Method and system for digital rights management of documents

• US 9,509,667 B2
• Filed: 03/02/2015
• Issued: 11/29/2016
• Est. Priority Date: 04/13/2004
• Status: Active Grant

• Current Assignee: Keyavi Data Corp.
• Original Assignee: Encryptics, LLC
• Inventors: Pigin, Vlad
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US14/635,262
• Publication Number:
  US 20150244688A1
• Time in Patent Office: 638 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/64 Self-signed certificates
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

An improved method and system for digital rights management is described.

Claims

1. A method for sending data from a sender to a recipient, the method comprising:

allowing the sender to select an electronic document to encrypt and send to the recipient;

allowing the sender to select a set of recipient rights for the selected electronic document;

generating a graphical representation of the selected electronic document in response to the sender selecting the set of recipient rights;

encrypting the graphical representation of the selected electronic document and the set of recipient rights;

encapsulating the encrypted graphical representation of the selected electronic document and the encrypted set of recipient rights into a container;

sending the container from the sender to the recipient; and

wherein the encapsulated and encrypted graphical representation of the selected electronic document and the recipient rights are accessible by the recipient.

2. The method of claim 1 wherein the set of rights include at least one from the following set:

reading rights indefinitely;

reading rights up to a preset date;

printing rights indefinitely;

printing rights up to a preset date;

copying rights indefinitely; and

copying rights up to a preset date.

3. The method of claim 1 wherein the encrypting the graphical representation of the selected electronic document includes utilizing the terminal of the recipient to establish a computer passport.

4. The method of claim 3 further including utilizing at least one of the following to generate a unique symmetry key to encrypt a session key that is used to encrypt the selected electronic document and the set of recipient rights:

the terminal'"'"'s MAC address, master serial number, Basic Input/Output System (BIOS) information or BIOS date.

5. The method of claim 1 further including using a certificate of the sender.

6. The method of claim 1 further including selecting from a set of certificates of the sender.

7. The method of claim 1, wherein the container is sent from the sender to the recipient as a message attachment.

8. A system for sending data from a sender to a recipient, the system comprising:

a sender'"'"'s system that allows selection of an electronic document to encrypt and send to the recipient, wherein the sender'"'"'s system;

selects a set of recipient rights for the selected electronic document;

generates a graphical representation of the selected electronic document in response to the selection of the set of recipient rights;

encrypts the graphical representation of the selected electronic document and the set of recipient rights; and

sends the encrypted graphical representation of the selected electronic document and the set of recipient rights from the sender to the recipient.

9. The system of claim 8 wherein the set of rights include at least one from the following set:

reading rights indefinitely;

reading rights up to a preset date;

printing rights indefinitely;

printing rights up to a preset date;

copying rights indefinitely; and

copying rights up to a preset date.

10. The system of claim 8 wherein the encryption of the graphical representation of the electronic document includes utilizing the terminal of the recipient to establish a computer passport.

11. The system of claim 10 further including utilizing at least one of the following to generate a unique symmetry key to encrypt a session key that is used to encrypt the selected electronic document and the set of recipient rights:

the terminal'"'"'s MAC address, master serial number, Basic Input/Output System (BIOS) information or BIOS date.

12. The system of claim 8 further including using a certificate of the sender.

13. The system of claim 8 wherein the sender'"'"'s system includes selection from a set of certificates of the sender.

14. The system of claim 8 wherein the sender'"'"'s system includes selection of a document to wipe out completely from any storage device.

15. A method for sending data from a sender to a recipient, the method comprising:

allowing a sender to select an electronic document to encrypt and send to the recipient;

allowing a sender to select a set of recipient rights for the selected electronic document, wherein the set of recipient rights includes the following set;

reading rights indefinitely;

reading rights up to a preset date;

printing rights indefinitely;

printing rights up to a preset date;

copying rights indefinitely; and

copying rights up to a preset date;

generating a graphical representation of the selected electronic document in response to the sender selecting the set of recipient rights;

encrypting the graphical representation of the selected electronic document and the set of recipient rights;

sending the encrypted graphical representation of the selected electronic document from the sender to the recipient;

providing the recipient access to the graphical representation of the selected electronic document according to the set of recipient rights.

16. The method of claim 15 wherein the encrypting the graphical representation of the selected electronic document includes utilizing the terminal of the recipient to establish a computer passport.

17. The method of claim 16 further including utilizing at least one of the following to generate a unique symmetry key to encrypt a session key that is used to encrypt the selected electronic document and set of recipient rights:

the terminal'"'"'s MAC address, master serial number, Basic Input/Output System (BIOS) information or BIOS date.

18. The method of claim 15 further including using a certificate of the sender.

19. The method of claim 15 further including selecting from a set of certificates of the sender.

20. The method of claim 15 further including selecting a document to wipe out completely from any storage device.