Transferring electronic content

• US 7,337,332 B2
• Filed: 07/10/2001
• Issued: 02/26/2008
• Est. Priority Date: 10/24/2000
• Status: Expired due to Term

• Current Assignee: Synamedia Limited
• Original Assignee: NDS Limited (Cisco Systems, Inc.)
• Inventors: Wald, Stephanie, Tsuria, Yossi
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Tran; Tongoc
• Application Number:
  US10/399,747
• Publication Number:
  US 20040030898A1
• Time in Patent Office: 2,422 Days
• Field of Search: 380/47, 380 28- 30, 380/281, 380/283, 380/284, 713/193, 713/169, 713/170, 713/171, 713/172, 705/64, 705/65, 705/67, 705/71
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management

Abstract

A method and apparatus for transferring electronic content. The method and apparatus include providing electronic content to a first user, providing the first user with a key packet, the key packet including a decryption key and content rights information, transferring the electronic content and the key packet from the first user to a second user and rendering rights of the first user to the electronic content unusable upon transfer of the electronic content and the key packet from the first user to the second user.

Claims

1. A method for transferring electronic content including multiple portions, comprising:

providing electronic content to a first user via a first user'"'"'s smart card enabled device;

providing the first user with a first key packet useful by said first user'"'"'s smart card enabled device for decrypting said electronic content, said first key packet comprising a first main decryption key and a plurality of dependent decryption keys encrypted by said first main key, each of said plurality of dependent decryption keys being useful for decrypting at least one of said multiple portions of said electronic content, said first key packet being operative to enable creation of a second key packet, at said first user'"'"'s smart card enabled device, comprising a second main decryption key and said plurality of dependent decryption keys, at least some of which are encrypted by said second main key; and

transferring of said electronic content and said second key packet from the first user to a second user.

2. The method according to claim 1 and further comprising rendering rights of the first user to said first key packet unusable upon transfer of said electronic content and said second key packet from the first user to the second user.

3. The method according to claim 1 wherein said electronic content and said first key packet are stored in a first content reader comprised in said first user'"'"'s smart card enabled device and the step of transferring comprises transferring said electronic content and said second key packet from said first content reader to a second content reader comprised in a second user'"'"'s smart card enabled device.

4. The method according to claim 3 wherein a security device is used to secure communication between said first and second content readers.

5. The method according to claim 4 wherein said security device comprises a first smart card associated with said first content reader which communicates with a second smart card associated with said second content reader.

6. The method according to claim 5 and further comprising rendering rights of the first user to said first key packet unusable upon transfer of said electronic content and said second key packet from the first user to the second user, wherein said rendering comprises using said first smart card to mark at least one of the following as being unfit for use by said first content reader:

said electronic content; and

said first key packet.

7. The method according to claim 5 wherein said first and second smart cards carry out a mutual authentication process so as to establish a secure session between said first and second content readers.

8. The method according to claim 7 wherein said mutual authentication process comprises a mutual zero-knowledge interaction authentication process.

9. The method according to claim 1 and further comprising:

sending a key encryption key from said second user to said first user, said second main decryption key comprising said key encryption key.

10. The method according to claim 5 wherein said second smart card delivers a transfer request message to said first smart card prior to said transferring of said electronic content and said second key packet.

11. The method according to claim 3 wherein if said second content reader sends a confirmation of receipt to said first content reader, said first content reader deletes the now-unusable first key packet.

12. The method according to claim 3 wherein if said second content reader sends a confirmation of receipt to said first content reader, said first content reader deletes said electronic content.

13. Apparatus for transferring electronic content including multiple portions, comprising:

a content provider for providing electronic content to a first user via a first user'"'"'s smart card enabled device;

a key packet provider for providing the first user with a first key packet useful by said first user'"'"'s smart card enabled device for decrypting said electronic content, said first key packet comprising a first main decryption key and a plurality of dependent decryption keys encrypted by said first main key, each of said plurality of dependent decryption keys being useful for decrypting at least one of said multiple portions of said electronic content, said first key packet being operative to enable creation of a second key packet, at said first user'"'"'s smart card enabled device, comprising a second main decryption key and said plurality of dependent decryption keys, at least some of which are encrypted by said second main key; and

a content transferor for transferring of said electronic content and said second key packet from the first user to a second user.

14. Apparatus for transferring electronic content including multiple portions, comprising:

means for providing electronic content to a first user via a first user'"'"'s smart card enabled device;

means for providing the first user with a first key packet useful by said first user'"'"'s smart card enabled device for decrypting said electronic content, said first key packet comprising a first main decryption key and a plurality of dependent decryption keys encrypted by said first main key, each of said plurality of dependent decryption keys being useful for decrypting at least one of said multiple portions of said electronic content, said first key packet being operative to enable creation of a second key packet, at said first user'"'"'s smart card enabled device, comprising a second main decryption key and said plurality of dependent decryption keys, at least some of which are encrypted by said second main key; and

means for transferring of said electronic content and said second key packet from the first user to a second user.