AU2002366661A1 - A system for secure distribution of electronic content and collection of fees - Google Patents

Description

WO 03/050715 PCT/AU02/01667 1 A System for Secure Distribution of Electronic Content and Collection of Fees. 5 FIELD OF THE INVENTION The invention relates to a system for secure distribution of electronic content and a mechanism for collecting and distributing fees (royalties and usage charges) due. In particular, the invention provides a mechanism for 10 preventing copyright infringement of electronic documents. BACKGROUND Teletext services have been in commercial use for decades to display 15 paged images of textural information to TV set-top boxes around the world. The idea was based around the notion of an online-newspaper. Teletext has the electronic advantage of updating its pages live as events unfold, with a far broader range of indexed topics on demand than traditional television news can deliver. Despite these advantages, Teletext has not become popular, lacking 20 the richness of content types, navigability, search-ability, interactivity, variety, capacity and reach of the Internet. However as a publishing system, the Internet only came of age when the World Wide Web was invented, which embodied these characteristics into a scrolling page and hyperlink paradigm. But for many commercial publishers, the World Wide Web has been financially disastrous. 25 Unlike Teletext, which usually required a proprietary decoder to access, the Web distributes its information by liberally sending easily decodable content source files to proxy servers and end users alike. This allows any recipient to make unauthorized duplications. Consequently, to avoid the instant devaluation of content through unauthorized republishing via newsgroups, proxy servers, 30 email, pirate sites and the like, publishers have kept most of the world's best content off the net, confining it to paper instead. As a result, many authors WO 03/050715 PCT/AU02/01667 2 whose works have not been recognized as satisfying the economics of conventional paper publishing still remain unpublished. A number of approaches to solving these problems have been based on the concept of allowing end-users to download an encrypted copy of the 5 document and allowing access after a required royalty fee has been paid. Unfortunately, hackers have thwarted many of these methods by breaking into unprotected end-user program memory after the content has been decrypted. As a result, systems based on downloading encrypted files have not gained wide publisher acceptance. 10 Remote display protocols have been slowly developing the robustness and scalability required for the transmission of live computer screen images over the Internet to big audiences. These protocols work by maintaining the end-user's application on a server, while only sending the screen updates to an end user's display. The screen image updates take comparatively little 15 bandwidth to transmit, easily traversing a standard dial-up modem instead of needing thick coaxial cable, as is the case with cable TV. The success of these protocols is achieved by avoiding where possible the sending of bulky pixel-for pixel or field-by-field pictures of screens from the server to the end-user, but instead sending compact graphics commands. These are able to rapidly mirror 20 the fonts and shapes on the end-user's display. Mouse clicks and keystrokes are sent back to the server over the same network to support end-user interaction with the live screens. Examples of industry-standard remote display protocols include Citrix ICA, Microsoft RDP and Unix-based X-11. Though a good technology for transmitting the relatively simple gray 25 images of applications, remote display protocols by themselves are not as good at sending complex document images over sometimes-slow networks, like the Internet. One problem is they often don't display scrolling very well, often redrawing big chunks of the screen, which then needs transmitting to the end user's display. This problem is compounded on small-screen devices such as 30 mobile phones, which require a lot of scrolling to faithfully present documents in unmodified form.

