Systems and methods for content distribution using one or more distribution keys

• US 7,353,541 B1
• Filed: 09/07/2000
• Issued: 04/01/2008
• Est. Priority Date: 09/07/1999
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Shirai, Taizou, Oishi, Tateo, Ishibashi, Yoshihito, Muto, Akihiro, Kitahara, Jun
• Primary Examiner(s): Lanier; Benjamin E.
• Application Number:
  US09/831,071
• Time in Patent Office: 2,763 Days
• Field of Search: None
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G10K 15/04 Sound-producing devices G10K15/02 takes precedence
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00166 involving measures which result in a restriction to authorised contents recorded on or reproduced from a record carrier, e.g. music or software
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04N 2005/91342 the copy protection signal being an authentication signal
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4532 involving end-user characteristics, e.g. viewer profile, preferences monitoring of user activities for profile generation for accessing a video database G06F16/739; user profiles in network data switching protocols H04L67/306; processing of user preferences or user profiles in wireless networks H04W8/18
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 5/9206 the additional signal being a character code signal
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

An information receiving apparatus receives identification information and encrypted identification information and makes a comparison between them to allow prevention of illegal utilization of contents data. Also, a data storage apparatus can record contents data encrypted by a content key and the content key so that the contents data can be reproduced on other apparatuses to improve versatility. Moreover, a management apparatus can manage the contents data in the data storage apparatus to allow other apparatuses to utilize it. And also, an information regulating apparatus can verify a signature on available data to prevent illegal utilization of the contents data. Furthermore, the data storage apparatus can store the content key, its handling policies, the contents data encrypted by the content key and its license conditions information so as to safely provide the contents data. In addition, an information recording apparatus can select favorite contents data and store it on the data storage apparatus. Furthermore, the information receiving apparatus can prevent utilization of provision-prohibited contents data by a provision prohibition list.

Claims

1. A multimedia content delivery system for sending predetermined content data from an information sending apparatus to an information receiving apparatus, wherein the information sending apparatus comprises:

means for holding first identification information with an individual key, wherein the first identification information identifies the information sending apparatus and the individual key is unique to the information sending apparatus, and further wherein the first identification information with the individual key is encrypted by a distribution key that is unique to the information receiving apparatus;

means for adding second identification information to the content data, wherein the second identification information is identical to the first identification information;

means for encrypting the second identification with the content data by a content key;

means for encrypting the content key by the individual key;

means for sending the encrypted first identification information with the individual key, the encrypted second identification information with the content data, and the encrypted content key to the information receiving apparatus; and

wherein the information receiving apparatus comprises;

means for holding the distribution key;

means for receiving the encrypted first identification information with the individual key, the encrypted second identification information with the content data, and the encrypted content key to the information receiving apparatus;

means for decrypting the encrypted first identification information with the individual key using the distribution key to acquire the first identification information and the individual key;

means for decrypting the encrypted content key using the individual key to acquire the content key;

means for decrypting the encrypted second identification information with the content data by using the content key to acquire the second identification information and the content data; and

means for comparing the first identification information with the second identification information.

2. The delivery system of claim 1, wherein the information sending apparatus further comprises:

means for generating handling policies prescribing conditions for using the content data and for storing the first or second identification information; and

means for adding the handling policies to the content data.

3. The delivery system of claim 1, wherein the means for adding the second identification to the content data uses an electronic watermark.

4. The delivery system of claim 1, wherein the information sending apparatus further comprises:

means for adding signature data to the encrypted content key and the encrypted first identification data,

wherein the information receiving apparatus comprises means for verifying the signature data.

5. The delivery system of claim 4, wherein the information sending apparatus further comprises:

means for holding a plurality of different encrypted content data aggregated as album content data, and

means for adding the signature data to the album content data; and

the information receiving apparatus further comprises;

means for verifying the signature data added to the album content data, and

means for omitting verification of the signature data added to each of the plurality of encrypted content data upon verifying that the album content data is correct.

6. The delivery system of claim 5, wherein the information sending apparatus further comprises:

means for holding album key data that corresponds to the album content data, wherein the album key data comprises a plurality of the encrypted content keys with signature data and the encrypted first identification information with signature data; and

means for adding the signature data to the album key data; and

the content receiver further comprises;

means for verifying the signature data added to the album key data, and

means for omitting verification of the signature data added to the plurality of encrypted content keys and the encrypted first identification information stored in the album key respectively upon verifying that the album key data is correct.

