Controlling database copyrights

• US 7,979,354 B2
• Filed: 08/31/2006
• Issued: 07/12/2011
• Est. Priority Date: 04/01/1994
• Status: Expired due to Fees

• Current Assignee: Piracy Protection LLC (LF Capital Partners, LLC)
• Original Assignee: Intarsia Software LLC (Intellectual Ventures LLC)
• Inventors: Saito, Makoto
• Primary Examiner(s): Augustin; Evens J
• Application Number:
  US11/469,035
• Publication Number:
  US 20070061267A1
• Time in Patent Office: 1,776 Days
• Field of Search: 705/53, 705/55, 705/56, 705/59, 463/29, 235/492
• US Class Current: 705/51
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04N 1/32101 Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
• CPC Class Codes: H04N 1/32128 attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image for information embedded in the image H04N1/32144
• CPC Class Codes: H04N 1/32133 on the same paper sheet, e.g. a facsimile page header
• CPC Class Codes: H04N 1/32144 embedded in the image data, i.e. enclosed or integrated in the image, e.g. watermark, super-imposed logo or stamp
• CPC Class Codes: H04N 1/44 Secrecy systems
• CPC Class Codes: H04N 1/4406 Restricting access, e.g. according to user identity mechanisms actuated y cards, PIN or the like in apparatus for dispensing G07F7/08
• CPC Class Codes: H04N 1/4426 involving separate means, e.g. a server, a magnetic card
• CPC Class Codes: H04N 1/4433 to an apparatus, part of an apparatus or an apparatus function
• CPC Class Codes: H04N 1/444 to a particular document or image or part thereof
• CPC Class Codes: H04N 1/4486 using digital data encryption
• CPC Class Codes: H04N 2201/3225 of data relating to an image, a page or a document
• CPC Class Codes: H04N 2201/3246 of data relating to permitted access or usage, e.g. level of access or usage parameters for digital rights management [DRM] related to still images
• CPC Class Codes: H04N 2201/3281 Encryption; Ciphering
• CPC Class Codes: Y10S 705/904 Usage protection of distributed files
• CPC Class Codes: Y10S 705/908 : Software or content usage protection

Abstract

Briefly, in accordance with one or more embodiments, a utilization permit key may be pre-defined to permit at least one of displaying, editing, storing, copying, and/or transferring of digital data.

Claims

1. A method, comprising:

a computing device receiving a utilization permit key usable to decrypt information, the utilization permit key indicating a first set of permitted operations for decrypted information;

the computing device decrypting encrypted data using the utilization permit key to produce decrypted data;

after decrypting the encrypted data, the computing device determining that at least one user-requested operation that uses the decrypted data or a re-encrypted version of the decrypted data is not within the first set of permitted operations indicated by the utilization permit key; and

the computing device preventing, based at least in part on said determining, performance of the at least one user-requested operation.

2. The method of claim 1, wherein the data is copyrighted data, wherein the method further comprises the computing device receiving at least a part of a copyright control program from a key control center, and wherein the copyright control program is usable along with the utilization permit key to cause the computing device to perform said determining and said preventing.

3. The method of claim 2, further comprising the computing device receiving said encrypted data.

4. The method of claim 1, further comprising:

the computing device receiving part of a copyright control program from a database; and

the computing device receiving another part of said copyright control program from a key control center, wherein the copyright control program is usable along with the utilization permit key to cause the computing device to perform said determining and said preventing.

5. The method of claim 4, further comprising the computing device receiving encrypted data.

6. The method of claim 1, further comprising limiting, by a copyright control program executing on the computing device, a number of times the data is used.

7. The method of claim 1, further comprising limiting, by a copyright control program executing on the computing device, a number of times said utilization permit key is used.

8. The method of claim 1, further comprising maintaining, by a copyright control program executing on the computing device, copyright information on the data.

9. The method of claim 1, further comprising maintaining, by a copyright control program executing on the computing device, copyright information on the data, wherein the copyright information includes history information on authorship.

10. The method of claim 1, further comprising the computing device providing a warning against performing of a user-requested operation that is not within the first set of permitted operations indicated by the utilization permit key.

11. The method of claim 1, wherein the first set of permitted operations includes only one of the following operations:

displaying, storing, copying, editing, transferring.

12. The method of claim 1, wherein the first set of permitted operations includes one or more of the following operations:

displaying, storing, copying, editing, transferring.

13. The method of claim 1, wherein the first set of permitted operations includes two or more of the following operations:

displaying, storing, copying, editing, transferring.

14. The method of claim 1, wherein the first set of permitted operations includes one or more operations of a hierarchy of operations, including a first operation and any operations in the hierarchy below the first operation.

15. The method of claim 1, further comprising the computing device re-encrypting said decrypted data when performing one or more of the following operations:

storage of data, copying of data, transferring of data.

