Systems and methods for secure transaction management and electronic rights protection

• US 7,051,212 B2
• Filed: 05/30/2002
• Issued: 05/23/2006
• Est. Priority Date: 02/13/1995
• Status: Expired due to Fees

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Ginter, Karl L., Spahn, Francis J., Shear, Victor H., Van Wie, David M.
• Primary Examiner(s): Darrow, Justin T.
• Application Number:
  US10/157,061
• Publication Number:
  US 20030105721A1
• Time in Patent Office: 1,454 Days
• Field of Search: 713/155, 713/165, 713/166, 713/193, 713/194, 713/201, 380/231, 380/232, 705/51, 705/54, 705/56, 705/59, 707/110, 709/225, 711/163
• US Class Current: 713/193
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 : Shopping for digital content
• CPC Class Codes: G06Q 20/1235 : with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/14 : specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 : Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/306 : using TV related infrastructures external card used for payment with client device H04N21/4185
• CPC Class Codes: G06Q 20/308 : using the Internet of Things
• CPC Class Codes: G06Q 2220/16 : Copy protection or prevention
• CPC Class Codes: G06Q 30/0273 : Determination of fees for advertising
• CPC Class Codes: G06Q 30/0283 : Price estimation or determination
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0609 : Buyer or seller confidence or verification
• CPC Class Codes: G06Q 40/02 : Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/04 : Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06Q 40/12 : Accounting
• CPC Class Codes: G06Q 50/184 : Intellectual property management
• CPC Class Codes: G06Q 50/188 : Electronic negotiation
• CPC Class Codes: G06T 1/0021 : Image watermarking
• CPC Class Codes: G07F 9/026 : for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 : Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copy right protecting software against unauthorised usage in a vending or licensing environment, e.g. protection the software providers copyright G06F21/10; data processing systems or methods, specially adapted for payment schemes, architectures or protocols G06Q20/00; secrecy systems or subscription systems H04N7/16
• CPC Class Codes: H04L 63/02 : for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 : wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/16 : Implementing security features at a particular protocol layer
• CPC Class Codes: H04L 63/168 : above the transport layer
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/006 : involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0819 : Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0838 : Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3218 : using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 2005/91364 : the video signal being scrambled
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/23476 : by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/42646 : for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4325 : by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/163 : by receiver means only
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node. These techniques may be used to support an all-electronic information distribution, for example, utilizing the “electronic highway.”

Claims

1. A method by which two entities, a first entity seeking rights to information and a second entity owning rights to the information, electronically bargain toward an agreement concerning the information, the method comprising:

generating a first control set representing initial terms offered by the first entity in exchange for obtaining rights to the information, the first control set specifying, at least in part, desired privacy requirements;

generating a second control set representing initial terms that the second entity is willing to accept in exchange for granting rights to the information, wherein the second entity rejects at least one of the initial terms of the first control set and proposes at least one alternative term to the first entity;

generating a third control set of agreed upon terms; and

granting rights to the information to the first entity in accordance with the terms of the third control set.

2. The method of claim 1, wherein the first entity is part of one organization and the second entity is part of an unrelated organization.

3. The method of claim 1, further comprising:

digitally signing the first control set with a digital signature of the first entity.

4. The method of claim 3, wherein the digital signature includes a time stamp indicating at least a time of offer.

5. The method of claim 1, further comprising:

digitally signing the second control set with a digital signature of the second entity.

6. The method of claim 5, wherein the digital signature includes a time stamp indicating at least a time of counteroffer.

7. The method of claim 1, further comprising:

digitally signing the third control set.

8. The method of claim 7, wherein the digital signature on the third control set includes a time stamp indicating at least a time of generation of the third control set.

9. The method of claim 1, wherein the information is selected from the group consisting of:

software, one or more electronic documents, digitally encoded audio content, and digitally encoded video content.

10. A method for securely performing an electronic transaction involving the transfer of rights to information, the method comprising:

accessing a first control set that a first party desires to govern the transaction, the first control set including at least a first term relating to the scope of rights sought by the first party and a second term relating to the withholding of private information of the first party;

accessing a second control set that a second party desires to govern the transaction, the second control set including at least a first term relating to the scone of rights the second party is willing to give and a second term relating to the collection of private information of the first party;

comparing one or more terms of the first control set with one or more terms of the second control set as part of a bargaining process through which terms and conditions acceptable to each party are identified wherein, during the bargaining process, the second party proposes one or more alternative terms under which the second party would charge an additional amount for the information in exchange for collecting a lesser amount of private information from the first party; and

creating a third control set that is acceptable to each party, the third control set including at least a first term relating to the scone of rights granted to the first party and a second term relating to the collection of private information of the first party, the third control set being operable to govern at least one aspect of the first party'"'"'s access to, or use of, the information.

11. The method of claim 10, wherein the first control set is created at a first electronic appliance associated with the first party, and the second control set is created at a second electronic appliance associated with the second party.

12. The method of claim 10, wherein the first party and the second party are part of the same organization.

13. A method for electronically controlling use of a first entity'"'"'s personal information, the method comprising:

(a) receiving a first set of one or more electronic terms, said first set of terms indicating one or more acceptable uses of one or more pieces of the first entity'"'"'s personal information;

(b) receiving a second set of one or more electronic terms, said second set of terms indicating one or more desired uses of one or more pieces of the first entity'"'"'s personal information;

(c) comparing, at least in part, the first set of terms with the second set of terms; and

(d) electronically authorizing at least one of said desired uses of one or more pieces of the first entity'"'"'s personal information, the authorized use corresponding to one or more of said acceptable uses.

