Method and system for mass distribution of geographic data for navigation systems

• US 7,613,917 B1
• Filed: 09/18/2000
• Issued: 11/03/2009
• Est. Priority Date: 09/18/2000
• Status: Active Grant

• Current Assignee: HERE Global B.V. (Nokia Corporation)
• Original Assignee: Navteq North America LLC (Nokia Corporation)
• Inventors: Chojnacki, Robert
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): Khoshnoodi; Nadia
• Application Number:
  US09/663,891
• Time in Patent Office: 3,333 Days
• Field of Search: 713/150, 713/200, 380/23, 380/4, 701/35, 701/200, 701/201, 701/202, 701/207, 701/208, 701/209, 701/210, 701/213, 705/51, 705/57, 705/58, 340/980, 340/991, 340/995.24, 709/217, 709/218, 707/104.1
• US Class Current: 713/150
• CPC Class Codes: G01C 21/3896 Transmission of map data from central databases

Abstract

A system and method for mass distribution of data products, such as geographic databases. An authorization server maintains a first portion of each of several data products, and each of several data distribution terminals maintains the second portion of each data product. A user may couple a portable data storage device with a data distribution terminal and select a desired data product. The terminal may then responsively obtain from the authorization server the first portion of the selected data product and record onto the data storage device both the first portion and second portion of the data product. The user may then couple the data storage device with a machine, such as a navigation system, which may then access the data product. The authorization server may secure the first portion before sending it to the data distribution terminal. The authorization server may do so by encrypting the first portion and tying the first portion together with an authorization key. The machine may then use the authorization key to validate and/or facilitate access to the first portion and in turn to the data product as a whole.

Claims

1. A method for on-line mass distribution of data products to end users, the method comprising:

maintaining an encrypted first portion of each of said data products at a first location;

maintaining an unencrypted second portion of each of said data products at a second location, wherein said second location is different from said first location;

for each of said end users, confirming the end user'"'"'s entitlement to one of said data products;

obtaining an unencrypted second portion of said one of said data products on a navigation system from said second location;

after said step of confirming, obtaining an encrypted first portion of said one of said data products on the navigation system from said first location, obtaining a decryption key and using said decryption key to decrypt said encrypted first portion;

combining said decrypted first portion of said one of said data products and said unencrypted second portion of said one of said data products to form a combined product, wherein said step of combining is performed remote from said first location;

storing said combined product on a portable computer-readable storage medium, wherein said combined product is not cryptographically secured on the computer-readable storage medium and said combined product does not include any protection information to limit use of said combined product by the navigation system; and

providing said computer-readable storage medium having said combined first portion and second portion to said user, wherein the first portion of said data product comprises critical data that enables a program executed on the navigation system to use said data product including both the first portion and the second portion together for an intended purpose, wherein said end user accesses said combined product from said storage medium with said navigation system at a third location different from said first location and said second location.

2. The method of claim 1, wherein said data products include geographic databases.

3. The method of claim 1, wherein said data products include digital copies of movies.

4. The method of claim 1, wherein said data products include digital copies of musical songs.

5. The method of claim 1, further comprising the step of:

prior to the step of combining, encrypting said first portion of one of said data products.

6. The method of claim 1, further comprising sending to the second location, together with the encrypted first portion, an encrypted authorization key that can be decrypted using a second decryption key so as to reveal verification information indicative of a entity authorized to access the data product.

7. The method of claim 6, further comprising generating the second decryption key as a function of an environmental parameter.

8. The method of claim 7, wherein the environmental parameter comprises an identification code associated with the entity authorized to access the data product.

9. The method of claim 8, further comprising:

generating the second decryption key as the function of the identification code;

using the second decryption key to decrypt the encrypted authorization key and to thereby gain access to the verification information; and

using the verification information to validate storage of the data product.

10. The method of claim 6, further comprising:

using the second decryption key to decrypt the encrypted authorization key and to thereby gain access to the verification information; and

using the verification information to validate use of the data product.

11. The method of claim 10, wherein using the verification information to validate use of the data product comprises comparing at least a portion of the verification information to predetermined information so as to determine whether the user is authorized to access the data product.

12. The method of claim 11, wherein the predetermined information comprises an identification code.

13. The method of claim 1, further comprising sending to the second location, together with the encrypted first portion, an encrypted authorization key that can be decrypted using a second decryption key so as to reveal verification information indicative of an entity authorized to store the data product.

14. The method of claim 13, further comprising generating the second decryption key as a function of an environmental parameter.

