Method and system for conducting transactions between repositories

• US 9,953,328 B2
• Filed: 04/12/2006
• Issued: 04/24/2018
• Est. Priority Date: 11/23/1994
• Status: Expired due to Fees

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Inventors: Stefik, Mark J., Pirolli, Peter L.T.
• Primary Examiner(s): KUCAB, JAMIE R
• Application Number:
  US11/401,926
• Publication Number:
  US 20060190404A1
• Time in Patent Office: 4,395 Days
• Field of Search: 705 65
• CPC Class Codes: A61B 2017/0046 with a releasable handle; with handle and operating part separable
• CPC Class Codes: A61B 2034/301 for introducing or steering flexible instruments inserted into the body, e.g. catheters or endoscopes
• CPC Class Codes: A61B 2090/031 torque limiting
• CPC Class Codes: A61B 2090/376 using X-rays, e.g. fluoroscopy
• CPC Class Codes: A61B 34/30 Surgical robots
• CPC Class Codes: A61B 34/37 Master-slave robots A61B34/35 takes precedence
• CPC Class Codes: A61M 25/0113 Mechanical advancing means, e.g. catheter dispensers
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 10/101 Collaborative creation, e.g. joint development of products or services
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 50/184 : Intellectual property management
• CPC Class Codes: H04L 12/14 : Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1403 : Architecture for metering, charging or billing
• CPC Class Codes: H04L 12/146 : using digital cash
• CPC Class Codes: H04L 12/1485 : Tariff-related aspects
• CPC Class Codes: H04L 12/1496 : involving discounts
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 : Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 61/00 : Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/45 : Network directories; Name-to-address mapping
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 : using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/0807 : using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 63/104 : Grouping of entities
• CPC Class Codes: H04L 63/105 : Multiple levels of security
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3213 : using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: H04N 21/23412 : for generating or manipulating the scene composition of objects, e.g. MPEG-4 objects
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/26613 : for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/6332 : directed to client
• CPC Class Codes: H04N 21/6377 : directed to server one-way streaming services wherein the source is controlled by the destination H04L65/613
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 7/16 : Analogue secrecy systems; Analogue subscription systems
• CPC Class Codes: Y10S 707/99939 : Privileged access
• CPC Class Codes: Y10S 707/99945 : Object-oriented database structure processing

Abstract

A method, system and software for establishing a secure communications channel between repositories using a repository transaction protocol, including generating a registration identifier and registration message including an identification certificate, and an identifier of a master repository that encrypted the identification certificate; receiving the registration message and verifying the identity by verifying the identification certificate; validating the authenticity, including, generating a message to test the authenticity, sending the generated message, and verifying if upon receiving the generated message whether the generated message is correctly processed; and exchanging messages including a session key used for communications and transactions including generating a request for a digital work, associating usage rights information with the request for digital work, and determining if the usage rights information associated with the request corresponds to usage rights associated with the digital work. The usage rights define a manner in which the digital work is used or distributed.

Claims

1. A computer system comprising computer readable media for establishing and utilizing a secure communication channel between repositories for conducting a usage transaction of a digital work, said computer readable media having encoded thereon:

an identification certificate of a repository certified by a master repository;

an external interface of said repository programmed to establish the secure communication channel using a session initiation transaction protocol, the session initiation transaction protocol including;

receiving, at another repository, a registration message, the registration message including the identification certificate of said repository and a registration identifier,

validating, at the another repository, the authenticity of said repository by verifying the identification certificate,

generating a message to test the authenticity of said repository,

sending the generated message to said repository, and

verifying if said repository correctly processed the generated message, and

exchanging messages including at least one session key between said repository and the another repository, wherein the session key is to be used in communications during a session between said repository and the another repository,

said external interface also being programmed to conduct a secure transaction with the another repository, including receiving the digital work; and

a processor programmed to conduct the usage transaction, wherein the usage transaction comprises controlling use of the digital work in accordance with usage rights associated with the digital work.

2. The system of claim 1, wherein the secure transaction further includes verifying at the another repository if said repository is allowed to receive said digital work.

3. The system of claim 2, wherein the secure transaction further includes generating at the another repository usage rights that are associated with the digital work.

