformation function F includes a subroutine Lookup that, given a valid token identifier id, returns its corresponding token image t in T.

10. The method of claim 9, wherein E is an additive encryption scheme and any combination of the tuples (id, x, y) may be encrypted by E.

11. The method of claim 9, wherein the location table is encrypted by an additive encryption scheme and the token identifiers are encrypted by a probabilistic encryption scheme.

12. The method of claim 7, wherein the token images comprise characters and graphics.

13. The method of claim 1, wherein the digital work z comprises data x and coordinate information a, wherein the transformation function F converts encrypted data x and coordinate information a into presentation data F(a, E(x))=E(F(a, x)).

14. A system of protecting a digital work, z, during transformation by a transformation function, F, into presentation data F(z), wherein the digital work includes digital content and formatting information, comprising:

an encryption engine for encrypting the digital work, z, in accordance with a format preserving encryption scheme, E, which preserves formatting information of the digital work;

a transformation function F for transforming the encrypted digital work E(z) into encrypted presentation data, F(E(z)); and

a decryption engine for decrypting the encrypted presentation data, F(E(z)), in accordance with a decryption function, D, to obtain the presentation data, F(z), wherein D(F(E(z)))=F(z).

15. The system of claim 14, wherein the encryption function E is an additive encryption scheme.

16. The system of claim 15, wherein the additive encryption scheme is selected from the group consisting of Mult, Exp, EG, OU, RSA and compositions thereof.

17. The system of claim 14, wherein F is any multivariate, integer coefficient affine functions and E is an additive encryption scheme.

18. The system of claim 17, wherein the encryption scheme E encrypts the variables x and y while leaving the coefficients (a, b, c, d, e, t) in the clear.

19. The system of claim 14, wherein F comprises an affine type coordinate transformation in x- and y-coordinates of the form x′

=ax+bx+e and y′

=cy+dy+f, where a, b, c, d, e, and f are coefficients, (x, y) is the original location of an element in the digital work z and (x′

, y′

) is the transformed location.

20. The system of claim 19, wherein the table of coordinate location information is encrypted using an additive encryption scheme and the dictionary of token images is encrypted using any encryption scheme.

21. The system of claim 19, wherein the dictionary T consists of a collection of pairs, each comprising an identifier and an associated token, (id, t), the table of location information comprises a table of tuples, (id, x, y) each comprising an identifier id, an x-coordinate and a y-coordinate for each page of the document, and wherein the transformation function F includes a subroutine Lookup that, given a valid token identifier id, returns its corresponding token image t in T.

22. The system of claim 21, wherein E is an additive encryption scheme and any combination of the tuples (id, x, y) may be encrypted by E.

23. The system of claim 21, wherein the location table is encrypted by an additive encryption scheme and the token identifiers are encrypted by a probabilistic encryption scheme.

24. The system of claim 19, wherein the token images comprise characters and graphics.

25. The system of claim 14, wherein the digital work comprises a token-based document comprising a dictionary T of token images, a table of coordinate location information corresponding to each page of the document, and the transformation function F includes a Lookup routine that accesses the table of coordinate location information.

26. The system of claim 14, wherein the digital work z comprises data x and coordinate information a, wherein the transformation function F converts encrypted data x and coordinate information a into presentation data F(a, E(x))=E(F(a, x)).