SECURE CONTENT DISTRIBUTION SYSTEM

• US 20140324704A1
• Filed: 05/03/2014
• Published: 10/30/2014
• Est. Priority Date: 10/11/2008
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Divan Industries, LLC (Innovation Management Sciences, LLC)
• Inventors: BLANKENBECKLER, David L., ALMON, William Jr.
• Granted Patent: US 9,384,484 B2
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 2220/16 Copy protection or prevention
• CPC Class Codes: G06Q 50/184 Intellectual property management
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00224 wherein the key is obtained from a remote server
• CPC Class Codes: G11B 20/00253 wherein the key is stored on the record carrier
• CPC Class Codes: G11B 20/00449 content scrambling system [CSS]
• CPC Class Codes: G11B 20/00862 wherein the remote server can grant the permission to use a content
• CPC Class Codes: G11B 20/00869 wherein the remote server can deliver the content to a receiving device
• CPC Class Codes: G11B 20/10 Digital recording or reproducing
• CPC Class Codes: G11B 2220/2541 Blu-ray discs; Blue laser DVR discs
• CPC Class Codes: G11B 2220/2562 DVDs [digital versatile discs]; Digital video discs; MMCDs; HDCDs
• CPC Class Codes: G11B 2220/2579 HD-DVDs [high definition DVDs]; AODs [advanced optical discs]
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 9/06 the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
• CPC Class Codes: H04L 9/0625 with splitting of the data block into left and right halves, e.g. Feistel based algorithms, DES, FEAL, IDEA or KASUMI
• CPC Class Codes: H04L 9/0631 : Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms
• CPC Class Codes: H04L 9/0822 : using key encryption key
• CPC Class Codes: H04L 9/083 : involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/32 : including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

A user selection of one or more of a plurality of content is received. The selected content is encrypted by a first encryption key that is remote and unknown to the distribution server. Payment information associated with the user selection is also received and verified. The selected content from is retrieved from a remote database. The first encryption key corresponding to the selected content to decrypt the encrypted content corresponding to the user selection is obtained. Decryption is performed by a hardware-based engine of the distribution server that is isolated from a host processor of the distribution server. The content corresponding to the user selection is encrypted according to a second encryption key that is known to the distribution server.

Claims

1. A computer-implemented method for distributing content of a content provider by a distribution server, comprising:

receiving a user selection of one or more of a plurality of content, wherein the selected content is encrypted by a first encryption key that is unknown to the distribution server;

receiving and verifying payment information associated with the user selection;

retrieving the selected content from a remote database;

obtaining the first encryption key corresponding to the selected content to decrypt the encrypted content corresponding to the user selection; and

encrypting the content corresponding to the user selection according to a second encryption key that is known to the distribution server;

wherein the first encryption key is configured in accordance with a first protocol and the second encryption key is configured in accordance with a second protocol that is distinct from the first protocol.

2. The method of claim 1, wherein the first encryption key comprises a DES (Data Encryption Standard) key.

3. The method of claim 1, wherein the second encryption key comprises an AES (Advanced Encryption Standard) key.

4. The method of claim 1, further comprising obtaining the second encryption key based on authenticating information.

5. The method of claim 1, further comprising decrypting the content with the second encryption key.

6. The method of claim 1, further comprising writing the decrypted content to a storage medium.

7. The method of claim 6, wherein the step of writing the content to a storage medium occurs on demand in response to the user selection.

8. The method of claim 1, wherein obtaining the first decryption key comprises obtaining the content decryption key from an entity controlled by the content provider.

9. The method of claim 8, wherein obtaining the first decryption key comprises obtaining the first decryption key from an entity controlled by the content provider in order to provide to the content provider a number of times each content of the plurality of content was downloaded.

10. The method of claim 1, wherein decryption is performed by a hardware-based engine of the distribution server that is isolated from a host processor of the distribution server.

11. A distribution server to distribute content of a content provider, the distribution server comprising:

a first component to receive a user selection of one or more of a plurality of content, wherein the selected content is encrypted by a first encryption key that is unknown to the distribution server;

a second component to receive and verify payment information associated with the user selection;

a third component to retrieve the selected content from a remote database;

a fourth component to obtain the first encryption key corresponding to the selected content to decrypt the encrypted content corresponding to the user selection; and

a fifth component to encrypt the content corresponding to the user selection according to a second encryption key that is known to the distribution server;

wherein the first encryption key is configured in accordance with a first protocol and the second encryption key is configured in accordance with a second protocol that is distinct from the first protocol.

12. The server of claim 11, wherein the first encryption key comprises a DES (Data Encryption Standard) key.

13. The server of claim 11, wherein the second encryption key comprises an AES (Advanced Encryption Standard) key.

14. The server of claim 11, wherein the hardware-based engine obtains the second encryption key based on authenticating information.

15. The server of claim 11, wherein the hardware-based engine decrypts the content with the second encryption key.

16. The server of claim 11, further comprising a storage medium for storing the decrypted content.

17. The server of claim 16, wherein the storage medium stores the decrypted content on demand in response to the user selection.

18. The server of claim 11, wherein the hardware-based engine obtains the content decryption key from an entity controlled by the content provider.

19. The server of claim 18, wherein the hardware-based engine obtains the first decryption key from an entity controlled by the content provider in order to provide to the content provider a number of times each content of the plurality of content was downloaded.

20. A non-transitory computer readable medium storing instructions that, when executed by a processor, perform a computer-implemented method for distributing content of a content provider by a distribution server, the method comprising:

receiving a user selection of one or more of a plurality of content, wherein the selected content is encrypted by a first encryption key that is unknown to the distribution server;

receiving and verifying payment information associated with the user selection;

retrieving the selected content from a remote database;

obtaining the first encryption key corresponding to the selected content to decrypt the encrypted content corresponding to the user selection; and

encrypting the content corresponding to the user selection according to a second encryption key that is known to the distribution server;

wherein the first encryption key is configured in accordance with a first protocol and the second encryption key is configured in accordance with a second protocol that is distinct from the first protocol.