Systems and methods for secure transaction management and electronic rights protection

• US 8,533,851 B2
• Filed: 04/12/2006
• Issued: 09/10/2013
• Est. Priority Date: 08/30/1996
• Status: Expired due to Fees

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Ginter, Karl L., Shear, Victor H., Sibert, W. Olin, Spahn, Francis J., Van Wie, David M.
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US11/403,536
• Publication Number:
  US 20070226807A1
• Time in Patent Office: 2,708 Days
• Field of Search: 726/2, 726 16- 20, 726 26- 30, 713164-167, 713/189, 713/193
• US Class Current: 726/27
• CPC Class Codes: G06F 21/1078 Logging; Metering
• CPC Class Codes: G06F 21/1082 Backup or restore
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/725 operating on a secure reference time value
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 21/87 by means of encapsulation, e.g. for integrated circuits
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 : Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2141 : Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2143 : Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2147 : Locking files
• CPC Class Codes: G06F 2221/2149 : Restricted operating environment
• CPC Class Codes: G06F 2221/2151 : Time stamp
• CPC Class Codes: G06Q 10/10 : Office automation; Time management
• CPC Class Codes: G06Q 20/02 : involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/06 : Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/12 : specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 : with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/24 : Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/382 : insuring higher security of transaction
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G07F 9/026 : for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 63/00 : Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/104 : Grouping of entities
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26613 : for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4623 : Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed

Abstract

The present invention provides systems and methods for electronic commerce including secure transaction management and electronic rights protection. Electronic appliances such as computers employed in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Secure subsystems used with such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Secure distributed and other operating system environments and architectures, employing, for example, secure semiconductor processing arrangements that may establish secure, protected environments at each node. These techniques may be used to support an end-to-end electronic information distribution capability that may be used, for example, utilizing the “electronic highway.”

Claims

1. An electronic appliance comprising:

a central processing unit;

a secure processing unit; and

a computer readable medium storing;

protected electronic materials comprising protected digital content and an embedded signature; and

computer readable instructions that, when executed by the secure processing unit, are operable to;

validate the embedded signature against a current signature of the electronic appliance, the current signature being derived at least in part from information unique to the electronic appliance, the information being hidden by being placed in a secret location, wherein validating the embedded signature comprises matching the embedded signature with the current signature, and wherein the secret location comprises one of;

disk storage marked as damaged, disk storage that is otherwise reserved as an alternate for sectors marked as damaged, or unused storage in a file maintained by an operating system; and

deny use of the protected digital content when the embedded signature fails to validate against the current signature of the electronic appliance, wherein the computer readable instructions comprise a plurality of instruction blocks whose execution flow is customized to a layout order of the instruction blocks particular to the electronic appliance.

2. The electronic appliance of claim 1, in which the protected electronic materials further comprise software.

3. The electronic appliance of claim 1, in which the protected electronic materials further comprise rights management software for applying electronic permission information to govern use of the protected digital content.

4. The electronic appliance of claim 3, in which the current signature is derived, at least in part, from one or more of:

firmware, a hash of ROM BIOS, a hash of a disk defect map, a network adapter address of the electronic appliance, information stored in non-volatile memory of the electronic appliance, and information stored in a root directory of a disk drive of the electronic appliance.

5. The electronic appliance of claim 1, further comprising firmware, and in which the current signature is derived, at least in part, from the firmware.

6. The electronic appliance of claim 1, further comprising a Read-Only Memory Basic Input/Output System (ROM BIOS), and in which the current signature is derived, at least in part, from the ROM BIOS.

7. The electronic appliance of claim 1, further comprising firmware, and in which the current signature is derived, at least in part, from a hash of the firmware.

8. The electronic appliance of claim 1, in which the current signature is derived, at least in part, from a hash of a disk defect map.

9. The electronic appliance of claim 1, in which the current signature is derived, at least in part, from a network adapter address of the electronic appliance.

10. The electronic appliance of claim 1, in which the current signature is derived, at least in part, from information stored in memory of the electronic appliance.

11. The electronic appliance of claim 1, in which the current signature is derived, at least in part, from information stored in a root directory of a disk drive of the electronic appliance.

12. The electronic appliance of claim 1, in which the protected electronic materials are encrypted, at least in part.

13. The electronic appliance of claim 1, in which the secure processing unit comprises a tamper-resistant housing, internal memory, and a processor.

14. A method performed by an electronic appliance comprising a central processing unit and a secure processing unit, the method comprising:

transferring program control, by the central processing unit, to the secure processing unit;

executing, by the secure processing unit, instructions from a plurality of instruction blocks whose execution flow is customized to a layout order of the instruction blocks particular to the electronic appliance;

retrieving, by the secure processing unit, an embedded electronic appliance signature from a protected electronic item, wherein the signature is retrieved from one of;

disk storage marked as damaged, disk storage that is otherwise reserved as an alternate for sectors marked as damaged, or unused storage in a file maintained by an operating system;

comparing, by the secure processing unit, the embedded electronic appliance signature with a current signature of the electronic appliance, the current signature being derived at least in part from information unique to the electronic appliance; and

denying, by the secure processing unit, use of protected digital content included in the protected electronic item upon determining that the embedded electronic appliance signature does not match the current signature.