14. A method as in claim 13, wherein at least one of said acceptable uses comprises electronically collecting a predefined piece of the first entity'"'"'s personal information.

15. A method as in claim 14, wherein the predefined piece of the first entity'"'"'s personal information comprises information regarding the first entity'"'"'s access to, or use of a piece of electronic content.

16. A method as in claim 13, wherein steps (a) through (d) are performed within a tamper-resistant environment at a site associated with the first entity.

17. A method as in claim 13, wherein steps (a) through (d) are performed by a process at a site associated with a second entity, and wherein step (b) comprises receiving the second set of terms from a memory unit at the second entity'"'"'s site.

18. A method as in claim 13, wherein steps (a) through (d) are performed at a site associated with a trusted third party, and wherein step (a) comprises securely receiving the first set of terms from a remote site associated with the first entity, and step (b) comprises securely receiving the second set of terms from a remote site associated with a second entity.

19. A method as in claim 13, further comprising:

(c)(1) generating an electronic control set, the electronic control set being operable to facilitate enforcement of at least one term contained in both the first set of terms and the second set of terms, the electronic control set governing, at least in part, the performance of said authorizing step.

20. A method as in claim 19, further comprising:

(c)(2) recording the electronic control set in a substantially non-repudiatable form.

21. A method as in claim 20, wherein recording the electronic control set in a substantially non-repudiatable form comprises digitally signing the electronic control set with at least one digital signature.

22. A method as in claim 21, wherein said at least one digital signature comprises a digital signature of the first entity.

23. A method as in claim 13, wherein steps (a) through (d) are performed in the order recited.

24. A computer program package for electronically negotiating terms of an electronic agreement between a first entity controlling information and a second entity seeking access to the information, the computer program package providing instructions which, if executed by a computer system, cause the system to perform operations comprising:

(a) receiving a first set of one or more electronic terms, said first set of terms indicating one or more acceptable uses of one or more pieces of the first entity'"'"'s personal information;

(b) receiving a second set of one or more electronic terms, said second set of terms indicating one or more desired uses of one or more pieces of the first entity'"'"'s personal information;

(c) comparing, at least in part, the first set of terms with the second set of terms; and

(d) electronically authorizing at least one of said desired uses of one or more pieces of the first entity'"'"'s personal information, the authorized use corresponding to one or more of said acceptable uses.

25. The computer program package of claim 24, wherein at least one of said acceptable uses comprises electronically collecting a predefined piece of the first entity'"'"'s personal information.

26. The computer program package of claim 25, wherein the predefined piece of the first entity'"'"'s personal information comprises information regarding the first entity'"'"'s access to, or use of, a piece of electronic content.

27. The computer program package of claim 24, wherein steps (a) through (d) are performed within a tamper-resistant environment at a site associated with the first entity.

28. The computer program package of claim 24, wherein steps (a) through (d) are performed by a process at a site associated with a second entity, and wherein step (b) comprises receiving the second set of terms from a memory unit at the second entity'"'"'s site.

29. The computer program package of claim 24, wherein steps (a) through (d) are performed at a site associated with a trusted third party, and wherein step (a) comprises securely receiving the first set of terms from a remote site associated with the first entity, and step (b) comprises securely receiving the second set of terms from a remote site associated with a second entity.

30. The computer program package of claim 24, further comprising:

(c)(1) generating an electronic control set, the electronic control set being operable to facilitate enforcement of at least one term contained in both the first set of terms and the second set of terms, the electronic control set governing, at least in part, the performance of said authorizing step.

31. The computer program package of claim 30, further comprising:

(c)(2) recording the electronic control set in a substantially non-repudiatable form.

32. The computer program package of claim 31, wherein recording the electronic control set in a substantially non-repudiatable form comprises digitally signing the electronic control set with at least one digital signature.

33. The computer program package of claim 32, wherein said at least one digital signature comprises a digital signature of the first entity.

34. The computer program package of claim 24, wherein steps (a) through (d) are performed in the order recited.

35. A computer program package for electronically negotiating terms of an electronic agreement between a first entity controlling information and a second entity seeking access to the information, the computer program package providing instructions which, if executed by a computer system, cause the system to perform operations comprising:

generating a first control set representing initial terms offered by the first entity in exchange for obtaining rights to the information, the first control set specifying, at least in part, desired privacy requirements;

generating a second control set representing initial terms that the second entity is willing to accept in exchange for granting rights to the information;

wherein the second entity rejects at least one of the initial terms of the first control set and proposes at least one alternative term to the first entity;

generating a third control set of agreed upon terms; and

granting rights to the information to the first entity in accordance with the terms of the third control set.

36. The computer program package of claim 35, wherein the first entity is part of one organization and the second entity is part of an unrelated organization.

37. The computer program package of claim 35, further comprising:

digitally signing the first control set with a digital signature of the first entity.

38. The computer program package of claim 37, wherein the digital signature includes a time stamp indicating at least a time of offer.

39. The computer program package of claim 35, further comprising:

digitally signing the second control set with a digital signature of the second entity.

40. The computer program package claim 39, wherein the digital signature includes a time stamp indicating at least a time of counteroffer.

41. The computer program package of claim 35, further comprising:

digitally signing the third control set.

42. The computer program package of claim 41, wherein the digital signature on the third control set includes a time stamp indicating at least a time of generation of the third control set.

43. The computer program package of claim 35, wherein the information is selected from the group consisting of:

software, one or more electronic documents, digitally encoded audio content, and digitally encoded video content.