Systems and methods for the secure transaction management and electronic rights protection

• US 6,253,193 B1
• Filed: 12/09/1998
• Issued: 06/26/2001
• Est. Priority Date: 02/13/1995
• Status: Expired due to Term

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Ginter, Karl L., Spahn, Francis J., Shear, Victor H., Van Wie, David M.
• Primary Examiner(s): BARRON JR, GILBERTO
• Application Number:
  US09/208,017
• Time in Patent Office: 930 Days
• Field of Search: 705/51, 705/52, 705/56, 705/57, 380/201-203, 386/94, 386/124
• US Class Current: 705/57
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 : Shopping for digital content
• CPC Class Codes: G06Q 20/1235 : with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/14 : specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 : Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/306 : using TV related infrastructures external card used for payment with client device H04N21/4185
• CPC Class Codes: G06Q 20/308 : using the Internet of Things
• CPC Class Codes: G06Q 2220/16 : Copy protection or prevention
• CPC Class Codes: G06Q 30/0273 : Determination of fees for advertising
• CPC Class Codes: G06Q 30/0283 : Price estimation or determination
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0609 : Buyer or seller confidence or verification
• CPC Class Codes: G06Q 40/02 : Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/04 : Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06Q 40/12 : Accounting
• CPC Class Codes: G06Q 50/184 : Intellectual property management
• CPC Class Codes: G06Q 50/188 : Electronic negotiation
• CPC Class Codes: G06T 1/0021 : Image watermarking
• CPC Class Codes: G07F 9/026 : for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 : Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copy right protecting software against unauthorised usage in a vending or licensing environment, e.g. protection the software providers copyright G06F21/10; data processing systems or methods, specially adapted for payment schemes, architectures or protocols G06Q20/00; secrecy systems or subscription systems H04N7/16
• CPC Class Codes: H04L 63/02 : for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 : wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/16 : Implementing security features at a particular protocol layer
• CPC Class Codes: H04L 63/168 : above the transport layer
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/006 : involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0819 : Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0838 : Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3218 : using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 2005/91364 : the video signal being scrambled
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/23476 : by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/42646 : for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4325 : by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/163 : by receiver means only
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node. These techniques may be used to support an all-electronic information distribution, for example, utilizing the “electronic highway.”

Claims

1. A method comprising:

receiving a digital file including music;

storing said digital file in a first secure memory of a first device;

storing information associated with said digital file in a secure database stored on said first device, said information including at least one budget control and at least one copy control, said at least one budget control including a budget specifying the number of copies which can be made of said digital file; and

said at least one copy control controlling the copies made of said digital file;

determining whether said digital file may be copied and stored on a second device based on at least said copy control;

if said copy control allows at least a portion of said digital file to be copied and stored on a second device,

copying at least a portion of said digital file;

transferring at least a portion of said digital file to a second device including a memory and an audio and/or video output;

storing said digital file in said memory of said second device; and

including playing said music through said audio output.

2. A method as in claim 1, further comprising:

at a time substantially contemporaneous with said transferring step, recording in said first device information indicating that said transfer has occurred.

3. A method as in claim 2, in which:

said information indicating that said transfer has occurred includes an encumbrance on said budget.

4. A method as in claim 3, in which:

said encumbrance operates to reduce the number of copies of said digital file authorized by said budget.

5. A method as in claim 4, further comprising:

at some point after said transferring step, taking at least one action to render said copy of said digital file unuseable at said second device; and

at said first digital device, removing said encumbrance on said budget,

said removal including increasing the number of copies of said digital file authorized by said budget.

6. A method as in claim 5, in which:

said budget authorizes one copy prior to said encumbrance;

said budget authorizes zero copies during said encumbrance; and

said budget authorizes one copy following removal of said encumbrance.

7. A method comprising:

receiving a digital file stored on a video disk;

storing said digital file in a first secure memory of a first device;

storing budget information associated with said digital file in a secure database stored on said first device, said budget information relating to permitted uses of said digital file and including at least one control, said budget information having been received on a video disk;

determining whether said digital file may be copied and stored on a second device based on said at least one control;

if said at least one control allows at least a portion of said digital file to be copied and stored on a second device,

copying at least a portion of said digital file;

transferring at least a portion of said digital file to a second device, after checking said budget to determine if said transferring step is authorized;

including a memory and an audio and/or video output;

storing said digital file in said memory of said second device; and

rendering said digital file through said output.

