Method and system to securely store and distribute content encryption keys

• US 7,536,563 B2
• Filed: 05/17/2006
• Issued: 05/19/2009
• Est. Priority Date: 06/16/2000
• Status: Expired due to Fees

• Current Assignee: MIH Technology Holdings BV
• Original Assignee: Entriq Incorporated
• Inventors: Fransdonk, Robert W.
• Primary Examiner(s): Revak; Christopher A
• Application Number:
  US11/383,939
• Publication Number:
  US 20060210084A1
• Time in Patent Office: 1,098 Days
• Field of Search: None
• US Class Current: 713/193
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819

Abstract

A method comprising receiving a product key at a service provider, where the product key is (1) received from a first content provider, and (2) encrypting a first content controlled by the first content provider. The method encrypts the product key within a first secure device at the service provider using a storage key and stores the encrypted product key at the service provider.

Claims

1. A method comprising:

receiving a product key at a service provider, the product key;

received from a first content provider, and

encrypting a first content controlled by the first content provider;

encrypting the product key within a first secure device at the service provider using a storage key; and

storing the encrypted product key at the service provider.

2. The method of claim 1, wherein the product key is encrypted when provided by the first content provider to the service provider.

3. The method of claim 2, wherein the encryption is performed using the first secure device'"'"'s public key.

4. The method of claim 2, comprising decrypting the product key within the first secure device at the service provider.

5. The method of claim 4, wherein the decryption is performed using the first secure device'"'"'s private key.

6. The method of claim 1, comprising receiving a plurality of product keys from a plurality of content providers, each of the product keys encrypting content controlled by the respective content providers.

7. The method of claim 6, wherein each of the plurality of product keys is signed using a respective content provider private key.

8. The method of claim 1, comprising:

receiving a request to access the first content at the service provider from a requestor;

within the first secure device at the service provider;

decrypting the product key, encrypted with the storage key,

decrypting a requestor secret key, associated with the requestor, and

encrypting the product key with the requestor secret key; and

communicating the product key, encrypted with the requestor secret key, to the requestor.

9. A method comprising:

receiving a product key at a service provider, the product key;

being received from a first content provider,

encrypting a first content controlled by the first content provider, and

being encrypted;

decrypting the product key within the first secure device at the service provider;

encrypting the product key within the first secure device at the service provider using a storage key associated with the first secure device; and

storing the encrypted product key at the service provider.

10. A method comprising:

receiving a product key at a service provider, the product key;

being received from a first content provider,

encrypting a first content controlled by the first content provider, and

being encrypted with a secure device public key of a first secure device of the service provider;

decrypting the product key using a secure device private key;

encrypting the product key using a storage key; and

storing the encrypted product key at the service provider.

11. A system comprising:

a first content provider; and

a service provider, coupled to the first content provider via a network, to receive a product key, wherein the product key is received from the first content provider and used to encrypt a first content controlled by the first content provider;

wherein the service provider is to encrypt the product key within the first secure device at the service provider using a storage key; and

wherein the service provider is further to store the encrypted product key.

12. The system of claim 11, wherein the first content provider is to encrypt the product key before providing the product key to the service provider.

13. The system of claim 12, wherein the encryption is performed using the first secure device'"'"'s public key.

14. The system of claim 12, wherein the service provider is to decrypt the product key within the first secure device.

15. The system of claim 14, wherein the decryption is performed using the first secure device'"'"'s private key.

16. The system of claim 11, comprising a plurality of content providers, coupled to the service provider via a network, wherein the service provider is to receive a plurality of product keys from the plurality of content providers, each of the product keys encrypting content controlled by the respective content providers.

17. The system of claim 16, wherein each of the plurality of product keys is signed using a respective content provider private key.

18. The system of claim 11, wherein the service provider is to:

receive a request to access the first content from a requestor;

within the first secure device;

to decrypt the product key, encrypted with the storage key,

to decrypt a requestor secret key, associated with the requestor, and

to encrypt the product key with the requestor secret key; and

communicate the product key, encrypted with the requestor secret key, to the requestor.

19. A system comprising:

receiving means, to receive a product key at a service provider, the product key;

received from a first content provider, and

encrypting a first content controlled by the first content provider;

encrypting means, to encrypt the product key within a first secure device at the service provider using a storage key; and

storage means, to store the encrypted product key at the service provider.

20. A computer-readable medium including instructions that, when performed by a computer, cause the computer to:

receive a product key at a service provider, the product key;

received from a first content provider, and

encrypting a first content controlled by the first content provider;

encrypt the product key within a first secure device at the service provider using a storage key; and

store the encrypted product key at the service provider.