Data copyright management

• US 8,407,782 B2
• Filed: 03/26/2002
• Issued: 03/26/2013
• Est. Priority Date: 10/27/1994
• Status: Expired due to Fees

• Current Assignee: Piracy Protection LLC (LF Capital Partners, LLC)
• Original Assignee: Intarsia Software LLC (Intellectual Ventures LLC)
• Inventors: Saito, Makoto
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): TRUVAN, LEYNNA THANH
• Application Number:
  US10/105,262
• Publication Number:
  US 20020112173A1
• Time in Patent Office: 4,018 Days
• Field of Search: 726 2- 4, 726 17- 18, 726/21, 726/26, 726/30, 726/27, 726/34, 726/6, 380/232, 380228-229, 380/282, 380 28- 30, 380285-286, 380201-203, 380/239, 380/37, 380/241, 380/255, 380/277, 380/1, 713/171, 713/193, 713/187, 713/189, 709/203, 709/223, 709/225
• US Class Current: 726/18
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4181 : for conditional access
• CPC Class Codes: H04N 21/426 : Internal components of the client ; Characteristics thereof H04N5/44 takes precedence
• CPC Class Codes: H04N 21/4334 : Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4408 : involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 : Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

Embodiments of methods, apparatuses, devices, and/or systems for data copyright management are described. According to one embodiment of this disclosure, data copyright management may include displaying, storing, copying, editing, and/or transferring digital data. According to an embodiment, data copyright management may include protecting digital data copyrights. Various embodiments of this disclosure may use cryptographic keys to implement portions of the data copyright management disclosed.

Claims

1. A method performed by a first computing device, the method comprising:

receiving an encrypted version of a first set of protected digital data;

receiving a first crypt key specifically associated with the first set of protected digital data;

decrypting the encrypted version of the first set of protected digital data using the first crypt key to produce decrypted digital data;

managing forms of usage of the first set of protected digital data, wherein said managing includes, for a first form of usage requested by a user of the first computing device;

when the first form of usage is one of a first set of usages, permitting the first form of usage using the decrypted digital data; and

when the first form of usage is one of a second set of usages distinct from usages in the first set, permitting the first form of usage on a re-encrypted version of the decrypted digital data generated by re-encrypting the decrypted digital data using a second crypt key.

2. The method of claim 1, wherein the first set of usages includes displaying data and editing data.

3. The method of claim 2, wherein the second set of usages includes storing data, copying data, and transferring data.

4. The method of claim 1, wherein said managing is performed by a copyright management program.

5. The method of claim 1, wherein said decrypting and said re-encrypting are performed at the same time for at least a partial duration.

6. The method of claim 1, wherein the first set of protected digital data includes copyrighted data, and wherein the first form of usage is permitted on either the decrypted digital data or the re-encrypted version of the decrypted digital data only if the first form of usage is one of a group of one or more usages permitted by the first crypt key.

7. The method of claim 1, wherein the first set of protected digital data is copyrighted data, and wherein the first crypt key is usable to decrypt only the first set of protected digital data.

8. The method of claim 1, wherein the first set of protected digital data is digital cash data.

9. The method of claim 1, wherein the first set of protected digital data is video conferencing data.

10. The method of claim 1, wherein the encrypted version of the first set of protected digital data and the first crypt key are received by the first computing device from different computer systems.

11. The method of claim 1, wherein the first and second crypt keys are not available for future use after being used once for decrypting and re-encrypting, respectively.

12. The method of claim 1, further comprising sending an access request to a computer system configured to provide access to protected digital data, wherein the access request includes a request for the first set of protected digital data.

13. The method of claim 12, wherein the access request includes information indicative of the identity of the user of the first computing device.

14. The method of claim 1, wherein the encrypted version of the first set of protected digital data is received from a user of a second computing device, wherein the second computing device is configured to decrypt and re-encrypt protected digital data, and wherein the first crypt key is received from a key control system.

15. The method of claim 14, wherein the first crypt key is received from the key control system in response to an access request that includes information indicative of a) the identity of the user of the first computing device and b) the identity of the user of the second computing device from which the first set of protected digital data is received.