8. A method as in claim 7, in which:

said video disk includes identification information identifying said video disk;

said first device includes identification information identifying said first device; and

said second device includes identification information identifying said second device.

9. A method as in claim 8, in which:

said digital file is stored in an encrypted form on said video disk.

10. A method as in claim 9, in which:

said digital file is transferred to said second device in an encrypted form;

and further comprising;

prior to said rendering step, decrypting said digital file at said second device;

said decryption based, at least in part, on use of said second device identification information as a key.

11. A method comprising:

receiving a digital file;

storing said digital file in a first secure memory of a first device;

storing information associated with said digital file in a secure database stored on said first device, said information including a first control;

determining whether said digital file may be copied and stored on a second device based on said first control, said determining step including identifying said second device and determining whether said first control allows transfer of said copied file to said second device, said determination based at least in part on the features present at the device to which said copied file is to be transferred;

if said first control allows at least a portion of said digital file to be copied and stored on a second device,

copying at least a portion of said digital file;

transferring at least a portion of said digital file to a second device including a memory and an audio and/or video output;

storing said digital file in said memory of said second device; and

rendering said digital file through said output.

12. A method comprising:

receiving a digital file;

storing said digital file in a first secure memory of a first device;

storing information associated with said digital file in a secure database stored on said first device, said information including at least one control, said step of storing information being performed during a process of registering said digital file at said first device, said registering process further comprising storing information identifying at least one authorized user of said digital file;

determining whether said digital file may be copied and stored on a second device based on said at least one control;

if said at least one control allows at least a portion of said digital file to be copied and stored on a second device,

copying at least a portion of said digital file;

transferring at least a portion of said digital file to a second device including a memory and an audio and/or video output;

storing said digital file in said memory of said second device; and

rendering said digital file through said output.

13. A method as in claim 12, in which:

said transferring step includes copying said information identifying said at least one authorized user and transferring said copied information to said second device.

14. A method as in claim 13, further comprising:

prior to said rendering step, using said transferred information identifying said at least one authorized user to determine whether the user of said second device is an authorized user.

15. A method comprising:

receiving a digital file;

an authentication step comprising;

accessing at least one identifier associated with a first device or with a user of said first device; and

determining whether said identifier is associated with a device and/or user authorized to store said digital file;

storing said digital file in a first secure memory of said first device, but only if said device and/or user is so authorized, but not proceeding with said storing if said device and/or user is not authorized;

storing information associated with said digital file in a secure database stored on said first device, said information including at least one control;

determining whether said digital file may be copied and stored on a second device based on said at least one control;

if said at least one control allows at least a portion of said digital file to be copied and stored on a second device,

copying at least a portion of said digital file;

transferring at least a portion of said digital file to a second device including a memory and an audio and/or video output;

storing said digital file in said memory of said second device; and

rendering said digital file through said output.

16. A method as in claim 15, in which:

said digital file is received in an encrypted form;

and further comprising;

decrypting said digital file after said authentication step and before said step of storing said digital file in said memory of said first device.

17. A method as in claim 16, in which:

said identifier is used as a key in said decrypting step.

18. A method comprising:

receiving a digital file;

storing said digital file in a first secure memory of a first device;

storing information associated with said digital file in a secure database stored on said first device, said information including at least one control;

determining whether said digital file may be copied and stored on a second device based on said at least one control;

if said at least one control allows at least a portion of said digital file to be copied and stored on a second device,

copying at least a portion of said digital file;

transferring at least a portion of said digital file to a second device including a memory and an audio and/or video output, the portion of said digital file transferred to said second device representing a version of said digital file which, when rendered at said second device, provides a level of quality lower than the level of quality provided when said digital file is rendered at said first device;

storing said digital file in said memory of said second device; and

rendering said digital file through said output.

