System and method for distributing protected audio content on optical media

• US 7,685,646 B1
• Filed: 09/10/2003
• Issued: 03/23/2010
• Est. Priority Date: 09/10/2003
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: RealNetworks, Inc.
• Inventors: Fu, Xiaodong, Cappio, Adam B., Newman, Brent D., Hug, Joshua D., Hamel, Alain, Ayars, Jeffrey M., Agarwal, Rahul
• Primary Examiner(s): Cervetti; David Garcia
• Application Number:
  US10/659,985
• Time in Patent Office: 2,386 Days
• Field of Search: 713/160, 713/193, 726/26, 726/27, 726/28, 726/29, 726/30, 726/31, 726/33
• US Class Current: 726/30
• CPC Class Codes: G06F 16/40 of multimedia data, e.g. slideshows comprising image and additional audio data retrieval of still image data G06F16/50; retrieval of audio data G06F16/60; retrieval of video data G06F16/70
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00173 wherein the origin of the content is checked, e.g. determining whether the content has originally been retrieved from a legal disc copy or another trusted source
• CPC Class Codes: G11B 20/00202 wherein the copy protection scheme builds on multi-session recording, e.g. defective table of contents [TOC] in the 2nd session
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00528 wherein each title is encrypted with a separate encryption key for each title, e.g. title key for movie, song or data file
• CPC Class Codes: G11B 20/00731 involving a digital rights management system for enforcing a usage restriction
• CPC Class Codes: G11B 20/00847 wherein the usage restriction is defined by a licence file
• CPC Class Codes: G11B 20/00869 wherein the remote server can deliver the content to a receiving device

Abstract

A system and method for producing and using a protected optical media is described. One feature provides for a compact disc containing digital rights management protection to prevent unauthorized copying of copyrighted materials. Another feature provides for secure copying, storage, transfer, and playback of digital audio content from a protected compact disc or computer storage. Yet another feature provides for a versatile optical media that can be used in both traditional audio compact disc players and in computer CD-ROM drives without risking the security of the content on the media or preventing purchasers from having a robust content experience.

Claims

1. A method of protecting media content stored on a storage medium, the method comprising:

creating a first session on the medium, the first session containing digital data stored in a first format and representing all or substantially all of the media content, the digital data in the first session being readable by an electronic device configured to read digital data in the first format;

creating a second session on the medium, the second session containing digital data stored in a second format and representing all or substantially all of the media content, the digital data in the second session being readable by a media player associated with a computing device and configured to read the digital data in the second format;

including on the second session at least one digital rights management license describing allowed uses for the digital data;

including on the second session digital rights management software;

encrypting the digital data in the second session so that the digital rights management software does not grant access to the digital data stored in the second session unless the digital rights management software determines that a requested access complies with the allowed uses described in the at least one digital rights management license; and

preventing the media player associated with the computing device configured to read the digital data in the second format from accessing the digital data in the first format.

2. The method of claim 1, wherein encrypting the data comprises:

separating the media content into packets of data;

encrypting the packets;

storing the encrypted packets to the medium; and

storing at least one decryption key on the medium such that the digital rights management software, when executed by a computer, causes the computer to use the at least one decryption key to decrypt the packets.

3. The method of claim 2, wherein encrypting the data further comprises:

creating at least two encryption keys;

for every encryption key, encrypting at least one packet with that key;

encrypting every packet with the at least two encryption keys; and

wherein the at least one decryption key comprises sufficient decryption keys to decrypt all of the encrypted packets.

4. The method of claim 3, wherein the encryption keys are symmetric, and wherein the method further comprises:

generating at least one protection encryption key for each of the at least two encryption keys;

encrypting each encryption key with an associated protection encryption key;

storing the at least one encrypted encryption key on the medium; and

storing at least one protection decryption key on the medium, such that the at least one protection decryption key can be used to decrypt the at least one encryption key.

5. The method of claim 4, wherein:

the at least one protection encryption key comprises a generic protection decryption key and a unique protection encryption key; and

the at least one protection decryption key comprises a generic protection decryption key and a unique protection decryption key.

6. The method of claim 4, wherein storing the at least one protection decryption key comprises integrating the protection decryption key inside the digital rights management software.

