System and method for controlled copying and moving of content between devices and domains based on conditional encryption of content key depending on usage state

• US 7,844,821 B2
• Filed: 08/27/2008
• Issued: 11/30/2010
• Est. Priority Date: 10/18/2001
• Status: Expired due to Fees

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Yan, Zheng, Hietasarka, Juha, Alve, Jukka, Chiu, Peter K.
• Primary Examiner(s): JUNG, DAVID YIUK
• Application Number:
  US12/199,365
• Publication Number:
  US 20080313741A1
• Time in Patent Office: 825 Days
• Field of Search: 713/176, 713/168, 713/150
• US Class Current: 713/176
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00166 involving measures which result in a restriction to authorised contents recorded on or reproduced from a record carrier, e.g. music or software
• CPC Class Codes: G11B 20/00181 using a content identifier, e.g. an international standard recording code [ISRC] or a digital object identifier [DOI]
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00666 involving a step of erasing or nullifying data, e.g. data being overwritten with a random string
• CPC Class Codes: G11B 20/0071 involving a purchase action
• CPC Class Codes: G11B 20/00768 wherein copy control information is used, e.g. for indicating whether a content may be copied freely, no more, once, or never, by setting CGMS, SCMS, or CCI flags
• CPC Class Codes: G11B 20/00884 involving a watermark, i.e. a barely perceptible transformation of the original data which can nevertheless be recognised by an algorithm
• CPC Class Codes: H04H 20/31 using in-band signals, e.g. subsonic or cue signal
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04N 2005/91335 the copy protection signal being a watermark
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection

Abstract

A system and method is disclosed for allowing content providers to protect against widespread copying of their content, while enabling them to give their customers more freedom in the way they use the content. In accordance with one embodiment, content providers identify their content as protected by watermarking the content. Consumers use compliant devices to access protected content. All of a user'"'"'s compliant devices, or all of a family'"'"'s devices, can be organized into an authorized domain. This authorized domain is used by content providers to create a logical boundary in which they can allow users increased freedom to use their content.

Claims

1. A method, comprising:

receiving a voucher at an apparatus from a further apparatus;

computing a cryptographic hashing function over at least part of the voucher;

decrypting an encrypted hash value stored in the voucher with a public key of the further apparatus; and

comparing the computed hash value with the stored hash value,

wherein the voucher contains an encrypted content key, a usage state record, and a domain traversal flag, wherein the usage state record enforces play limits,

wherein all apparatuses in an authorized domain have ability to decrypt the encrypted content key, and

wherein said all apparatuses in the authorized domain are apparatuses of one or more of a user and a family.

2. The method of claim 1 where if the computed hash value does not equal the stored hash value, indicating that the voucher has been tampered with.

3. The method of claim 2, wherein the act of indicating the voucher has been tampered with includes making the content unusable.

4. A computer program product comprising computer executable program code recorded on a computer readable storage medium, the computer executable program code comprising:

code for causing receipt of a voucher at an apparatus from a further apparatus;

code for causing computation of a cryptographic hashing function over at least part of the voucher;

code for causing decryption of an encrypted hash value stored in the voucher with a public key of the further apparatus; and

code for causing comparison of the computed hash value with the stored hash value,

wherein the voucher contains an encrypted content key, a usage state record, and a domain traversal flag, wherein the usage state record enforces play limits,

wherein all apparatuses in an authorized domain have ability to decrypt the encrypted content key, and

wherein said all apparatuses in the authorized domain are apparatuses of one or more of a user and a family.

5. The computer program product of claim wherein the computer executable program code further comprises code for causing, if the computed hash value does not equal the stored hash value, indication that that the voucher has been tampered with.

6. The computer program product of claim 5, wherein the act of indicating the voucher has been tampered with includes making the content unusable.

7. An apparatus, comprising:

a processor; and

at least one memory including computer program code, the at least one memory and the computer program code configured to, with the processor, cause the apparatus at least to perform;

receive a voucher at the apparatus from a further apparatus;

compute a cryptographic hashing function over at least part of the voucher;

decrypt an encrypted hash value stored in the voucher with a public key of the further apparatus; and

compare the computed hash value with the stored hash value

wherein the voucher contains an encrypted content key, a usage state record, and a domain traversal flag, wherein the usage state record enforces play limits,

wherein all apparatuses in an authorized domain have ability to decrypt the encrypted content key, and

wherein said all apparatuses in the authorized domain are apparatuses of one or more of a user and a family.

8. The apparatus of claim 7, wherein the at least one memory and the computer program code are further configured to, with the processor, cause the apparatus to, if the computed hash value does not equal the stored hash value, indicate that the voucher has been tampered with.

9. The apparatus of claim 8, wherein the act of indicating the voucher has been tampered with includes making the content unusable.