Secure non-invasive method and system for distribution of digital assets

• US 9,165,152 B2
• Filed: 09/13/2013
• Issued: 10/20/2015
• Est. Priority Date: 04/12/2006
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Vishik, Claire Svetlana
• Primary Examiner(s): Rahman, Mohammad L
• Application Number:
  US14/026,428
• Publication Number:
  US 20140013113A1
• Time in Patent Office: 767 Days
• Field of Search: 380/201, 380/200
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04N 21/4532 involving end-user characteristics, e.g. viewer profile, preferences monitoring of user activities for profile generation for accessing a video database G06F16/739; user profiles in network data switching protocols H04L67/306; processing of user preferences or user profiles in wireless networks H04W8/18
• CPC Class Codes: H04N 21/454 Content or additional data filtering, e.g. blocking advertisements

Abstract

A client computer system receives a file that is at least partially encrypted. The client computer also receives a file manager and user input. In response to the user input matching data stored in an encrypted user profile, the client computer uses the file manager to decrypt the file based on a key stored in the encrypted user profile. The file is unusable if copied to another client computer, and the file manager manages usage of the file based on one or more terms of usage.

Claims

1. A system comprising:

a processor; and

a memory storing instructions that when executed by the processor cause the processor to perform operations, the operations comprising;

receiving, at a client computer configured to execute one or more applications, a first file and a second file from a server computer, wherein the first file is at least partially encrypted;

receiving, at the client computer from the server computer, a first file manager specific to the first file and a second file manager specific to the second file;

receiving user input at the client computer; and

in response to the user input matching data stored in an encrypted user profile at the client computer, decrypting the first file using the first file manager based on a key stored in the encrypted user profile, wherein the first file manager selectively enables access, by the one or more applications, to the first file based on one or more first terms of usage, and wherein the second file manager selectively enables access, by the one or more applications, to the second file based on one or more second terms of usage.

2. The system of claim 1, wherein the operations further comprise receiving a first downloader at the client computer, wherein the first downloader is used by the client computer to receive the first file and the first file manager.

3. The system of claim 2, wherein the first file includes a first digital content item and the first downloader is unable to download files other than first files related to the first digital content item.

4. The system of claim 1, wherein the first file manager is configured to automatically delete the first file upon determining that usage of the first file is disallowed based on the one or more first terms of usage.

5. The system of claim 1, wherein the first file manager is configured to automatically terminate access to the first file upon determining that usage of the first file is disallowed based on the one or more first terms of usage.

6. The system of claim 1, wherein usage of the first file is disallowed based on a time stamp.

7. The system of claim 1, wherein the first file corresponds to a video game.

8. The system of claim 1, wherein the operations further include storing information related to usage of the first file at the client computer.

9. A client computer system comprising:

a processor; and

a memory storing instructions that when executed by the processor cause the processor to perform operations, the operations comprising;

receiving, at a client computer configured to execute one or more applications, a first file and a second file from a server computer, wherein the first file is at least partially encrypted;

receiving, at the client computer from the server computer, a first file manager specific to the first file and a second file manager specific to the second file;

receiving user input at the client computer; and

in response to the user input matching data stored in an encrypted user profile at the client computer, decrypting the first file using the first file manager based on a key stored in the encrypted user profile, wherein the first file manager selectively enables access, by the one or more applications, to the first file based on one or more first terms of usage, and wherein the second file manager selectively enables access, by the one or more applications, to the second file based on one or more second terms of usage.

10. The system of claim 9, further comprising receiving the encrypted user profile at the client computer.

11. The system of claim 9, wherein the first file manager is configured to automatically terminate access to the first file upon determining that usage of the first file is disallowed based on the one or more first terms of usage.

12. The system of claim 9, wherein the usage of the first file is disallowed when the usage of the first file has expired based on a time stamp.

13. The system of claim 9, wherein the usage of the first file is disallowed when a number of uses of the first file exceeds an allowed number of uses.

14. The system of claim 9, wherein the user input includes at least one of a user identifier, a passcode, and a biometric feature of a user.

15. A method comprising:

receiving, at a server computer, a request for a digital content item from a client computer;

outputting a downloader component from the server computer to the client computer, wherein the downloader component exclusively downloads files associated with the digital content item;

outputting a first file associated with the digital content item to the downloader component at the client computer, wherein the first file is at least partially encrypted; and

outputting a second file, a first file manager, a second file manager, and an encrypted user profile to the client computer, wherein the first file manager is configured to selectively enable access, by one or more applications executing at the client computer, to the first file and to decrypt the first file based on a key stored in the encrypted user profile in response to user input at the client computer matching data stored in the encrypted user profile, and wherein the second file manager is configured to selectively enable access, by the one or more applications executing at the client computer, to the second file based on one or more second terms of usage.

16. The method of claim 15, wherein the user input includes at least one of a user identifier, a passcode, and a biometric feature of a user.

17. The method of claim 15, wherein the first file manager is configured to automatically delete the first file upon determining that usage of the first file is disallowed based on one or more first terms of usage.

18. The method of claim 15, wherein the first file manager is configured to direct the first file to an application when usage of the first file is allowed.

19. The method of claim 15, wherein usage of the first file is disallowed based on a time stamp.