7. The method of claim 1, wherein the digital rights management software is tamper-resistant.

8. The method of claim 7, further comprising:

storing a binding identifier on the medium, wherein the binding identifier is associated with the at least one digital rights management license, and is used by the digital rights management software to determine whether or not to allow the requested access to the digital data in the second session, and wherein the binding identifier cannot be duplicated onto another storage medium.

9. The method of claim 8, wherein:

storing the binding identifier comprises encrypting together the at least one license and a copy of the binding identifier that is associated with the at least one license; and

the digital rights management software compares a decrypted copy of the binding identifier to the binding identifier present on the medium before allowing the requested access.

10. The method of claim 8, wherein:

storing the binding identifier comprises;

creating a license encryption key from the binding identifier; and

encrypting the at least one license with the encryption key;

wherein the digital rights management software decrypts the at least one license using a decryption key created from the binding identifier to determine whether or not to allow the requested access to the digital data in the second session.

11. The method of claim 1, wherein:

the digital data on the first session comprises a plurality of separate audio recordings;

the at least one digital rights management license comprises a plurality of digital rights management licenses; and

at least one of the plurality of digital rights management licenses describes allowed uses for a specific recording.

12. The method of claim 1, wherein the medium is a compact disc.

13. A compact disc, comprising:

a first session readable by a compact disc player;

first data representing all or substantially all media content on the compact disc, the first data stored on the first session and protected so that the first data cannot be decoded into a renderable media presentation by an optical media drive;

a second session readable by an optical media drive;

second data representing all or substantially all of the media content on the compact disc, the second data stored on the second session and encrypted so that the second data cannot be decoded into a renderable media presentation by the compact disc player;

at least one digital rights management license, written to the second session, and describing allowed uses for the second data;

digital rights management software stored on the second session that, when executed by a computer, causes the computer to use the digital rights management license to determine whether or not a requested use of the second data is allowed, and to prevent the requested use of the second data if the license does not permit the requested use;

at least one decryption key stored on the second session and used by the digital rights management software to decrypt the second data.

14. The compact disc of claim 13, wherein the encrypted second data comprises a plurality of encrypted packets of data.

15. The compact disc of claim 14, wherein the plurality of encrypted packets are encrypted with a plurality of encryption keys, and wherein the at least one decryption key comprises sufficient decryption keys to decrypt all of the encrypted packets.

16. The compact disc of claim 13, wherein the at least one decryption key is integrated inside the digital rights management software.

17. The compact disc of claim 13, wherein the digital rights management software is tamper resistant.

18. The compact disc of claim 17, further comprising:

a binding identifier stored on the compact disc, associated with the at least one digital rights management license, and used by the digital rights management software to determine whether or not to allow the requested use of the second data, wherein the binding identifier cannot be duplicated onto another compact disc.

19. The compact disc of claim 18, further comprising:

the at least one license and a copy of the binding identifier encrypted together and stored on the second session; and

wherein the digital rights management software, when executed by the computer, also causes the computer to compare a decrypted copy of the binding identifier to the binding identifier present on the disc before allowing a requested use of the second data.

20. The compact disc of claim 18, wherein:

the at least one license is encrypted using an encryption key created by using the binding identifier as a seed; and

the digital rights management software, when executed by the computer, also causes the computer to decrypt the at least one license using a decryption key created from the binding identifier to determine whether or not to allow a requested use of the second data.

21. The compact disc of claim 13, wherein:

the second data on the second session comprises a plurality of separate audio recordings;

the at least one digital rights management license comprises a plurality of digital rights management licenses; and

at least one of the plurality of digital rights management licenses describes allowed uses for a specific audio recording.

22. The compact disc of claim 21, wherein the plurality of digital rights management licenses contain a license describing uses for a plurality of the audio recordings in addition to the at least one license that describes uses for a specific audio recording.

23. The compact disc of claim 13, further comprising at least one validation code associated with the digital rights management software wherein the at least one code represents a cryptographically-signed hash of a canonical representation of at least one section of the digital rights management software code, and wherein the digital rights management software, when executed by the computer, causes the computer to detect tampering or replacement of the at least one section of code at the time the code is executed by performing a runtime hash of the at least one section of code and comparing the runtime hash to the stored cryptographically-signed hash.

