Systems and methods for secure transaction management and electronic rights protection

• US 8,191,157 B2
• Filed: 06/25/2007
• Issued: 05/29/2012
• Est. Priority Date: 02/13/1995
• Status: Expired due to Fees

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Ginter, Karl L., Shear, Victor H., Spahn, Francis J., Van Wie, David M.
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US11/821,862
• Publication Number:
  US 20070250937A1
• Time in Patent Office: 1,800 Days
• Field of Search: 726/27
• US Class Current: 726/27
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G07F 9/026 for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copy right protecting software against unauthorised usage in a vending or licensing environment, e.g. protection the software providers copyright G06F21/10; data processing systems or methods, specially adapted for payment schemes, architectures or protocols G06Q20/00; secrecy systems or subscription systems H04N7/16
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/23476 : by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node. These techniques may be used to support an all-electronic information distribution, for example, utilizing the “electronic highway.”

Claims

1. An electronic appliance comprising:

a secure processing unit;

a central processing unit; and

one or more computer-readable media external to the secure processing unit, the computer-readable media storing at least rights management software comprising programming operable to apply one or more electronic controls to govern usage of an electronic content item received by the electronic appliance separately from the electronic controls and via separate delivery, the electronic content item comprising audio, visual, and/or textual electronic content, at least part of the programming designed to cause the secure processing unit to decrypt information associated with the electronic content item, wherein the one or more electronic controls specify one or more permitted or prohibited uses of the electronic content item, and wherein the rights management software is designed to be resistant to tampering by users of the electronic appliance.

2. The electronic appliance of claim 1, in which the rights management software further comprises programming operable to receive, separately from the one or more electronic controls, at least one additional electronic control from a remote electronic appliance, and to apply the at least one additional electronic control to govern at least one usage of the electronic content item.

3. The electronic appliance of claim 1, in which the information associated with the electronic content item comprises one or more cryptographic keys.

4. The electronic appliance of claim 1, in which the secure processing unit comprises processing logic, memory, and memory interface logic for impeding unauthorized access to the memory from outside the secure processing unit.

5. The electronic appliance of claim 4, in which the information associated with the electronic content item comprises a first cryptographic key, and in which a second cryptographic key is stored in the memory of the secure processing unit, the second cryptographic key being operable to directly or indirectly enable access to the first cryptographic key.

6. The electronic appliance of claim 5, in which the second cryptographic key comprises a symmetric key.

7. The electronic appliance of claim 5, in which the second cryptographic key comprises a private key of a public/private key pair.

8. The electronic appliance of claim 4, in which the secure processing unit further comprises a random number generator.

9. The electronic appliance of claim 4, in which the secure processing unit further comprises a counter.

10. The electronic appliance of claim 9, in which the counter comprises a clock.

11. The electronic appliance of claim 4, in which the memory comprises non-volatile memory, and in which the secure processing unit further comprises a unique identifier stored within the non-volatile memory, the unique identifier being operable to distinguish the secure processing unit from other secure processing units.

12. The electronic appliance of claim 4, in which the secure processing unit is configured to recognize an attempt to tamper therewith and to initiate a response thereto.

13. The electronic appliance of claim 4, further comprising a power source external to the secure processing unit and configured to supply power to the secure processing unit;

wherein the secure processing unit is configured to recognize a disruption in its supply of power from the power source and to initiate a response thereto.

14. The electronic appliance of claim 13, in which the response comprises disabling certain functionality of the secure processing unit.

15. The electronic appliance of claim 13, in which the response comprises erasing data stored in the memory.

16. The electronic appliance of claim 4, in which the secure processing unit further comprises a tamper-resistant housing, the tamper-resistant housing being resistant to attempts to analyze and/or reverse engineer the secure processing unit.

17. The electronic appliance of claim 4, in which the secure processing unit is operable to execute at least part of the programming.

18. The electronic appliance of claim 1, in which the information associated with the electronic content item comprises the one or more electronic controls.

19. The electronic appliance of claim 1, in which the one or more electronic controls comprise one or more permissions records.

20. The electronic appliance of claim 1, in which the programming is further operable to apply the one or more electronic controls to govern usage of a second electronic content item.

21. The electronic appliance of claim 1, in which the programming is further operable to apply the one or more electronic controls to govern usage of a set of electronic content items.

22. The electronic appliance of claim 1, further comprising one or more buses, the one or more buses directly or indirectly coupling the secure processing unit and the central processing unit;

wherein the secure processing unit comprises an input/output controller for facilitating secure communication with the central processing unit over the one or more buses.

23. The electronic appliance of claim 22, in which the secure processing unit is operable to cryptographically seal information for storage on a computer-readable medium external to the secure processing unit.

