Protection of digital data content

• US 9,177,116 B2
• Filed: 12/17/2009
• Issued: 11/03/2015
• Est. Priority Date: 08/23/2002
• Status: Active Grant

• Current Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Original Assignee: Sandisk Technologies Incorporated (Western Digital Corporation)
• Inventors: Elazar, Gidon, Harkabi, Dan, Weingarten, Nehemiah, Halachmi, Aviraham, Camiel, Noam, Fuchs, Eran
• Primary Examiner(s): Holder, Bradley
• Assistant Examiner(s): Shayanfar, Ali
• Application Number:
  US12/641,076
• Publication Number:
  US 20100095383A1
• Time in Patent Office: 2,147 Days
• Field of Search: 726/2, 726 26- 27, 713/100, 713/193
• US Class Current: 1/1
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 2005/91328 the copy protection signal being a copy management signal, e.g. a copy generation management signal [CGMS]
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4183 providing its own processing capabilities, e.g. external module for video decoding
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

Various embodiments include an apparatus, system, and method to control the distribution and usage of copyrighted digital content. The processing of a data file received over a communications network such as the Internet occurs both in a host digital appliance, such as a personal computer, notebook computer, audio player, video player, and the like, and in a very small digital rights management (DRM) module that is removably connected with the host. The processing makes it extremely difficult for the content of the data file to be obtained by an unauthorized person and/or utilized with an unauthorized DRM module.

Claims

1. A method of processing digital data by a digital rights management (DRM) device in combination with and removably connected to a digital appliance, the data in a form of at least first and second separate units, the method comprising:

in the DRM device;

receiving a request from the digital appliance to use the data,

in response to receiving the request, determining whether to authorize use of the data by the digital appliance,

in response to authorizing use of the data by the digital appliance;

accessing the first unit of data and the second unit of data, wherein the first unit of data and the second unit of data are based on the following;

C≈

F=f(g(A),h(B)) or

C=F=f(g(A),h(B))

in which B represents the first unit of data, A represents the second unit of data, and C represents the data, wherein f( ) is a function to provide a copy of a file and g( ) and h( ) are transformation functions;

sending the second unit of data to the digital appliance for processing,

processing the first unit of data by generating h(B),

in response to sending the second unit of data to the digital appliance for processing, receiving processed second unit of data represented as g(A) from the digital appliance, the second unit of data having been processed in the digital appliance by generating the g(A),

in response to receiving the processed second unit of data represented as the g(A) from the digital appliance, combining the processed first and second units of data in the DRM device by generating f(g(A), h(B)), and

sending the combined processed first and second units of data represented as f(g(A), h(B)) to the digital appliance for use in the digital appliance.

2. The method of claim 1, wherein the data include multimedia data having both video and audio components, and

wherein the second unit of data includes compressed data of the video component without data of the audio component and the first unit of data includes compressed data of the audio component.

3. The method of claim 1, wherein the data comprises a video signal having a plurality of color components, and

wherein the first unit of data includes data of less than all the plurality of color components and the second unit of data includes data of at least another of the plurality of color components.

4. The method of claim 1, wherein the data include encoded data frames, and

wherein the first unit of data includes at least key frames thereof and the second unit of data includes remaining inter-frames thereof.

5. The method of claim 1, wherein the data includes data of an audio signal, and

wherein the first unit of data includes data of at least certain audio frequency ranges and the second unit of data includes data of remaining audio frequency ranges.

6. The method of claim 1, wherein the data includes data of an audio signal, and

wherein the second unit of data includes the audio data plus dummy data and the first unit of data includes data of information necessary to remove the dummy data from the first unit.

7. The method of claim 1, wherein the data comprises a time oriented signal, and

wherein the second unit of data includes a time shuffled version of the data and the first unit of data includes data of information necessary to un-shuffle data of the first unit.

8. The method of claim 1, wherein the data comprises a time oriented signal, and

wherein the second unit of data includes the data with segments thereof missing and the first unit of data includes data of the missing segments.

9. The method of claim 1, wherein the data comprises encoded WAV audio file and divided into frames of data longer than a given length, and

wherein the first unit of data includes data of the given length of the frames and the second unit of data includes remaining data of the frames.

10. The method of claim 1, wherein sending the combined processed first and second units of data to the digital appliance is performed wirelessly.

11. A method according to claim 1, further comprising receiving, by the DRM device, the first unit of data separate from the second unit of data.

12. A method according to claim 11, wherein the DRM device receives the first unit of data after the first unit of data has been transmitted over a communication network in a manner that maintains separate identity of the first unit of data from the second unit of data.

13. The method of claim 1, wherein use in the digital appliance comprises play of the data in the digital appliance.

14. The method of claim 1, wherein the digital appliance comprises a host digital appliance configured to host the DRM device;

and

wherein an amount of processing of the first unit of data by generating h(B) is less than an amount of processing of the second unit of data by generating the g(A).

15. The method of claim 1, wherein processing the first unit of data comprises at least one of decryption, decoding, or decompression of the first unit of data;

and

wherein receiving processed second unit of data comprises receiving decrypted, decoded or decompressed second unit of data.

16. The method of claim 1, wherein the first unit of data and the second unit of data comprise divisions of the data based on at least one criteria such as time, frequency, size, key frames or dummy data.

