Digital content security system

• US 6,973,576 B2
• Filed: 11/17/2003
• Issued: 12/06/2005
• Est. Priority Date: 12/27/2000
• Status: Expired due to Term

• Current Assignee: Proxense, LLC
• Original Assignee: Margent Development LLC
• Inventors: Giobbi, John J.
• Primary Examiner(s): Zand, Kambiz
• Application Number:
  US10/715,035
• Publication Number:
  US 20040098597A1
• Time in Patent Office: 750 Days
• Field of Search: 713/182, 713/193, 713/194, 713/171, 380/202, 380/247, 705/57, 711/152, 711/163
• US Class Current: 713/193
• CPC Class Codes: G06F 21/1014 to tokens
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/254 Management at additional data server, e.g. shopping server, rights management server arrangements for maintenance or administration in data networks H04L41/00; network services using third party service providers H04L67/53
• CPC Class Codes: H04N 21/4112 having fewer capabilities than the client, e.g. thin client having less processing power or no tuning capabilities
• CPC Class Codes: H04N 21/418 External card to be used in combination with the client device, e.g. for conditional access
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06

Abstract

A Personal Digital Key Digital Content Security System (PDK-DCSS) is used to protect computers from unauthorized use and protect the digital content stored on computers from being wrongfully accessed, copied, and/or distributed. The basic components of the PDK-DCSS are (1) a standard hard drive device, with the addition of a PDK Receiver/Decoder Circuit (PDK-RDC) optionally integrated into the hard drive'"'"'s controller, and (2) a PDK-Key associated with the PDK-RDC. The PDK-Key and RDC technology is utilized to provide two categories of protection: (1) hard drive access control for providing Drive-Level and Sector-Level protection and (2) operating system-level independent file protection for providing File-Level and Network-Level protection.

Claims

1. A method of securing digital content on a hard drive of computer, comprising:

providing a physical key adapted to be carried by a user;

detecting the physical key wit a receiver/decoder circuit communicating with the hard drive;

validating the detected physical key with the receiver/decoder circuit wherein validating includes determining whether or not the detected physical key is associated with the hard drive; and

permitting access to the hard drive or a portion thereof with the receiver/decoder circuit if the detected key is validated wherein digital content read from or written to the hard drive is decrypted or encrypted by the receiver/decoder circuit using the detected physical key in order to provide sector-level protection.

2. The method of claim 1, wherein the receiver/decoder circuit resides in the computer.

3. The method of claim 1, wherein the detecting step includes detecting the key over a secure wireless link.

4. The method of claim 1, wherein the receiver/decoder circuit enables the hard drive if the detected key is validated and disables the hard drive if the detected key is not validated in order to provide hard drive level protection.

5. The method of claim 4, wherein digital content stored on the drive is not encrypted with the key.

6. The method of claim 1, wherein the key associated with the hard drive is initially delivered with the hard drive.

7. The method of claim 1 wherein each sector is encrypted or decrypted by receiver/decoder circuit using the personal digital key associated with a drive corresponding to the sector.

8. The method of claim 1 wherein the sector level protection includes individual data sectors and clusters of data sectors.

9. A system for securing digital content on a hard drive of a computer, comprising:

a physical key adapted to be carried by a user;

a hard drive having digital content; and

a receiver/decoder circuit communicating with the hard drive for detecting and validating the physical key wherein the receiver/decoder circuit validates the physical key by determining whether or not the detected physical key is associated with the hard drive wherein the receiver/decoder circuit decrypts or encrypts digital content read from or written to the hard drive using the physical key associated with the hard drive in order to provide sector-level protection.

10. The system of claim 9, wherein the receiver/decoder circuit resides in the computer.

11. The system of claim 9, wherein the receiver/decoder circuit detects the key over a secure wireless link.

12. The system of claim 9, wherein the receiver/decoder circuit enables the hard drive if the detected physical key is validated and disables the hard drive if the detected key is not validated in order to provide hard drive level protection.

13. The system of claim 9, wherein digital content stored on the computer is not encrypted with the physical key.

14. The system of claim 9, wherein the physical key associated with the hard drive is initially delivered with the hard drive.

15. A method of securing a hard drive of a computer, comprising:

providing a portable, physical key adapted to be carried by a user, wirelessly detecting the portable, physical key with a receiver/decoder circuit communicating with the hard drive when the key is in proximity to the receiver/decoder circuit;

validating the detected portable physical key with the receiver/decoder circuit; and

permitting access to the hard drive or a portion thereof with the receiver/decoder circuit if the detected portable physical key is validated wherein digital content read from or written to the hard drive is decrypted or encrypted by the receiver/decoder circuit using the key associated with the hard drive.