Digital content distribution using web broadcasting services

• US 7,213,005 B2
• Filed: 01/20/2000
• Issued: 05/01/2007
• Est. Priority Date: 12/09/1999
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Pacifici, Giovanni, Munson, Jonathan P., Mourad, Magda, Youssef, Alaa S., Tantawy, Ahmed
• Primary Examiner(s): Reagan; James A
• Application Number:
  US09/487,417
• Publication Number:
  US 20030135464A1
• Time in Patent Office: 2,658 Days
• Field of Search: 705/1, 705/51, 705/26, 705/27, 705/52, 705 53- 59, 705/64, 705/76, 380/262, 380/30, 380/44, 370/432, 713/176
• US Class Current: 705/64
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials

Abstract

A method, a system and computer readable medium of securely receiving data on a user'"'"'s system from a web broadcast infrastructure with a plurality of channels. The method includes encrypting the data using a first encrypting key, wherein the first encrypting key is self-contained with all the information necessary to decrypt the data encrypted with the first encrypting key and encrypting the first decrypting key, using a second encrypting key. Next promotional metadata related to at least part of the encrypted data on a first web broadcast channel for reception by at least one user'"'"'s system is broadcasted. Broadcasting at least part of the encrypted data over a second broadcast channel and transferring the encrypted first decrypting key, which has been encrypted with the second encrypting key, to the user'"'"'s system via a computer readable medium.

Claims

1. A method of securely receiving content data on a user'"'"'s system from a web broadcast infrastructure with a plurality of channels, the method comprising the steps of:

receiving encrypted content data from a broadcast channel wherein the encrypted content data is encrypted with a first encrypting key having a corresponding first decrypting key;

storing on an user'"'"'s system the encrypted content data for later decrypting by a single player application;

determining a schedule for next broadcast of the encrypted content data selected;

setting a trigger to trigger the user'"'"'s system to receive the next broadcast of the encrypted content data selected;

receiving promotional metadata related to the encrypted content data over the broadcast channel;

selecting by a user, encrypted content data to be received related to the promotional offering metadata;

executing an emulator to enable the single player application of the encrypted content data to receive content data over the broadcast channel as if the single player application is receiving the encrypted content data from a telecommunication infrastructure, thereby enabling the single player application to perform the following steps regardless from where the encrypted content has been received;

transferring to a trusted third party an encrypted first decrypting key, which has been encrypted with a second encrypting key of the trusted third party;

receiving, over a computer readable medium which is different than the web broadcast channel, the encrypted first decrypting key, which has been decrypted by the trusted third party and re-encrypted with a user'"'"'s system key; and

decrypting, in a tamper resistant environment of the single player application, the encrypted first decrypting key with the user'"'"'s system key;

wherein the step of receiving encrypted content data includes receiving encrypted content data from a second broadcast channel-selected from the promotional metadata on the second broadcast channel and a time provided by the trigger;

wherein the step of receiving encrypted content data from a second channel includes receiving data in format compatible with DirecPC™

.

2. The method as defined in claim 1, further comprising receiving the encrypted first decrypting key over a computer readable medium which is different than the web broadcast channel.

3. The method as defined claim 1, wherein the step of receiving data from a second channel includes the sub-step of:

authorizing over a back channel that the user'"'"'s system is authorized to receive the encrypted content data selected; and

wherein the step of receiving the encrypted first decrypting key includes receiving the encrypted first decrypting key only if the user'"'"'s system is authorized by the trusted third party to receive the encrypted content data selected.

4. The method as defined in claim 1, wherein the step of receiving encrypted content data from a second channel further includes the sub-step of:

presenting to the user, a next time the user starts the users system, a status if current encrypted content data selected from the promotional metadata has been received on the use/s system.

5. The method as defined in claim 1, wherein the step of receiving the encrypted content data, includes receiving the encrypted content data along with a network address of the trusted third party.

6. The method defined in claim 5, wherein the first decrypting key has a timeout provision for decrypting the content data.

7. The method as defined in claim 1, further comprising receiving the encrypted first decrypting key over a broadcast stream.

8. The method defined in claim 1, wherein the tamper resistant environment forms reencrypted content data by reencrypting the content data with a locally generated player application encrypting key, wherein the locally generated player application key requires less processing utilization than the first decrypting key to provide real-time decryption of the content data.

9. A user'"'"'s system for securely receiving data from a web broadcast infrastructure with a plurality of channels, comprising:

a receiver for receiving promotional metadata from a broadcast channel, the promotional metadata related to data available for reception;

a controller for controlling the receiver to receive encrypted content data from the broadcast channel, the encrypted content data selected from the promotional metadata, and wherein the encrypted content data has been previously encrypted using a first encrypting key having a corresponding first decrypting key, wherein the first decrypting key has been encrypted with a second encrypting key of a trusted third party;

a single player application for rendering the encrypted content data;

an emulator to enable the single player application of the encrypted content data to receive content data over the broadcast channel as if the single player application is receiving the encrypted content data from a telecommunication infrastructure, thereby enabling the single player application to perform the following steps regardless from where the encrypted content has been received;

transferring to the trusted third party the encrypted first decrypting key, which has been encrypted with the second encrypting key;

receiving the encrypted first decrypting key, which has been decrypted by the trusted third party and re-encrypted with a user'"'"'s system key; and

decrypting, in a tamper resistant environment of the single player application, the encrypted first decrypting key with the user'"'"'s system key,

decrypting, on the user'"'"'s system in a tamper resistant environment, the encrypted first decrypting key with the user'"'"'s system key;

wherein the tamper resistant environment forms reencrypted content data by reencrypting the content data with a locally generated player application encrypting key, wherein the locally generated player application key requires less processing utilization than the first decrypting key to provide real-time decryption of the content data;

wherein the receiver is adapted to receive encrypted content data broadcasted in a format compatible with DirecPC™

.

10. The user'"'"'s system as defined in claim 9, wherein the encrypted content data, includes a network address of the trusted third party.

11. The user'"'"'s system as defined an claim 9, wherein the controller further comprises:

a schedule derived from the promotional metadata wherein the schedule is used to control the receiver to receive encrypted content data from the broadcast channel.