Data copyright management system

• US 7,302,415 B1
• Filed: 01/03/2000
• Issued: 11/27/2007
• Est. Priority Date: 09/30/1994
• Status: Expired due to Fees

• Current Assignee: Piracy Protection LLC (LF Capital Partners, LLC)
• Original Assignee: Intarsia LLC (Intellectual Ventures LLC)
• Inventors: Saito, Makoto
• Primary Examiner(s): Abdi; Kambiz
• Application Number:
  US09/476,334
• Time in Patent Office: 2,885 Days
• Field of Search: 705/50, 705/51, 705/57, 380/278, 380/279, 380/283, 713/165, 713/167, 713/171, 713/176, 713/180, 713/182, 713/191, 713/193
• US Class Current: 705/57
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 50/184 Intellectual property management
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26613 : for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4408 : involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A data copyright management system comprises a database for storing original data, a key control center for managing crypt keys, copyright management center for managing data copyrights, and a communication network for connecting these sections. Data supplied from the database to users is encrypted and distributed. The users decrypts the encrypted data by crypt keys obtained from the key control center or copyright management center. To supply data to users, there are the following two methods: a one-way supplying of encrypted data to users by means of broadcasting or the like; and two-way supplying of encrypted data to users corresponding to users'"'"' requests. A crypt key system used for encrypting data uses a secret-key cryptosystem, a public-key cryptosystem or a cryptosystem combining a secret-key and a public-key and further uses a copyright control program to control data copyrights. When a user stores, copies, or transfers data, the data is encrypted by a crypt key different from a crypt key used for supplying the data. The former crypt key is supplied from the key control center or from the copyright management center, or generated by the copyright control program. The present invention can be applied to a data copyright management system for using not only single data but also a plurality of data supplied from a single database or a plurality of data supplied from a plurality of databases. Further, an apparatus to be used by the user to perform data copyright management is proposed.

Claims

1. A terminal device for managing a copyright of data

which is supplied as encrypted data from a database to a user, said terminal device comprising:

means for requesting use of said data by presenting a primary user information of the terminal device to said database;

means for receiving the encrypted data encrypted using a first secret-key together with the first secret-key and a second secret-key from the database;

means for decrypting said encrypted data to decrypted data using the first secret-key when the encrypted data is displayed;

means for encrypting the displayed data to re-encrypted data using the second secret-key; and

means for adding the primary user information to the re-encrypted data.

2. The terminal device according to claim 1, wherein

said means for encrypting comprises means for encrypting said displayed data to re-encrypted data when said displayed data is stored, copied or transferred.

3. A terminal device for managing a copyright of data

which is supplied as encrypted data from a database to a user, said terminal device comprising:

means for requesting the use of said data by presenting a primary user information of the terminal device to said database;

means for receiving the encrypted data encrypted using a first secret-key together with the first secret-key and a second secret-key from the database;

means for decrypting said encrypted data to decrypted data using the first secret-key when the encrypted data is processed;

means for encrypting the processed data to re-encrypted data using the second secret-key; and

means for adding the primary user information to the re-encrypted data.

4. The terminal device according to claim 3, wherein

said means for encrypting comprises means for encrypting said processed data to re-encrypted data when said processed data is stored, copied or transferred.

5. A terminal device for communicating with a copyright management system which

manages a copyright of data which is supplied as encrypted data from a database to a user,

said terminal device comprising:

means for receiving a first secret-key and a second secret-key from the copyright management system;

means for receiving encrypted data via a network, a satellite or a storage medium;

means for decrypting said encrypted data to decrypted data by using said first secret-key when said encrypted data is displayed; and

re-encrypting means for encrypting said displayed data to re-encrypted data by using said second secret-key;

means for disposing the first secret-key and the second secret-key when the re-encrypted data is copied or transferred; and

means for requesting a retransfer of the second secret-key for using re-encrypted data by presenting the primary user information of the terminal device to the copyright management system so that the second secret-key is retransferred;

wherein the copying or transferring of said re-encrypted data is registered in the copyright management system according to the retransfer of said second secret-key.