24. The compact disc of claim 13 further comprising protected playback software that, when executed by the computer, causes the computer to play the second data.

25. A system for protecting media content, the system comprising:

a computing device;

media content stored on the computing device;

at least one digital rights management license stored on the computing device and describing allowed uses for the media content;

digital rights management software stored on the computing device and that, when executed by the computing device, causes the computing device to use the digital rights management license to determine whether or not a requested use of the media content is allowed, and to prevent the requested use of the media content if the license does not permit the requested use; and

wherein the media content, the at least one digital rights management license, and the digital rights management software were installed on the computing device from a single storage medium that contained the content, the license, and the software.

26. The system of claim 25, further comprising:

a first identifier associated with the at least one digital rights management license;

a hard drive, coupled to the computing device;

a second identifier, stored on the hard drive; and

wherein the digital rights management software, when executed by the computing device, causes the computing device to compare the first identifier to the second identifier before allowing a requested use of the media content.

27. The system of claim 25, wherein the digital rights management software comprises a generic module and a unique module.

28. The system of claim 25, further comprising:

at least one validation code corresponding to at least one predetermined software module; and

validation software that, when executed by the computing device, causes the computing device to compute at least one checksum for the at least one software module and compare the at least one checksum against the validation code to determine if the at least one predetermined software module should be trusted.

29. The system of claim 28, wherein:

the at least one validation code is a cryptographically-signed hash of a canonically-ordered series of bytes from the at least one predetermined software module; and

comparing the at least one checksum against the validation code comprises;

decrypting the cryptographically-signed hash;

performing a hash on the at least one software module; and

comparing the results of the two hashes to see if they match.

30. The system of claim 25, wherein the storage medium is a compact disc.

31. A method of transferring digital data from a removable storage medium to a storage device coupled to a computing device, the method comprising:

copying the digital data from the removable storage medium to the storage device;

copying at least one digital rights management license from the removable storage medium to the storage device, the digital rights management license describing types of access that are allowed for the digital data;

copying digital rights management software from the removable storage medium to the storage device, wherein the digital rights management software, when executed by the computing device, causes the computing device to use the at least one digital rights management license to determine whether or not an access to the digital data is permitted.

32. The method of claim 31, further comprising:

determining whether or not the computing device has secure playback software that can read the digital data; and

installing secure playback software if the computing device does not have the software.

33. The method of claim 31, further comprising encrypting the at least one digital rights management license, and wherein the copied digital rights management software, when executed by the computing device, causes the computing device to deny access to the digital data on the storage device unless the at least one digital rights license is decrypted.

34. The method of claim 33, wherein encrypting the at least one digital rights management license comprises:

generating a binding identifier for the storage device;

storing the identifier on the storage device;

generating an encryption key from the binding identifier;

encrypting the at least one digital rights management license using the generated encryption key; and

wherein the digital rights management software, when executed by the computing device, causes the computing device to use the binding identifier to create a decryption key for the at least one license.

35. The method of claim 31, wherein the removable storage medium is a compact disc.

36. A method of playing media content stored on a removable storage medium the method comprising:

reading digital data stored in a second format and representing all or substantially all of the media content, wherein the removable storage medium also contains digital data stored in a first format that also represents all or substantially all of the media content; and

determining from at least one digital rights management license stored on the removable storage medium whether or not playback of the digital data stored in the second format is allowed.

37. The method of claim 36, wherein the removable storage medium is a compact disc.

38. The method of claim 36, further comprising authenticating digital rights management software also stored on the removable storage medium that, when executed by a computer, causes the computer to use the at least one digital rights management license to determine whether or not to allow playback of the digital data.

39. The method of claim 36 wherein:

the digital data stored in the first format is encrypted, and

the method further comprises decrypting the encrypted data.

40. The method of claim 39, wherein the encrypted data comprises a plurality of encrypted packets of data.

41. The method of claim 40 wherein decrypting the data comprises:

locating at least one decryption key on the removable storage medium; and

using the at least one decryption key to decrypt the packets of data.