16. A storage medium storing instructions, that, if executed by a first computing device, result in:

decrypting an encrypted version of a first set of protected digital data by using a first crypt key to produce decrypted digital data before performing a first operation specified by a user of the first computing device, wherein the first crypt key is specifically associated with the first set of protected digital data;

managing forms of usage of the first set of protected digital data, wherein said managing includes, for a first form of usage requested by a user of the first computing device;

when the first form of usage is one of a first set of usages, permitting the first form of usage using the decrypted digital data; and

when the first form of usage is one of a second set of usages distinct from usages in the first set, permitting the first form of usage on a re-encrypted version of the decrypted digital data generated by re-encrypting the decrypted digital data using a second crypt key.

17. The storage medium of claim 16, wherein said decrypting and said re-encrypting are performed at the same time for at least a partial duration.

18. The storage medium of claim 16, wherein the first set of protected digital data includes copyrighted data, and wherein the first form of usage is permitted on either the decrypted digital data or the re-encrypted version of the decrypted digital data only if the first form of usage is one of a group of one or more usages permitted by the first crypt key.

19. The storage medium of claim 16, wherein the first set of protected digital data is copyrighted data, and wherein the first crypt key is usable to decrypt only the first set of protected digital data.

20. The storage medium of claim 16, wherein the first set of protected digital data is digital cash data.

21. The storage medium of claim 16, wherein the first set of usages includes displaying digital data and/or editing digital data.

22. The storage medium of claim 21, wherein the second set of usages includes:

copying, storing, transferring digital data.

23. The storage medium of claim 16, wherein the first and second crypt keys are not available for future use after being used once for decrypting and re-encrypting, respectively.

24. The storage medium of claim 16, wherein the encrypted version of the first set of protected digital data is received in response to an access request from the first computing device.

25. The storage medium of claim 24, wherein the access request includes information indicative of the identity of the user of the first computing device.

26. The storage medium of claim 16, wherein the encrypted version of the first set of protected digital data is received from a user of a second computing device, wherein the second computing device is configured to decrypt and re-encrypt protected digital data, and wherein the first crypt key is received from a key control system.

27. The storage medium of claim 26, wherein the first crypt key is received from the key control system in response to an access request that includes information indicative of a) the identity of the user of the first computing device and b) the identity of the user of the second computing device from which the first set of protected digital data is received.

28. A system, comprising:

a processor unit including one or more processors;

a memory storing program instructions executable by the processor unit to;

decrypt an encrypted version of a first set of protected digital data using a first crypt key to produce decrypted digital data;

manage forms of usages of the first set of protected digital data, including;

permitting a first, user-requested, form of usage on the decrypted digital data when the first form of usage is one of a first set of usages; and

permitting the first, user-requested, form of usage on a re-encrypted version of the first set of protected digital data when the first form of usage is one of a second set of usages distinct from those in the first set of usages, wherein the encrypted version of the first set of protected digital data is generated by re-encrypting the decrypted digital data using a second crypt key.

29. The system of claim 28, wherein said processor unit contains a first processor and a second processor, wherein the second processor is capable of re-encrypting the decrypted digital data at the same time, for at least a partial duration, said first processor is decrypting the encrypted version of the first set of protected digital data.

30. The system of claim 28, wherein the first set of protected digital data includes copyrighted data, and wherein the first form of usage is permitted on either the decrypted digital data or the re-encrypted version of the decrypted digital data only if the first form of usage is one of a group of one or more usages permitted by the first crypt key.

31. The system of claim 28, wherein the first set of protected digital data is copyrighted data, and wherein the first crypt key is usable to decrypt only the first set of protected digital data.

32. The system of claim 28, wherein the first set of protected digital data is digital cash data.

33. The system of claim 28, wherein the first set of usages includes display and/or editing of data.

34. The system of claim 28, wherein the second set of usages includes one or more of the following usages of data:

copying, storing, and transferring.

35. The system of claim 28, wherein the first and second crypt keys are not available for future use after being used once for decrypting and re-encrypting, respectively.

36. The system of claim 28, wherein the memory further stores program instructions executable by the processor unit to send an access request to a computer system configured to provide access to protected digital data, wherein the access request includes a request for the first set of protected digital data.

37. The system of claim 36, wherein the access request includes information indicative of the identity of the requesting user of the system.

38. The system of claim 28, wherein the encrypted version of the first set of protected digital data is received from a user of a remote computer system, wherein the remote computer system is configured to decrypt and re-encrypt protected digital data, and wherein the first crypt key is received from a key control system.

39. The system of claim 38, wherein the first crypt key is received from the key control system in response to an access request that includes information indicative of a) the identity of the requesting user of the system and b) the identity of the user of the remote computer system from which the first set of protected digital data is received.