Secure content activation during manufacture of mobile communication devices

• US 7,367,059 B2
• Filed: 05/30/2002
• Issued: 04/29/2008
• Est. Priority Date: 05/30/2002
• Status: Expired due to Fees

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Tuoriniemi, Samuli, Hurst, Leon
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): ABEDIN, SHANTO
• Application Number:
  US10/161,069
• Publication Number:
  US 20030226030A1
• Time in Patent Office: 2,161 Days
• Field of Search: 713/193, 713/165, 713/158, 713/173, 713/189, 455/558, 455/572, 380/247, 380/201, 380/203, 726/26
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method and apparatus for activating protected content on a portable memory device when the portable memory device is incorporated into a mobile terminal during the manufacture of the mobile terminal. During manufacturing, the portable memory device is coupled to the mobile terminal, and the mobile terminal is powered on. An activation program resident on the mobile terminal is executed upon power on of the mobile terminal. The activation program imports a secure rights database of rights files from the portable memory device, activates an active rights database resident on the mobile terminal based on the imported secure rights database, and disables the secure rights database on the portable memory device to prevent subsequent unauthorized use of the portable memory device.

Claims

1. A method for activating a mobile terminal for use with a portable memory device during production of the mobile terminal, the method comprising:

coupling the portable memory device to the mobile terminal;

powering on the mobile terminal; and

executing a mobile terminal-resident program which;

imports from the portable memory device a secure rights database of rights files;

locates an encryption key stored in the mobile terminal;

activates an active rights database resident on the mobile terminal based on the imported secure rights database by decrypting the imported secure rights database using the encryption key and updating the active rights database to include the rights files associated with the imported secure rights database; and

disables the secure rights database on the portable memory device, wherein coupling the portable memory device to the mobile terminal, powering on the mobile terminal, and executing the mobile terminal-resident program are performed as one or more assembly line functions during production of the mobile terminal.

2. The method of claim 1, further comprising powering down the mobile terminal after disabling the secure rights database on the portable memory device.

3. The method of claim 1, wherein the mobile terminal-resident program further receives a memory device identifier unique to the portable memory device, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the memory device identifier.

4. The method of claim 1, wherein the mobile terminal-resident program further derives an encryption key from a plurality of parameters including a secret key hidden within the mobile terminal-resident program and a memory device identifier unique to the portable memory device, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the derived encryption key.

5. The method of claim 1, wherein the mobile terminal-resident program further locates a particular one of a plurality of encryption keys in an encryption key bank stored with the mobile terminal-resident program, wherein the particular encryption key was previously used to encrypt the secure rights databases stored on a group of portable memory devices including the portable memory device coupled to the mobile terminal, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the particular encryption key from the encryption key bank.

6. The method of claim 1, wherein executing a mobile terminal-resident program comprises executing a mobile terminal-resident program which imports the secure rights database and disables the secure rights database by moving the secure rights database to the mobile terminal-resident program, thereby leaving no secure rights database on the portable memory device.

7. The method of claim 1, wherein executing a mobile terminal-resident program comprises executing a mobile terminal-resident program that disables the secure rights database by deleting the secure rights database on the portable memory device.

8. The method of claim 1, wherein executing a mobile terminal-resident program comprises executing a mobile terminal-resident program that disables the secure rights database by obscuring data associated with the secure rights database on the portable memory device.

9. The method of claim 8, wherein obscuring data associated with the secure rights database comprises overwriting the data associated with the secure rights database with data different from the data associated with the secure rights database.

10. The method of claim 1, wherein executing a mobile terminal-resident program comprises executing a mobile terminal-resident program which further searches for and locates the secure rights database on the portable memory device prior to importing the secure rights database.

11. The method of claim 1, wherein executing a mobile terminal-resident program comprises automatically initiating the mobile terminal-resident program upon power on of the mobile terminal.

12. The method of claim 1, wherein executing a mobile terminal-resident program comprises semi-automatically initiating the mobile terminal-resident program by activating at least one user-interface mechanism on the mobile terminal.

13. The method of claim 1, wherein powering on the mobile terminal comprises applying power to the mobile terminal and turning on the mobile terminal after the portable memory device has been coupled to the mobile terminal.

14. The method of claim 1, wherein coupling the portable memory device to the mobile terminal comprises inserting the portable memory device into a receptacle on the mobile terminal configured to receive the portable memory device.

15. The method of claim 1, further comprising pre-prograrnming the portable memory device to include protected content and the secure rights database.

16. The method of claim 1, further comprising activating protected content on the portable memory device for post-production use via the mobile terminal by utilizing at least one of the rights files in the active rights database to decrypt the protected content if the corresponding rights file authorizes use of the protected content.

17. A mobile terminal comprising:

a removable memory card having stored thereon one or more items of secure content, and a secure rights database of rights files for enabling use of the secure content;

an active rights database;

a storage module for storing an activation program;

a processor configured to execute the activation program upon initiation of the activation program during production of the mobile terminal, wherein execution of the activation program performs steps comprising;

(a) importing the secure rights database from the removable memory card;

(b) locating en encryption key stored in the mobile terminal;

(c) decrypting the imported secure rights database using the encryption key;

(d) updating the active rights database to include the rights files associated with the decrypted secure rights database; and

(e) disabling the secure rights database on the removable memory card; and

wherein the processor is further configured to activate protected content post-production use by utilizing at least one of the rights files in the active rights database to decrypt the protected content if the corresponding rights file authorizes use of the protected content.

18. The mobile terminal as in claim 17, wherein the processor is further configured to execute the activation program to perform the step comprising receiving a memory card identifier unique to the removable memory card, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the memory card identifier.

19. The mobile terminal as in claim 17, wherein the processor is further configured to execute the activation program to perform the step comprising deriving an encryption key from a plurality of parameters including a secret key hidden within the activation program and a memory card identifier unique to the removable memory card, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the derived encryption key.

20. The mobile terminal as in claim 17, wherein the processor is further configured to execute the activation program to perform the step comprising locating a particular one of a plurality of encryption keys in an encryption key bank stored with the mobile terminal-resident program, wherein the particular encryption key was previously used to encrypt the secure rights databases stored on a group of removable memory cards including the removable memory card of the mobile terminal, and wherein decrypting the imported secure rights database comprises decrypting the imported secure rights database using the particular encryption key from the encryption key bank.

21. The mobile terminal as in claim 17, wherein the mobile terminal is at least one of a mobile telephone, personal digital assistant, portable computing device, and mobile music player.

22. The mobile terminal as in claim 17, wherein the removable memory card comprises at least one of a read/write memory card capable of being read from and written to and a read-only memory (ROM).

23. An assembly line process for manufacturing mobile terminals, comprising:

installing an activation program on a mobile terminal, wherein the activation program is capable of performing steps comprising;

(a) importing from a portable memory device a secure rights database of rights files;

(b) locates an encryption key stored in the mobile terminal;

(c) activating an active rights database resident on the mobile terminal based on the imported secure rights database by decrypting the imported secure rights database using the encryption key and updating the active rights database to include the rights files associated with the imported secure rights database; and

(d) disabling the secure rights database on the portable memory device;

inserting the portable memory device into the mobile terminal;

powering on the mobile terminal and executing the activation program in response thereto; and

powering off the mobile terminal upon completion of execution of the activation program, and wherein inserting the portable memory device into the mobile terminal, powering on the mobile terminal, and executing the activation program are performed as one or more assembly line functions during production of the mobile terminal.