Method and system for secure network-based distribution of content

• US 8,788,423 B2
• Filed: 01/20/2011
• Issued: 07/22/2014
• Est. Priority Date: 04/25/2003
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Dowdy, Thomas, Robbin, Jeffrey L., Tribble, Guy L., Heller, David
• Primary Examiner(s): Augustin, Evens J
• Application Number:
  US13/010,597
• Publication Number:
  US 20110125650A1
• Time in Patent Office: 1,279 Days
• Field of Search: 705/37, 705/310, 705/52
• US Class Current: 705/52
• CPC Class Codes: G06F 21/1011 to devices

Abstract

A method and system for network-based distribution of content are disclosed. The distribution of content is not only secure but also controlled. The security restricts access to content within media files during downloads as well as while stored at a server or client. In one embodiment, each media file is encrypted with a different, randomly generated key. The control over the distribution of the media file can serve to limit the subsequent distribution of media files from clients to other clients. In another embodiment, the control can permit media files to be shared on a limited number of different clients affiliated with the same user. The clients can vary with application but generally are computing devices that have memory storage. Often, the clients are personal computers or other computing devices that are capable of storing and presenting content to their users.

Claims

1. A computer-implemented method for storing media files to a centralized media storage such that they are ready for download, the method comprising:

(a) receiving media files in a media server from a centralized media storage comprising a plurality of different media servers, the media files pertaining to media items, and each of the media files having at least media content data and metadata describing characteristics of the associated media item;

(b) generating, via a processor, a download key for each of the media files, the download keys being different for each of the media files;

(b′

) encrypting, via a processor, the metadata for each of the media files with a global key that is unique to the media server from the plurality of media servers which the media file is stored, and subsequently

(c) encrypting, via a processor, each of the media files with the corresponding one of the download keys to produce encrypted media files;

(d) storing the encrypted media files to the centralized media store; and

delivering encrypted media files to a client.

2. A method as recited in claim 1,

wherein each of the media files has at least the media content data and metadata, the metadata describing characteristics of the associated media item, and

wherein the method further comprises:

(e) encrypting, prior to the encrypting (c), the metadata for each of the media files with a common key.

3. A method as recited in claim 1, wherein the centralized media storage is within or coupled to a media server.

4. A method as recited in claim 3, wherein the encrypted media files can be downloaded to users'"'"' local machines via a data network.

5. A method as recited in claim 4, wherein at least one of the users'"'"' local machines is one of a portable computing device and a media player.

6. A non-transitory computer readable medium including at least computer program code for storing media files to a centralized media storage such that they are ready for download, the computer readable medium comprising:

computer program code for receiving media files in a media server from a centralized media storage comprising a plurality of different media servers, the media files pertaining to media items, and each of the media files having at least media content data and metadata describing characteristics of the associated media item;

computer program code for obtaining a download key for each of the media files, the download keys being different for each of the media files;

computer program code for encrypting the metadata for each of the media files with a global key that is unique to the media server from the plurality of media servers which the media file is stored, and subsequently;

computer program code for encrypting each of the media files with the corresponding one of the download keys to produce encrypted media files; and

computer program code for storing the encrypted media files to the centralized media store.

7. A non-transitory computer readable medium as recited in claim 6,

wherein each of the media files has at least the media content data and metadata, the metadata describing characteristics of the associated media item, and

wherein the computer readable medium comprises:

computer program code for encrypting the metadata for each of the media files with a common key.

8. A non-transitory computer readable medium as recited in claim 6, wherein the centralized media storage is within or coupled to a media server.

9. A non-transitory computer readable medium as recited in claim 8, wherein the encrypted media files can be downloaded to users'"'"' local machines via a data network.

10. A method as recited in claim 9, wherein at least one of the users'"'"' local machines is one of a portable computing device and a media player.

11. A media distribution system, comprising:

a media storage device that stores a plurality of media files from a media server from among a plurality of media servers, each of the media files having at least media content data and metadata describing characteristics of the associated media item; and

a media server operatively connected to the media storage device, the media server being configured to;

receive media files pertaining to media items, each of the media files having at least media content data and metadata describing characteristics of the associated media item;

generate a download key for each of the media files, the download keys being different for each of the media files;

encrypt the metadata for each of the media files with a global key that is unique to the media server from the plurality of media servers which the media file is stored, and subsequently;

encrypt each of the media files with the corresponding one of the download keys to produce encrypted media files; and

store the encrypted media files to the media storage device.

12. A media distribution system as recited in claim 11, wherein the media server is further configured to:

render the encrypted media files available for purchase from the media storage device.

13. A media distribution system as recited in claim 12, wherein the media server is further configured to:

receive a request to purchase a particular media file to be purchased from those of the encrypted media files stored in the media storage device;

initiate purchase of access to the identified media file; and

configure download of the particular media file from the media storage device in its encrypted form.