System, method and apparatus for securely distributing content

• US 9,615,116 B2
• Filed: 06/16/2011
• Issued: 04/04/2017
• Est. Priority Date: 06/16/2011
• Status: Active Grant

• Current Assignee: paSafeShare LLC
• Original Assignee: paSafeShare LLC
• Inventors: Phadke, Madhav S., Phadke, Kedar M.
• Primary Examiner(s): Burgess, Glenton B
• Assistant Examiner(s): NAJEE-ULLAH, TARIQ S
• Application Number:
  US13/162,209
• Publication Number:
  US 20120321083A1
• Time in Patent Office: 2,119 Days
• Field of Search: 380255
• CPC Class Codes: H04L 2463/041 using an encryption or decryption engine integrated in transmitted data
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08

Abstract

System, method and apparatus for securely distributing content via an encrypted file wherein a Publisher Key (PK) associated with an authorized publisher enables presentation of the content by the authorized user via a Limited Capability Viewer (LCV), the LCV lacking the capability to forward, print, copy or otherwise disseminate the content to be presented.

Claims

1. A method for securely distributing content, comprising:

generating, at a server, a protected document package (PDP), said PDP including encrypted content, and a Publisher Key (PK) associated with said encrypted content;

said PK enabling decryption of said encrypted content for presentation via a Limited Capability Viewer (LCV) of an authorized user device,

said authorized user device comprising a user device having a Content Consumer License (CCL) compatible with the PK to enable thereby presentation via said LCV of locally stored encrypted content from said PDP,

said PDP including software instructions which, when executed by a processor at a proposed authorized user device, cause said proposed authorized user device to generate a Content Consumer License Request (CCLR) identifying said PK;

propagating the PDP toward at least one authorized or proposed authorized user device;

receiving from a proposed authorized user device having said PDP a CCLR identifying said PK; and

propagating a CCL compatible with the PK toward said proposed authorized user device if said CCLR is valid.

2. The method of claim 1, wherein said authorized user device is identified according to one or more of e-mail address, a domain name user identifier, and a computer identifier.

3. The method of claim 1, wherein authorized use is defined by the PK as one or more of an authorized presentation start time, an authorized presentation start date, an authorized presentation expiration time, and an authorized presentation expiration date.

4. The method of claim 1, wherein authorized use is defined by the PK as one or more of a password protection layer, an encryption type, a presentation program type, authorized user device geographical location, and an authorized user device IP address range.

5. The method of claim 1, wherein said PDP comprises a self-executing PDP.

6. The method of claim 1, wherein the PDP is further configured to provide the LCV.

7. The method of claim 1, wherein determining whether the CCLR is valid comprises interacting with an owner associated with requested content to determine if the requesting proposed authorized user device should be granted access to said content.

8. The method of claim 7, wherein generating a CCL comprises interacting with an owner associated with the requested content to receive therefrom appropriate licensing constraints associated with granting authorization for content presentation by a requesting proposed authorized user device.

9. The method of claim 1, wherein the PDP comprises a database file including said content.

10. The method of claim 1, wherein the LCV is adapted for presenting content portion representative objects extracted from the PDP.

11. The method of claim 1, wherein the LCV uses Object Linking and Embedding (OLE) or Dynamic Data Exchange to retrieve content portion representative objects for presentation.

12. The method of claim 1, wherein the content within the PDP is adapted to be opened directly from the PDP by the LCV.

13. The method of claim 1, wherein the content within the PDP is adapted to be extracted from the PDP and stored as a temporary file that is adapted to be opened by the LCV.

14. The method of claim 13, wherein the temporary file comprises the encrypted content from the PDP.

15. The method of claim 1, wherein the CCL compatible with the encrypted PK is managed via a central user management directory.

16. The method of claim 1, wherein the CCL compatible with the encrypted PK is managed via a content distribution entity.

17. The method of claim 1, wherein the CCL compatible with the encrypted PK is managed via a content owner.

18. The method of claim 1, wherein the Publisher Key (PK) defines a plurality of licensing tiers, each licensing tier defined by licensing parameters associated with presentation of said content by an authorized user device via a LCV.

19. The method of claim 18, wherein each of said PK licensing tiers is compatible with a respective Content Consumer License (CCL).

20. The method of claim 19, wherein said plurality of PK licensing tiers are arranged in a hierarchical fashion, and a CCL compatible with a licensing tier of a first level is also compatible with all licensing tiers hierarchically lower than said first level.

21. The method of claim 19, wherein access segmentation among recipients of said protected document package is enabled by selective distribution of content consumer licenses (CCLs) compatible with said PK licensing tiers.