7. The delivery system of claim 6, wherein the information sending apparatus further comprises:

means for generating content handling policies prescribing conditions for using the content data and for storing the first or second identification information;

means for adding the signature data to the content handling policies;

means for holding album handling policies that correspond to the album content data, wherein the album handling policies comprise a plurality of the content handling policies; and

means for adding the signature data to the album handling policies; and

the information receiving apparatus further comprises;

means for verifying the signature data added to the album handling policies, and

means for omitting verification of the signature data added to the content handling policies stored in the album handling policies upon verifying that the album handling policies are correct.

8. The delivery system of claim 7, wherein the information sending apparatus further comprises:

means for creating content price information that shows a price for the content data and adding the signature data to the content price information;

means for holding album price information data that corresponds to the album content data, wherein the album price information data comprises a plurality of the content price information; and

means for adding the signature to the album price information data; and

the information receiving apparatus further comprises;

means for verifying the signature data added to the album price information data; and

means for omitting verification of the signature data added to the plurality of content price information upon verifying that the album price information data is correct.

9. The delivery system of claim 8, wherein the information sending apparatus further comprises:

means for storing content signature verification information in the content handling policies which represent whether or not the signature data added to the encrypted content data should be verified; and

the information receiving apparatus comprises;

means for verifying the signature data added to the encrypted content data when instructed to by the content signature verification information.

10. The delivery system of claim 9, wherein the information sending apparatus further comprises:

means for storing album content signature verification information in the content handling policies which represent whether or not the signature data added to the album content data should be verified; and

the information receiving apparatus comprises;

means for verifying the signature data added to the album content data when instructed to by the album content signature verification information.

11. The delivery system of claim 8, wherein the information sending apparatus further comprises:

means for storing content price signature verification information in the content price information which represents whether or not the signature data added to the encrypted content data should be verified; and

the information receiving apparatus comprises;

means for verifying the signature data added to the encrypted content data when instructed to by the content price signature verification information.

12. The delivery system of claim 11, wherein the information sending apparatus further comprises:

means for storing album content price signature verification information in the content price information which represents whether or not the signature data added to the album content data should be verified; and

the information receiving apparatus comprises;

means for verifying the signature data added to the album content data in accordance with the album content price signature verification information.

13. A multimedia content delivery method for sending predetermined content data from an information sending apparatus to an information receiving apparatus, the method comprising:

holding first identification information with an individual key, wherein the first identification information identifies the information sending apparatus and the individual key is unique to the information sending apparatus, and further wherein the first identification information with the individual key is encrypted by a distribution key that is unique to the information receiving apparatus;

adding second identification information to the content data, wherein the second identification information is identical to the first identification information encrypting the second identification with the content data by a content key;

encrypting the content key by the individual key;

sending the encrypted first identification information with the individual key, the encrypted second identification information with the content data, and the encrypted content key to the information receiving apparatus, where the information is stored in memory.

14. The method of claim 13 further comprising:

generating handling policies prescribing conditions for using the content data and for storing the first or second identification information; and

adding the handling policies to the content data.

15. The method of claim 13, wherein adding the second identification to the content data further comprises using an electronic watermark.

16. The method of claim 13, further comprising:

adding signature data to the encrypted content key and the encrypted first identification data.

17. The method of claim 16, further comprising:

holding a plurality of different encrypted content data aggregated as album content data, and

adding the signature data to the album content data.

18. The method of claim 17, further comprising:

holding album key data that corresponds to the album content data, wherein the album key data comprises a plurality of the encrypted content keys with signature data and the encrypted first identification information with signature data; and

adding the signature data to the album key data.

19. The method of claim 18, further comprising:

generating content handling policies prescribing conditions for using the content data and for storing the first or second identification information;

adding the signature data to the content handling policies;

holding album handling policies that correspond to the album content data, wherein the album handling policies comprise a plurality of the content handling policies; and

adding the signature data to the album handling policies.