42. The method of claim 41, wherein:

the at least one decryption key is itself encrypted with a protection encryption key; and

the removable storage medium contains at least one protection decryption key to decrypt the at least one encrypted decryption key.

43. The method of claim 42, wherein:

the protection encryption key comprises a generic protection encryption key and a unique protection encryption key; and

the at least one protection decryption key comprises a generic protection decryption key and a unique protection decryption key.

44. The method of claim 42, wherein the at least one decryption key is symmetric.

45. The method of claim 42, further comprising:

generating a symmetric playback protection key;

encrypting the at least one decryption key with the symmetric key; and

wherein decrypting the encrypted packets of digital data stored in the second format further comprises decrypting the at least one encrypted decryption key prior to decrypting the packets of data.

46. The method of claim 45, further comprises:

playing the encrypted digital data stored in the second format; and

deleting the at least one decryption key and the decrypted packets of data from memory.

47. A method of transferring digital data stored on a removable storage medium to an external device, the method comprising:

loading digital rights management software from the medium;

retrieving a digital rights management license from the medium; and

using the digital rights management license to determine whether or not a transfer of the digital data to the external device is allowed.

48. The method of claim 47, wherein the removable storage medium is a compact disc.

49. The method of claim 47, further comprising authenticating the digital rights management software.

50. The method of claim 47, wherein the external device is a compact disc burner.

51. The method of claim 47, wherein the external device is a portable audio player.

52. The method of claim 51, further comprising transferring the digital rights management software and the digital rights management license from the removable storage medium to the portable audio player.

53. The method of claim 52, wherein:

the portable audio player contains digital rights management software that is different than the software loaded from the removable storage medium; and

the method further comprises;

translating the digital rights management license into a format that the software already on the portable audio player can read; and

transferring the translated digital rights management license to the portable audio player.

54. The method of claim 47 further comprising transferring at least a portion of the digital data to the external device in response to the determination that the digital rights management license permits the transfer.

55. The method of claim 54, further comprising translating the at least a portion of the digital data into a format that the external device can read.

56. A removable computer readable storage medium storing media content and a program that, when executed by a computer, causes the computer to:

read digital data stored on the medium in a second format and representing all or substantially all of the media content, wherein the medium also contains digital data stored in a first format that also represents all or substantially all of the media content;

locate a digital rights management license stored on the medium; and

using the digital rights management license to determine whether or not a requested use of the digital data stored in the second format is allowed.

57. The medium of claim 56, wherein the medium is a compact disc.

58. The medium of claim 56, wherein the stored program further causes the computer to authenticate the program.

59. The medium of claim 56, wherein:

the digital data stored in the second format is encrypted, and

the stored program further causes the computer to decrypt the encrypted data.

60. The medium of claim 59, wherein the encrypted data comprises encrypted packets of data.

61. The medium of claim 60, wherein the stored program further causes the computer to:

locate a decryption key on the medium; and

decrypt the packets of data using the decryption key.

62. The medium of claim 61, wherein:

the decryption key is itself encrypted with a protection encryption key; and

the stored program further causes the computer to use the protection decryption key to decrypt the encrypted decryption key.

63. The medium of claim 62, wherein:

the protection encryption key comprises a generic protection encryption key and a unique protection encryption key; and

the protection decryption key comprises a generic protection decryption key and a unique protection decryption key.

64. The medium of claim 62, wherein the decryption key is symmetric.

65. The medium of claim 62, wherein the stored program further causes the computer to:

generate a symmetric playback protection key;

encrypt the decryption key with the symmetric key; and

decrypt the encrypted decryption key prior to decrypting the packets of data.

66. The medium of claim 65, wherein the stored program further causes the computer to:

play the encrypted digital data stored in the first format, and

delete the decryption key and the decrypted packets of data from memory.

67. A method of playing media content stored on a removable storage medium the method comprising:

reading digital data stored in a first format and representing all or substantially all of the media content, wherein the removable storage medium also contains digital data stored in a second format that also represents all or substantially all of the media content; and

preventing an audio player configured to read the digital data stored in the second format from reading the digital data in the first format.

68. The method of claim 67 wherein the first format comports to the Redbook compact disc standard.