Trusted and secure techniques, systems and methods for item delivery and execution

• US 7,281,133 B2
• Filed: 04/07/2005
• Issued: 10/09/2007
• Est. Priority Date: 02/13/1995
• Status: Expired due to Fees

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Ginter, Karl L., Weber, Robert P., Spahn, Francis J., Shear, Victor H., Van Wie, David M.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Brown; Christopher J.
• Application Number:
  US11/102,514
• Publication Number:
  US 20050246541A1
• Time in Patent Office: 915 Days
• Field of Search: 713/176, 713/165, 713/181
• US Class Current: 713/176
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/24 : Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/389 : Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/401 : Transaction verification
• CPC Class Codes: G06T 1/0021 : Image watermarking
• CPC Class Codes: G07F 9/026 : for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 : Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copyright
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

Documents and other items can be delivered electronically from sender to recipient with a level of trustedness approaching or exceeding that provided by a personal document courier. A trusted electronic go-between can validate, witness and/or archive transactions while, in some cases, actively participating in or directing the transaction. Printed or imaged documents can be marked using handwritten signature images, seal images, electronic fingerprinting, watermarking, and/or steganography. Electronic commercial transactions and transmissions take place in a reliable, “trusted” virtual distribution environment that provides significant efficiency and cost savings benefits to users in addition to providing an extremely high degree of confidence and trustedness. The systems and techniques have many uses including but not limited to secure document delivery, execution of legal documents, and electronic data interchange (EDI).

Claims

1. A system including:

a first apparatus including

user controls,

a communications port,

a processor,

a memory containing

a first rule;

a first secure container containing a file, the file including one or more of audio data, video data, image data, or text data, the first secure container having associated a second rule, the second rule governing, at least in part, access to or other use of at least a portion of the file; and

one or both of hardware or software used for receiving and opening secure containers, at least some of said secure containers including the capacity to contain at least one governed item, and having at least one rule associated therewith;

a protected processing environment at least in part protecting at least some information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including one or both of hardware or software used for applying said first rule and said second rule in combination to at least in part govern at least one aspect of access to or use of said file; and

one or both of hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses, or for both transmission of secure containers to other apparatuses and the receipt of secure containers from other apparatuses;

a second apparatus, said second apparatus including

user controls,

a communications port,

a processor,

a memory containing a third rule,

one or both of hardware or software used for receiving and opening secure containers, at least some of said secure containers including the capacity to contain at least one governed item, and having at least one rule associated therewith;

a protected processing environment at least in part protecting at least some information contained in said protected processing environment from tampering by a user of said second apparatus, said protected processing environment including one or both of hardware or software used for applying said third rule and one or more rules associated with secure containers in combination to at least in part govern at least one aspect of access to or use of said governed item; and

one or both of hardware or software used for transmission of secure containers to other apparatuses, or for the receipt of secure containers from other apparatuses, or for both transmission of secure containers to other apparatuses and the receipt of secure containers from other apparatuses.

2. A system as in claim 1, said system further including at least one electronic intermediary.

3. A system as in claim 2, said intermediary residing at said first apparatus.

4. A system as in claim 2, said intermediary being distributed between at least two locations, said two locations comprising said first apparatus and said second apparatus.

5. A system as in claim 3, said first apparatus including a communications server at least in part facilitating communications between an internal network and a public network.

6. A system as in claim 5, wherein said public network constitutes the internet.

7. A system as in claim 2, said intermediary constituting at least a portion of an apparatus operated by a communications service provider.

8. A system as in claim 2, said intermediary including one or both of digital signature hardware or digital signature software operatively connected to allow application of a digital signature to an item.

9. A system as in claim 2, said intermediary including one or both of hash hardware or hash software operatively connected to allow calculation of a hash value based on an item.

10. A system as in claim 2, said intermediary including one or both of electronic seal hardware or electronic seal software operatively connected to allow application of a electronic seal to an item.

11. A system as in claim 2, said intermediary including one or both of audit trail hardware or audit trail software operatively connected to record and store audit information relating to an item.

12. A system as in claim 11, in which said intermediary audit information includes information regarding at least one transmission of said item.

13. A system as in claim 11, in which said intermediary audit information includes information regarding at least one access to said item.

14. A system as in claim 2, said intermediary including one or both of time stamp hardware or time stamp software operatively connected to provide time information.

15. A system as in claim 14, said intermediary including one or both of time certification hardware or time certification software operatively connected to said one or both of time stamp hardware or time stamp software, said time certification including one or more of certification of time of transmission, receipt or use of an item.

16. A system as in claim 2, said intermediary including one or both of auditing hardware or auditing software operatively connected to provide auditing services.

17. A system as in claim 2, said intermediary including one or both of authentication hardware or authentication software.

18. A system as in claim 17, in which said one or both of authentication hardware or authentication software is operatively connected to at least in part authenticate governed items.

19. A system as in claim 17, in which said one or both of authentication hardware or authentication software is operatively connected to at least in part authenticate one or both of a sender of a governed item or a site responsible for sending a governed item.

20. A system as in claim 17, in which said one or both of authentication hardware or authentication software is operatively connected to at least in part authenticate one or both of a recipient of a governed item or a site at which a governed item is received.

21. A system as in claim 2, said intermediary including one or both of auction hardware or auction software operatively connected to provide electronic auction services.

22. A system as in claim 2, said intermediary including one or both of transaction clearing hardware or transaction clearing software operatively connected to provide services relating to clearing transactions.

23. A system as in claim 22, said transaction clearing services including payment-related services.

24. A system as in claim 23, said transaction clearing services including audit-related services.

25. A system as in claim 2, said intermediary including one or both of certification hardware or certification software operatively connected to provide certification services.

26. A system as in claim 25, said certification services including the creation of digital certificates.

27. A system as in claim 2, said intermediary including one or both of currency hardware or currency software operatively connected to provide currency-related services.

28. A system as in claim 27, said currency-related services including currency conversion.

29. A system as in claim 2, said intermediary including a secure archive.

30. A system as in claim 29, said secure archive including receipt-related information.

31. A system as in claim 29, said secure archive including information about transmissions of one or more items.

32. A system as in claim 29, said secure archive including identification information relating to one or more items.

33. A system as in claim 29, said secure archive including authentication information relating to one or more items.

34. A system as in claim 29, said secure archive authentication information including at least one hash value of at least a portion of an item.

35. A system as in claim 29, said secure archive including information relating to one or more controls.

36. A system as in claim 2, said intermediary including one or both of transmission hardware or transmission software operatively connected to receive items from other apparatuses and to transmit items to other apparatuses.

37. A system as in claim 36, said one or both of transmission hardware or transmission software operatively connected to provide store and forward services.

38. A system as in claim 2, said intermediary including one or both of cryptographic key repository hardware or cryptographic key repository software operatively connected to maintain a repository of cryptographic keys.

39. A system as in claim 2, said intermediary including a user rights authority clearinghouse.

40. A system as in claim 39, said user rights authority clearinghouse operatively connected to make rights available to users.