Method for controlling database copyrights

• US 7,383,447 B2
• Filed: 07/25/2005
• Issued: 06/03/2008
• Est. Priority Date: 04/01/1994
• Status: Expired due to Fees

• Current Assignee: Piracy Protection LLC (LF Capital Partners, LLC)
• Original Assignee: Intarsia Software LLC (Intellectual Ventures LLC)
• Inventors: Saito, Makoto
• Primary Examiner(s): Song; Hosuk
• Application Number:
  US11/190,177
• Publication Number:
  US 20050262023A1
• Time in Patent Office: 1,044 Days
• Field of Search: 713/180, 713/155, 713/193, 713/189, 380/47, 380/51, 380/259, 380/277, 380/280, 380/281, 380/201, 380/203, 705 57- 59, 705/62, 705/51, 726 26- 31, 726/33, 726/34
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00224 wherein the key is obtained from a remote server
• CPC Class Codes: H04H 60/23 using cryptography, e.g. encryption, authentication, key distribution
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04N 1/32128 attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image for information embedded in the image H04N1/32144
• CPC Class Codes: H04N 1/4406 Restricting access, e.g. according to user identity mechanisms actuated y cards, PIN or the like in apparatus for dispensing G07F7/08
• CPC Class Codes: H04N 1/4426 involving separate means, e.g. a server, a magnetic card
• CPC Class Codes: H04N 1/4433 to an apparatus, part of an apparatus or an apparatus function
• CPC Class Codes: H04N 1/444 to a particular document or image or part thereof
• CPC Class Codes: H04N 1/4486 using digital data encryption
• CPC Class Codes: H04N 2201/3246 of data relating to permitted access or usage, e.g. level of access or usage parameters for digital rights management [DRM] related to still images
• CPC Class Codes: H04N 2201/3281 Encryption; Ciphering

Abstract

A method and apparatus for controlling digital data management includes encrypting digital data to produce encrypted digital data supplied to a user, and using a utilization permit key pre-defined to permit at least one of displaying, editing, storing, copying, and transferring of said digital data.

Claims

1. A digital data management apparatus, comprising:

an input device configured to receive encrypted digital data and a permit key;

a first means for decrypting the encrypted digital data and for performing a set of functions, wherein the set of functions includes displaying, editing, storing, copying, and transferring said digital data,

wherein the first means is configured to authorize a user to display the decrypted digital data in response to the permit key having a value indicating that the user has display authorization,

wherein the first means is configured to authorize the user to edit the decrypted digital data in response to the authorize key having a value indicating that the user has edit authorization,

wherein the first means is configured to authorize the user to store a re-encrypted version of the decrypted digital data in response to the authorize key having a value indicating that the user has storage authorization,

wherein the first means is configured to authorize the user to copy a re-encrypted version of the decrypted digital data in response to the authorize key having a value indicating that the user has copy authorization,

wherein the first means is configured to authorize the user to transfer a re-encrypted version of the decrypted digital data in response to the authorize key having a value indicating that the user has transfer authorization.

2. The digital data management apparatus of claim 1, wherein the functions of said set are arranged in a hierarchy, wherein the first means is configured to automatically grant the user authorization for any function lower in the hierarchy than a given function whose authorization is indicated by the permit key.

3. The digital data management apparatus of claim 2, wherein said function of transferring is at the highest level of said hierarchy.

4. The digital data management apparatus of claim 2, wherein said function of editing is at the highest level of said hierarchy.

5. The digital data management apparatus of claim 1, wherein the first means is configured to manage utilization of the digital data, wherein said management includes selectively granting authorization for one or more of said displaying, said editing, said storing, said copying and said transferring based on the permit key.

6. The digital data management apparatus of claim 1, wherein the first means is configured to determine whether the decrypted digital data includes copyright information.

7. The digital data management apparatus of claim 6, wherein said copyright information includes original copyright information and edit copyright information added to said digital data by a copyright management program.

8. The digital data management apparatus of claim 6, wherein said copyright information must be present in order to use said decrypted digital data.

9. A computer readable storage medium having stored thereon program instructions, wherein the program instructions are executable by a computer system to:

receive encrypted digital data and a permit key;

decrypt the encrypted digital data;

grant a user authorization to display the decrypted digital data in response to the permit key having a value indicating that the user has display authorization;

grant the user authorization to edit the decrypted digital data in response to the permit key having a value indicating that the user has edit authorization;

grant the user authorization to store re-encrypted version of the decrypted digital data in response to the permit key having a value indicating that the user has storage authorization;

grant the user authorization to copy re-encrypted version of the decrypted digital data in response to the permit key having a value indicating that the user has copy authorization;

grant the user authorization to transfer a re-encrypted version of the decrypted digital data in response to the permit key having a value indicating that the user has transfer authorization.

