Method for securely distributing a conditional use private key to a trusted entity on a remote system

• US 5,991,399 A
• Filed: 12/18/1997
• Issued: 11/23/1999
• Est. Priority Date: 12/18/1997
• Status: Expired due to Term

• Current Assignee: Honeyman Cipher Solutions LLC (Bradley David Liddle)
• Original Assignee: Intel Corporation
• Inventors: Carbajal, John, Maliszewski, Richard L., Rozas, Carlos V., Graunke, Gary L.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/993,597
• Time in Patent Office: 705 Days
• Field of Search: 380/4, 380/9, 380/21, 380/23, 380/25, 380/30, 380/44, 380/45, 380/46, 380/47, 380/49, 380/50, 380/52, 380/59, 380/3, 380/5, 705/1, 369/99, 369/100, 369/110, 369/112
• US Class Current: 380/279
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier

Abstract

Secure distribution of a private key to a user'"'"'s application program (also called a "trusted player" such as a DVD player or CD-ROM player) with conditional access based on verification of the trusted player'"'"'s integrity and authenticity is provided. Once validated, the trusted player uses the private key to decrypt encrypted digital content. The private key is dynamically generated, associated with specific digital content, and communicated in real-time from a server to the trusted player in a secure manner, thereby controlling access to encrypted digital content. The key is wrapped into an executable tamper resistant key module in which the key can only be used by the right trusted player as determined by the server based on user requests and payment. The key module plugs in to the trusted player and executes to validate the player and decrypt the content. The integrity of the trusted player is correlated to its ability to perform a cryptographic operation using an asymmetric key pair in a manner that is tamper resistant, thereby preventing an unencrypted copy of digital content to be made.

Claims

1. A method of securely distributing data comprising:

generating an asymmetric key pair having a public key and a private key;

encrypting predetermined data with the generated public key; and

building an executable tamper resistant key module identified for a selected program, the executable tamper resistant key module including the generated private key and the encrypted predetermined data.

2. The method of claim 1, wherein the program is on a remote system and further comprising sending the executable tamper resistant key module to the remote system.

3. The method of claim 2, further comprising executing the executable tamper resistant key module on the remote system to check the integrity and authenticity of the process and the integrity of the tamper resistant key module.

4. The method of claim 3, further comprising decrypting the encrypted predetermined data with the generated private key for the tamper resistant key module when the program is authentic and the program'"'"'s integrity is validated and the tamper resistant key module'"'"'s integrity is validated.

5. The method of claim 4, further comprising decrypting encrypted digital content resident on the remote system using the decrypted predetermined data.

6. The method of claim 5, wherein the program comprises a trusted player and the trusted player plays the decrypted digital content for a user of the remote system.

7. The method of claim 2, wherein the predetermined data comprises at least one key used to decrypt selected encrypted digital content on the remote system.

8. The method of claim 7, wherein the at least one key is specifically associated with the selected encrypted digital content but not other encrypted digital content.

9. The method of claim 1, wherein building the executable tamper resistant code module comprises generating an integrity verification kernel.

10. The method of claim 9, wherein generating an integrity verification kernel comprises accessing an asymmetric public key of a predetermined asymmetric key pair associated with a manifest of the program signed by an asymmetric private key of the predetermined asymmetric key pair, producing integrity verification kernel code with the asymmetric public key for verifying the signed manifest of the program and combining manifest parser generator code and the integrity verification kernel code to produce the integrity verification kernel.

11. The method of claim 10, wherein the program comprises a trusted player and the method further comprises building a manifest for the trusted player, signing the manifest with the asymmetric private key of the predetermined asymmetric key pair, and storing the asymmetric public key of the predetermined asymmetric key pair.

12. The method of claim 10, wherein building the executable tamper resistant key module further comprises building a decrypt engine with the generated private key for decrypting the encrypted predetermined data.

13. The method of claim 12, wherein building the executable tamper resistant key module further comprises combining the integrity verification kernel and the decrypt engine to produce a key module.

14. The method of claim 13, wherein building the executable tamper resistant key module further comprises compiling the key module with a tamper resistant compiler to generate the tamper resistant key module.

15. The method of claim 1, wherein the predetermined data comprises a plurality of symmetric keys used to decrypt selected encrypted digital content.

16. The method of claim 15, further comprising creating digital content, encrypting the digital content with the plurality of symmetric keys, and storing the plurality of symmetric keys for subsequent access during the decrypting step.

17. The method of claim 16, further comprising obtaining the encrypted digital content and requesting, by the remote system, the plurality of symmetric keys from a server performing the generating, encrypting, building and sending steps.

18. The method of claim 17, wherein the requesting step comprises providing an identifier of the selected encrypted digital content, an identifier of the remote system, and payment information for usage of the selected encrypted digital content.

19. A method of distributing a conditional use private key to a program on a remote system comprising:

generating an asymmetric key pair having a public key and a private key;

encrypting predetermined data with the generated public key;

building an executable tamper resistant key module identified for the program, the executable tamper resistant key module including the generated private key and the encrypted predetermined data;

sending the executable tamper resistant key module to the remote system;

executing the executable tamper resistant key module on the remote system to check the integrity and authenticity of the program, and the integrity of the tamper resistant key module; and

decrypting the encrypted predetermined data with the generated private key when the program is authentic and the program'"'"'s integrity is validated and the tamper resistant key module'"'"'s integrity is validated.