15. The method of claim 14, wherein the environmental parameter comprises an identification code associated with the entity authorized to store the data product.

16. The method of claim 15, further comprising:

generating the second decryption key as the function of the identification code;

using the second decryption key to decrypt the encrypted authorization key and to thereby gain access to the verification information; and

using the verification information to validate storage of the data product.

17. The method of claim 13, further comprising:

using the second decryption key to decrypt the encrypted authorization key and to thereby gain access to the verification information; and

using the verification information to validate storage of the data product.

18. The method of claim 17, wherein using the verification information to validate storage of the data product comprises comparing at least a portion of the verification information to predetermined information associated with the storage medium so as to determine whether the storage medium is authorized to store the data product.

19. The method of claim 18, wherein the predetermined information associated with the storage medium comprises an identification code.

20. The method of claim 1, wherein the data product comprises geographic information.

21. A system for secure on-line mass distribution of data products to end users comprising:

an authorization server at a first location having associated therewith copies of encrypted first portions of a plurality of data products, wherein said encrypted first portions of the data products do not include information to enable encrypted data to be decrypted;

a plurality of data distribution terminals at a plurality of locations different from said first location, each of said data distribution terminals has stored thereon copies of unencrypted second portions of said plurality of data products;

a communications system that provides for exchange of data between said authorization server and said plurality of data distribution terminals, wherein said data distribution terminal obtains a copy of the encrypted first portion of said data product from said authorization server and decrypts said encrypted first portion;

a data distribution program that provides copies of said data products to those end users who are entitled to have said copies thereof, wherein said data distribution program provides a combined copy of a data product by combining a copy of the decrypted first portion of said data product with a copy of the unencrypted second portion of said data product obtained from one of said plurality of data distribution terminals, wherein said step of combining is performed at a location of said one of said plurality of data distribution terminals and said end user is located at said location of said one of said plurality of data distribution terminals; and

a storage device interface associated with said data distribution terminal, wherein said storage device interface stores said combined product on a portable computer-readable storage medium, wherein said combined product is not cryptographically secured on the computer-readable storage medium and said combined product does not include any protection information to limit use of said combined product, wherein said user accesses said combined product from said storage medium with a navigation system at a location different from said location of said data distribution terminal.

22. The system of claim 21, wherein said authorization server also has associated therewith an authorization database containing data indicating entitlement by said end users to copies of said data products.

23. The system of claim 21, wherein the authorization server sends to the data distribution terminal the first portion in encrypted form that can be decrypted using a first decryption key and an encrypted authorization key that can be decrypted using a second decryption key so as to reveal verification information indicative of an entity authorized to access the data product.

24. The system of claim 23, wherein the second decryption key is derived as a function of an environmental parameter.

25. The system of claim 24, wherein the environmental parameter comprises an identification code associated with the entity authorized to access the data product.

26. The system of claim 23, wherein the data distribution terminal has access to the second decryption key and decrypts the encrypted authorization key, to thereby gain access to the verification information, and to use the verification information to validate use of the data product.

27. The system of claim 23, wherein the data distribution terminal has access to the second decryption key and decrypts the encrypted authorization information, to thereby gain access to the verification information, and to compare at least a portion of the verification information to predetermined information associated with the user so as to determine whether the user is authorized to access the data product.

28. The system of claim 27, wherein the predetermined information associated with the user comprises an identification code.

29. The system of claim 27, wherein the authorization server sends to the data distribution terminal the first portion in encrypted form that can be decrypted using a first decryption key and an encrypted authorization key that can be decrypted using a second decryption key so as to reveal verification information indicative of an entity authorized to store the data product.

30. The system of claim 29, wherein the second decryption key is derived as a function of an environmental parameter.

31. The system of claim 30, wherein the environmental parameter comprises an identification code associated with the entity authorized to store the data product.

32. The system of claim 29, wherein the data distribution terminal has access to the second decryption key and decrypts the encrypted authorization key, to thereby gain access to the verification information, and to use the verification information to validate storage of the data product.

33. The system of claim 29, wherein the data distribution terminal has access to the second decryption key and decrypts the encrypted authorization information, to thereby gain access to the verification information, and to compare at least a portion of the verification information to predetermined information associated with the storage medium so as to determine whether the storage medium is authorized to store the data product.

34. The system of claim 33, wherein the predetermined information associated with the storage medium comprises an identification code.

35. The system of claim 21, wherein the data product comprises geographic information.