Method and system for secure distribution and utilization of data over a network

• US 8,078,725 B2
• Filed: 10/04/2007
• Issued: 12/13/2011
• Est. Priority Date: 08/02/2001
• Status: Expired due to Fees

• Current Assignee: SafeNet Incorporated (Thales SA)
• Original Assignee: SafeNet Incorporated (Thales SA)
• Inventors: Tan, Kaijun, Cochran, Michael L., Badia, Logan
• Primary Examiner(s): DONAGHUE, LARRY D
• Application Number:
  US11/906,887
• Publication Number:
  US 20080092221A1
• Time in Patent Office: 1,531 Days
• Field of Search: 709/225, 709/229, 705 55- 56, 726/9
• US Class Current: 709/225
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A method for distributing data over a network includes the steps of establishing a secure connection between a client and a server; issuing a certificate and a private key to the client for identifying the client in a transaction; storing the certificate and the private key in a portable token of the client and used by the client during a transaction, the portable token including a unique distinguishing number and being a physical device removeably coupleable to a client computer; and generating a message linking the data being distributed to the client with at least part of the distinguishing number for the token used by the client during a transaction.

Claims

1. A method for distributing data over a network comprising:

establishing a secure connection between a client and a server;

issuing a certificate and a private key to the client for identifying the client in a transaction;

storing the certificate and the private key in a portable token of the client and used by the client during a transaction, the portable token including a permanent unique distinguishing number and being a physical device removeably coupleable to a client computer;

using the certificate by the client to obtain data from the server in a form the client by itself is unable to use;

generating a message associating the data with the distinguishing number for the token;

after obtaining by the client the data and the message, obtaining by the client the distinguishing number of the token from the token; and

using the message and the distinguishing number of the token obtained from the token by the client to enable client use of the data.

2. The method of claim 1, further comprising distributing additional data to the client.

3. The method of claim 2, further comprising requesting information from the client for establishing an account.

4. The method of claim 1, wherein establishing a secure connection comprises establishing a secure connection using a security protocol.

5. The method of claim 4, wherein the security protocol is the secure socket layer protocol.

6. The method of claim 3, wherein requesting information comprises requesting a credit card number.

7. The method of claim 3, wherein requesting information comprises requesting a password.

8. The method of claim 1, wherein storing the certificate comprises:

interfacing the token to a client computer; and

writing the certificate and the private key to the token across the network.

9. The method of claim 1, wherein storing the certificate comprises:

interfacing the token to a server computer; and

writing the certificate to the token at the server computer.

10. The method of claim 2, wherein the distributing of additional data to the client comprises distributing a media player to the client, and the step of using the message and the distinguishing number of the token is accomplished using the media player.

11. The method of claim 1, wherein the distinguishing number for the token is assigned to the token by a manufacturer.