Secure online music distribution system

• US 6,385,596 B1
• Filed: 02/06/1998
• Issued: 05/07/2002
• Est. Priority Date: 02/06/1998
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Liquid Audio Inc
• Inventors: Wiser, Philip R., Cherenson, Andrew R., Ansell, Steven T., Cannon, Susan A.
• Primary Examiner(s): SOUGH, HYUNG SUB
• Application Number:
  US09/020,025
• Time in Patent Office: 1,551 Days
• Field of Search: 705/1, 705/24, 705/27, 705/26, 705/51, 705/52, 705/56, 705/57, 395/200.3, 395/200.31, 395/200.32, 395/200.33, 395/200.1, 395/200.06, 395/610, 380/3, 380/4, 380/21, 380/30, 380/5, 380/278, 380/282, 380/200, 380/201, 364/403, 364/479.04, 364/479.07, 369/84, 709/200, 709/201, 709/202, 709/203, 709/217, 700/234, 700/237
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A computer implemented online music distribution system provides for the secure delivery of audio data and related media, including text and images, over a public communications network. The online music distribution system provides security through multiple layers of encryption, and the cryptographic binding of purchased audio data to each specific purchaser. The online music distribution system also provides for previewing of audio data prior to purchase. In one embodiment, the online music distribution system is a client-server system including a content manager, a delivery server, and an HTTP server, communicating with a client system including a Web browser and a media player. The content manager provides for management of media and audio content, and processing of purchase requests. The delivery server provides delivery of the purchased media data. The Web browser and HTTP server provide a communications interface over the public network between the content manager and media players. The media player provides for encryption of user personal information, and for decryption and playback of purchased media data. Security of purchased media data is enhanced in part by the use of a personal, digital passport in each media player. The digital passport contains identifying information that identifies the purchaser, along with confidential information, such as credit card number, and encryption data, such as the media player'"'"'s public and private keys. The media player encryption data is used to encrypt purchased media data, which is decrypted in real time by the media player. The media player also displays confidential information, such as the purchaser'"'"'s credit card number, during playback.

Claims

1. A computer-implemented online music distribution system for distributing digital media data files, including audio data, over a public communications network, the system comprising:

a content manager that transmits validation data uniquely associated with a purchase of a selected one of the media data files and a network address of a delivery server to deliver the selected media data file to a client computer system including a media player for playing back the audio data of the selected media data file;

the media player, storing encryption data assigned specifically to the media player, that receives the validation data from the content manager, and transmits the validation data to the delivery server specified by the network address in the validation data; and

the delivery server that verifies the validation data received from the media player using the content manager and receives the selected media data file from the content manager and securely retransmits the selected media data file to the media player, wherein the selected media data file includes the audio data of the selected media data file encrypted using the encryption data of the media player, the media player adapted to decrypt the audio data of the selected media data file using the encryption data, and playback resulting decrypted audio data;

wherein the media player displays confidential information of a purchaser of the media data file during playback of the decrypted audio data.

2. The system of claim 1, wherein the confidential information is a credit card number of the purchaser.

3. The system of claim 1, wherein the media player displays the confidential information in response to a request by a user of the media player.

4. A computer-implemented online music distribution system for distributing digital media data files, including audio data, over a public communications network, the system comprising:

a content manager that transmits validation data uniquely associated with a purchase of a selected one of the media data files and a network address of a delivery server to deliver the selected media data file to a client computer system including a media player for playing back the audio data of the selected media data file;

the media player, storing encryption data assigned specifically to the media player, that receives the validation data from the content manager, and transmits the validation data to the delivery server specified by the network address in the validation data; and

the delivery server that verifies the validation data received from the media player using the content manager and receives the selected media data file from the content manager and securely retransmits the selected media data file to the media player, wherein the selected media data rile includes the purchased audio data encrypted using the encryption data of the media player, the media player adapted to decrypt the audio data of the selected media data file using the encryption data, and playback the resulting decrypted audio data;

wherein the content manager stores, prior to a purchase, the audio data of each media data file encrypted with an associated media key the media key encrypted with a public key of the content manager, and responsive to a purchase of a media data file, removes the content manager public key from the media key, and encrypts the media key with a public key of the media player to receive the selected media data file.

5. A computer-implemented online music distribution system for distributing digital media data files, including audio data, over a public communications network, the system comprising:

a content manager that transmits validation data uniquely associated with a purchase of a selected one of the media data files and a network address of a delivery server to deliver the selected media data file to a client computer system including a media player for playing back the audio data of the selected media data file;

the media player, storing encryption data assigned specifically to the media player, that receives the validation data from the content manager, and transmits the validation data to the delivery server specified by the network address in the validation data; and

the delivery server that verifies the validation data received from the media player using the content manager and receives the selected media data file from the content manager and securely retransmits the selected media data file to the media player, wherein the selected media data file includes the audio data of the selected media data file encrypted using the encryption data of the media player, the media player adapted to decrypt the audio data of the selected media data file using the encryption data, and playback resulting decrypted audio data;

wherein upon request from the client computer system for a preview of the selected media data file, the content manager queries a database system for updated media descriptive data about the selected media data file to be provided to the media player;

further wherein responsive to the updated media descriptive data being present in the database system, the content manager delivers the updated media descriptive data to the delivery server for subsequent transmission to the client computer system; and

further wherein the content manager queries the database system using individual data from the media player for customized media descriptive data about the selected media data file to be provided to the media player.

