Method and system for secure network-based distribution of content

• US 7,895,661 B2
• Filed: 04/26/2004
• Issued: 02/22/2011
• Est. Priority Date: 04/25/2003
• Status: Expired due to Fees

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Tribble, Guy L., Dowdy, Thomas, Robbin, Jeffrey L., Heller, David
• Primary Examiner(s): Abrishamkar; Kaveh
• Application Number:
  US10/832,812
• Publication Number:
  US 20050050345A1
• Time in Patent Office: 2,493 Days
• Field of Search: None
• US Class Current: 726/27
• CPC Class Codes: G06F 21/1011 to devices

Abstract

A method and system for network-based distribution of content are disclosed. The distribution of content is not only secure but also controlled. The security restricts access to content within media files during downloads as well as while stored at a server or client. In one embodiment, each media file is encrypted with a different, randomly generated key. The control over the distribution of the media file can serve to limit the subsequent distribution of media files from clients to other clients. In another embodiment, the control can permit media files to be shared on a limited number of different clients affiliated with the same user. The clients can vary with application but generally are computing devices that have memory storage. Often, the clients are personal computers or other computing devices that are capable of storing and presenting content to their users.

Claims

1. A method for acquiring a media file for usage at a local machine from a central server machine, said method comprising:

identifying a media file from a plurality of available media files, each of the media files having at least media content data;

purchasing access to the identified media file;

obtaining a download key that corresponds to the identified media file;

downloading the identified media file in its encrypted form to the local machine;

decrypting the identified media file to its unencrypted form using the download key;

obtaining at least one user key, the user key being associated with a user of the local machine;

generating a content key that is at least substantially random;

encrypting the media content data of the identified media file with the content key;

encrypting the content key with the user key to produce an encrypted content key;

modifying the identified media file to further include a user key reference and the encrypted content key; and

storing the modified media file to the local machine.

2. A method as recited in claim 1, wherein a plurality of media files are stored on the central server machine, each of the media files having at least metadata and media content data, the metadata describing characteristics of the associated media item.

3. A method as recited in claim 2, wherein said identifying (a) comprises:

(a1) browsing the media files stored on the server machine through use of the metadata for the media files; and

(a2) identifying one of the media files to be the identified media file.

4. A method as recited in claim 3, wherein said identifying of the one of the media files is performed by a user.

5. A method as recited in claim 1, wherein said storing operates to store the modified media file to a local storage associated with the local machine.

6. A method as recited in claim 5, wherein the local storage is a data storage device within the local machine.

7. A method as recited in claim 1, wherein the local machine connects to the central server machine over a network, and wherein the network comprises the Internet.

8. A method as recited in claim 1, wherein the central server machine stores an account for each of the users, each account having at least one user key assigned thereto, and

wherein the user key obtained by said obtaining is the at least one user key assigned to the account corresponding to the user.

9. A method as recited in claim 8, wherein the local machine associated with the user stores at least one user key assigned to the account corresponding to the user, and wherein said obtaining of the user key operates to obtain the user key from the local machine.

10. A method for acquiring a media file for usage at a local machine from a central server machine, said method comprising:

identifying a media file from a plurality of available media files, each of the media files having at least media content data;

purchasing access to the identified media file;

obtaining a download key that corresponds to the identified media file;

downloading the identified media file in its encrypted form to the local machine;

obtaining at least one user key, the user key being associated with a user of the local machine;

generating a content key that is at least substantially random;

transcrypting the media content data of the identified media file using the download key and the content key;

encrypting the content key with the user key to produce an encrypted content key;

modifying the identified media file to further include a user key reference and the encrypted content key; and

storing the modified media file to the local machine.

11. A method as recited in claim 10, wherein a plurality of media files are stored on the central server machine, each of the media files having at least metadata and media content data, the metadata describing characteristics of the associated media item.

12. A method as recited in claim 11, wherein said identifying (a) comprises:

(a1) browsing the media files stored on the server machine through use of the metadata for the media files; and

(a2) identifying one of the media files to be the identified media file.

13. A method as recited in claim 12, wherein said identifying of the one of the media files is performed by a user.

14. A method as recited in claim 10, wherein said storing operates to store the modified media file to a local storage associated with the local machine.

15. A method as recited in claim 10, wherein the local machine connects to the central server machine over a network, and wherein the network comprises the Internet.

16. A method as recited in claim 10, wherein the central server machine stores an account for each of the users, each account having at least one user key assigned thereto, and

wherein the user key obtained by said obtaining is the at least one user key assigned to the account corresponding to the user.

17. A method as recited in claim 16, wherein the local machine associated with the user stores at least one user key assigned to the account corresponding to the user, and wherein said obtaining of the user key operates to obtain the user key from the local machine.