20. The method of claim 19, further comprising:

creating content price information that shows a price for the content data and adding the signature data the content price information;

holding album price information data that correspond to the album content data, wherein the album price information data comprises a plurality of the content price information; and

adding the signature to the album price information data.

21. The method of claim 20, further comprising:

storing content signature verification information in the content handling policies which represent whether or not the signature data added to the encrypted content data should be verified.

22. The method of claim 21, further comprising:

storing album content signature verification information in the content handling policies which represent whether or not the signature data added to the album content data should be verified.

23. The method of claim 20, further comprising:

storing content price signature verification information in the content price information which represents whether or not the signature data added to the encrypted content data should be verified.

24. The method of claim 23, further comprising:

storing album content price signature verification information in the content price information which represents whether or not the signature data added to the album content data should be verified.

25. A multimedia content receiving method for receiving predetermined content data at an information receiving apparatus from an information sending apparatus, the method comprising:

holding a distribution key that is unique to the information receiving apparatus; and

receiving, from the information sending apparatus, encrypted first identification information with an individual key, encrypted second identification information with content data, and an encrypted content key;

decrypting the encrypted first identification information with the individual key using the distribution key to acquire the first identification information and the individual key;

decrypting the encrypted content key using the individual key to acquire the content key;

decrypting the encrypted second identification information with the content data by using the content key to acquire the second identification information and the content data; and

comparing the first identification information to the second identification information, and storing the result in memory.

26. The method of claim 25, further comprising:

receiving content handling policies, added to the content data, for proscribing conditions for using the content data from the information sending apparatus; and

purchasing the content data by using the content handling policies if the first identification information matches the second identification information.

27. The method of claim 25, wherein the second identification information is included in the content data as an electronic watermark.

28. The method of claim 25, further comprising:

verifying signature data added to the encrypted content key and the encrypted first identification information; and

detecting whether or not the encrypted content key and the encrypted first identification information are illegal data that has been tampered with.

29. The method of claim 28, further comprising:

receiving, from the information sending apparatus, album content data as a plurality of different encrypted content data;

verifying signature data added to the album content data; and

omitting verification of the signature data added to each of the plurality of encrypted content data upon verifying that the album content data is correct.

30. The method of claim 29, further comprising:

receiving, from the information sending apparatus, album key data that corresponds to the album content data, wherein the album key data comprises a plurality of the encrypted content keys with signature data and the encrypted first identification information with signature data;

verifying signature data added to the album key data; and

omitting verification of the signature data added to the plurality of encrypted content keys and the encrypted first identification information stored in the album key respectively upon verifying that the album key data is correct.

31. The method of claim 28, further comprising:

receiving, from the information sending apparatus, album handling policies that correspond to the album content data, wherein the album handling policies comprise a plurality of content handling policies, and wherein the content handling policies prescribe conditions for using the content data and for storing the first or second identification information;

verifying the signature data added to the album handling policies; and

omitting verification of the signature data added to the content handling policies stored in the album handling policies upon verifying that the album handling policies are correct.

32. The method of claim 31, further comprising:

receiving, from the information sending apparatus, album price information data that correspond to the album content data, wherein the album price information data comprises a plurality of content price information, and wherein the content price information shows a price for the content data;

verifying the signature data added to the album price information data; and

omitting verification of the signature data added to the plurality of content price information upon verifying that the album price information data is correct.

33. The method of claim 32, further comprising:

receiving, from the information sending apparatus, content signature verification information in the content handling policies which represents whether or not the signature data added to the encrypted content data should be verified; and

verifying the signature data added to the encrypted content data when instructed to by the content signature verification information.

34. The method of claim 33, further comprising:

receiving, from the information sending apparatus, album content signature verification information in the content handling policies which represent whether or not the signature data added to the album content data should be verified; and

verifying the signature data added to the album content data when instructed to by the album content signature verification information.

35. The method of claim 32, further comprising:

receiving content price signature verification information in the content price information which represents whether or not the signature data added to the encrypted content data should be verified; and

verifying the signature data added to the encrypted content data when instructed to by the content price signature verification information.

36. The method of claim 35, further comprising:

receiving, from the information sending apparatus, album content price signature verification information in the content price information which represents whether or not the signature data added to the album content data should be verified; and

verifying the signature data added to the album content data when instructed to by the album content price signature verification information.