Method and system to digitally sign and deliver content in a geographically controlled manner via a network

• US 7,404,084 B2
• Filed: 12/16/2002
• Issued: 07/22/2008
• Est. Priority Date: 06/16/2000
• Status: Expired due to Fees

• Current Assignee: MIH Technology Holdings BV
• Original Assignee: Entriq Incorporated
• Inventors: Fransdonk, Robert W.
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US10/321,062
• Publication Number:
  US 20030165241A1
• Time in Patent Office: 2,045 Days
• Field of Search: 713/193, 713/200, 713/168, 713/175, 713/176, 713/181, 380/277, 380280-282, 705 50- 59
• US Class Current: 713/176
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and system to digitally sign a content license associated with content, and to distribute content via a network in a geographically controlled manner, commences when a content provider generates a content license and signs the content license with a symmetric key. The symmetric key may be used to encrypt the content. In one embodiment consistent with the invention, the symmetric key may be used to encrypt a product key, which is in turn used to encrypt the content. A content requestor requests delivery of the encrypted content. A content delivery system performs a content to determine a geographic location associated with the content requestor. The content requestor authorization process may also determine geographic access criteria associated with the content, and whether the geographic location complies with the geographic access criteria. The content delivery system will release the content for delivery to the content requestor if the content location complies with the geographic access criteria.

Claims

1. A method to digitally sign a content license associated with content distributed via a packet-based network, the method including:

generating the content license at a content license issuer; and

signing the content license at the content license issuer, utilizing a symmetric key,

wherein the content license includes usage restrictions and the signing includes utilizing a function to generate a verifiable digital signature.

2. The method of claim 1 wherein the symmetric key encrypts the content.

3. The method of claim 1 wherein the content license includes any one of a group of license items including a machine identifier, a content identifier, and user certificate information.

4. The method of claim 1 including transmitting the content license in conjunction with the content to a recipient.

5. The method of claim 4 including transmitting the symmetric key to the recipient.

6. The method of claim 5 wherein the symmetric key is encrypted with a public key of recipient.

7. The method of claim 1 including verifying the signing of the content license at a recipient utilizing the symmetric key.

8. The method of claim 7 wherein the verification of the signing of the content license includes determining a digital signature created utilizing the symmetric key.

9. The method of claim 1 wherein the signing of the content license includes generating a hash result of the content license utilizing a hash function and transforming the hash result into a digital signature utilizing the symmetric key.

10. The method of claim 9 wherein verification of the signing of the content license includes generating a further hash result of the content license utilizing the hash function, and determining whether the hash result corresponds to the further hash result.

11. The method of claim 1 wherein the symmetric key encrypts a product key that in turn encrypts the content.

12. A system to digitally sign a content license associated with content distributed via a packet-based network, the system including a content license issuer to generate the content license, and to sign the content license utilizing a symmetric key, wherein the content license includes usage restrictions and the signing includes utilizing a function to generate a verifiable digital signature.

13. The system of claim 12 wherein the symmetric key encrypts the content.

14. The system of claim 12 wherein the content license issuer includes any one of a group of license items including a machine identifier, a content identifier, and user certificate information.

15. The system of claim 12 wherein the content license issuer transmits the content license in conjunction with the content to a recipient.

16. The system of claim 15 wherein the content license issuer transmits the symmetric key to the recipient.

17. The system of claim 16 wherein the recipient encrypts the symmetric key with a public key.

18. The system of claim 12 wherein a recipient utilizes the symmetric key to verify the signing of the content license.

19. The system of claim 18 wherein the content license issuer signs the content license and generates a hash result of the content license utilizing a hash function and transforms the hash result into a digital signature utilizing the symmetric key.

20. The system of claim 19 wherein verification of the signing of the content license includes generating a further hash result of the content license utilizing the hash function, and determining whether the hash result corresponds to the further hash result.

21. The system of claim 18 wherein the recipient verifies the signing of the content license by determining a digital signature created utilizing the symmetric key.

22. The system of claim 12 wherein the symmetric key encrypts a product key that in turn encrypts the content.

23. A system digitally to sign a content license associated with content distributed via a packet-based network, the system including content license issuer means for generating the content, and for signing the content license utilizing a symmetric key, wherein the content license includes usage restrictions and the signing includes utilizing a function to generate a verifiable digital signature.

24. A machine-readable medium storing a sequence of instructions that, when executed by a machine, cause the machine to perform a method to digitally sign a content license associated with content distributed via a packet-based network, the method including:

generating the content license at a content license issuer; and

signing the content license at the content license issuer, utilizing a symmetric key,

wherein the content license includes usage restrictions and the signing includes utilizing a function to generate a verifiable digital signature.