10. The computer readable storage medium of claim 9, wherein functions including said displaying, said editing, said storing, said copying and said transferring are arranged in a hierarchy, wherein the granting of authorization to perform a given one of said functions automatically implies the granting of authorization to perform any functions in said hierarchy that are subordinate to said given function.

11. The computer readable storage medium of claim 10, wherein said function of transferring is at the highest hierarchy level.

12. The computer readable storage medium of claim 10, wherein said function of transferring is at the highest hierarchy level.

13. The computer readable storage medium of claim 9, wherein the instructions include a program for managing utilization of said digital data, wherein said managing utilization include controlling the granting of authorization for said displaying, said editing, said storing, said copying and said transferring to the user based on the permit key.

14. The computer readable storage medium of claim 13, wherein a first portion of the program instructions is executable by the computer system to receive the program with the encrypted digital data and/or with the permit key.

15. The computer readable storage medium of claim 9, wherein copyright information is received with said encrypted digital data and/or said permit key.

16. The computer readable storage medium of claim 15, wherein said copyright information includes original copyright information and edit copyright information added to said digital data by a copyright management program.

17. The computer readable storage medium of claim 15, wherein said copyright information must be present in order to use said decrypted digital data.

18. An apparatus, comprising:

a computing platform, said computing platform adapted to;

receive encrypted digital data and a permit key;

decrypt the encrypted digital data;

grant a user authorization to display the decrypted digital data in response to the permit key having a value indicating that the user has display authorization;

grant the user authorization to edit the decrypted digital data in response to the permit key having a value indicating that the user has edit authorization;

grant the user authorization to store a re-encrypted version of the decrypted digital data in response to the permit key having a value indicating that the user has storage authorization;

grant the user authorization to copy a re-encrypted version of the decrypted digital data in response to the permit key having a value indicating that the user has copy authorization;

grant the user authorization to transfer a re-encrypted version of the decrypted digital data in response to the permit key having a value indicating that the user has transfer authorization.

19. The apparatus of claim 18, wherein said functions including said displaying, said editing, said storing, said copying and said transferring are arranged in a hierarchy, wherein the granting of authorization to perform a given one of said functions automatically implies the granting of authorization to perform any functions in said hierarchy that are subordinate to said given function.

20. The apparatus of claim 19, wherein said function of transferring is at the highest level of said hierarchy.

21. The apparatus of claim 19, wherein said function of editing is at the highest level of said hierarchy.

22. The apparatus of claim 18, wherein said computing platform is further adapted to use a copyright management program for managing utilization of said digital data, wherein said managing of utilization includes controlling the granting of authorization for said displaying, said editing, said storing, said copying and said transferring based on the permit key.

23. The apparatus of claim 22, wherein said computing platform is further adapted to receive said copyright management program with said permit key and/or with said encrypted digital data.

24. The apparatus of claim 18, wherein said computing platform is further adapted to receive copyright information with said encrypted digital data.

25. The apparatus of claim 24, wherein said copyright information includes original copyright information and edit copyright information, wherein the edit copyright information is added to said decrypted digital data by a copyright management program.

26. The apparatus of claim 24, wherein said computing platform is further adapted to:

determine whether said copyright information is present; and

deny use of said digital data if the copyright information is not present.

27. A method for digital data management, the method comprising:

receiving a request for digital data, wherein the request is received from a first computer system;

in response to the request, providing to the first computer system an encrypted version of the digital data and a permit key, wherein the permit key corresponds to a user of the first computer system and has one a plurality of privilege levels, wherein the plurality of privilege levels includes at least five privilege levels;

wherein the permit key is usable on the first computer system to authorize the decryption and display of the digital data if the permit key has a first privilege level;

wherein the permit key is usable on the first computer system to authorize decrypting and editing of the digital data if the permit key has a second privilege level;

wherein the permit key is usable on the first computer system to authorize storing of an encrypted version of the digital data if the permit key has a third privilege level;

wherein the permit key is usable on the first computer system to authorize of an encrypted version of the digital data if the permit key has a fourth privilege level;

wherein the permit key is usable on the first computer system to authorize transferring of an encrypted version of the digital data if the permit key has a fifth privilege level.

28. The method of claim 27, wherein the plurality of privilege levels are arranged in a hierarchy, wherein authorization to use the digital data at a given level of the hierarchy automatically implies authorization to use the digital data any lower levels of the hierarchy.

29. The method of claim 28, wherein said fifth privilege level is a highest level of said hierarchy.

30. The method of claim 28, wherein said second privilege level is a highest level of said hierarchy.

31. The method of claim 27, further comprising:

sending the digital data to the first computer system, wherein the digital data is sent in an encrypted form.

