Delivery of license information using a short messaging system protocol in a closed content distribution system

• US 7,779,482 B1
• Filed: 12/02/2003
• Issued: 08/17/2010
• Est. Priority Date: 02/07/2003
• Status: Active Grant

• Current Assignee: Acer Cloud Technology, Inc. (Acer, Inc.)
• Original Assignee: iGware Inc (Acer, Inc.)
• Inventors: Yen, Wei, Srinivasan, Pramila, Princen, John, Lo, Raymond
• Primary Examiner(s): Homayounmehr; Farid
• Application Number:
  US10/727,332
• Time in Patent Office: 2,450 Days
• Field of Search: 726/1, 726/30, 455/466
• US Class Current: 726/30
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Delivery of licenses in a closed distribution system including a playback device and secure processor. The secure processor allows only use of authorized content, and the playback device is authorized to execute content. A user requests a license to selected content using a communication link, without the playback device, outside the closed content system to a license server. The user requests licenses using SMS, sending small amounts of information, possibly including proofs of purchase. The server responds using SMS, providing the user with a code representing information interpretable as a license, such as an encrypted content key or a shared secret known to the user. The user, using a keypad or other device, inputs that code to the playback device, which determines if it authorizes use of the content. The playback device authenticates the license, determining whether that license authorizes the user for the content, and enforces the licensed rights.

Claims

1. A method comprising:

generating by a license server a text-based activation code based on information obtained from a playback device;

in a closed content distribution system including the playback device and a secure processor that is coupled to the playback device such that the secure processor can enable execution or presentation of content on the playback device, receiving an SMS text message that includes license information in the form of the text-based activation code via a communication link not including the playback device or secure processor, wherein, in operation, at least part of the SMS message is communicated to the playback device by a human who receives the SMS message and enters the text-based activation code in an input console coupled to the playback device;

constructing, at the playback device, license parameters including a device ID, a content ID, and a rights code identified by the text-based activation code, wherein the playback device or the secure processor, or both in combination or conjunction, are associated with the device ID;

using at least part of the SMS text message as a signature to authenticate the constructed license parameters, wherein at least part of the text-based activation code is used as the cryptographic signature generated using a private key of a public key cryptographic key pair;

allowing content identified by the content ID to be executed or presented by the playback device or the secure processor, or by both in combination or conjunction in accordance with verification of the constructed and authenticated license parameters, wherein the verification is performed by execution of a mandatory security software by the secure processor, including;

authenticating a specific content element, a specific playback device or secure processor, and a specific user;

comparing the device ID with a tamper-proof identity available to the playback device or the secure processor, or to both in combination or conjunction;

comparing rights information with an identity of selected content available to the playback-device or the secure processor, or to both in combination or conjunction;

computing a secret key using a private key of the secure processor and a public key of the license server;

decrypting the identities using the secret key;

verifying a signature by the license server;

ensuring that use by the specific user of the specific content element with the specific playback device or secure processor, or by both in combination or conjunction, is in accordance with the license information.

2. A method as in claim 1, including steps of ensuring that only authorized content is executed or presented by the playback device or a secure processor, or by both in combination or conjunction.

3. A method as in claim 1, including steps of sending the content to the playback device using a communication link not used by the steps of sending the text-based activation code.

4. A method as in claim 1, wherein the steps of enforcing are performed at least in part by the playback device or a secure processor coupled thereto.

5. A method as in claim 1, wherein the steps of enforcing are performed by mandatory security hardware or mandatory security software.

6. A method as in claim 1, wherein the steps of enforcing include steps of decrypting at least some information derivable from the text-based activation code.

7. A method as in claim 1, wherein the steps of enforcing includes using a key derived from the text-based activation code for decrypting a license or the content.

8. A method as in claim 1, wherein the steps of enforcing includes

putting together at least an identity of the playback device and an identity of the content;

applying at least part of the text-based activation code, the identity of the playback device, and the identity of the content to authenticate the execution rights for the playback device for the content.

9. A method as in claim 1, wherein the steps of enforcing includes applying a key derived from the text-based activation code as an authentication code.