WO 03/050715 PCT/AU02/01667 3 Additionally, delays over the Internet in getting a user's mouse-clicks back to the server and the appropriate screen update back to the user can cause several clicks to be sent in frustration 'because nothing is happening'. This leads to over-scrolling and subsequent scrolling back again. This effect is 5 exacerbated when the Internet is accessed over cell phone or satellite networks, which being radio-based, may introduce additional roundtrip response delays of at least a second. Clicks for scrolling can also cause problems at the server, as significant computing power will be required to execute commands from hundreds of 10 simultaneous remote display users on the one machine. Indeed, depending on the container application in which the document is being displayed, scrolling and navigation may be impossible to achieve satisfactorily, with the application redrawing and thus resending the entire screen several times for each mouse click, slowing the user experience down to a crawl. Thus documents designed 15 for the Web, for printing or in device independent formats such as Adobe Acrobat files may not work well unmodified if transmitted using remote display protocols. A significant inhibitor to the adoption of remote display protocols for Internet-style document image publishing has been cost. It takes at least an 20 order of magnitude more processing power to support an end-user's remote graphical user interface on a server than just sending them a simple Web page. Additionally, many Web servers are downloaded free to the service provider, while remote display protocols and their operating systems, suitable for slow networks such as the Internet, are typically quite expensive. This means that 25 commercial online publishing cannot take place using remote display protocols unless the Internet publisher's micro-payments problem is addressed. This occurs when a document is worth less to the end user than the additional cost of a credit or bank transaction charge to the publisher. One answer has been for publishers to sell online subscriptions to a site 30 instead of individual documents, with users consuming their deposited funds as documents are made available. This idea has three problems: firstly, every publisher must run their own secure billing and tracking system, which represents a high barrier to entry for the world's 80,000 small publishers; WO 03/050715 PCT/AU02/01667 4 secondly, every publisher would need to instill trust to a security and privacy weary public, that they would not loose their money or the privacy of their credit card details; thirdly, if an end-user only wants to see one document, the rest of their subscription is wasted. 5 These problems could be addressed by creating a centralized cross publisher billing and tracking system, allowing users to pay a single entity for a 'universal subscription'. But this idea raises another round of serious technical challenges, due to the 'live-on-line' nature of remote display protocols. The problems of billing and tracking live document images mainly relate 10 to the Internet's scale. Very large remote display protocol systems within corporations may accommodate ten thousand users at once. But a magazine with this many subscribers is considered small. A newspaper site, with hundreds of thousands of readers, could easily generate this kind of traffic every time a major story breaks. Likewise, very large conventional databases 15 used for live billing and tracking are usually only rated to ten or twenty thousand users at once. A micro-payments system is required that supports at least a million live simultaneous remote display protocol document image users. A billing and tracking system on this scale is not currently available. Furthermore a remote display protocol document image publishing system also faces the 20 problem of producing up to the second account details for millions of people instantly on demand, tracking not an ongoing credit balance but a mixture of clear and pending funds from a variety of sources. Prior patent documents have been identified that relate to downloadable content systems designed to support commercial online publishing. Reference 25 may be had to three United States patents owned by Xerox Corporation. US5629980 describes a system of storing digital works in secure repositories. Each work has associated with it the terms, conditions and fees for accessing the work. The work is not accessible by a user until the fees and conditions are satisfied. Once a user is granted access the work is transferred 30 to a secure rendering system that includes a secure rendering repository. The security of the system relies upon the security of the repository, which is an WO 03/050715 PCT/AU02/01667 encryption system. Once access is granted the digital work is resident on the user's system and therefore subject to decryption and copying. US 5638443 is similar to US 5629980 but extends the invention to cover composite digital works that include digital video, digital music and printer-ready 5 documents. To achieve this extension the patent defines a digital work as having a description part and a content part. The mechanism of using repositories for serving and requesting digital works is the same as described in US 5629980. The third Xerox patent, US 5634012, focuses on the fee accounting 10 mechanism of the system described in US 5629980. Xerox Corporation has approached the problem of commercial online publishing by proposing, in essence, a software photocopier. The idea appears to be for end users to use this software to reproduce content, whereby such reproductions are metered for access by authorized parties and charged for 15 accordingly. However, the content still becomes resident on a users machine and is therefore subject to unauthorized copying if the security protocols are circumvented. International patent application number PCT/US99/05368, in the name of Cha! Technologies Services Inc, has a number of similarities to the Xerox 20 system. The Cha! system is directed primarily to an automatically invoked intermediation process for levying fees from network purchases. Like the Xerox approach, Cha! relies upon encryption of the digital work which is unlocked after a financial transaction is verified. As the digital work finally resides on the purchasers system, it may still be subject to unauthorized copying and 25 distribution. Another problem to be addressed when distributing electronic documents is the rendering of the documents for display on the users system. This problem is particularly relevant with the popularity of the WAP phone technology that allows electronic documents to be displayed on LCD screens that may be only a 30 few centimeters wide. A number of approaches have been taken to address this issue. One such approach is described in United States Patent Application number 2001-0011364, in the name of Stroub. Stroub reformats documents into WO 03/050715 PCT/AU02/01667 6 columns that have a fixed number of characters per line. The number of columns is selected to suit a given screen The approach of Stroub is useful for simple text but is of limited value for more complex content. Another approach is described in US 6175845 and US 5818446, in the 5 name of IBM Corp. The IBM approach is to implement navigation between parts of a document by inferring the significance of content to users. Content-based analysis is a particularly processor intensive mechanism for display of content that is not practical for most applications. The prior art does not describe a system that allows for secure 10 distribution of electronic documents and the publication of their images via remote display protocols and a mechanism for collecting and distributing fees (royalties and usage charges) due. OBJECT OF THE INVENTION 15 It is an object of the present invention to provide a system for secure distribution of electronic documents and the publication of their images. It is a further object of the invention to provide a mechanism for collecting and distributing payment for viewing of electronic content and other forms of 20 access to associated materials. Further objects will be evident from the following description. SUMMARY OF THE INVENTION 25 In one form, although it need not be the only or indeed the broadest form, the invention resides in a system for secure distribution of electronic content comprising: a management subsystem that checks business models associated with electronic content to determine one or more of viewing conditions, levying of 30 fees and distribution of fees; and one or more presentation subsystems that retrieve electronic content from WO 03/050715 PCT/AU02/01667 7 repositories, reformat the electronic content, and render the electronic content for display by remote display protocols. Suitably the management subsystem resides on centralized server groups but the presentation subsystem may be distributed across many 5 distributed servers. The system may also include an interface subsystem that provides access for users to the electronic content and indicates any fees to be levied. Suitably the system also includes a payment subsystem that intermediates payments between fee payers, fee receivers and one or more 10 financial institutions or organisations maintaining accounts on behalf of others. In preference, the invention may also include one or more stakeholder subsystems that provide management functions for authors, publishers, advertisers, developers, the operators of the system and other stakeholders. Management functions include associating business models, comprising but not 15 limited to scripts, documents and data, with electronic content. Business models are used to implement relationships between all the stakeholders and end users. The stakeholder subsystems are suitably distributed across computers convenient to each stakeholder, and are in communication with the management subsystem. 20 Electronic content is preferably electronic documents but may also be video, audio, printer instructions or other digital media. In a further form the invention resides in a method of securing electronic content including the steps of: storing the electronic content in a repository; 25 associating business models with the electronic content; receiving a request from a user to view the electronic content; checking business models associated with the electronic content for determining fee structure information; crediting accounts with fees according to the fee structure information; and 30 presenting the electronic content to the user via remote display protocols.