17. A method of processing data received by a digital appliance when the digital appliance is in communication with a digital rights management (DRM) device, wherein the data comprises a first of data and a second unit of data, the DRM device removably connected to the digital appliance, the method comprising:

in the digital appliance;

sending a request to the DRM device to use the data, wherein the first unit of data and the second unit of data are based on the following;

C≈

F=f(g(A),h(B)) or

C=F=f(g(A),h(B))

in which B represents the first unit of data, A represents the second unit of data, and C represents the data, wherein f( ) is a function to provide a copy of a file, and g( ) and h( ) are transformation functions;

in response to sending the request, receiving the second unit of data represented as A at the digital appliance for processing;

in response to receiving the second unit of data, processing the second unit of data in the digital appliance by performing a transformation on the second unit of data using g(A);

sending the processed second unit of data represented as g(A) to the DRM device in order for the DRM device to combine the processed first and second units of data by generating f(g(A), h(B));

in response to sending the processed second unit of data to the DRM device, receiving from the DRM device the processed first and second units of data as combined data represented as f(g(A),h(B)); and

utilizing the combined data in the digital appliance.

18. The method of claim 17, further comprising receiving the data file in a form of at least first and second separate units of data and sending the data file in the form of the at least first and second units of data to the DRM device,

wherein the request to use the data is sent to the DRM device after sending the data file to the DRM device.

19. A digital rights management (DRM) device configured to process data in combination with a digital appliance, the data in a form of at least first and second separate units of data, the DRM device comprising:

a memory,

an interface configured to removably connect the DRM device to the digital appliance and to communicate data into and out of the DRM device, and

a controller in communication with the interface and the memory, the controller configured to;

receive a request from the digital appliance to use the data,

in response to receiving the request, determine whether to authorize use of the data by the digital appliance,

in response to authorizing use of the data by the digital appliance;

access the first unit of data and the second unit of data, wherein the first unit of data and the second unit of data are based on the following;

C≈

F=f(g(A),h(B)) or

C=F=f(g(A),h(B))

in which B represents the first unit of data, A represents the second unit of data, and C represents the data, wherein f( ) is a function to provide a copy of a file, and g( ) and h( ) are transformation functions;

send the second unit of data to the digital appliance for processing,

process the first unit of the data to form a processed first unit by generating h(B),

in response to sending the second unit of data to the digital appliance for processing, receive, via the interface, processed second unit of the data represented as g(A) from the digital appliance, the second unit of data having been processed in the digital appliance by generating the g(A),

in response to receiving the processed second unit of data represented as the g(A) from the digital appliance, combine the first and second units of the data by generating f(g(A), h(B)), and

send, via the interface, the combined processed first and second units of the data represented as f(g(A), h(B)) back though the interface to the digital appliance for use in the digital appliance.

20. The DRM device of claim 19, wherein the processor comprises a microprocessor;

wherein the memory comprises a semiconductor memory; and

wherein at least the microprocessor and the semiconductor are encapsulated.

21. The DRM device of claim 19, wherein the interface includes a mechanical connector having electrical contacts accessible from outside of the DRM device in order for removable connection with the digital appliance.

22. The DRM device of claim 21, wherein the connector includes an USB connector.

23. The DRM device of claim 21, wherein the connector includes electrical contacts according to an SD memory card standard.

24. The DRM device of claim 21, wherein the connector includes electrical contacts according to a TransFlash memory card standard.

25. The DRM device of claim 21, wherein the connector includes electrical contacts according to a Memory Stick memory card standard.

26. The DRM device of claim 19, wherein the interface includes two mechanical connectors accessible from outside of the module.

27. The DRM device of claim 26, wherein the two mechanical connectors include an USB connector and a set of electrical contacts according to an existing memory card standard.

28. The DRM device of claim 19, wherein the data comprises a data file;

wherein the controller is further configured to extract from the data file the first and second units of data, the first and second units of data comprising simultaneously occurring data components of the data file.

29. The DRM device of claim 19, wherein the digital appliance comprises a host digital appliance configured to host the DRM device;

and

wherein the interface is configured to mechanically and electrically mate with a connector on the host digital appliance.

30. The DRM device of claim 29, wherein an amount of processing of the first unit of data by generating h(B) is less than an amount of processing of the second unit of data by generating the g(A).

31. The DRM device of claim 19, wherein the controller is configured to process the first unit of data by at least one of decrypting, decoding, or decompressing the first unit of data;

and

wherein the controller is configured to receive the processed second unit of data by receiving decrypted, decoded or decompressed second unit of data.

32. A digital rights management (DRM) device for processing data in combination with a digital appliance, the data in a form of at least first and second separate units of data, the DRM device comprising:

a memory,

an interface configured to removably connect the DRM device to the digital appliance and to communicate data into and out of the DRM device,

a hardware processor configured for;

receiving a request from the digital appliance to use the data,

determining whether to authorize use of the data by the digital appliance in response to receiving the request,

in response to authorizing use of the data by the digital appliance;

accessing the first unit of data and the second unit of data, wherein the first unit of data and the second unit of data are based on the following;

C≈

F=f(g(A),h(B)) or

C=F=f(g(A),h(B))

in which B represents the first unit of data, A represents the second unit of data, and C represents the data, wherein f( ) is a function to provide a copy of a file, and g( ) and h( ) are transformation functions;

sending the second unit of data to the digital appliance for processing,

processing the first unit of the data to form a processed first unit by generating h(B),

in response to sending the second unit of data to the digital appliance for processing, receiving, via the interface, processed second unit of the data represented as g(A) from the digital appliance, the second unit of data having been processed in the digital appliance by generating the g(A),

in response to receiving the processed second unit of data represented as the g(A) from the digital appliance, combining the first and second units of the data by generating f(g(A), h(B)), and

sending, via the interface, the combined processed first and second units of the data represented as f(g(A), h(B)) back though the interface to the digital appliance for use in the digital appliance.