32. The method of claim 27, further comprising:

generating the permit key in response to the user marking a payment for the permit key.

33. The method of claim 27, further comprising:

sending copyright information to the first computer system with the digital data or with the permit key.

34. The method of claim 27, further comprising:

sending a copyright management program to the first computer system, wherein the copyright management program is configured to execute on the first computer system and to control granting of authorization at one or more of said authorization levels based on the permit key.

35. A computer system comprising:

a processor; and

a memory that stores at least program instructions, wherein the program instructions are executable by the processor to;

receive a request for digital data, wherein the request is received from a remote computer system;

in response to the request, provide to the remote computer system an encrypted version of the digital data and a permit key, wherein the permit key corresponds to a user of the remote computer system and has one a plurality of privilege levels, wherein the plurality of privilege levels includes at least five privilege levels;

wherein the permit key is usable on the remote computer system to authorize the decryption and display of the digital data if the permit key has a first privilege level;

wherein the permit key is usable on the remote computer system to authorize decrypting and editing of the digital data if the permit key has a second privilege level;

wherein the permit key is usable on the remote computer system to authorize storing of an encrypted version of the digital data if the permit key has a third privilege level;

wherein the permit key is usable on the remote computer system to authorize copying of an encrypted version of the digital data if the permit key has a fourth privilege level;

wherein the permit key is usable on the remote computer system to authorize transferring of an encrypted version of the digital data if the permit key has a fifth privilege level.

36. The computer system of claim 35, wherein the plurality of privilege levels are arranged in a hierarchy, wherein authorization to use the digital data at a given level of the hierarchy automatically implies authorization to use the digital data any lower levels of the hierarchy.

37. The computer system of claim 36, wherein said fifth privilege level is a highest level of said hierarchy.

38. The computer system of claim 36, wherein said second privilege level is a highest level of said hierarchy.

39. The computer system of claim 35, wherein the program instructions are executable by the processor to send the digital data to the remote computer system, wherein the digital data is sent in an encrypted form.

40. The computer system of claim 35, wherein the program instructions are executable by the processor to generate the permit key in response to user making a payment.

41. The computer system of claim 35, wherein the program instructions are executable by the processor to send copyright information to the remote computer system, wherein the copyright information corresponds to an author of the digital data.

42. The computer system of claim 35, wherein the program instructions are executable by the processor to:

send a copyright management program to the user, wherein the copyright management program is sent in an encrypted form, wherein the copyright management program is configured to execute on the remote computer system and to control the granting of authorization at one or more of said by authorization levels based on the permit key.

43. A computer-readable memory medium which stores program instructions executable by a computer system to:

receive a request for digital data, wherein the request is received from a remote computer system;

in response to the request, provide to the remote computer system an encrypted version of the digital data and a permit key, wherein the permit key corresponds to a user of the remote computer system and has one a plurality of privilege levels, wherein the plurality of privilege levels includes at least five privilege levels;

wherein the permit key is usable on the remote computer system to authorize the decryption and display of the digital data if the permit key has a first privilege level;

wherein the permit key is usable on the remote computer system to authorize decrypting and editing of the digital data if the permit key has a second privilege level;

wherein the permit key is usable on the remote computer system to authorize storing of an encrypted version of the digital data if the permit key has a third privilege level;

wherein the permit key is usable on the remote computer system to authorize copying of an encrypted version of the digital data of the permit key has a fourth privilege level;

wherein the permit key is usable on the remote computer system to authorize transferring of an encrypted version of the digital data if the permit key has a fifth privilege level.

44. The memory medium of claim 43, wherein the plurality of privilege levels are arranged in a hierarchy, wherein authorization to use the digital data at a given level of the hierarchy automatically implies authorization to use the digital data any lower levels of the hierarchy.

45. The memory medium of claim 44, wherein said fifth privilege level is a highest level of said hierarchy.

46. The memory medium of claim 44, wherein said second privilege level is a highest level of said hierarchy.

47. The memory medium of claim 43, wherein the program instructions are executable by the computer system to send the digital data to the remote computer system, wherein the digital data is sent in an encrypted form.

48. The memory medium of claim 43, wherein the program instructions are executable by the computer system to generate the permit key for a user, wherein the permit key is generated with said privilege level based on a user payment.

49. The memory medium of claim 43, wherein the program instructions are executable by the computer system to send copyright information, corresponding to the digital data, to the remote computer system.

50. The memory medium of claim 43, wherein the program instructions are executable by the computer system to:

send a copyright management program to the user, wherein the copyright management program is configured to execute on the remote computer system and to control the granting of authorization for said displaying, said editing, said storing, said copying and said transferring based on the permit key.