WO 03/050715 PCT/AU02/01667 8 BRIEF DETAILS OF THE DRAWINGS To assist in understanding the invention preferred embodiments will now be described with reference to the following figures in which: 5 FIG 1 displays an overview of the system; FIG 2 is an overview of the management subsystem; FIG3 is an overview of the presentation subsystem; FIG 4 is an overview of the stakeholder subsystem; FIG 5 is an overview of the web interface subsystem; 10 FIG 6 is an overview of the payments subsystem; DETAILED DESCRIPTION OF THE DRAWINGS Referring to FIG 1, there is shown an overview of the system for secure 15 distribution of electronic documents and for collection of fees paid for content access. The system consists of two core subsystems and three supporting subsystems. For ease of explanation, the invention is described in terms of electronic documents but it will be appreciated that it includes any form of electronic content. 20 The core subsystems are a management subsystem, and a presentation subsystem. These core subsystems are supported by a stakeholder subsystem, a payments subsystem, and an interface subsystem. The Management subsystem integrates the operation of the other subsystems and manages access to the content. It also enforces the manner in 25 which content may be used. The Presentation subsystem handles the rendering and reformatting of documents suitable for transmission via remote display protocols. It also handles imaging and navigation. This is done under the supervision and control of the management subsystem. There may be multiple presentation 30 subsystems distributed across multiple servers.

