Securing digital content system and method

• US 8,930,697 B2
• Filed: 02/07/2013
• Issued: 01/06/2015
• Est. Priority Date: 10/20/2003
• Status: Active Grant

• Current Assignee: Digital Reg of Texas, LLC (DRM Technologies LLC)
• Original Assignee: Digital Reg of Texas, LLC (DRM Technologies LLC)
• Inventors: Phillips, Eugene B. II, Ornstein, Seth
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): CALLAHAN, PAUL E
• Application Number:
  US13/762,113
• Publication Number:
  US 20130159701A1
• Time in Patent Office: 698 Days
• Field of Search: 380/259, 380/285, 705/51, 705/55, 705/56, 713/160, 713/165, 713/171, 726/26, 726/30, 726/31
• US Class Current: 713/171
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system and method of encrypting digital content in a digital container and securely locking the encrypted content to a particular user and/or computer or other computing device is provided. The system uses a token-based authentication and authorization procedure and involves the use of an authentication/authorization server. This system provides a high level of encryption security equivalent to that provided by public key/asymmetric cryptography without the complexity and expense of the associated PKI infrastructure. The system enjoys the simplicity and ease of use of single key/symmetric cryptography without the risk inherent in passing unsecured hidden keys. The secured digital container when locked to a user or user'"'"'s device may not open or permit access to the contents if the digital container is transferred to another user'"'"'s device. The digital container provides a secure technique of distributing electronic content such as videos, text, data, photos, financial data, sales solicitations, or the like.

Claims

1. A computer-implemented method for protecting electronic content, the method comprising the steps of:

storing in a registration database an asymmetric decryption key that is associated with a digital electronic container;

receiving client device footprint data from a client device;

combining the client device footprint data and the stored asymmetric decryption key to create a re-key value; and

sending the re-key value to the client device to re-key content data at the client device wherein a predetermined data block of the content data stores a symmetric decryption key and the predetermined data block and stored decryption key being previously encrypted using an asymmetric key technique, and wherein the digital container contains the content data arranged into data blocks including the predetermined data block, the digital electronic container being provided to the client device prior to the sending step.

2. The computer-implemented method of claim 1, wherein all of the data blocks are encrypted using a systematic key technique.

3. The computer-implemented method of claim 1, wherein the digital electronic container is configured with executable instructions that are configured to execute at the client device to combine the client device footprint data and the re-key value to create a fingerprint key, the fingerprint key for decrypting the predetermined data block thereby providing access to the symmetric decryption key.

4. The computer-implemented method of claim 1, wherein the step of sending the re-key value to the client device includes sending the re-key value as part of a permission token.

5. The computer-implemented method of claim 4, wherein the permission token includes a fingerprint key.

6. The computer-implemented method of claim 1, wherein the step of receiving receives user input data and the step of combining produces a fingerprint key.

7. The computer-implemented method of claim 6, wherein the user input data includes any one or more of:

financial data, account data, credit data, a social security number and identifying data.

8. The computer-implemented method of claim 1, wherein the step of combining uses a container identifier associated with the digital electronic container to produce a fingerprint key.

9. The computer-implemented method of claim 8, wherein the sending step sends the re-key value and the fingerprint key as part of a permission token.

10. A computer program product comprising computer executable instructions embodied on a computer readable storage device that when read and executed by a computer processor executes the following steps:

storing in a registration database an asymmetric decryption key that is associated with a digital electronic container;

receiving client device footprint data from a client device;

combining the client device footprint data and the stored asymmetric decryption key to create a re-key value; and

sending the re-key value to the client device to re-key content data at the client device wherein a predetermined data block of the content data stores a symmetric decryption key and the predetermined data block and stored decryption key being previously encrypted using an asymmetric key technique, and wherein the digital container contains the content data arranged into data blocks including the predetermined data block, the digital electronic container being provided to the client device prior to the sending step.

11. The A computer program product claim 10, wherein all of the data blocks are encrypted using a systematic key technique.

12. The computer program product of claim 10, wherein the digital electronic container is configured with executable instructions that are configured to execute at the client device to combine the client device footprint data and the re-key value to create a fingerprint key, the fingerprint key for decrypting the predetermined data block thereby accessing the symmetric decryption key.

13. The computer program product of claim 10, wherein the step of sending the re-key value to the client device includes sending the re-key value as part of a permission token.

14. The computer program product of claim 13, wherein the permission token includes a fingerprint key.

15. The computer program product of claim 10, wherein the step of receiving receives user input data and the step of combining produces a fingerprint key.

16. The computer program product of claim 15, wherein the user input data includes any one or more of:

financial data, account data, credit data, a social security number and identifying data.