6. The terminal device according to claim 5, further comprising:

means for requesting the use of said re-encrypted data to the copyright management system by presenting the primary user information which was added to the re-encrypted data when the re-encrypted data is used as a secondary user; and

means for receiving a second secret-key and a third secret-key from the copyright management system,

wherein the means for decrypting comprises means for decrypting said re-encrypted data using the second secret-key when the re-encrypted data is displayed or processed, wherein the encrypting means comprises means for re-encrypting the displayed or processed data using a third secret-key when the displayed or processed data is stored, copied or transferred and

means for adding a secondary user information to the re-encrypted data.

7. A data copyright management system for managing the copyright of data which is supplied as encrypted data from a database to a user, said data copyright management system comprising:

a database;

a key control center; and

a copyright management center,

wherein the database includes means for distributing encrypted data in which data was encrypted by a first secret-key to a primary user terminal via a communication network, a satellite or a storage medium, and

wherein the key control center includes;

means for receiving a request of use presenting a primary user information from the primary user terminal;

means for transferring the primary user information to the copyright management center;

means for transferring a copyright management program together with the first secret-key for decrypting the encrypted data and the second secret-key for re-encrypting decrypted data, to the primary user terminal via the communication network; and

means for receiving a retransfer request of the second secret-key for re-using the re-encrypted data from the primary user terminal.

10. The data copyright management system according to claim 7, 8, or 9, wherein the copying or transferring of said re-encrypted data is registered in the copyright management system according to the retransfer of said second secret-key.

11. The data copyright management system according to claim 10, wherein the copyright management center further comprises:

means for receiving a request of use presenting a primary user information from a secondary user terminal; and

means for transferring said second secret-key, a third secret-key and said copyright control program to said secondary user terminal.

8. A data copyright management system for managing

the copyright of data which is supplied as encrypted data from a database to a user, said data

copyright management system comprising:

a database; and

a copyright management center,

wherein the database includes means for distributing encrypted data in which data was encrypted by a first secret-key to a primary user terminal via a communication network, a satellite or a storage medium, and

wherein the copyright management center includes;

means for receiving a request of use presenting a primary user information from the primary user terminal;

means for transferring a copyright management program together with the first secret-key for decrypting the encrypted date and the second secret-key for re-encrypting the decrypted data, to the primary user terminal via the communication network; and

means for receiving a request of re-transfer of the second secret-key for re-using the re-encrypted data from the primary user terminal.

9. A data copyright management system for managing

the copyright of date which is supplied as encrypted data from a database to a user, said data copyright management system comprising:

a database; and

a copyright management center,

wherein the database includes;

means for receiving a request of use presenting a primary user information from the primary user terminal;

means for transferring the first secret-key for encrypting the requested data by the first secret-key and decrypting the encrypted data, the second secret-key for re-encrypting the decrypted data and a copyright management program, to the primary user terminal via the communication network;

means for transferring the primary user information to the copyright management center

means for receiving a request of retransfer of the second secret-key for reusing the re-encrypted data from the primary user terminal.

12. A data copyright management method for managing data which is supplied as encrypted data from a database to a user, executed in a data copyright management system which includes a database, a key control center and a copyright management center, said data copyright management method comprising:

the database executing distributing encrypted data in which data was encrypted by a first secret-key to a primary user terminal via a communication network, a satellite or a storage medium; and

the key control center executing;

receiving a request of use presenting a primary user information from the primary user terminal;

transferring the primary user information to the copyright management center;

transferring a copyright management program together with the first secret-key for decrypting the encrypted data and the second secret-key for re-encrypting the decrypted data to the primary user terminal via the communication network; and

receiving a request of retransfer of the second secret-key for re-using the re-encrypted data from the primary user terminal.

13. A data copyright management method for managing data which is supplied as encrypted data from a database to a user, executed in a data copyright management system which includes a database and a copyright management center, said data copyright management method comprising:

the database executing distributing encrypted data in which data was encrypted by a first secret-key to a primary user terminal via a communication network, a satellite or a storage medium; and

the copyright management center executing;

receiving a request of use presenting a primary user information from the primary user terminal;

transferring the primary user information to the copyright management center;

transferring a copyright management program together with the first secret-key for decrypting the encrypted data and the second secret-key for re-encrypting the encrypted data, to the primary user terminal via the communication network; and

receiving a request of retransfer of the second secret-key for re-using the re-encrypted data from the primary user terminal.