24. The electronic appliance of claim 1, in which the secure processing unit is operable to cryptographically seal information for storage on a computer-readable medium external to the secure processing unit.

25. The electronic appliance of claim 1, in which the one or more permitted or prohibited uses of the electronic content item include at least one of:

viewing the electronic content item, distributing the electronic content item, and/or printing the electronic content item.

26. The electronic appliance of claim 1, in which the one or more permitted or prohibited uses of the electronic content item include copying the electronic content item.

27. The electronic appliance of claim 1, in which the one or more permitted or prohibited uses of the electronic content item include at least one of:

editing the electronic content item, embedding additional content into the electronic content item, and/or extracting content from the electronic content item.

28. The electronic appliance of claim 1, in which at least one of the one or more electronic controls specifies at least one condition associated with a permitted use of the electronic content item.

29. The electronic appliance of claim 28, in which the at least one condition comprises an indication that the permitted use may be made only for a certain time period.

30. The electronic appliance of claim 28, in which the at least one condition comprises an indication that the permitted use may be exercised only by a certain user or class of users.

31. The electronic appliance of claim 28, in which the at least one condition comprises a requirement that auditing information be collected regarding the permitted use.

32. The electronic appliance of claim 1, in which the one or more electronic controls are resistant to tampering.

33. An electronic appliance comprising:

a secure processing unit;

a central processing unit; and

one or more computer-readable media external to the secure processing unit, the computer-readable media storing rights management software comprising programming operable to apply one or more electronic controls to govern usage of an electronic content item received by the electronic appliance separately from the electronic controls and via separate delivery, the electronic content comprising audio, visual, and/or textual electronic content, at least part of the programming designed to cause the secure processing unit to access information required for usage of the electronic content item, wherein the one or more electronic controls specify one or more permitted or prohibited uses of the electronic content item, and wherein the rights management software is designed to be resistant to tampering by users of the electronic appliance.

34. The electronic appliance of claim 33, in which the rights management software further comprises programming operable to receive, separately from the one or more electronic controls, at least one additional electronic control from a remote electronic appliance, and to apply the at least one additional electronic control to govern at least one usage of the electronic content item.

35. The electronic appliance of claim 33, in which the information required for usage of the electronic content item comprises one or more cryptographic keys.

36. The electronic appliance of claim 33, in which the secure processing unit comprises processing logic, memory, and memory interface logic for impeding unauthorized access to the memory from outside the secure processing unit.

37. The electronic appliance of claim 36, in which the information required for usage of the electronic content item comprises a first cryptographic key, and in which a second cryptographic key is stored in the memory of the secure processing unit, the second cryptographic key being operable to directly or indirectly enable access to the first cryptographic key.

38. The electronic appliance of claim 36, in which the secure processing unit further comprises a counter.

39. The electronic appliance of claim 36, in which the memory comprises non-volatile memory, and in which the secure processing unit further comprises a unique identifier stored within the non-volatile memory, the unique identifier being operable to distinguish the secure processing unit from other secure processing units.

40. The electronic appliance of claim 36, further comprising a power source external to the secure processing unit and configured to supply power to the secure processing unit;

wherein the secure processing unit is configured to recognize a disruption in its supply of power from the power source and to initiate a response thereto.

41. The electronic appliance of claim 33, in which the programming is further operable to apply one or more electronic controls to govern usage of a plurality of electronic content items.

42. The electronic appliance of claim 33, further comprising one or more buses, the one or more buses directly or indirectly coupling the secure processing unit and the central processing unit;

wherein the secure processing unit comprises an input/output controller for facilitating secure communication with the central processing unit over the one or more buses.

43. The electronic appliance of claim 33, in which the secure processing unit is operable to cryptographically seal information for storage on a computer-readable medium external to the secure processing unit.

44. The electronic appliance of claim 33, in which the one or more permitted or prohibited uses of the electronic content item include viewing the electronic content item.

45. The electronic appliance of claim 33, in which the one or more permitted or prohibited uses of the electronic content item include distributing the electronic content item.

46. The electronic appliance of claim 33, in which the one or more permitted or prohibited uses of the electronic content item include printing the electronic content item.

47. The electronic appliance of claim 33, in which the one or more permitted or prohibited uses of the electronic content item include copying the electronic content item.

48. The electronic appliance of claim 33, in which the one or more permitted or prohibited uses of the electronic content item include at least one of:

editing the electronic content item, embedding additional content into the electronic content item, and/or extracting content from the electronic content item.

49. The electronic appliance of claim 33, in which at least one of the one or more electronic controls specifies at least one condition associated with a permitted use of the electronic content item.