20. A method of distributing a conditional use private key from a server system to a trusted player on a client system for providing authorized access to selected encrypted digital content comprising:

receiving a request from the trusted player for access to selected encrypted digital content on the client system;

generating an asymmetric key pair having a public key and a private key;

encrypting predetermined data with the generated public key;

building an executable tamper resistant key module identified for the trusted player, the executable tamper resistant key module including the generated private key and the encrypted predetermined data;

sending the executable tamper resistant key module to the client system;

executing the executable tamper resistant key module on the client system as part of the trusted player to check the integrity and authenticity of the trusted player, and the integrity of the tamper resistant key module; and

decrypting the encrypted predetermined data with the generated private key when the trusted player is authentic and the trusted player'"'"'s integrity is validated and the tamper resistant key module'"'"'s integrity is validated.

21. The method of claim 20, wherein the predetermined data comprises at least one key used to decrypt the selected encrypted digital content on the client system.

22. The method of claim 21, wherein the at least one key is specifically associated with the selected encrypted digital content but not other encrypted digital content.

23. The method of claim 20, wherein the predetermined data comprises a plurality of symmetric keys used to decrypt the selected encrypted digital content.

24. The method of claim 23, further comprising creating digital content, encrypting the digital content with the plurality of symmetric keys, and storing the plurality of symmetric keys for subsequent access during the decrypting step.

25. The method of claim 20, further comprising decrypting encrypted digital content resident on the client system using the decrypted predetermined data.

26. The method of claim 25, wherein the trusted player plays the decrypted digital content for a user of the client system.

27. A machine readable medium having stored therein a plurality of machine readable instructions for execution by a processing unit, the machine readable instructions for generating an asymmetric key pair having a public key and a private key;

for encrypting predetermined data with the generated public key;

for building an executable tamper resistant key module identified for a selected program on a remote system, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; and

for sending the executable tamper resistant key module to the remote system to verify the authenticity and integrity of the program operating on the remote system and decrypt the encrypted predetermined data when the program is validated.

28. A machine readable medium having stored therein a plurality of machine readable instructions for execution by a plurality of processing units, the machine readable instructions for generating an asymmetric key pair having a public key and a private key;

for encrypting predetermined data with the generated public key;

for building an executable tamper resistant key module identified for a program on a remote system, the executable tamper resistant key module including the generated private key and the encrypted predetermined data;

for sending the executable tamper resistant key module to a remote system, for executing the executable tamper resistant key module by a processing unit on the remote system to check the integrity and authenticity of the program, and the integrity of the tamper resistant key module; and

for decrypting the encrypted predetermined data with the generated private key when the program is authentic, the program'"'"'s integrity is validated and the tamper resistant key module is validated.

29. An apparatus for secure distribution of data comprising:

a processor for executing programming instructions; and

a storage medium having stored thereon a plurality of programming instructions for execution by the processor, the programming instructions generating an asymmetric key pair having a public key and a private key, encrypting predetermined data with the generated public key, and building an executable tamper resistant key module identified for a program, the executable tamper resistant key module including the generated private key and the encrypted predetermined data.

30. The apparatus of claim 29, wherein the storage medium comprises instructions for sending the executable tamper resistant key module to the remote system.

31. A system for secure distribution of data comprising:

a first system comprising a first processor for executing a first set of programming instructions, and a first storage medium having stored thereon the first set of programming instructions for execution by the first processor, the first set of programming instructions generating an asymmetric key pair having a public key and a private key, encrypting predetermined data with the generated public key, and building an executable tamper resistant key module, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; and

a second system comprising a second processor for executing a second set of programming instructions, and a second storage medium having stored thereon the second set of programming instructions for execution by the second processor, the second set of programming instructions for operating as a trusted player of digital content, for receiving the executable tamper resistant key module from the first system, for executing the executable tamper resistant key module to check the integrity and authenticity of the trusted player, and the integrity of the tamper resistant key module; and

for decrypting the encrypted predetermined data with the generated private key when the trusted player is authentic and the trusted player'"'"'s integrity is validated and the tamper resistant key module is validated.

32. The system of claim 31, where the second set of programming instructions further comprise instructions for decrypting encrypted digital content resident on the second storage medium using the decrypted predetermined data.

33. The system of claim 32, wherein the trusted player plays the decrypted digital content for a user of the second system.

34. A method of securely distributing data encrypted by a public key of an asymmetric key pair comprising:

building an executable tamper resistant key module identified for a selected program resident on a remote system, the executable tamper resistant key module including a private key of the asymmetric key pair and the encrypted data; and

sending the executable tamper resistant key module to the remote system.

35. A method of receiving and accessing data encrypted by a public key of an asymmetric key pair comprising:

receiving an executable tamper resistant key module identified for a selected program, the executable tamper resistant key module including a private key of the asymmetric key pair and the encrypted data;

executing the executable tamper resistant key module to check the integrity and authenticity of the selected program and the integrity of the tamper resistant key module; and

decrypting the encrypted data with the private key when the selected program is authentic, the program'"'"'s integrity is validated, and the tamper resistant key module'"'"'s integrity is validated.

36. An article comprising a machine readable medium having stored therein a plurality of machine readable instructions for execution by a processing unit, the machine readable instructions for building an executable tamper resistant key module identified for a selected program resident on a remote system, the executable tamper resistant key module including a private key of an asymmetric key pair and data encrypted by a public key of the asymmetric key pair, and for sending the executable tamper resistant key module to the remote system.

37. An article comprising a machine readable medium having stored therein a plurality of machine readable instructions for execution by a processing unit, the machine readable instructions for receiving an executable tamper resistant key module identified for a selected program, the executable tamper resistant key module including a private key of an asymmetric key pair and data encrypted by a public key of the asymmetric key pair, for initiating execution of the executable tamper resistant key module to check the integrity and authenticity of the selected program and the integrity of the tamper resistant key module, and for decrypting the encrypted data with the private key when the selected program is authentic, the program'"'"'s integrity is validated, and the tamper resistant key module'"'"'s integrity is validated.