Methods and apparatus for contemporaneously acquiring and certifying content

• US 7,761,922 B1
• Filed: 02/28/2005
• Issued: 07/20/2010
• Est. Priority Date: 02/28/2005
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Feuerman, Kenneth E., Baum, Daniel R.
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): JOHNSON, CARLTON
• Application Number:
  US11/068,014
• Time in Patent Office: 1,968 Days
• Field of Search: None
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A system produces certified content by receiving original content acquired from a content acquisition device and receiving a device identity associated with the content acquisition device. The system produces a certification value indicating the original content was acquired from the content acquisition device having the device identity. The system associates the certification value to the original content to produce certified content that can be verified to represent the original content that was acquired from a content acquisition device having the associated device identity while preventing modification to the original content by processing not associated with certification processing. This process is performed in an uninterrupted manner to ensure certified content reflects an accurate device identity. The system can be implemented entirely within a content acquisition device itself, or in a computer system coupled to a content acquisition device.

Claims

1. A method for producing certified content, the method comprising:

receiving original content acquired from a content acquisition device;

receiving a device identity associated with the content acquisition device;

producing a certification value indicating the original content was acquired from the content acquisition device having the device identity;

associating the certification value to the original content to produce certified content that can be verified to represent the original content that was acquired from the content acquisition device having the associated device identity while preventing modification to the original content by processing not associated with the operations of receiving the original content, receiving the device identity, producing the certification value and associating the certification value to the original content;

wherein receiving original content acquired from the content acquisition device comprises;

receiving individual portions of the original content over time, each individual portion being smaller than a sum total of the original content; and

wherein each individual portion of the original content, once received, is respectively individually processed by an iteration of the operations of producing a certification value and associating the certification value to the original content such that a respective portion of certified content is produced for each individual respective portion of original content;

wherein receiving portions of the original content over time includes incrementally acquiring scanned rows of pixels from a physical source, wherein the scanned rows of pixels are each separately returned for receiving the certification value; and

combining respective portions of certified content to produce an entire certified document based on all individual portions of the original content that were received over time while concurrently preventing operator access to the received individual portions of the original content during performance of the operations of receiving original content, producing a certification value, and associating the certification value to the original content to ensure that the certification value is based on actual individual portions of original content and the device identity of the content acquisition device that provided the individual portions of original content.

2. The method of claim 1 wherein receiving original content acquired from a content acquisition device comprises:

receiving a document certification request indicating that an operator desires to acquire and certify content obtained by the content acquisition device;

in response to the document certification request, operating a communications interface to the content acquisition device to cause the content acquisition device to obtain the original content and transmit the original content for receipt; and

in response to operating the communications interface, receiving the original content over the communications interface while contemporaneously preventing operator access to the original content during performance of the operations of receiving original content, receiving a device identity, producing a certification value, and associating the certification value to the original content.

3. The method of claim 1 wherein producing a certification value for the original content comprises:

applying a certification function using the original content and the received device identity to produce a certification value that is based on an original data format of the original content; and

wherein associating the certification value to the original content comprises;

combining the certification value with the original content while concurrently preventing access, by an operator and by unauthorized processes, to the original content during performance of the operations of receiving original content, receiving a device identity, producing a certification value, and associating the certification value to the original content to ensure that the certification value reflects actual original content and the device identity of the content acquisition device that provided the original content.

4. The method of claim 3 wherein receiving a device identity associated with the content acquisition device comprises:

prompting for a component of the device identity associated with the content acquisition device; and

receiving the component of the device identity to be associated with the content acquisition device;

receiving a remaining component of the device identity from a storage location not modifiable.

5. The method of claim 3 wherein receiving a device identity associated with the content acquisition device occurs contemporaneously with receiving original content and comprises:

operating the communication interface to obtain the device identity maintained within the content acquisition device; and

receiving the device identity associated with the content acquisition device over the communications interface.

6. The method of claim 5 wherein operating the communication interface to obtain the device identity maintained within the content acquisition device comprises:

obtaining the device identity from the content acquisition device at the same time as obtaining the original content from the content acquisition device, the device identity being encoded within a data format of the original content that is received over the communications interface.

7. The method of claim 5 wherein the content acquisition device is a scanner device coupled to a computer system, the scanner device capable of scanning the original content and returning the original content to the computer system, the computer system performing the operations of operations of receiving original content from the scanner device, receiving a device identity from the scanner device, producing a certification value, and associating the certification value to the original content received from the scanner device while concurrently preventing access, by an operator of the content acquisition device and by an operator of the computer system and by unauthorized processes executing on the computer system, to the original content within the computer system from the time the original content was received from the scanner device until the original content is converted to certified content.