4. The system of claim 1, wherein said usage transaction comprises one of play, copy and move transactions.

5. The system of claim 1, wherein the message generated to test authenticity includes a nonce.

6. The system of claim 1 wherein the registration identifier is a random registration identifier.

7. A computer implemented method for establishing and utilizing a secure communication channel between repositories for conducting a usage transaction of a digital work, said method comprising:

establishing a secure communication channel by an external interface of a repository using a session initiation transaction protocol, the session initiation transaction protocol including;

receiving, by another repository, a registration message, the registration message including an identification certificate of said repository and a registration identifier, said identification certificate being certified by a master repository,

validating, by the another repository, the authenticity of said repository by;

verifying the identification certificate,

generating a message to test the authenticity of said repository,

sending the generated message to said repository, and

verifying if said repository correctly processed the generated message, and

exchanging messages including at least one session key between said repository and the another repository, wherein the session key is to be used in communications during a session between said repository and the another repository, conducting a secure transaction with the another repository by said external interface of said repository, including receiving the digital work; and

conducting the usage transaction by a processor, wherein the usage transaction comprises controlling use of the digital work in accordance with usage rights associated with the digital work.

8. The method of claim 7, wherein said step of conducting a secure transaction further includes verifying at the another repository if said repository is allowed to receive said digital work.

9. The method of claim 8, wherein said step of conducting a secure transaction further includes generating at the another repository usage rights that are associated with the digital work.

10. The method of claim 7, wherein said step of conducting a usage transaction comprises conducting one of play, copy and move transactions.

11. The system of claim 7, wherein the message generated to test authenticity includes a nonce.

12. The system of claim 7 wherein the registration identifier is a random registration identifier.

13. A computer implemented method for establishing and utilizing a secure communication channel between a first repository and a second repository for conducting a usage transaction of a digital work, the method comprising:

establishing a secure communication channel with an external interface of the second repository using a session initiation transaction protocol, the session initiation transaction protocol including;

receiving, by the first repository, a registration message, the registration message including an identification certificate of the second repository and a registration identifier, the identification certificate being certified by a master repository,

validating, by the first repository, the authenticity of the second repository by;

verifying the identification certificate,

generating a message to test the authenticity of the second repository,

sending the generated message to the second repository, and

verifying whether the second repository correctly processed the generated message, and

sending, to the second repository, and receiving, from the second repository, messages including at least one session key, wherein the session key is to be used in communications during a session between the second repository and the first repository,

conducting, by the first repository, a secure transaction with the external interface of the second repository, including transmitting the digital work to the second repository; and

conducting, by a processor of the first repository, the usage transaction, wherein the usage transaction comprises controlling use of the digital work in accordance with usage rights associated with the digital work.

14. The method of claim 13, wherein the step of conducting a secure transaction further includes verifying at the first repository whether the second repository is allowed to receive the digital work.

15. The method of claim 14, wherein the step of conducting a secure transaction further includes generating at the first repository usage rights that are associated with the digital work.

16. The method of claim 13, wherein the step of conducting a usage transaction comprises conducting one of play, copy and move transactions.

17. The method of claim 13, wherein the message generated to test authenticity includes a nonce.

18. The method of claim 13, wherein the registration identifier is a random registration identifier.

19. The method of claim 13, wherein the first repository is a source repository and the second repository is a sink repository.

20. The method of claim 13, wherein the step of establishing a secure communication channel with an external interface of the second repository using a session initiation transaction protocol occurs before a request for digital content is received.

21. A computer implemented method for establishing and utilizing a secure communication channel between a first repository and a second repository for conducting a usage transaction of a digital work, the method comprising:

establishing, by an external interface of a second repository using a session initiation transaction protocol, a secure communication channel, the session initiation transaction protocol including;

sending a registration message to the first repository, the registration message including an identification certificate of the second repository and a registration identifier, the identification certificate being certified by a master repository,

proving the authenticity of the second repository to the first repository by;

receiving a message generated by the first repository to test the authenticity of the second repository when the first repository verifies the identification certificate,

processing the generated message, and

sending the result to the first repository, and

sending, to the first repository, and receiving, from the first repository, messages including at least one session key, wherein the session key is to be used in communications during a session between the second repository and the first repository,

conducting, by the external interface of the second repository, a secure transaction with the first repository, including receiving the digital work by the second repository; and

participating, by the second repository, in the usage transaction conducted by a processor of the first repository by rendering the digital work and neither retaining it nor transmitting it to another system, wherein the usage transaction comprises controlling use of the digital work in accordance with usage rights associated with the digital work.

22. The method of claim 21, wherein the first repository verifies whether the second repository is allowed to receive the digital work during the secure transaction.

23. The method of claim 22, wherein usage rights that are associated with the digital work are generated by the first repository during the secure transaction.

24. The method of claim 21, wherein the step of conducting a usage transaction comprises conducting one of play, copy and move transactions.

25. The method of claim 21, wherein the message generated to test authenticity includes a nonce.

26. The method of claim 21, wherein the registration identifier is a random registration identifier.

27. The method of claim 21, wherein the first repository is a source repository and the second repository is a sink repository.

28. The method of claim 21, wherein the step of establishing, by an external interface of a second repository using a session initiation transaction protocol, a secure communication channel occurs before a request for the digital work is sent.