Super-distribution of protected digital content

• US 6,983,371 B1
• Filed: 11/13/2000
• Issued: 01/03/2006
• Est. Priority Date: 10/22/1998
• Status: Expired due to Term

• Current Assignee: Wistron Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Mahlbacher, James C., Hurtado, Marco M., Spagna, Richard L.
• Primary Examiner(s): Barrón, Jr., Gilberto
• Assistant Examiner(s): NOBAHAR, ABDULHAKIM
• Application Number:
  US09/711,431
• Time in Patent Office: 1,877 Days
• Field of Search: 713/189, 713/200, 713/190, 713/201, 380/255, 705/26, 705/44, 705/51, 705/54, 705/75
• US Class Current: 713/189
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

Briefly according to the present invention, a system, computer readable medium and method to deliver encrypted digital content to from a first system for playing the content to a second system for playing the content. The method on the first user system comprising the steps of: reading from a computer readable medium metadata which has previously been associated with the content; selecting from the metadata associated content to decrypt; establishing a secure connection with an authorization authority, such as a clearinghouse, for decrypting the key used to encrypt the content; receiving a secure container containing the decrypting key for decrypting at least part of the previously encrypted content as permitted; decrypting the content and then encrypting the content with a new encryption key that is generated locally on the end user system.

Claims

1. A method to deliver encrypted digital content from a first system for playing the content to a second system for playing the content, the method on the second system comprising the steps of:

reading on a second system from a computer readable medium metadata which has previously been associated with a portion of content, wherein the content is encrypted with a first key associated with the first system;

selecting from the metadata associated content to decrypt;

establishing a secure transmission with an authorization authority for decrypting the content; and

receiving a decrypting key for decrypting at least part of the previously encrypted content stored on the computer readable medium as permitted by the authorization authority;

decrypting at least part of the previously encrypted content as permitted by the authorization authority;

reencrypting the decrypted content utilizing a unique local decrypting key;

storing the content in a library; and

decrypting at least part of the content from the library using the unique local decrypting key.

2. The method according to claim 1, further comprising the steps of:

playing at least part of the previously encrypted content by decrypting the encrypted content with the unique local decrypting key.

3. The method according to claim 2, wherein the step of decrypting at least part of the previously encrypted content as permitted by the authorization authority is performed in a tamper-resistant environment for deterring unauthorized access to the decrypting key.

4. The method according to claim 1, wherein the steps of decrypting and reencrypting are performed in a tamper-resistance environment for deterring unauthorized access to the decrypting key.

5. The method according to claim 2, wherein the step of playing further comprises playing at least part of the previously encrypted content comprising a plurality of distinct titles whereby each distinct title is decrypted with the unique local decrypting key.

6. The method according to claim 2, wherein the step of establishing the secure transmission further comprises the step of transmitting a credit information to the authorization authority.

7. The method according to claim 2, wherein the metadata is stored as part of a promotional package on at least one of a Compact Disk and Digital Video Disk containing non-encrypted content.

8. A computer readable medium containing programming instructions for delivery of encrypted digital content from a first system for playing the content to a second system for playing the content, the programming instructions for execution on the second user system comprising:

reading on a second system from a computer readable medium metadata which has previously been associated with a portion of content, wherein the content is encrypted with a first key associated with the first system;

selecting from the metadata associated content to decrypt;

establishing a secure transmission with an authorization authority for decrypting the content;

receiving a decrypting key for decrypting at least part of the previously encrypted content stored on the computer readable medium as permitted by the authorization authority;

decrypting at least part of the previously encrypted content as permitted by the authorization authority;

reencrypting the decrypted content utilizing a unique local decrypting key;

storing the content in a library; and

decrypting at least part of the content from the library using the unique local decrypting key.

9. The computer readable medium according to claim 8, further comprising the step of:

playing at least part of the previously encrypted content by decrypting the encrypted content with the unique local decrypting key.

10. The computer readable medium according to claim 9, wherein the programming instruction of decrypting at least part of the previously encrypted content as permitted by the authorization authority is performed in a tamper-resistant environment for deterring unauthorized access to the decrypting key.

11. The computer readable medium according to claim 8, wherein the programming instruction of decrypting and reencrypting is performed in a tamper-resistance environment for deterring unauthorized access to the decrypting key.

12. The computer readable medium according to claim 8, wherein the programming instruction of playing further comprises playing at least part of the previously encrypted content comprising a plurality of distinct titles whereby each distinct title is decrypted with the unique decrypting key.

13. The computer readable medium according to claim 8, wherein the programming instruction of establishing the secure transmission further comprises the step of transmitting a credit information to the authorization authority.

14. The computer readable medium according to claim 8, wherein the metadata is stored as part of a promotional package on at least one of a Compact Disk and Digital Video Disk containing non-encrypted content.

15. A second user system for receiving encrypted digital content from a first system, the second user system comprising:

an interface reading from a computer readable medium metadata which has previously been associated with a portion of content, wherein the content is encrypted with a first key associated with the first system;

an input device for receiving at least one selection from the metadata associated content to decrypt;

a network connection for establishing a secure transmission with an authorization authority for decrypting the content; and

means for receiving a decrypting key for decrypting at least part of the previously encrypted content stored on the computer readable medium as permitted by the authorization authority;

a tamper resistant environment for

decrypting at least part of the previously encrypted content as permitted by the authorization authority;

reencrypting the decrypted content utilizing a unique local decrypting key;

storing the content in a library; and

decrypting at least part of the content from the library using the unique local decrypting key;

wherein tamper resistant environment deters unauthorized access to the decrypting key.

16. The second user system according to claim 15, further comprising:

a player application for playing at least part of the previously encrypted content by decrypting the encrypted content with the unique local decrypting key.

17. The second user system according to claim 16, wherein the player application includes a means for playing at least part of the previously encrypted content comprising a plurality of distinct titles whereby each distinct title is decrypted with the unique local.

18. The second user system according to claim 16, wherein the network connection further comprises means for transmitting a credit information to the authorization authority.

19. The second user system according to claim 16, wherein the metadata is stored as part of a promotional package on at least one of a Compact Disk and Digital Video Disk containing non-encrypted content.