SECURE ELECTRONIC CONTENT DISTRIBUTION ON CDS AND DVDS

• US 20030105718A1
• Filed: 08/17/1999
• Published: 06/05/2003
• Est. Priority Date: 08/13/1998
• Status: Active Grant

• Current Assignee: Wistron Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: HURTADO, MARCO M., LOTSPIECH, JEFFREY B., MILSTED, KENNETH L., SPAGNA, RICHARD L., LEHMAN, CHRISTOPHER T., GRUSE, GEORGE G., DOWNS, EDGAR
• Granted Patent: US 6,611,812 B2
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 69/04 Protocols for data compression, e.g. ROHC
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04W 4/02 Services making use of location information

Abstract

A method to delivery encrypted digital content to a end user system for playing the content comprising the steps of: reading from a computer readable medium metadata which has previously associated with the content. A user selects from the metadata associated content to decrypt and the end user system establishes a secure connection with an authorization authority for decrypting the content. The end user system receives a secure container containing the decrypting key for decrypting at least part of the previously encrypted content as permitted. The system creates a secure container using the encrypting key from a clearing house, wherein the secure container has an encrypting key therein from the end user system; transferring the secure container to the clearing house for authentication of permission to decrypt the content. The system receives from the clearing house, a secure container encrypted using the encrypting key of the end user system containing the decrypting key for decrypting at least part of the previously encrypted content stored on the computer readable medium as permitted; and playing at least part of the previously encrypted content by decrypting the secure container using the encrypting key of the end user system to access the decrypting key for decrypting at least part of the encrypted content.

Claims

1. A method to delivery encrypted digital content to a system for playing the content comprising the steps of:

reading from a computer readable medium metadata which has previously associated with the content;

selecting from the metadata associated content to decrypt;

establishing a secure transmission with an authorization authority for decrypting the content;

receiving a decrypting key for decrypting at least part of the previously encrypted content stored on the computer readable medium as permitted.

2. The method according to claim 1, further comprising the steps of:

playing at least part of the previously encrypted content by decrypting the encrypted content with the decrypting key.

3. The method according to claim 2, wherein the step of decrypting is performed in a tamper-resistant environment for deterring unauthorized access to the decrypting key.

4. The method according to claim 1, wherein the step of decrypting further comprises:

decrypting at least part of the previously encrypted content as permitted;

reencrypting the decrypted content utilizes a unique local decrypting key;

storing the content in a library; and

decrypting at least part of the content from the library using the unique local decrypting key.

5. The method according to claim 4, wherein the steps of decrypting and reencrypting is performed in a tamper-resistance environment for deterring unauthorized access to the decrypting key.

6. A method to delivery encrypted digital content to a end user system for playing the content comprising the steps of:

reading from a computer readable medium metadata which has previously associated with the content;

selecting from the metadata associated content to decrypt;

establishing a secure connection with an authorization authority for decrypting the content;

receiving a secure container containing the decrypting key for decrypting at least part of the previously encrypted content as permitted;

creating an secure container using the encrypting key from a clearing house, wherein the secure container has an encrypting key therein from the end user system;

transferring the secure container to the clearing house for authentication of permission to decrypt the content;

receiving from the clearing house, a secure container encrypted using the encrypting key of the end user system containing the decrypting key for decrypting at least part of the previously encrypted content stored on the computer readable medium as permitted; and

playing at least part of the previously encrypted content by decrypting the secure container using the encrypting key of the end user system to access the decrypting key for decrypting at least part of the encrypted content.

7. The method according to claim 6, wherein the step of playing further comprises playing at least part of the previously encrypted content comprising a plurality of distinct titles whereby each distinct title is decrypted with a unique decrypting key.

8. The method according to claim 6, wherein the step of establishing a secure connecting further comprises the step of transmitting a credit information to the authorization authority.

9. The method according to claim 6, wherein the instructions are stored as part of a promotional package on a CD or DVD containing non-encrypted content.

10. A computer readable medium for delivering encrypted digital content to a system comprising the instructions for:

reading from a computer readable medium metadata which has previously associated with the content;

selecting from the metadata associated content to decrypt;

establishing a secure connection with an authorization authority for decrypting the content;

receiving a decrypting key for decrypting at least part of the previously encrypted content stored on the computer readable medium as permitted.

11. The computer readable medium according to claim 10, further comprising the instructions for:

playing at least part of the previously encrypted content by decrypting the encrypted content with the decrypting key.

12. The computer readable medium according to claim 10, wherein the instruction of decrypting is performed in a tamper-resistant environment for deterring unauthorized access to the decrypting key.

13. The computer readable medium according to claim 10, wherein the instruction of decrypting further comprises:

decrypting at least part of the previously encrypted content as permitted;

reencrypting the decrypted content utilizes a unique local decrypting key;

storing the content in a library; and

decrypting at least part of the content from the library using the unique local decrypting key.

14. The computer readable medium according to claim 13, wherein the instructions of decrypting and reencrypting is performed in a tamper-resistance environment for deterring unauthorized access to the decrypting key.

15. A computer readable medium for delivering encrypted digital content to a end user system comprising the instructions steps of:

reading from a computer readable medium metadata which has previously associated with the content;

selecting from the metadata associated content to decrypt;

establishing a secure connection with an authorization authority for decrypting the content;

receiving a secure container containing the decrypting key for decrypting at least part of the previously encrypted content as permitted;

creating an secure container using the encrypting key from a clearing house, wherein the secure container has an encrypting key therein from the end user system;

transferring the secure container to the clearing house for authentication of permission to decrypt the content;

receiving from the clearing house, a secure container encrypted using the encrypting key of the end user system containing the decrypting key for decrypting at least part of the previously encrypted content stored on the computer readable medium as permitted; and

playing at least part of the previously encrypted content by decrypting the secure container using the encrypting key of the end user system to access the decrypting key for decrypting at least part of the encrypted content.

16. The computer readable medium according to claim 15, The method according to claim 5, wherein the instruction of playing further comprises playing at least part of the previously encrypted content comprising a plurality of distinct titles whereby each distinct title is decrypted with a unique decrypting key.

17. The computer readable medium according to claim 15, wherein the instruction of establishing a secure connecting further comprises the step of transmitting a credit information to the authorization authority.

18. The computer readable medium according to claim 15, wherein the instructions are stored as part of a promotional package on a CD or DVD containing non-encrypted content.