6. A computer-implemented online music distribution system for distributing digital media data files, including audio data, over a public communications network, the system comprising:

a content manager that transmits validation data uniquely associated with a purchase of a selected one of the media data files and a network address of a delivery server to deliver the selected media data file to a client computer system including a media player for playing back the audio data of the selected media data file;

the media player, storing encryption data assigned specifically to the media player, that receives the validation data from the content manager, and transmits the validation data to the delivery server specified by the network address in the validation data;

the delivery server that verifies the validation data received from the media player using the content manager and receives the selected media data file from the content manager and securely retransmits the selected media data file to the media player, wherein the selected media data file includes the audio data of the selected media data file encrypted using the encryption data of the media player, the media player adapted to decrypt the audio data of the selected media data file using the encryption data, and playback resulting decrypted audio data;

wherein upon request from the client computer system for a preview of the selected media data file, the content manager queries a database system for updated media descriptive data about the selected media data file to be provided to the media player;

further wherein responsive to the updated media descriptive data being present in the database system, the content manager delivers the updated media descriptive data to the delivery server for subsequent transmission to the client computer system; and

further wherein the media descriptive data comprises a graphics image, and a uniform resource locator that initiates from the media player the purchase of the selected media data file.

7. A computer-implemented online music distribution system for distributing digital media data files, including audio data, over a public communications network, the system comprising:

a content manager that transmits validation data uniquely associated with a purchase of a selected one of the media data files and a network address of a delivery server to deliver the selected media data file to a client computer system including a media player for playing back the audio data of the selected media data file;

the media player, storing encryption data assigned specifically to the media player, that receives the validation data from the content manager, and transmits the validation data to the delivery server specified by the network address in the validation data; and

the delivery server that verifies the validation data received from the media player using the content manager and receives the selected media data file from the content manager and securely retransmits the selected media data file to the media player, wherein the selected media data file includes the audio data of the selected media data file encrypted using the encryption data of the media player, the media player adapted to decrypt the audio data of the selected media data file using the encryption data, and playback resulting decrypted audio data;

wherein the content manager provides the media player with media descriptive data associated with the selected media data file, the media descriptive data including a promotional graphics image, and a uniform resource locator that initiates from the media player a promotion related to the media data file.

8. A computer-implemented method for distributing media data files including audio data to purchasers via a public communications network, the method comprising:

storing a plurality of media data files, each media data file including at least one audio image of a song encrypted with an associated media key, each media data file associated with a media ID for identifying the media data file;

receiving a request to purchase a selected one of the media data files, the request including the media ID of the selected media data file;

generating a voucher ID associated with the purchase of the selected media data file, a receipt token, and network addressing information of a delivery server to deliver the selected media data file;

responsive to receiving an authorization of the purchase of the selected media data file, transmitting the voucher ID, receipt token, and the network addressing information to a media player to receive the selected media data file;

receiving a data packet including an authenticated voucher ID including the receipt token, a public key of the media player, and a digital signature of the data packet formed using a private key of the media player;

responsive to successfully verifying the authenticated voucher ID against the firstmentioned voucher ID, encrypting the associated media key of the selected media data file with the public key of the media player to form an encrypted media key; and

authorizing delivery of the selected media data file by transmitting the encrypted media key and the media ID of the selected media data file.

9. The computer implemented process of claim 8, further comprising:

generating and transmitting the associated media key for encrypting the audio image in the selected media data file, and the public key for encrypting the associated media key; and

receiving the selected media data file including the audio image encrypted with the associated media key, and the encrypted media key.

10. The computer implemented method of claim 8, further comprising:

generating, for a purchaser, a digital passport including the public key and the private key for the media player, a consumer certificate, personal information identifying the purchaser, and confidential information of the purchaser; and

transmitting the digital passport of the purchaser to the media player, wherein the media player stores the passport in a local memory, to provide the public key to the content manager.

11. The computer implemented method of claim 8, further comprising:

displaying confidential information of a purchaser of the selected media data file during playback of the audio data of the selected media data file.

12. The computer implemented method of claim 11, wherein the confidential information is a credit card number of the purchaser.

13. The computer implemented method of claim 8, further comprising:

displaying confidential information of a purchaser of the selected media data file during playback of the audio data of the selected media data file in response to a request by a user of the media player.

14. The computer implemented method of claim 8, further comprising:

receiving the selected media data file from an authoring tool, the selected media data file including the at least one audio image encrypted with the associated media key, the associated media key encrypted with a public key of a transaction processor;

parsing the selected media data file and selectively importing data of the selected media data file into a database; and

storing the selected media data file, and the associated media key in a local file system managed by the transaction processor.