15. The method of claim 14, in which the protected electronic item further comprises a piece of software.

16. The method of claim 14, in which the protected electronic item further comprises rights management software for applying electronic permission information to govern use of the protected digital content.

17. The method of claim 16, in which the current signature is derived, at least in part, from one or more of:

firmware, a hash of ROM BIOS, a hash of a disk defect map, a network adapter address of the electronic appliance, information stored in non-volatile memory of the electronic appliance, and information stored in a root directory of a disk drive of the electronic appliance.

18. The method of claim 14, in which the current signature is derived, at least in part, from firmware of the electronic appliance.

19. The method of claim 14, in which the current signature is derived, at least in part, from a hash of ROM BIOS of the electronic appliance.

20. The method of claim 14, in which the current signature is derived, at least in part, from a hash of an electronic appliance disk defect map.

21. The method of claim 14, in which the current signature is derived, at least in part, from a network adapter address of the electronic appliance.

22. The method of claim 14, in which the current signature is derived, at least in part, from information stored in memory of the electronic appliance.

23. The method of claim 14, in which the current signature is derived, at least in part, from information stored in a root directory of a disk drive of the electronic appliance.

24. The method of claim 14, in which the protected electronic item is encrypted, at least in part.

25. An electronic appliance comprising:

a central processing unit;

a secure processing unit comprising;

a tamper-resistant housing;

internal memory; and

a processor;

a computer readable medium storing;

protected electronic materials;

protected digital content;

a previously determined signature; and

computer readable instructions that, when executed by the secure processing unit, are operable to;

validate the previously determined signature against a current signature of the electronic appliance, the current signature being derived at least in part from information unique to the electronic appliance, the information being hidden by being placed in a secret location, wherein validating the previously determined signature against the current signature comprises matching the previously determined signature with the current signature, and wherein the secret location comprises one of;

disk storage marked as damaged, disk storage that is otherwise reserved as an alternate for sectors marked as damaged, or unused storage in a file maintained by an operating system; and

deny use of the protected digital content when the previously determined signature fails to validate against the current signature of the electronic appliance, wherein the computer readable instructions comprise a plurality of instruction blocks whose execution flow is customized to a layout order of the instruction blocks particular to the electronic appliance.

26. The electronic appliance of claim 25, further comprising firmware, and in which the current signature is derived, at least in part, from the firmware.

27. The electronic appliance of claim 25, further comprising ROM BIOS, and in which the current signature is derived, at least in part, from the ROM BIOS.

28. The electronic appliance of claim 25, in which the current signature is derived, at least in part, from a network adapter address of the electronic appliance.

29. The electronic appliance of claim 25, in which the current signature is derived, at least in part, from one or more of:

a hash of firmware, a hash of ROM BIOS, a hash of a disk defect map, a network adapter address of the electronic appliance, information stored in memory of the electronic appliance, and information stored in a root directory of a disk drive of the electronic appliance.

30. A method performed by an electronic appliance comprising a central processing unit and a secure processing unit, the method comprising:

transferring program control, by the central processing unit, to the secure processing unit;

executing, by the secure processing unit, instructions from a plurality of instruction blocks whose execution flow is customized to a layout order of the instruction blocks particular to the electronic appliance;

retrieving, by the secure processing unit, a previously determined electronic appliance signature associated with a protected electronic item;

comparing, by the secure processing unit, the previously determined electronic appliance signature with a current signature of the electronic appliance, the current signature being derived at least in part from information unique to the electronic appliance, wherein the information is stored in one of;

disk storage marked as damaged, disk storage that is otherwise reserved as an alternate for sectors marked as damaged, or unused storage in a file maintained by an operating system; and

denying, by the secure processing unit, use of protected digital content included in the protected electronic item upon determining that the previously determined signature does not match the current signature.

31. The method of claim 30, in which the protected electronic item further comprises rights management software for applying electronic permission information to govern use of the protected digital content.

32. The method of claim 31, in which the current signature is derived, at least in part, from firmware of the electronic appliance.

33. The method of claim 31, in which the current signature is derived, at least in part, from a network adapter address of the electronic appliance.

34. The method of claim 30, in which the current signature is derived, at least in part, from one or more of:

firmware, a hash of ROM BIOS, a hash of a disk defect map, a network adapter address of the electronic appliance, information stored in non-volatile memory of the electronic appliance, and information stored in a root directory of a disk drive of the electronic appliance.