18. A method for acquiring a media file for usage at a local machine from a central server machine, said method comprising:

identifying a media file from a plurality of available media files, each of the media files having at least media content data;

purchasing access to the identified media file;

obtaining at least one user key, the user key being associated with a user of the local machine;

generating a content key that is at least substantially random;

encrypting the media content data of the identified media file with the content key;

encrypting the content key with the user key to produce an encrypted content key; and

modifying the identified media file to further include a user key reference and the encrypted content key.

19. A method as recited in claim 18, wherein said method further comprises:

subsequently downloading the identified media file in its encrypted form to the local machine; and

storing the modified media file to the local machine.

20. A method as recited in claim 19, wherein a plurality of media files are stored on the central server machine, each of the media files having at least metadata and media content data, the metadata describing characteristics of the associated media item.

21. A method as recited in claim 20, wherein said identifying (a) comprises:

(a1) browsing the media files stored on the server machine through use of the metadata for the media files; and

(a2) identifying one of the media files to be the identified media file.

22. A method as recited in claim 21, wherein said identifying of the one of the media files is performed by a user.

23. A method as recited in claim 19, wherein said storing operates to store the modified media file to a local storage associated with the local machine.

24. A method as recited in claim 23, wherein the local storage is a data storage device within the local machine.

25. A method as recited in claim 19, wherein the local machine connects to the central server machine over a network, and wherein the network comprises the Internet.

26. A method as recited in claim 19, wherein the central server machine stores an account for each of the users, each account having at least one user key assigned thereto, and

wherein the user key obtained by said obtaining is the at least one user key assigned to the account corresponding to the user.

27. A method as recited in claim 26, wherein the local machine associated with the user stores at least one user key assigned to the account corresponding to the user, and wherein said obtaining of the user key operates to obtain the user key from the local machine.

28. A non-transitory computer readable medium including at least computer program code for acquiring a media file for usage at a local machine from a central server machine, said non-transitory computer readable medium comprising:

computer program code for receiving a particular media file at the local machine from the server machine, the particular media file having at least media content data;

computer program code for decrypting the particular media file to its unencrypted form using the download key;

computer program code for obtaining at least one user key, the user key being associated with a user of the local machine;

computer program code for generating a content key that is at least substantially random;

computer program code for encrypting the media content data of the particular media file with the content key;

computer program code for encrypting the content key with the user key to produce an encrypted content key;

computer program code for modifying the particular media file to further include a user key reference and the encrypted content key; and

computer program code for storing the modified media file to the local machine.

29. A non-transitory computer readable medium as recited in claim 28, wherein said non-transitory computer readable medium further comprises:

computer program code for identifying a media file to be presented, the identified media file having at least encrypted media content data, a user key reference, and an encrypted content key;

computer program code for obtaining a user key based on the user key reference within the identified media file;

computer program code for obtaining the encrypted content key from the identified media file;

computer program code for decrypting the encrypted content key using the user key to obtain the content key;

computer program code for decrypting the encrypted media content data of the identified media file with the content key; and

computer program code for presenting the media content data of the identified media file.

30. A non-transitory computer readable medium as recited in claim 29,

wherein each of the media files has at least the media content data and the metadata, the metadata describing characteristics of the associated media item;

wherein the identified media file is stored on a local machine, and

wherein said computer program code for presenting presents the media content data of the identified media file at the local machine.

31. A non-transitory computer readable medium including at least computer program code for usage of a media file at a local machine from a central server machine, said non-transitory computer readable medium comprising:

computer program code for identifying a media file from a plurality of available media files, each of the media files having at least media content data;

computer program code for purchasing access to the identified media file;

computer program code for obtaining a download key that corresponds to the identified media file;

computer program code for downloading the identified media file in its encrypted form to the local machine;

computer program code for obtaining at least one user key, the user key being associated with a user of the local machine;

computer program code for generating a content key that is at least substantially random;

computer program code for transcrypting the media content data of the identified media file using the download key and the content key;

computer program code for encrypting the content key with the user key to produce an encrypted content key;

computer program code for modifying the identified media file to further include a user key reference and the encrypted content key; and

computer program code for storing the modified media file to the local machine.

32. A non-transitory computer readable medium including at least computer program code for acquiring a media file for usage at a local machine from a central server machine, said non-transitory computer readable medium comprising:

computer program code for identifying a media file from a plurality of available media files, each of the media files having at least media content data;

computer program code for purchasing access to the identified media file;

computer program code for obtaining at least one user key, the user key being associated with a user of the local machine;

computer program code for generating a content key that is at least substantially random;

computer program code for encrypting the media content data of the identified media file with the content key;

computer program code for encrypting the content key with the user key to produce an encrypted content key; and

computer program code for modifying the identified media file to further include a user reference and the encrypted content key.