8. The method of claim 7 comprising:

within the computer system, post-processing the certification value that is associated with the certified content using a data verification computation that corresponds to a data verification computation applied during the operation of producing a certification value to allow verification that the certified content contains an original rendition of the original content produced by the content acquisition device having the device identity.

9. The method of claim 1 wherein producing a certification value for the original content comprises:

applying a certification function using the original content and the received device identity to produce a certification value that is based on an original data format of the original content combined with the received device identity; and

wherein associating the certification value to the original content comprises;

combining the certification value with the original content while concurrently preventing operator access to the original content during performance of the operations of receiving original content, receiving a device identity, producing a certification value, and associating the certification value to the original content to ensure that the certification value reflects actual original content and the device identity of the content acquisition device that provided the original content.

10. The method of claim 9 wherein applying a certification function using the original content and the received device identity comprises:

performing a data verification computation on the original content in combination with the device identity of the content acquisition device to produce the certification value that represents a unique encoding of the combination of the original content and the device identity of the content acquisition device; and

after performance of associating the certification value to the original content to produce certified content, post-processing the certification value that is associated with the certified content to allow verification that the certified content contains an original rendition of the original content produced by the content acquisition device having the device identity.

11. The method of claim 1, wherein receiving original content acquired from the content acquisition device includes:

scanning a physical source of original content using a scanner device peripherally connected to a computer system.

12. The method of claim 11, wherein scanning the physical source of original content includes scanning a paper document;

wherein receiving original content acquired from the content acquisition device includes creating a portable document format (PDF) file from a raster file delivered from the scanner device; and

wherein preventing modification to the original content includes preventing modification to the raster file or PDF file before associating the certification value to the original content.

13. The method of claim 1, wherein receiving original content acquired from a content acquisition device includes taking a digital photograph using a digital camera device.

14. The method of claim 13, further comprising maintaining the original content to be certified in a protected memory location of the digital camera, wherein an operator of the camera is not permitted access to the acquired content which is being certified from a time the digital camera acquires the original content to a time that the original content is certified with the device identity.

15. The method of claim 5, wherein the processing operations associated with producing a certification value for the original content are implemented within a certification processor that executes within a scanner device or a digital camera device.

16. A computer system comprising:

a memory;

a processor;

a communications interface coupled to a content acquisition device;

an interconnection mechanism coupling the memory, the processor and the communications interface allowing communication there between;

wherein the memory is encoded with a content certifier application, that when executed in the processor, provides a content certifier process that produces certified content by causing the computer system to perform the operations of;

receiving original content acquired from a content acquisition device;

receiving a device identity associated with the content acquisition device;

producing a certification value indicating the original content was acquired from the content acquisition device having the device identity;

associating the certification value to the original content to produce certified content that can be verified to represent the original content that was acquired from the content acquisition device having the associated device identity while preventing modification to the original content by processing not associated with the operations of receiving the original content, receiving the device identity, producing the certification value and associating the certification value to the original content;

wherein receiving original content acquired from the content acquisition device comprises;

receiving individual portions of the original content over time, each individual portion being smaller than a sum total of the original content; and

wherein each individual portion of the original content, once received, is respectively individually processed by an iteration of the operations of producing a certification value and associating the certification value to the original content such that a respective portion of certified content is produced for each individual respective portion of original content;

wherein receiving portions of the original content over time includes

incremental acquiring scanned rows of pixels from a physical source, wherein the scanned rows of pixels are each separately returned for receiving the certification value; and

combining respective portions of certified content to produce an entire certified document based on all individual portions of the original content that were received over time while concurrently preventing operator access to the received individual portions of the original content during performance of the operations of receiving original content, producing a certification value, and associating the certification value to the original content to ensure that the certification value is based on actual individual portions of original content and the device identity of the content acquisition device that provided the individual portions of original content.

17. The computer system of claim 16 wherein when the content certifier process causes the computer system to perform the operation of receiving original content acquired from a content acquisition device, the content certifier process causes the computer system to perform the operations of:

receiving a document certification request indicating that an operator desires to acquire and certification content obtained by the content acquisition device;

in response to the document certification request, operating a communications interface to the content acquisition device to cause the content acquisition device to obtain the original content and transmit the original content for receipt; and

in response to operating the communications interface, receiving the original content over the communications interface while contemporaneously preventing operator access to the original content during performance of the operations of receiving original content, receiving a device identity, producing a certification value, and associating the certification value to the original content.