22. The method of claim 13, wherein the temporary file that is adapted to be opened by the Limited Capability Viewer (LCV) is defined by a content publisher.

23. The method of claim 22, wherein the publisher defined temporary file is stored within the PDP in the manner defined by the publisher.

24. The method of claim 1, further comprising defining a secure document sharing group including user members authorized to view and/or modify the content within the PDP.

25. An apparatus for securely distributing content, comprising:

a processor configured for;

generating a protected document package (PDP) said PDP including encrypted content, and a Publisher Key (PK) associated with said encrypted content;

said PK enabling decryption of said encrypted content for presentation via a Limited Capability Viewer (LCV) of an authorized user device,

said authorized user device comprising a user device having a Content Consumer License (CCL) compatible with the PK to enable thereby presentation via said LCV of locally stored encrypted content from said PDP,

said PDP including software instructions which, when executed by a processor at a proposed authorized user device, cause said proposed authorized user device to generate a Content Consumer License Request (CCLR) identifying said PK;

propagating the PDP toward at least one authorized or proposed authorized user device;

receiving from a proposed authorized user device having said PDP a CCLR identifying said PK; and

propagating a CCL compatible with the PK toward said proposed authorized user device if said CCLR is valid.

26. The apparatus of claim 25, wherein the processor is further configured for:

generating a Content Consumer License (CCL) for each authorized user device; and

distributing the CCL toward each authorized user device.

27. The apparatus of claim 26, wherein the CCL is distributed via a non-transitory computer readable storage medium.

28. The apparatus of claim 27, wherein the CCL is only effective when the non-transitory computer readable storage medium including the CCL is operatively connected to a computing device associated with an authorized user device.

29. A non-transitory computer readable medium including software instructions which, when executed by a processor, perform a method for securely distributing content, comprising:

generating, at a server, a protected document package (PDP) said PDP including encrypted content, and a Publisher Key (PK) associated with said encrypted content;

said PK enabling decryption of said encrypted content for presentation via a Limited Capability Viewer (LCV) of an authorized user device,

said authorized user device comprising a user device having a Content Consumer License (CCL) compatible with the PK to enable thereby presentation via said LCV of locally stored encrypted content from said PDP,

said PDP including software instructions which, when executed by a processor at a proposed authorized user device, cause said proposed authorized user device to generate a Content Consumer License Request (CCLR) identifying said PK;

propagating the PDP toward at least one authorized or proposed authorized user device;

receiving from a proposed authorized user device having said PDP a CCLR identifying said PK; and

propagating a CCL compatible with the PK toward said proposed authorized user device if said CCLR is valid.

30. A computer program product, wherein a computer is operative to process software instructions which adapt the operation of the computer such that computer performs a method for securely distributing content, comprising:

generating, at a server, a protected document package (PDP) said PDP including encrypted content, and a Publisher Key (PK) associated with said encrypted content;

said PK enabling decryption of said encrypted content for presentation via a Limited Capability Viewer (LCV) of an authorized user device,

said authorized user device comprising a user device having a Content Consumer License (CCL) compatible with the PK to enable thereby presentation via said LCV of locally stored encrypted content from said PDP,

said PDP including software instructions which, when executed by a processor at a proposed authorized user device, cause said proposed authorized user device to generate a Content Consumer License Request (CCLR) identifying said PK;

propagating the PDP toward at least one authorized or proposed authorized user device;

receiving from a proposed authorized user device having said PDP a CCLR identifying said PK; and

propagating a CCL compatible with the PK toward said proposed authorized user device if said CCLR is valid.

31. A method for securely receiving content at a user device including a tangible and non-transitory memory and a processor, said processor configured for:

receiving, at said user device, a protected document package (PDP) including encrypted content, and a Publisher Key (PK) associated with said encrypted content;

said PK enabling decryption of said encrypted content for presentation via a Limited Capability Viewer (LCV) of an authorized user device, said authorized user device comprising a user device having a Content Consumer License (CCL) compatible with the PK to enable thereby presentation via said LCV of locally stored encrypted content from said PDP,

said PDP including software instructions which, when executed by a processor at the user device, generate a Content Consumer License Request (CCLR) identifying said PK;

in the case of said user device having a CCL compatible with the PK, performing the steps of storing, in user device memory, encrypted content included within said PDP and presenting, via a user device LCV, the stored encrypted content;

in the case of said user device not having a CCL compatible with the PK, performing the steps of generating a Content Consumer License Request (CCLR) identifying said PK and transmitting said CCLR toward a source of said PDP.

32. The method of claim 31, further comprising transmitting a Content Consumer License Request (CCLR) in response to a determination that a CCL compatible with the PK included within the PDP is not available at the user device.