15. The computer implemented method of claim 8, further comprising:

storing, prior to a purchase, the audio data of each of the plurality of media data files encrypted with the associated media key, the associated media key encrypted with a public key of a transaction processor; and

responsive to the request to purchase of the selected media data file, removing transaction processor public key from the associated media key of the selected media data file, and encrypting the associated media key of the selected media data file with the public key of the media player.

16. The computer implemented method of claim 8, wherein each of the plurality of media data files includes:

at least a high-quality encrypted one of the at least one audio images wherein the high-quality encrypted audio image represents a full length high quality version of the song; and

at least a lower-quality unencrypted one of the at least one audio images wherein the lower-quality un-encrypted audio image represents a lower quality version of the song.

17. The computer implemented method of claim 8, further comprising:

receiving a request for a preview of the selected media data file prior to a purchase of the selected media data file;

responsive to the request for the preview, authorizing delivery of at least one un-encrypted audio image of the at least one audio images of the selected media data file to the media player; and

receiving at the media player the un-encrypted audio image and playing the un-encrypted audio image as preview of the selected media data file.

18. The computer implemented method of claim 8, further comprising:

responsive to a request for a preview of the selected media data file, obtaining updated media descriptive data about the selected media data file; and

transmitting the updated media descriptive data to the media player.

19. The computer implemented method of claim 18, wherein the updated media descriptive data comprises a graphics image, and a uniform resource locator to initiate a purchase of the media data file by delivery of an encryption key to decrypt the encrypted audio data.

20. The computer implemented method of claim 8, further comprising:

securely storing purchase information for each purchase of an audio data file in a secure transaction log.

21. The computer implemented method of claim 20, wherein the secure transaction log includes a plurality of log entries of purchases of audio data files, each log entry encrypted with a unique encryption key.

22. A computer implemented online music distribution system for distributing digital media data files, including audio data, over a public communications network, the system comprising:

(a) a content manager that;

(i) receives a request to reserve a selected one of the media data files for a purchase transaction;

(ii) generates a media voucher including a voucher ID associated with the purchase transaction, a receipt token used to validate the voucher ID, a media ID identifying the selected media data file, and network addressing information of a delivery server to deliver the selected media data file;

(iii) transmits the media voucher to a client computer system including a media player for playing back the audio data of the selected media data file;

(b) the media player, storing a public key/private key pair assigned specifically to the media player, that;

(i) receives the media voucher from the content manager;

(ii) generates a data packet containing;

(1) data representing the voucher ID;

(2) a public key of the public key/private key pair of the media player; and

(3) a signature of the data packet formed using a private key of the public key/private key pair of the media player; and

(iii) transmits the data packet to the delivery server specified by the network addressing information in the media voucher; and

(c) the delivery server that;

(i) receives and parses the data packet, and transmits the voucher ID to the content manager;

(ii) receives from the content manager the selected media data file includes the audio data of the selected media data file encrypted with a media key, the media key encrypted with the public key of the media player; and

(iii) transmits the selected media data file to the media player, the media player adapted to playback the media data file by decryption of the media key with the private key.

23. The system of claim 22, further comprising:

a media licensing center that;

(a) receives, from the client computer system, personal information identifying a purchaser and confidential information of the purchaser;

(b) generates the public key/private key pair for the media player;

(c) generates a digital passport including;

(i) a consumer certificate including the public key;

(ii) the private key, encrypted with a registration key; and

(iii) the personal information and the confidential information, encrypted with the registration key;

(d) transmits the digital passport to the media player, wherein the media player stores the digital passport in a local memory of the client computer system, to provide the public key to the content manager.

24. The system of claim 23, wherein the media licensing center includes a secure transaction log including a plurality of log entries of purchases of audio data files, the content manager periodically updating the transaction log to reflect new purchases of audio data files.

25. A computer implemented online distribution system for distributing digital media data files, including audio data, over a public communications network, the system comprising:

a content manager that stores a plurality of media data files, each media data file including at least one encrypted high quality full length audio data file, and at least one unencrypted low quality audio data file, transmits validation data uniquely associated with a preview of a selected one of the media data files and a network address of a delivery server to deliver the selected media data file to a client computer system including a media player for playing back the audio data of the selected media data file;

the media player, that receives the validation data from the content manager, and transmits the validation data to the delivery server specified by the network address in the validation data; and

the delivery server that verifies the validation data received from the media player using the content manager to validate the preview of the selected media data file by the media player, and receives the selected media data file from the content manager and retransmits the selected media data file to the media player, wherein the selected media data file includes the unencrypted low quality audio data, the media player adapted to playback the unencrypted low quality audio data as the preview of the selected media data file as the unencrypted audio data is received;

wherein the selected media data file received from the delivery server includes a uniform resource locator to initiate a purchase of the encrypted high quality audio data in the media data file by delivery of an encryption key from the content manager to the media player, and without requiring the delivery server to retransmit the media data file to the media player.