18. The computer system of claim 16 wherein when the content certifier process causes the computer system to perform the operation of producing a certification value for the original content, the content certifier process causes the computer system to perform the operations of:

applying a certification function using the original content and the received device identity to produce a certification value that is based on an original data format of the original content; and

wherein when the content certifier process causes the computer system to perform the operation of associating the certification value to the original content, the content certifier process causes the computer system to perform the operation of;

combining the certification value with the original content while concurrently preventing access, by an operator and by unauthorized processes, to the original content during performance of the operations of receiving original content, receiving a device identity, producing a certification value, and associating the certification value to the original content to ensure that the certification value reflects actual original content and the device identity of the content acquisition device that provided the original content.

19. The computer system of claim 18 wherein when the content certifier process causes the computer system to perform the operation of receiving a device identity associated with the content acquisition device, the content certifier process causes the computer system to perform the operations of:

prompting for a device identity associated with the content acquisition device; and

receiving the device identity to be associated with the content acquisition device.

20. The computer system of claim 18 wherein receiving a device identity associated with the content acquisition device occurs contemporaneously with receiving original content and the content certifier process causes the computer system to perform the operations of:

operating the communication interface to obtain the device identity maintained within the content acquisition device; and

receiving the device identity associated with the content acquisition device over the communications interface.

21. The computer system of claim 20 wherein when the content certifier process causes the computer system to perform the operation of operating the communication interface to obtain the device identity maintained within the content acquisition device, the content certifier process causes the computer system to perform the operation of:

obtaining the device identity from the content acquisition device at the same time as obtaining the original content from the content acquisition device, the device identity being encoded within a data format of the original content that is received over the communications interface.

22. The computer system of claim 20 wherein the content acquisition device is a scanner device coupled to a computer system, the scanner device capable of scanning the original content and returning the original content to the computer system, and wherein the computer system performs the operations of operations of receiving original content from the scanner device, receiving a device identity from the scanner device, producing a certification value, and associating the certification value to the original content received from the scanner device while concurrently preventing access, by an operator of the content acquisition device and by an operator of the computer system and by unauthorized processes executing on the computer system, to the original content within the computer system from the time the original content was received from the scanner device until the original content is converted to certified content.

23. The computer system of claim 22 wherein the content certifier process causes the computer system to perform the operation of:

post-processing the certification value that is associated with the certified content using a data verification computation that corresponds to a data verification computation applied during the operation of producing a certification value to allow verification that the certified content contains an original rendition of the original content produced by the content acquisition device having the device identity.

24. The computer system of claim 16 wherein when the content certifier process causes the computer system to perform the operation of producing a certification value for the original content, the content certifier process causes the computer system to perform the operation of:

applying a certification function using the original content and the received device identity to produce a certification value that is based on an original data format of the original content combined with the received device identity;

and wherein when the content certifier process causes the computer system to perform the operation of associating the certification value to the original content, the content certifier process causes the computer system to perform the operation of;

combining the certification value with the original content while concurrently preventing operator access to the original content during performance of the operations of receiving original content, receiving a device identity, producing a certification value, and associating the certification value to the original content to ensure that the certification value reflects actual original content and the device identity of the content acquisition device that provided the original content.

25. The computer system of claim 24 wherein when the content certifier process causes the computer system to perform the operation of applying a certification function using the original content and the received device identity, the content certifier process causes the computer system to perform the operations of:

performing a data verification computation on the original content in combination with the device identity of the content acquisition device to produce the certification value that represents a unique encoding of the combination of the original content and the device identity of the content acquisition device; and

after performance of associating the certification value to the original content to produce certified content, post-processing the certification value that is associated with the certified content to allow verification that the certified content contains an original rendition of the original content produced by the content acquisition device having the device identity.