10. A method as in claim 1, wherein the text-based activation code is included in an SMS.

11. A method as in claim 1, wherein at least a portion of the text-based activation code is manually entered into the playback device.

12. A method as in claim 1, wherein at least a portion of the text-based activation code is provided to the playback device, wherein the playback device processes the portion of the text-based activation code and produces a licensing message suitable to be sent by the communication device.

13. A method as in claim 12, wherein the licensing message is encrypted or cryptographically authenticated by the communication device and sent to a license server.

14. A method as in claim 1, wherein the steps of enforcing include steps of using a decryption key available to the playback device or a secure processor coupled thereto.

15. A method as in claim 1, wherein said text-based activation code is included in a first message, further comprising:

sending a second message from the communication device to a license server;

sending the first message from the license server to the communication device, the first message including human-readable characters;

manually entering those characters to an input element coupled to the playback device.

16. A method as in claim 1, wherein the system includes a closed content distribution system capable of delivering content to the playback device using a second transport technique not including that used by the steps of sending a text-based activation code.

17. A method as in claim 1, wherein the system includes a closed content distribution system capable of ensuring that only authorized content is presented by the playback device or executed by a secure processor.

18. A method as in claim 1, including steps of authenticating the rights information by the playback device or a secure processor coupled thereto.

19. A method as in claim 1, further comprising decrypting at least some information derivable from the text-based activation code.

20. A method as in claim 1, further comprising using a decryption key available to the playback device or a secure processor coupled thereto to authenticate the rights information.

21. A method as in claim 1, further comprising:

constructing parameters of execution rights for the hand-held device or the content;

providing a system including a playback device;

sending to the playback device, via a transport technique not including the playback device, a text-based message associated with an SMS technique, wherein the text-based message is derivable by the system;

enforcing, using mandatory security hardware or mandatory security software, the rights information on the system in response to the text-based message, said enforcing including;

constructing parameters of execution rights for the playback device;

using at least part of the text-based message as a signature to authenticate the execution rights.

22. A method as in claim 1, wherein the cryptographically verifying includes using at least part of the text-based activation code as a cryptographic signature generated using a private key of a public key cryptographic key pair.

23. A method as in claim 1, wherein the cryptographically verifying includes computing a cryptographic signature using a computed shared secret key to construct a message authentication code (MAC).

24. A method as in claim 1, wherein the cryptographically verifying includes decrypting the text-based activation code using a computed shared secret key and matching the decrypted text-based activation code against the license parameters.

25. A method as in claim 1, wherein one or more of the license parameters are selected from the group consisting of:

a device identity, a content identity, and a rights code.

26. A method comprising:

generating by a license server a text-based activation code based on information obtained from a playback device;

providing, in a closed content distribution system, including the playback device and a secure processor, the secure processor effectively coupled to the playback device, with the effect that the secure processor can execute the content or control the playback device to present the content, an SMS text message that includes license information in the form of the text-based activation code, wherein the SMS message is sent via a communication link not including the playback device or secure processor, wherein, in operation, at least part of the SMS message is communicated to the playback device by a human who receives the SMS message and enters the text-based activation code in an input console connected to the playback device;

constructing, at the playback device, license parameters including a device ID, a content ID, and a rights code identified by the text-based activation code, wherein the playback device or the secure processor, or both in combination or conjunction, are associated with the device ID;

using at least part of the SMS text message as a signature to authenticate the constructed license parameters, wherein at least part of the text-based activation code is used as the cryptographic signature generated using a private key of a public key cryptographic key pair;

allowing content identified by the content ID to be executed by the secure processor or presented by the playback, or by both in combination or conjunction in accordance with verification of the constructed and authenticated license parameters, wherein the verification is performed by execution of a mandatory security software by the secure processor, which performs;

authenticating a specific content element, a specific playback device or secure processor, and a specific user;

enforcing comparison of the device ID with a tamper-proof identity available to the playback device or the secure processor, or to both in combination or conjunction;

enforcing comparison of rights information with an identity of selected content available to the playback-device or the secure processor, or to both in combination or conjunction;

enforcing computation of a secret key using a private key of the secure processor and a public key of the license server, and decryption of the identities using the secret key;

enforcing verification of a signature of the license server; and

ensuring that the specific user uses the specific content with the specific playback device or the secure processor, or by both in combination or conjunction in accordance with the license information.

