Data copyright management system

• US 8,352,373 B2
• Filed: 01/28/2003
• Issued: 01/08/2013
• Est. Priority Date: 09/30/1994
• Status: Expired due to Fees

• Current Assignee: Piracy Protection LLC (LF Capital Partners, LLC)
• Original Assignee: Intarsia Software LLC (Intellectual Ventures LLC)
• Inventors: Saito, Makoto
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US10/352,078
• Publication Number:
  US 20030144963A1
• Time in Patent Office: 3,633 Days
• Field of Search: 705/50, 705/51, 705/57, 705/5, 380/278, 380/279, 380/283, 713/165, 713/167, 713/171, 713/176, 713/180, 713/182, 713/191, 713/193
• US Class Current: 705/57
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 50/184 Intellectual property management
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26613 : for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4408 : involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A data copyright management system comprises a database for storing original data, a key control center for managing crypt keys, copyright management center for managing data copyrights, and a communication network for connecting these sections. Data supplied from the database to users is encrypted and distributed. The users decrypts the encrypted data by crypt keys obtained from the key control center or copyright management center. To supply data to users, there are the following two methods: a one-way supplying of encrypted data to users by means of broadcasting or the like; and two-way supplying of encrypted data to users corresponding to users'"'"' requests. A crypt key system used for encrypting data uses a secret-key cryptosystem, a public-key cryptosystem or a cryptosystem combining a secret-key and a public-key and further uses a copyright control program to control data copyrights. When a user stores, copies, or transfers data, the data is encrypted by a crypt key different from a crypt key used for supplying the data. The former crypt key is supplied from the key control center or from the copyright management center, or generated by the copyright control program. The present invention can be applied to a data copyright management system for using not only single data but also a plurality of data supplied from a single database or a plurality of data supplied from a plurality of databases. Further, an apparatus to be used by the user to perform data copyright management is proposed.

Claims

1. A method, comprising:

sending a user access request for content from a computing device to a remote computer system;

responsive to the user access request, receiving, at the computing device, a first key and an encrypted content control program from the remote computer system;

decrypting the content control program using a secret key;

decrypting the content on the computing device using the first key and the content control program;

permitting a user to use the decrypted content within the computing device; and

after use of the decrypted content within the computing device and in response to the user initiating a transfer of the content external to the computing device, re-encrypting the decrypted content prior to the transfer, wherein said re-encrypting is performed using a second key, the second key being distinct from the secret key, and the content control program.

2. The method of claim 1, wherein the content includes copyrighted data.

3. The method of claim 1, wherein said receiving further includes receiving the second key.

4. The method of claim 3, wherein the second key is received responsive to a subsequent request to store or transfer the content external to the computing device.

5. The method of claim 1, wherein said decrypting the encrypted content control program using the secret key includes decrypting the encrypted content control program using a third key.

6. The method of claim 5, wherein the third key is generated by a key control program running on the computing device.

7. The method of claim 6, wherein the third key is generated by the key control program in response to input identifying the user of the content on the computing device.

8. The method of claim 1, wherein, subsequent to the transfer, instances of the first and second keys that have been used for decryption and encryption operations are no longer usable to decrypt or re-encrypt the content.

9. The method of claim 1, wherein the remote computer system includes:

a database storing content; and

a key management center.

10. The method of claim 1, wherein the content includes edited copyrighted data.

11. The method of claim 8, further comprising:

the computing device requesting reuse of the content;

responsive to the reuse request, the computing device receiving another instance of the second key;

the computing device decrypting the content using the other instance of the second key; and

the computing device reusing the content.

12. The method of claim 1, further comprising, before the transfer, adding, to the content, unencrypted information corresponding to the user of the computing device.

13. The method of claim 3, wherein said receiving the first and second keys includes receiving the first and second keys as encrypted keys.

14. The method of claim 13, wherein the user access request includes first and second public keys generated by the computing device, wherein the first and second public keys correspond to first and second private keys, respectively, wherein the first and second private keys are also generated by the computing device, and wherein the first and second private keys are usable to decrypt the first and second keys, respectively.

15. The method of claim 1, wherein the content control program is executable on the computing device to generate the second key.

16. The method of claim 15, wherein the content control program is executable on the computing device to use the first key to generate the second key.

17. The method of claim 16, wherein the content control program is executable on the computing device to also use information identifying the user of the content on the computing device in order to generate the second key.

18. The method of claim 15, wherein the content control program is executable on the computing device to use information identifying the user of the content on the computing device in order to generate the second key.

19. An apparatus, comprising:

a processor; and

memory, coupled to the processor, having program instructions stored thereon that are executable by the apparatus to cause the apparatus to perform operations including;

sending, to a remote computer system, a request for content;

responsive to the request, receiving a first key and an encrypted content control program from the remote computer system;

decrypting the encrypted content control program using a secret key;

decrypting the content using the first key and the decrypted content control program;

permitting use of the decrypted content within the apparatus; and

after use of the decrypted content within the apparatus and in response to initiation of a transfer of the decrypted content external to the apparatus, re-encrypting the decrypted content prior to the transfer, wherein the re-encrypting is performed using a second key, the second key being distinct from the secret key, and the decrypted content control program.

20. The apparatus of claim 19, wherein the operations are performed by a data management control program that uses a protected area of the memory that is inaccessible by users of the apparatus.

21. The apparatus of claim 19, wherein the operations further comprise:

generating the second key.

22. The apparatus of claim 19, wherein the decrypting the encrypted content control program using the secret key includes decrypting the encrypted content control program using a third key.

23. The apparatus of claim 19, wherein the operations further comprise:

receiving the second key;

wherein the first and second keys are received from a management center that is configured to distribute content in response to user requests.

24. The apparatus of claim 19, wherein the operations further comprise:

causing display of the decrypted content at the apparatus.

25. The apparatus of claim 19,

wherein the permitting use of the decrypted content includes permitting editing of the decrypted content.