26. A computer readable storage medium including computer program logic encoded thereon that, when executed on a computer system, causes the computer system to produce certified content by performing the operations of:

receiving original content acquired from a content acquisition device;

receiving a device identity associated with the content acquisition device;

producing a certification value indicating the original content was acquired from the content acquisition device having the device identity;

associating the certification value to the original content to produce certified content that can be verified to represent the original content that was acquired from the content acquisition device having the associated device identity while preventing modification to the original content by processing not associated with the operations of receiving the original content, receiving the device identity, producing the certification value and associating the certification value to the original content;

wherein receiving original content acquired from the content acquisition device comprises;

receiving individual portions of the original final content over time, each individual portion being smaller than a sum total of the original content; and

wherein each individual portion of the original content, once received, is respectively individually processed by an iteration of the operations of producing a certification value and associating the certification value to the original content such that a respective portion of certified content is produced for each individual respective portion of original content;

wherein receiving portions of the original content over time includes

incrementally acquiring scanned rows of pixels from a physical source, wherein the scanned rows of pixels are each separately returned for receiving the certification value; and

combining respective portions of certified content to produce an entire certified document based on all individual portions of the original content that were received over time while concurrently preventing operator access to the received individual portions of the original content during performance of the operations of receiving original content, producing a certification value, and

associating the certification value to the original content to ensure that the certification value is based on actual individual portions of original content and the device identity of the content acquisition device that provided the individual portions of original content.

27. A computer system comprising:

a memory;

a processor;

a communications interface coupled to a content acquisition device;

an interconnection mechanism coupling the memory, the processor and the communications interface allowing communication there between;

wherein the memory is encoded with a content certifier application, the when executed in the processor, provides a means for producing certified content, the means including;

means for receiving original content acquired from a content acquisition device;

means for receiving a device identity associated with the content acquisition device;

means for producing a certification value indicating the original content was acquired from the content acquisition device having the device identity;

means for associating the certification value to the original content to produce certified content that can be verified to represent the original content that was acquired from the content acquisition device having the associated device identity while preventing modification to the original content by processing not associated with the operations of receiving the original content, receiving the device identity, producing the certification value and associating the certification value to the original content;

wherein receiving individual content acquired from the content acquisition device comprises;

means for receiving individual portions of the original content over time, each individual portion being smaller than a sum total of the original content; and

wherein each individual portion of the original content once received, is respectively individually processed by an iteration of the operations of producing a certification value and associating the certification value to the original content such that a respective portion of certified content is produced for each individual respective portion of original content;

wherein receiving portions of the original content over time includes

means for incrementally acquiring scanned rows of pixels from physical source, wherein the scanned rows of pixels are each separately returned for receiving the certification value; and

means for combining respective portions of certified content to produce an entire certified document based on all individual portions of the original content that were received over time while concurrently preventing operator access to the received individual portions of the original content during performance of the operations of receiving original content, producing a certification value, and associating the certification value to the original content to ensure that the certification value is based on actual individual portions of original content and the device identity of the content acquisition device that provided the individual portions of original content.

28. A method for verifying certified content, the method comprising:

processing a certification value that is associated with the certified content using a data verification computation that corresponds to a data verification computation applied during an operation of producing a certification value on original content acquired from a content acquisition device, processing of the certification value allowing verification that;

i) the certified content contains an original rendition of the original content that was acquired by the content acquisition device having a device identity specified in the certified content; and

ii) the certification value was associated to the original content to produce the certified content while preventing modification to the original content by processing not associated with operations of receiving the original content from the data acquisition device having the device identity, receiving the device identity for the data acquisition device that acquired the original content, producing the certification value and associating the certification value to the original content to produce the certified content;

wherein the original content was acquired from the content acquisition device as individual portions of the original content received over time, each individual portion being smaller than a sum total of the original content;

wherein each individual portion of the original content, once acquired from the content acquisition device was respectively individually processed by an iteration of the operations of producing the certification value and associating the certification value to the original content such that a respective portion of certified content was produced for each individual respective portion of original content;

wherein the certified content was produced for each individual respective portion of original content;

wherein individual portions of the original content received over time includes incrementally acquired scanned rows of pixels from a physical source, wherein the scanned rows of pixels were each separately returned to receive the certification value; and

wherein respective portions of certified content were combined to produce an entire certified document based on all individual portions of the original content that were received over time while operator access was concurrently prevented to the received individual portions of the original content during performance of operations that received original content, produced the certification value, and associated the certification value to the original content to ensure that the certification value is based on actual individual portions of original content and the device identity of the content acquisition device that provided the individual portions of original content.

29. The method of claim 28, wherein allowing verification that the certified content contains an original rendition of the original content that was acquired by the content acquisition device having a device identity specified in the certified content includes displaying a portable document format (PDF) file and displaying a scanner device identity and serial number.