27. A method as in claim 26, including steps of authenticating the license information by the playback device or the secure processor, or by both in combination or conjunction.

28. A method as in claim 26, including steps of determining in response to the rights information whether the user is authorized to execute or present the selected content.

29. A method as in claim 26, including steps of encoding the license information using a digital signature, secure hash, or shared secret;

and

authenticating the license information by the playback device or the secure processor, or by both in combination or conjunction, in response to the digital signature, secure hash, or shared secret.

30. A method as in claim 26, including steps of receiving content at the playback device.

31. A method as in claim 26, wherein at least a portion of the content is included on physical media transported to the playback device or secure processor.

32. A method as in claim 26, wherein at least a portion of the content is present at the playback device or secure processor before the steps of delivering license information.

33. A method as in claim 26, wherein the communication link includes a cellular telephone.

34. A method as in claim 26, wherein the content can be executed or interpreted by the playback device or the secure processor, or by both in combination or conjunction.

35. A method as in claim 26, wherein the content can be presented in a human-sensible form by the playback device or the secure processor, or by both in combination or conjunction.

36. A method as in claim 26, wherein the secure processor includes a computing device capable of enforcing mandatory execution of selected security software.

37. A method as in claim 26, wherein the secure processor includes a 14 computing device capable of general purpose processing.

38. A method as in claim 26, wherein the steps of providing include steps of sending a text-based message to a hand-held device using an SMS technique, the text-based message including information from which rights information is derivable.

39. A method as in claim 26, wherein the steps of ensuring include steps of decoding the license information;

generating at least a portion of the rights information in response to the steps of decoding; and

enforcing the rights information.

40. A method as in claim 26, including steps of performing a commercial transaction concurrently with communication between a license server and a user.

41. A method as in claim 40, wherein the steps of performing a commercial transaction include steps of receiving information at the license server sufficient to allow that license server to effect a purchase transaction by the user.

42. A method as in claim 40, wherein the steps of performing a commercial transaction include steps of receiving proof of purchase at the license server of a license by the user.

43. A method as in claim 26, including steps of performing mandatory security software by the secure processor.

44. A method as in claim 43, wherein the steps of performing mandatory security software include one or more of:

authenticating at least one of;

a specific content element, a specific playback device or secure processor, a specific user;

enforcing comparison of an identity associated with the playback device with a tamper-proof identity available to the playback device or the secure processor, or to both in combination or conjunction;

enforcing comparison of rights information with an identity of selected content available to the playback-device or the secure processor, or to both in combination or conjunction;

enforcing computation of the secret key (using its private key and server public key) and decryption of the identities; and

enforcing verification of a signature by the license server.

45. A method as in claim 26, wherein the steps of providing include steps of delivering the activation code from a license server to a user;

and

manually communicating the activation code from the user to the playback device or the secure processor.

46. A method as in claim 45, including steps of deriving license information from the activation code.

47. A method as in claim 45, including steps of decrypting content in response to the activation code.

48. A method as in claim 45, wherein the activation code includes a human-readable alphabetic, alphanumeric, numeric, or other character string.

49. A method as in claim 45, wherein the activation code includes a representation of at least a portion of a license message.

50. A method as in claim 45, wherein the steps of communicating the activation code include a human input device.

51. A method as in claim 45, wherein the steps of communicating the activation code include an input technique not part of the closed distribution system.

52. A method as in claim 45, wherein the steps of communicating the activation code include an SMS protocol.

53. A method as in claim 45, wherein the steps of communicating the activation code include a text messaging protocol.

54. A method as in claim 45, wherein the activation code includes a representation of a content decryption key.

55. A method as in claim 54, wherein the closed distribution system includes a public-key cryptosystem;

and

the content decryption key includes a decryption key privately associated with the content, encrypted by an encryption key publicly associated with a specific playback device.