Apparatus, method and system for tracking information access

• US 8,156,151 B2
• Filed: 04/14/2010
• Issued: 04/10/2012
• Est. Priority Date: 01/25/2001
• Status: Expired due to Term

• Current Assignee: Videostorm Incorporated
• Original Assignee: Content Directions, Inc. (Linkstorm Corp.)
• Inventors: Sidman, David
• Primary Examiner(s): Le, Debbie
• Application Number:
  US12/760,357
• Publication Number:
  US 20100211552A1
• Time in Patent Office: 727 Days
• Field of Search: None
• US Class Current: 707/793
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

An apparatus, method and system to track information access over a communications network. The present disclosure teaches how to associate access credentials with content accesser in a global and persistent manner. Both content and people are registered with a Digital Object Identifier (DOI) handle system (1603). Furthermore, security and other information such as certificates, personal records, encryption keys, and all other objects involved in such transactions may also be registered with a DOI in the handle system and/or may be associated with another DOI as one of the multiple-resolution pointers contained in a DOI record. A right clearinghouse (1604) then maintains a rights database associated content rights with content accessers by DOIs. The association of people, i.e., content accessers, with digital object identifiers further ensures that content and accessers may be mapped in a manner allowing for the secure tracking of content access.

Claims

1. A method of using at least one computer to effect access to information, comprising:

collecting information regarding an entity (entity information), wherein the entity is represented by the entity information (EREI);

generating an unique, persistently accessible, and universal name identifier (UPUNI) for the EREI;

storing the collected entity information in a database record in a database, wherein the database record storing the collected entity information is keyed by the generated UPUNI, wherein the storage of the entity information occurs before effecting registration of the UPUNI in one phase of a multi-phase registration commitment;

generating validation information for the EREI;

transmitting validation information to an access device of the EREI, if an UPUNI registration agency (UPUNI-REG) generated the validation information;

deleting the validation information from the UPUNI-REG upon transmitting the validation information, if the UPUNI-REG generated the validation information;

transmitting validation information to the UPUNI-REG, if another device generated the validation information;

storing the generated validation information in a database record in a database, wherein the database record storing the generated validation information is keyed by the generated UPUNI, wherein the storage of the validation information occurs before effecting registration of the UPUNI in one phase of a multi-phase registration commitment;

registering a resolvable association between an UPUNI and reference to related information, wherein registration is effected in a database to associate and resolve UPUNIs and references to related information (UPUNI-RES), wherein the reference to related information is entered in a database record keyed by the generated UPUNI, wherein the registration of the UPUNI in the UPUNI-RES is a phase of a multi-phase registration commitment that occurs after effecting the storage of the related information, wherein in the entity information is related information, and wherein the validation information is related information.

3. The method of claim 1, wherein entity information value fields may include:

name of entity, address, telephone number, access device, reference to access device, social security number, credit information, medical information, company account information, custom fields, custom records.

4. The method of claim 1, wherein the entity information value fields include UPUNI information.

5. The method of claim 1, wherein the entity information is an UPUNI that resolves to other validation information.

6. The method of claim 1, wherein the UPUNI is generated for the EREI.

7. The method of claim 1, wherein the UPUNI is generated for the related information.

8. The method of claim 1, wherein the database record storing the collected entity information is keyed by the generated UPUNI.

9. The method of claim 1, wherein the database storing the collected entity information holds UPUNI and entity information (EI-UPUNI-DB).

10. The method of claim 1, wherein the database storing the collected entity information is a metadata database (MDDB).

11. The method of claim 1, wherein the storage of the entity information occurs before effecting registration of the UPUNI in one phase of a multi-phase registration commitment.

2. A method of using at least one computer to effect access to information, comprising:

effecting collection of information regarding an entity (entity information), wherein the entity is represented by the entity information (EREI);

effecting generation of an unique, persistently accessible, and universal name identifier (UPUNI);

effecting storage of the collected entity information in a database record in a database;

effecting generation of validation information;

effecting transmission of validation information to access devices of the EREI, if an UPUNI registration agency (UPUNI-REG) generated the validation information;

effecting transmission of validation information to the UPUNI-REG, if the another device generated the validation information;

effecting storage of the generated validation information in a database record in a database;

effecting registration of a resolvable association between an UPUNI and reference to related information, wherein registration is effected in a database to associate and resolve UPUNIs and references to related information (UPUNI-RES), wherein in the entity information is related information, and wherein the validation information is related information.

12. A method of using at least one computer to effect access to information, comprising:

effecting determination of if information an entity desires to access (desired information) on the entity'"'"'s access device (entity device) has an unique, persistently accessible, and universal name identifier (UPUNI) embedded within the desired information;

effecting determination of if the desired information is inaccessible;

effecting determination of if there exists an UPUNI that represents the entity (E-UPUNI);

effecting the generation of the E-UPUNI, if the entity is un-represented by an UPUNI;

effecting the resolution of the entity device to the desired information'"'"'s UPUNI (DI-UPUNI);

effecting the provision of entity verification information;

effecting verification of the entity'"'"'s identity and access rights to the desired content with the provided entity verification information (entity verification);

effecting provision of access credentials, if the entity'"'"'s identity and access rights to the desired content are verified.

13. The method of claim 12, further comprising:

effecting the access of the desired information, if the UPUNI is absent from the desired information.

14. The method of claim 12, wherein the desired information is inaccessible because the desired information is protected.

15. The method of claim 14, wherein the desired information is protected with encryption.

16. The method of claim 12, wherein the desired information is an UPUNI that resolves to other desired information.

17. The method of claim 12, wherein the entity device resolves to the DI-UPUNI, only if an E-UPUNI exists.

18. The method of claim 12, wherein the DI-UPUNI resolution directs the entity device to an access tracking system (ATS).

19. The method of claim 12, wherein the DI-UPUNI resolution directs the entity to a rights clearinghouse.

20. The method of claim 12, wherein the E-UPUNI is entity verification information.