19. A method comprising:

receiving a digital file at a first device;

establishing communication between said first device and a clearinghouse located at a location remote from said first device;

said first device obtaining authorization information including a key from said clearinghouse;

said first device using said authorization information to gain access to or make at least one use of said first digital file, including using said key to decrypt at least a portion of said first digital file; and

receiving a first control from said clearinghouse at said first device;

storing said first digital file in a memory of said first device;

using said first control to determine whether said first digital file may be copied and stored on a second device;

if said first control allows at least a portion of said first digital file to be copied and stored on a second device,

copying at least a portion of said first digital file;

transferring at least a portion of said first digital file to a second device including a memory and an audio and/or video output;

storing said first digital file portion in said memory of said second device; and

rendering said first digital file portion through said output.

20. A method as in claim 19, further comprising:

prior to said step of receiving said first digital file at said first device, storing said first digital file on a portable memory,

said step of storing said first digital file in a memory of said first device further comprising copying said first digital file from said portable memory to said memory of said first device.

21. A method as in claim 20, in which:

said portable memory constitutes a disk.

22. A method as in claim 21, in which:

said disk constitutes an optical disk.

23. A method as in claim 22, in which:

said step of storing said first digital file on a portable memory further comprises storing at least one identifier on said portable memory.

24. A method as in claim 23, in which:

said identifier constitutes an identification of a user authorized to use said first digital file.

25. A method as in claim 23, in which:

said identifier constitutes an identification of said first device.

26. A method as in claim 23, in which:

said identifier is used as a key in said decryption step.

27. A method as in claim 22, in which,

said first digital file includes music;

and

said rendering step includes playing said music through said audio output.

28. A method as in claim 27 in which:

said transferring step includes transferring at least a second control to said memory of said second device.

29. A method as in claim 28 in which:

said second control restricts at least one use which may be made of said first digital file at said second device.

30. A method as in claim 29, in which:

said second control operates to prohibit copying of said first digital file at said second device.

31. A method as in claim 30, in which:

at least one budget is stored at said first device.

32. A method as in claim 31, in which:

said budget specifies the number of copies which may be made of said first digital file.

33. A method as in claim 32, further comprising:

at a time prior to said transferring step, checking said budget to determine whether said budget is sufficient for said transfer; and

proceeding with said transfer if said budget is sufficient for said transfer.

34. A method as in claim 33, further comprising:

at a time substantially contemporaneous with said transferring step, recording in said first device information indicating that said transfer has occurred.

35. A method as in claim 34, in which:

said information indicating that said transfer has occurred includes an encumbrance on said budget.

36. A method as in claim 35, in which:

said encumbrance operates to reduce the number of copies of said first digital file authorized by said budget.

37. A method as in claim 36, further comprising:

at some point after said transferring step, taking at least one action to render said copy of said first digital file unuseable at said second device; and

at said first digital device, removing said encumbrance on said budget,

said removal including increasing the number of copies of said first digital file authorized by said budget.

38. A method as in claim 37, in which:

said budget authorizes one copy prior to said encumbrance;

said budget authorizes zero copies during said encumbrance; and

said budget authorizes one copy following removal of said encumbrance.

39. A method as in claim 33, in which:

said step of establishing communication further comprises said first device receiving said budget from said clearinghouse.

40. A method as in claim 33, further comprising:

prior to said step of receiving said first digital file at said first device, storing said budget on said portable memory, and

copying said budget from said portable memory to a memory of said first device.

41. A method as in claim 37, in which:

said second device is a portable device.

42. A method as in claim 40, in which,

said second device includes identification information identifying said second device;

and

at least one of said controls transferred to said second device operates to restrict use of said transferred first digital file so that it can only be used on said second device.

43. A method as in claim 42, in which:

said first digital file is transferred to said second device in an encrypted form;

and further comprising;

prior to said rendering step, decrypting said first digital file at said second device;

said decryption based, at least in part, on use of said second device identification information as a key.

44. A method as in claim 37, in which:

said at least one action comprises deleting said first digital file from said memory of said second device.