50. The electronic appliance of claim 49, in which the at least one condition comprises an indication that the permitted use may be made only for a certain time period.

51. The electronic appliance of claim 49, in which the at least one condition comprises an indication that the permitted use may be exercised only by a certain user or class of users.

52. The electronic appliance of claim 49, in which the at least one condition comprises a requirement that auditing information be collected regarding the permitted use.

53. An electronic appliance comprising:

a first processing unit;

a second processing unit, the second processing unit comprising a microprocessor, internal memory, and internal memory interface logic for impeding unauthorized access to the internal memory by the first processing unit; and

computer-readable media external to the second processing unit, the computer-readable media storing at least (a) a piece of electronic content;

(b) one or more electronic objects received by the electronic appliance separately from the piece of electronic content and via separate delivery, the one or more electronic objects specifying one or more permitted or prohibited uses of the piece of electronic content; and

(c) software configured for execution by the first processing unit, the software comprising programming for controlling usage of pieces of electronic content such as the first piece of electronic content in accordance with electronic objects such as the one or more electronic objects, the software further comprising programming for causing the second processing unit to access information required for usage of pieces of electronic content.

54. The electronic appliance of claim 53, in which the information comprises a first cryptographic key.

55. The electronic appliance of claim 54, in which the first cryptographic key is configured to decrypt the piece of electronic content.

56. The electronic appliance of claim 54, in which the first cryptographic key is configured to decrypt a second cryptographic key, the second cryptographic key being configured to decrypt the piece of electronic content.

57. The electronic appliance of claim 56, in which the first cryptographic key is stored in the internal memory of the second processing unit.

58. The electronic appliance of claim 57, in which the internal memory of the second processing unit further comprises a unique identifier, the unique identifier being operable to distinguish the second processing unit from other processing units.

59. The electronic appliance of claim 53, in which the second processing unit is operable to cryptographically seal information for storage on a computer-readable medium external to the second processing unit.

60. The electronic appliance of claim 53, in which the one or more permitted or prohibited uses of the piece of electronic content include viewing the piece of electronic content.

61. The electronic appliance of claim 53, in which the one or more permitted or prohibited uses of the piece of electronic content include distributing the piece of electronic content.

62. The electronic appliance of claim 53, in which the one or more permitted or prohibited uses of the piece of electronic content include printing the piece of electronic content.

63. The electronic appliance of claim 53, in which the one or more permitted or prohibited uses of the piece of electronic content include copying the piece of electronic content.

64. The electronic appliance of claim 53, in which the one or more permitted or prohibited uses of the piece of electronic content include at least one of:

editing the piece of electronic content, embedding additional content into the piece of electronic content, and/or extracting content from the piece of electronic content.

65. The electronic appliance of claim 53, in which at least one of the one or more electronic objects specifies at least one condition associated with a permitted use of the piece of electronic content.

66. The electronic appliance of claim 65, in which the at least one condition comprises an indication that the permitted use may be made only for a certain time period.

67. The electronic appliance of claim 65, in which the at least one condition comprises an indication that the permitted use may be exercised only by a certain user or class of users.

68. The electronic appliance of claim 65, in which the at least one condition comprises a requirement that auditing information be collected regarding the permitted use.

69. A method performed by an electronic appliance comprising a processor and a memory encoded with program instructions that, when executed by the processor, cause the electronic appliance to perform the method, the method comprising:

receiving, by the electronic appliance, a first piece of electronic content, the first piece of electronic content being encrypted at least in part;

receiving, by the electronic appliance, separately from the first piece of electronic content, a first key, the first key being associated with the first piece of electronic content, and the first key being encrypted at least in part;

decrypting, by the electronic appliance, the first key using (a) a second key and (b) a secure processing unit running on the electronic appliance, the second key being stored in memory of the secure processing unit;

decrypting, by the electronic appliance, the first piece of electronic content using, at least in part, the first key;

receiving, by the electronic appliance, separately from the first piece of electronic content, and via separate delivery, a first electronic object, the first electronic object specifying one or more permitted or prohibited uses of the first piece of electronic content;

receiving, by the electronic appliance, a request to use the first piece of electronic content; and

selectively granting, by the electronic appliance, the request in accordance with the first electronic object.

70. The method of claim 69, in which the first key is received at a first time and the first piece of electronic content is received at a second time that is different from the first time.

71. The method of claim 69, in which the first key is received over a first path and the first piece of electronic content is received over a second path that is different from the first path.

72. The method of claim 69, in which the first key is received from a first entity and the first piece of electronic content is received from a second entity that is different from the first entity.

73. The method of claim 69, in which the first piece of electronic content consists of non-executable audio, video, and/or textual content.