35. The method of claim 1, wherein the utilization permit key is not an edit permit key, and wherein the utilization permit key prevents at least editing of the decrypted data.

36. The method of claim 1, wherein the utilization permit key is not a storage permit key, and wherein the utilization permit key prevents at least storage of the decrypted data.

37. The method of claim 1, wherein the utilization permit key is not a copy permit key, and wherein the utilization permit key prevents at least copying of the decrypted data.

38. The method of claim 1, wherein the utilization permit key is not a display permit key, and wherein the utilization permit key prevents at least display of the decrypted data.

39. The method of claim 1, wherein the utilization permit key is not a transfer permit key, and wherein the utilization permit key prevents at least transfer of the decrypted data.

40. The method of claim 4, further comprising the computing device receiving from the key control center at least one of the following:

said utilization permit key and said encrypted data.

41. The method of claim 14, wherein the hierarchy of operations includes at least editing, transferring, storing, copying, and displaying.

44. The method of claim 1, wherein the first set of permitted operations are non-cryptographic operations, and wherein the first set of permitted operations includes at least two operations.

16. An apparatus, comprising:

a processor;

memory, coupled to the processor, having stored thereon program instructions executable to cause the apparatus to ;

receive a utilization permit key usable to decrypt information, the utilization permit key indicating a first set of permitted operations for decrypted information;

decrypt encrypted data using the utilization permit key to produce decrypted data;

after decrypting the encrypted data, determine that at least one user-requested operation that uses the decrypted data or a re-encrypted version of the decrypted data is not within the first set of permitted operations indicated by the utilization permit key; and

prevent performance of the at least one user-requested operation determined to be not within the first set of permitted operations.

17. The apparatus of claim 16, wherein the program instructions are executable to cause the apparatus to receive said encrypted data.

18. The apparatus of claim 16, wherein the program instructions are executable to cause the apparatus to limit, by a copyright control program, a number of times the data is used.

19. The apparatus of claim 16, wherein the program instructions are executable to cause the apparatus to limit, by a copyright control program, a number of times said utilization permit key is used.

20. The apparatus of claim 16, wherein the program instructions are executable to cause the apparatus to maintain, by a copyright control program, copyright information on the data.

21. The apparatus of claim 20, wherein the copyright information includes history information on authorship.

22. The apparatus of claim 16, wherein the program instructions are executable to cause the apparatus to warn against performing a user-requested operation not within the first set of permitted operations.

23. The apparatus of claim 16, wherein the program instructions are executable to cause the apparatus to re-encrypt said decrypted data when performing one or more of the following operations:

storage of data, copying of data, transferring of data.

42. The apparatus of claim 16, wherein the first set of permitted operations authorized by the utilization permit key are within a hierarchy of operations.

45. The apparatus of claim 16, wherein the first set of permitted operations are non-cryptographic operations, and wherein the first set of permitted operations includes at least two operations.

24. An article of manufacture including a non-transitory computer-readable memory medium having program instructions stored thereon that, responsive to execution by a computer system, cause the computer system to perform operations comprising:

receiving a utilization permit key usable to decrypt information, the utilization permit key indicating a first set of permitted operations for decrypted information;

decrypting encrypted data using the utilization permit key to produce decrypted data;

after decrypting the encrypted data, determining that at least one user-requested operation that uses the decrypted data or a re-encrypted version of the decrypted data is not within the first set of permitted operations indicated by the utilization permit key; and

preventing performance of the at least one user-re uested o eration determined to be not within the first set of permitted operations.

25. The article of manufacture of claim 24, wherein the operations further comprise receiving said encrypted data.

26. The article of manufacture of claim 24, wherein the operations further comprise limiting, by a copyright control program, a number of times the data is used.

27. The article of manufacture of claim 24, wherein the operations further comprise limiting, by a copyright control program, a number of times said utilization permit key is used.

28. The article of manufacture of claim 24, wherein the operations further comprise maintaining, by a copyright control program, copyright information on the data.

29. The article of manufacture of claim 28, wherein the copyright information includes history information on authorship.

30. The article of manufacture of claim 24, wherein the operations further comprise warning against performing of a user-requested operation not within the first set of permitted operations authorized by the utilization permit key.

31. The article of manufacture of claim 24, wherein the operations further comprise re-encrypting of said decrypted data when performing one or more of the following operations:

storage of data, copying of data, transferring of data.

32. The article of manufacture of claim 24, wherein said utilization key is one of a plurality of hierarchical utilization permit keys in which a utilization permit at a given level of the hierarchy permits performing of operations at any lower levels of the hierarchy.

33. The article of manufacture of claim 32, wherein the plurality of hierarchical utilization permit keys includes a transfer permit key at a highest level of the hierarchy.

34. The article of manufacture of claim 32, wherein the plurality of hierarchical utilization permit keys includes an edit permit key at a highest level of the hierarchy.

