User-based digital rights management

• US 7,869,602 B1
• Filed: 05/04/2005
• Issued: 01/11/2011
• Est. Priority Date: 03/10/2005
• Status: Active Grant

• Current Assignee: Sprint Spectrum LP (Deutsche Telekom AG)
• Original Assignee: Sprint Spectrum LP (Deutsche Telekom AG)
• Inventors: Faros, Brian C., Papineau, Scott
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): YALEW, FIKREMARIAM A
• Application Number:
  US11/121,522
• Time in Patent Office: 2,078 Days
• Field of Search: 380/277, 380/270
• US Class Current: 380/277
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

A content management system includes a mobile station, a service provider, and a content distribution kiosk. A content encryption key is associated with the mobile station, and a copy of the key is provided to the mobile station. In providing content to the mobile station, the content is first encrypted with the content encryption key, and it is sent to the mobile station in its encrypted form. The mobile station keeps the content in memory in its encrypted form. To make use of the content, the mobile station decrypts the content for use, and deletes the decrypted content once it has been used. The content in its encrypted form remains in memory on the mobile station. Multiple mobile devices may use the same content encryption key, in which case the devices may exchange encrypted content using, for example, a Bluetooth connection. Content may also be retrieved from a content distribution kiosk.

Claims

1. A content management method comprising:

receiving into a first mobile station from a mobile telecommunications service provider, during over-the-air provisioning of the first mobile station, an encryption key associated with a user account under which the first mobile station is to be served by the mobile telecommunications service provider;

storing the encryption key in the first mobile station;

thereafter sending from the first mobile station to the mobile telecommunications service provider a request for content, and receiving into the first mobile station from the mobile telecommunications service provider the requested content, wherein the received content is encrypted by the mobile telecommunications service provider with the content encryption key in response to the request for the content;

applying the encryption key in the first mobile station to decrypt only a portion of the received encrypted content so as to produce decrypted content, and using the decrypted content in the first mobile station;

deleting the decrypted content from the first mobile station after use of the decrypted content in the first mobile station; and

retaining the encrypted content in the first mobile station after deleting the decrypted content in the first mobile station.

2. The content management method of claim 1, further comprising:

storing the encryption key at the mobile telecommunications service provider in a profile record associated with the user account.

3. The content management method of claim 1, further comprising:

during the over-the-air provisioning of the first mobile station, transmitting the encryption key from the mobile telecommunications service provider to the first mobile station.

4. The content management method of claim 1, further comprising:

transferring the received encrypted content from the first mobile station to a second mobile station that is also served by the mobile telecommunications service provider under the user account and that also received from the mobile telecommunications service provider, and stored, the encryption key associated with the user account, the second mobile station being operable to apply the encryption key to decrypt the encrypted content so as to produce the decrypted content as well and to use the decrypted content as well.

5. The content management method of claim 4, further comprising:

during over-the-air provisioning of the second mobile station, transmitting the encryption key from the mobile telecommunications service provider to the second mobile station.

6. The content management method of claim 4, further comprising:

applying the encryption key in the second mobile station to decrypt the encrypted content received from the first mobile station, and using the decrypted content in the second mobile station.