Data processing system and method therefor

• US 8,095,578 B2
• Filed: 07/15/2010
• Issued: 01/10/2012
• Est. Priority Date: 09/17/1999
• Status: Expired due to Term

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Nonaka, Akira, Ezaki, Tadashi
• Primary Examiner(s): ALAM, SHAHID AL
• Application Number:
  US12/836,846
• Publication Number:
  US 20100281056A1
• Time in Patent Office: 544 Days
• Field of Search: 707/770, 707/703, 707/716, 707/826, 705/57, 713/176, 713/187
• US Class Current: 707/826
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G10K 15/02 Synthesis of acoustic waves synthesis of speech G10L13/00
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A data providing system for distributing content data from a data providing apparatus to a data processing apparatus and managing said data providing apparatus and said processing apparatus by a management apparatus. In the system, the management apparatus is configured to provide a key file in which is stored content key data and usage control policy data indicating a content of rights, including permission conditions of the content data. At least a part of said key file is encrypted. The data providing apparatus is configured to provide the content data encrypted by using the content key data stored in the key file. The data processing apparatus is configured to decrypt the key file to obtain the content key data from the key file and determine handling of the content data based on the usage control policy data stored in the key file.

Claims

1. A data providing system for distributing content data, comprising:

a management apparatus that receives, via a network, content data, content key data, and usage control policy data from a data providing apparatus and that provides, via the network, to said data providing apparatus, a key file containing said content key data and the usage control policy data, the usage control policy data including operating rules for said content data, at least a part of said key file being encrypted;

said data providing apparatus that encrypts said content data using said content key data stored in said key file and that distributes, via the network, a secure container including said encrypted content data, said key file, and signature data of said data providing apparatus, to a data processing apparatus; and

said data processing apparatus that decrypts said secure container and said key file to obtain said content key data from said key file, that decrypts said encrypted content data based on the usage control policy data stored in said key file, and that stores said decrypted content data.

2. The data providing system according to claim 1, wherein a key file key for encrypting at least said content key stored in said key file encrypts said key file.

3. The data providing system according to claim 1, wherein said key file is distributed to a secure module in the data providing system in advance of encryption of said content data.

4. The data providing system according to claim 1,

wherein the data providing apparatus stores a plurality of secure application modules that decrypt said secure container using a plurality of distribution use keys.

5. The data providing system according to claim 1,

wherein the secure application modules generate usage log data specifying at least one of a purchase and a usage of said content data and transmit the usage log data to said managing apparatus,

wherein said managing apparatus calculates a charge based on the usage log data and sends a settlement report data, specifying at least the charge, to said data providing apparatus at a predetermined frequency, and

wherein a user of the data processing device pays a payment corresponding to the charge to a settlement processor and the settlement processor forwards the payment to the data providing apparatus.

6. A method of distributing encrypted content data from a data providing apparatus to a data processing apparatus and managing said data providing apparatus and said data processing apparatus by a management apparatus, said method comprising the steps of:

receiving, at said management apparatus via a network, content data, content key data, and usage control policy data, from said data processing apparatus, and encrypting at least part of a key file containing said content key data and the usage control policy data, the usage control policy data including operating rules for said content data;

encrypting, by said data providing apparatus, said content data using said content key data stored in said key file that is provided by said management apparatus via the network, and communicating, via the network, a secure container including said encrypted content data, said key file, and signature data of said data providing apparatus, from said data providing apparatus to said data processing apparatus; and

decrypting, by said data processing apparatus, said secure container and said key file to obtain said content key data from said key file, decrypting said encrypted content data based on the usage control policy data stored in said key file, and storing said decrypted content data.

7. The method of claim 6, wherein a key file key, for encrypting at least said content key stored in said key file, encrypts said key file.

8. The method of claim 6, further comprising the step of distributing said key to a secure module in said data providing system in advance of said step of encrypting said content data.

9. The method according to claim 6,

wherein said management apparatus registers said content key data and the usage control policy data received from said data providing apparatus.

10. The method according to claim 9, further comprising:

detecting electronic watermark information, in said content data, at said data processing apparatus;

transmitting a content identifier corresponding to the electronic watermark information to said management apparatus; and

providing, by said management apparatus, introduction information of said data providing apparatus, that stores said content data, to said data processing apparatus.

11. The method according to claim 10,

wherein said content data is received via a radio broadcast.

12. The method according to claim 10,

wherein said data providing apparatus transmits promotional information to said data processing apparatus, when a user of said data processing apparatus does not subscribe to at least one of products and services offered by said data providing apparatus.