46. The article of manufacture of claim 24, wherein the first set of permitted operations are non-cryptographic operations, and wherein the first set of permitted operations includes at least two operations.

43. An apparatus, comprising:

first means for interfacing with a communications network to receive a utilization permit key usable to decrypt information, the utilization permit key indicating a first set of permitted operations for decrypted information;

second means for;

decrypting encrypted data using the utilization permit key to produce decrypted data

after decrypting the encrypted data, determining that at least one user-requested operation that uses the decrypted data or a re-encrypted version of the decrypted data is not within the first set of permitted operations by the utilization permit key; and

preventing the performing of the at least one user-requested operation determined to be not within the first set of permitted operations.

47. A method, comprising:

receiving at a user device one or more of a plurality of utilization permit keys associated with a set of data, wherein each of the plurality of utilization permit keys is usable to perform cryptographic operations on the set of data and is configured to permit a corresponding further use of the set of data, wherein the plurality of utilization permit keys are arranged in a hierarchy in which a given one of the plurality of utilization permit keys also permits uses of the set of data that are permitted by any utilization permit keys within the plurality of utilization permit keys that are lower in the hierarchy than the given utilization permit key;

the user device decrypting an encrypted version of the set of data using a first of the received one or more utilization permit keys, wherein the decrypting is performed only when the first utilization permit key permits the displaying and/or editing of the set of data; and

the user device using the set of data according to the use or uses permitted by the first utilization permit key.

48. The method of claim 47, further comprising the user device re-encrypting the decrypted set of data after displaying or editing the set of data.

49. The method of claim 47, wherein a copyright control program running on the user device ensures only the use or uses of the set of data that are permitted by the first utilization permit key are performed by the user device.

50. The method of claim 47, wherein the corresponding further use permitted by the first utilization permit key is one of the following uses:

displaying, editing, storing, copying, transferring.

51. The method of claim 47, further comprising a copyright control program limiting a number of times the set of data is used by the user device.

52. The method of claim 47, further comprising a copyright control program limiting a number of times the received one or more of the plurality of utilization permit keys are used by the user device.

53. The method of claim 47, further comprising a copyright control program maintaining copyright information on the set of data.

54. The method of claim 53, wherein the copyright information includes history information on authorship of the set of data.

55. The method of claim 49, further comprising receiving the copyright control program by the user device with the received one or more of the plurality of utilization permit keys.

56. The method of claim 49, further comprising receiving the copyright control program at the user device with the encrypted version of the set of data.

57. The method of claim 47, wherein the plurality of utilization permit keys includes a display permit key that permits displaying the set of data and an edit permit key that permits editing and displaying the set of data.

58. The method of claim 47, wherein the plurality of utilization permit keys includes a storage permit key that permits storing the set of data and a copy permit key that permits copying and storing the set of data.

59. The method of claim 47, wherein the plurality of utilization permit keys includes a copy permit key that permits copying the set of data and a transfer key that permits transferring and copying the set of data.

60. The method of claim 47, wherein the plurality of utilization permit keys includes a display permit key that is the lowest permit key in the hierarchy.

61. The method of claim 47, wherein the one or more received utilization permit keys include at least two utilization permit keys that permit different corresponding further uses of the set of data.

62. The method of claim 47, wherein the plurality of utilization permit keys is a first plurality of utilization permit keys, and wherein the method further comprises:

receiving at the user device one or more of a second plurality of utilization permit keys associated with a second set of data, wherein each of the second plurality of utilization permit keys is usable to perform cryptographic operations on the second set of data and is configured to permit a corresponding further use of the second set of data, wherein the second plurality of utilization permit keys are arranged according to the hierarchy such that a given one of the second plurality of utilization permit keys also permits uses of the second set of data that are permitted by any utilization permit keys within the second plurality of utilization permit keys that are lower in the hierarchy than the given utilization permit key;

wherein the corresponding further use of the set of data and the corresponding further use of the second set of data are different from one another.

63. An apparatus, comprising:

a processor;

memory having stored therein program instructions executable by the apparatus to;

receive one or more of a plurality of utilization permit keys associated with a set of data, wherein each of the plurality of utilization permit keys is usable to perform cryptographic operations on the set of data and is configured to permit a corresponding further use of the set of data, wherein the plurality of utilization permit keys are arranged in a hierarchy in which a given one of the plurality of utilization permit keys also permits uses of the set of data that are permitted by any utilization permit keys within the plurality of utilization permit keys that are lower in the hierarchy than the given utilization permit key;

decrypt an encrypted version of the set of data using a first of the received one or more utilization permit keys, wherein the decrypting is performed only when the first utilization permit key permits the displaying and/or editing of the set of data; and

use the set of data according to the use or uses permitted by the first utilization permit key.