45. A method as in claim 37, in which:

said at least one action comprises setting an indication, following which said second device will not render said first digital file until said indication is reset.

46. A method as in claim 42, further comprising:

prior to said step of receiving said first digital file at said first device,

placing said first digital file into a first secure container; and

sending said first secure container to said first device.

47. A method as in claim 46, in which:

said step of storing said first digital file in a memory of said first device further comprises removing said first digital file from said first secure container.

48. A method as in claim 46, in which:

said step of storing said first digital file in a memory of said first device further comprises storing said first secure container in said memory of said first device.

49. A method as in claim 48, in which:

said step of transferring at least a portion of said first digital file to a second device further comprises;

removing said portion of said first digital file from said first secure container;

inserting said portion of said first digital file into a second secure container; and

transferring said second secure container to said second device.

50. A method as in claim 49, in which:

said first secure container further comprises at least one control used for governing access to or use of said first digital file while said first digital file is contained in said first secure container; and

said second secure container further comprises at least one control used for governing access to or use of said first digital file portion while said first digital file portion is contained in said second secure container.

51. A method comprising:

receiving a digital file at a first device;

establishing communication between said first device and a clearinghouse located at a location remote from said first device;

said first device obtaining authorization information from said clearinghouse; and

said first device using said authorization information to gain access to or make at least one use of said first digital file;

storing said first digital file in a memory of said first device;

using at least a first control to determine whether said first digital file may be copied and stored on a second device, said determination based at least in part on (1) identification information regarding said second device, and (2) the functional attributes of said second device;

if, based at least in part on said identification information, said first control allows at least a portion of said first digital file to be copied and stored on a second device,

copying at least a portion of said first digital file;

transferring at least a portion of said first digital file to a second device including a memory and an audio and/or video output;

storing said first digital file portion in said memory of said second device; and

rendering said first digital file portion through said output.

52. A method comprising:

receiving a first digital file at a first device;

registering said first digital file at said first device;

said registering process further comprising storing information identifying. at least one authorized user of said first digital file;

establishing communication between said first device and a clearinghouse located at a location remote from said first device;

said first device obtaining authorization information from said clearinghouse; and

said first device using said authorization information to gain access to or make at least one use of said first digital file;

storing said first digital file in a memory of said first device;

using at least a first control to determine whether said first digital file may be copied and stored on a second device;

if said first control allows at least a portion of said first digital file to be copied and stored on a second device,

copying at least a portion of said first digital file;

transferring at least a portion of said first digital file to a second device including a memory and an audio and/or video output;

storing said first digital file portion in said memory of said second device; and

rendering said first digital file portion through said output.

53. A method as in claim 52, in which:

said step of transferring said first digital file portion to said second device further comprises storing information identifying at least one authorized user of said first digital file portion at said second device.

54. A method as in claim 53, further comprising:

prior to said rendering step, using said information identifying said at least one authorized user to determine whether the user of said second device is an authorized user.

55. A method comprising:

receiving a digital file at a first device;

establishing communication between said first device and a clearinghouse located at a location remote from said first device;

said first device obtaining authorization information from said clearinghouse; and

said first device using said authorization information to gain access to or make at least one use of said first digital file;

an authentication step comprising;

accessing at least one identifier associated with said first device or with a user of said first device;

determining whether said identifier is associated with a device and/or user authorized to store said first digital file;

storing said first digital file in a memory of said first device if said device and/or user is so authorized, but not proceeding with said storing if said device and/or user is not authorized;

using at least a first control to determine whether said first digital file may be copied and stored on a second device;

if said first control allows at least a portion of said first digital file to be copied and stored on a second device,

copying at least a portion of said first digital file;

transferring at least a portion of said first digital file to a second device including a nonvolatile random access memory, a tamper-resistant housing, a battery and an audio and/or video output;

storing said first digital file portion in said nonvolatile random access memory of said second device; and

rendering said first digital file portion through said output.

56. A method as in claim 55, in which:

said authentication step occurs at least in part under the control of at least one control received from said clearinghouse.

57. A method as in claim 56, in which:

said identifier is used as a key in said decrypting step.