74. The method of claim 69, in which selectively granting the request in accordance with the first electronic object includes decrypting the first piece of electronic content using, at least in part, the first key.

75. The method of claim 69, in which the request comprises a request to view the first piece of electronic content.

76. The method of claim 69, in which the request comprises a request to distribute the first piece of electronic content.

77. The method of claim 69, in which the request comprises a request to print the first piece of electronic content.

78. The method of claim 69, in which the request comprises a request to copy the first piece of electronic content.

79. The method of claim 69, in which the request comprises a request to edit the first piece of electronic content.

80. The method of claim 69, in which the first electronic object specifies at least one condition associated with a permitted use of the first piece of electronic content.

81. The method of claim 80, in which the at least one condition comprises an indication that the permitted use may be made only for a certain time period, and in which selectively granting the request comprises determining that the at least one condition is satisfied.

82. The method of claim 80, in which the at least one condition comprises an indication that the permitted use may be exercised only by a certain class of users, and in which selectively granting the request comprises determining that the request was made by a user belonging to said certain class of users.

83. The method of claim 80, in which the at least one condition comprises a requirement that auditing information be collected regarding the permitted use, the method further comprising collecting auditing information regarding the requested use.

84. The method of claim 69, further comprising:

receiving, separately from the first piece of electronic content and the first electronic object, a second piece of electronic content;

receiving a request to use the second piece of electronic content; and

selectively granting the request in accordance with the first electronic object.

85. The method of claim 69, further comprising:

receiving, separately from the first piece of electronic content and the first electronic object, a second electronic object, the second electronic object specifying one or more permitted or prohibited uses of the first piece of electronic content;

receiving a request to use the first piece of electronic content; and

selectively granting the request in accordance with the first electronic object and the second electronic object.

86. A method for governing usage of electronic content performed by an electronic appliance, the electronic appliance comprising a processor and a memory encoded with program instructions that, when executed by the processor, cause the electronic appliance to perform the method, the method comprising:

receiving, by the electronic appliance, a first piece of electronic content, the first piece of electronic content being encrypted at least in part;

receiving, by the electronic appliance, separately from the first piece of electronic content, and via separate delivery, a first electronic object, the first electronic object specifying one or more permitted or prohibited uses of the first piece of electronic content;

receiving, by the electronic appliance, a request from a user of the electronic appliance to use the first piece of electronic content; and

selectively granting, by the electronic appliance, the request in accordance with the first electronic object;

wherein the electronic appliance comprises hardware and/or software operable to impede the user from tampering with performance of said selectively granting step.

87. The method of claim 86, further comprising:

receiving a first key, the first key being encrypted; and

decrypting the first key using a second key stored in internal memory of a secure processing unit running on the electronic appliance;

wherein selectively granting the request includes decrypting the first piece of electronic content using the first key.

88. The method of claim 87, in which the first piece of electronic content comprises non-executable audio, video, and/or textual content.

89. The method of claim 86, wherein selectively granting the request includes accessing information stored in internal memory of a secure processing unit running on the electronic appliance.

90. The method of claim 86, in which the request comprises a request to view the first piece of electronic content.

91. The method of claim 86, in which the request comprises a request to distribute the first piece of electronic content.

92. The method of claim 86, in which the request comprises a request to print the first piece of electronic content.

93. The method of claim 86, in which the request comprises a request to copy the first piece of electronic content.

94. The method of claim 86, in which the request comprises a request to edit the first piece of electronic content.

95. The method of claim 86, in which the first electronic object specifies at least one condition associated with a permitted use of the first piece of electronic content.

96. The method of claim 95, in which the at least one condition comprises an indication that the permitted use may be made only for a certain time period, and in which selectively granting the request comprises determining that the at least one condition is satisfied.

97. The method of claim 95, in which the at least one condition comprises an indication that the permitted use may be exercised only by a certain class of users, and in which selectively granting the request comprises determining that the user belongs to said certain class of users.

98. The method of claim 95, in which the at least one condition comprises a requirement that auditing information be collected regarding the permitted use, the method further comprising collecting auditing information regarding the requested use.

99. The method of claim 86, further comprising:

receiving, separately from the first piece of electronic content and the first electronic object, a second piece of electronic content;

receiving a request to use the second piece of electronic content; and

selectively granting the request in accordance with the first electronic object.

100. The method of claim 86, further comprising:

receiving, separately from the first piece of electronic content and the first electronic object, a second electronic object, the second electronic object specifying one or more permitted or prohibited uses of the first piece of electronic content;

receiving a request to use the first piece of electronic content; and

selectively granting the request in accordance with the first electronic object and the second electronic object.