58. A method comprising:

receiving a digital file at a first device;

establishing communication between said first device and a clearinghouse located at a location remote from said first device;

said first device obtaining authorization information from said clearinghouse; and

said first device using said authorization information to gain access to or make at least one use of said first digital file;

storing said first digital file in a memory of said first device;

using at least a first control to determine whether said first digital file may be copied and stored on a second device;

if said first control allows at least a portion of said first digital file to be copied and stored on a second device,

copying at least a portion of said first dig file;

transferring at least a portion of said first digital file to a second device including a memory and an audio and/or video output, said transferred portion representing a version of said first digital file which, when rendered at said second device, provides a level of quality lower than the level of quality provided when said first digital file is rendered at said first device;

storing said first digital file portion in said memory of said second device; and

rendering said first digital file portion through said output.

59. A method comprising:

storing a first digital file and a first control in a first secure container, said first secure container being stored on a first portable memory disk, said first control constituting a first budget which allows a single copy to be made of said first digital file or a portion thereof;

receiving said first portable memory disk including said first secure container at a first device;

establishing communication between said first device and a first clearinghouse located at a location remote from said first device;

obtaining information from said first clearinghouse;

said first device using said information to gain access to or make at least one use of said first digital file;

removing said first digital file from said first secure container;

storing said first digital file in a memory of said first device;

storing a second digital file and a second control in a second secure container,

said second secure container being stored on a second portable memory disk different from said first portable memory disk, said second control constituting a second budget which allows a single copy to be made of said second digital file or a portion thereof;

receiving said second portable memory disk including said second secure container at said first device;

establishing communication between said first device and a second clearinghouse located at a location remote from said first device, said first device obtaining information from said second clearinghouse and said first device using said information to gain access to or make at least one use of said second digital file;

removing said second digital file from said second secure container;

storing said second digital file in a memory of said first device;

using at least a third control to determine whether some or all of said first digital file may be copied and stored on a second device;

if said third control allows at least a portion of said first digital file to be copied and stored on a second device,

copying at least a portion of said first digital file;

storing said first digital file portion in a third secure container, said third secure container including said first digital file portion and at least one control governing at least one aspect of use or access to any file contained within said third secure container

using at least a fourth control to determine whether some or all of said second digital file may be copied and stored on said second device;

if said fourth control allows at least a portion of said second digital file to be copied and stored on said second device,

copying at least a portion of said second digital file;

storing said second digital file portion in said third secure container;

transferring said third secure container including said first digital file portion and said second digital file portion to said second device including a memory and an audio and/or video output, at least one of said third secure container controls prohibits a user of said second device from making copies of said first digital file portion and said second digital file portion while said first digital file portion and said second digital file portion are stored in said memory of said second device;

storing said first digital file portion and said second digital file portion in said memory of said second device while said first digital file portion is also stored in said memory; and

rendering said first or said second digital file portion through said output.

60. A method comprising:

storing a first digital file and a first control in a first secure container, said first control constituting a first budget which governs the number of copies which may be made of said first digital file or a portion of said first digital file while said first digital file is contained in said first secure container, said first secure container being stored on a first portable memory disk;

receiving said first portable memory disk including said first secure container at a first device;

establishing communication between said first device and a first clearinghouse located at a location remote from said first device;

obtaining information from said first clearinghouse;

said first device using said information to gain access to or make at least one use of said first digital file;

removing said first digital file from said first secure container;

storing said first digital file in a memory of said first device;

storing a second digital file and a second control in a second secure container, said second control constituting a second budget which controls the number of copies which may be made of said second digital file or a portion of said second digital file while said second digital file is contained in said second secure container, said second secure container being stored on a second portable memory disk different from said first portable memory disk;

receiving said second portable memory disk including said second secure container at said first device;

establishing communication between said first device and a second clearinghouse located at a location remote from said first device, said first device obtaining information from said second clearinghouse and said first device using said information to gain access to or make at least one use of said second digital file;

removing said second digital file from said second secure container;

storing said second digital file in a memory of said first device;

using at least a third control to determine whether some or all of said first digital file may be copied and stored on a second device;

if said third control allows at least a portion of said first digital file to be copied and stored on a second device,

copying at least a portion of said first digital file;

storing said first digital file portion in a third secure container, said third secure container including said first digital file portion and at least one control governing at least one aspect of use or access to any file contained within said third secure container;

using at least a fourth control to determine whether some or all of said second digital file may be copied and stored on a second device including a memory and an audio and/or video output;

if said fourth control allows at least a portion of said second digital file to be copied and stored on said second device, copying at least a portion of said second digital file;

storing said second digital file portion in said third secure container;

transferring said third secure container including said first digital file portion and said second digital file portion to said second device, at least one of said third secure container controls prohibits a user of said second device from making copies of said first digital file portion and said second digital file portion while said first digital file portion and said second digital file portion are stored in said memory of said second device;

substantially contemporaneously with said step of transferring said first digital file portion to said second device, placing a first encumbrance on said first budget,

said first encumbrance reducing the number of copies which may be made of said first digital file portion;

substantially contemporaneously with said step of transferring said second digital file portion to said second device, placing a second encumbrance on said second budget,

said second encumbrance reducing the number of copies which may be made of said second digital file portion;

storing said first digital file portion in said memory of said second device;

storing said second digital file portion in said memory of said second device while said first digital file portion is also stored in said memory; and

rendering said first or said second digital file portion through said output.

61. A method as in claim 60, in which

said first encumbrance and said second encumbrance each reduce said number of copies to zero.

62. A method as in claim 60, further comprising:

at some point following said transfer of said first digital file portion to said second device, taking at least one action so that said first digital file portion may no longer be used at said second device, and

following said action, removing said first encumbrance on said first budget.

63. A method as in claim 62, further comprising:

at some point following said transfer of said second digital file portion to said second device, taking at least one action so that said second digital file portion may no longer be used at said second device, and

following said action, removing said second encumbrance on said second budget.

64. A method of operating a portable rights management system, including the steps of:

providing a protected processing environment in a tamper-resistant, portable, hardware housing arrangement;

operatively coupling said housing arrangement to an electronic appliance arrangement including a speaker;

ensuring secure communications between said housing arrangement and said appliance arrangement, including confirming the identity of both arrangements and/or users of such arrangements;

communicating from said housing arrangement information for use, at least in part, in controlling at least one process operating, at least in part, on said electronic appliance arrangement;

securely recording, in said housing arrangement, information derived from, at least in part, secure communications between said housing arrangement and said appliance arrangement and/or said at least one operating process;

storing a first digital file in said protected processing environment;

storing a first control in said protected processing environment, said first control governing at least one aspect of access to or use of at least a portion of said first digital file;

storing a first budget in said protected processing environment, said first budget specifying a number of copies which may be made of said first digital file or a portion thereof;

communicating a copy of at least a portion of said first digital file from said hardware housing arrangement to said electronic appliance arrangement; and

outputting said first digital file at least in part through said speaker.

65. A method as in claim 64, in which:

said number of copies is one.

66. A method as in claim 64, in which:

said communicating step further comprises communicating at least a second control to said electronic appliance arrangement; and

using said second control to govern at least one aspect of access or use of said first digital file portion while said first digital file portion is stored at said electronic appliance arrangement.

67. A method as in claim 66, in which:

said second control prohibits further copying of said first digital file portion while said first digital file portion is stored at said electronic appliance arrangement.

68. A method as in claim 67, further comprising:

at a point substantially contemporaneous with said communication of said first digital file portion to said electronic appliance arrangement, placing an encumbrance on said first budget.

69. A method as in claim 68, in which:

said encumbrance reduces the number of copies allowed by said first budget.

70. A method as in claim 69, in which:

said encumbrance reduces the number of copies allowed by said first budget to zero.

71. A method as in claim 69, further comprising;

following said communication of said first digital file portion to said electronic appliance arrangement, taking at least one action to render said first digital file portion unuseable at said electronic appliance arrangement.

72. A method as in claim 71, further comprising:

following or substantially contemporaneous with said action, removing said encumbrance from said first budget.