WO 03/050715 PCT/AU02/01667 9 Stakeholder subsystems allow preparation and publisher control of content by stakeholders for display by the presentation subsystems. Content may include text documents, images, advertising, applets or other material. The stakeholder subsystem also associates business models (financial models and 5 other information pertaining to the use and effect of a document). A Stakeholder subsystems also store master copies of a publisher's documents (current and previous) plus provides staging and assembly areas for future publication. The Payments subsystem handles all aspects of payment for viewing of content, including interfacing with financial institutions or other organisations for 10 payment clearance. The subsystem deducts and makes payments under the control of the management subsystem. The Interface subsystem provides hyperlinks, prices, authentication and other information to Web pages, the Presentation subsystem and other information viewing systems, such as WAP servers. This enables content 15 imaged by the invention to be advertised online. The current embodiment of these subsystems may be used in the following publishing scenario: 1. Application service providers (ASPs) load the interface and presentation subsystems on their computer(s), connecting them to the 20 management subsystem via virtual private network(s); 2. Stakeholders such as publishers, content creators, advertising executives, advertisers and developers use the stakeholder subsystem(s) to put their documents on a server, attaching pricing models etc to them plus their release dates and staging instructions etc; 25 3. Publishers (or other stakeholders under certain circumstances) use the stakeholder subsystem(s) to nominate the ASPs they wish to image their content for them or let the management subsystem allocate these automatically; 4. The interface subsystems advertise documents or associated 30 groups of documents by providing URLs (or other content pointers) and pricing information to publisher web sites etc; WO 03/050715 PCT/AU02/01667 10 5. Users click on advertised URLs, initiating an authentication session via the interface subsystems; 6. After authentication, the management subsystems assess the users right and financial standing to see the desired document image in relation 5 to any associated business models; 7. If the user has the required access rights and funds on hand, the presentation subsystem is made available to display the required document image, if not, the user is lead through the process of gaining access rights if so allowed by the associated business models and supplying the required funds 10 through the payment subsystems; 8. The presentation subsystem presents the requested document or choice of document within a group of documents according to the conditions set by the stakeholders and as enforced by the management subsystem; 9. As the image of a chosen document is being successfully 15 presented, accounts within the management subsystem are being credited and deducted accordingly; 10. The presentation subsystem allows the User to search and navigate within a document and over the publisher's document image site or over multiple sites; 20 11. The presentation subsystem informs the management subsystem of document usage details, including advertising exposures etc; 12. Users may search and view other document images as access rights and funds allow, being diverted to the appropriate areas if these are deficient; 25 13. The management subsystem splits the revenues and expenses between all the stakeholders according to the advertising and financial models and which stakeholder originated each document accessed; 14. Payments/deductions are periodically settled with each of the stakeholders using the payments subsystem. 30 Looking at each subsystem in detail, FIG 2 shows an overview of the management subsystem.

WO 03/050715 PCT/AU02/01667 11 Management subsystem The management subsystem consists of four key physical and logical elements - files, processes, signals, and extracts. 5 Files contain encrypted cookies of information, using a position in a directory hierarchy to reflect the context in which the information was generated. Processes act to summarise these files into meaningful reports, transferring them into compressed archives to save on disk space. These summaries may be presented to end-users in tabular form, suitable for use by a 10 spreadsheet or database program. Processes may be triggered at set times or upon request, depending on the volume of files being handled and the timeliness of the information required. Signals are files used to communicate messages or pass information between processes. The transmission of signals is the responsibility of the 15 messaging units. Ultimately, most signals will become files. For example, a signal sent by the presentation subsystem to the management subsystem may be unpacked and stored by the latter in a number of relevant directory hierarchies. Therefore signalling is also a bandwidth reduction mechanism, as one signal from a presentation subsystem may cause many reads or writes in 20 the file hierarchies maintained by the Management system. Copies of selected reports, files or archived files may then be aggregated into extracts, to be captured by database applications for detailed off-line analysis. XML files and messaging units are used throughout the figures and description by way of example only. The system is not limited solely to XML. 25 Because this subsystem must eventually scale to handle millions of simultaneous users accessing millions of documents, information must be stored in a way closely resembling its intended use. In this way, processing will be reduced, saving money and increasing performance. Therefore the same information will often be stored in different ways. This also allows verification by 30 crosschecking plus application-level data redundancy, enabling robust disaster recovery, even from damaged backup media.

WO 03/050715 PCT/AU02/01667 12 In order to support the most common information requests, files are stored in directory hierarchies, which closely reflect their use by particular cohorts of users. Therefore, upon document presentation to the reader, the Management subsystem may employ the following set of hierarchical file stores: 5 1. Document usage record: A hierarchy reflecting the frequencies by which documents have been used over time, the top two directory levels for example being publisher and publication, the next being based on the document names and paths, then year-month, date and hour directories. An example directory path would be \\Log-Server\Frequency-Logs\Poplular Publishing\Daily 10 Times\Front Page\First Story\2001-05\07\09. This represents how often the first story located on the front page of Popular Publishing's Daily Times, was viewed from 9 to 10 AM on the 7th of May 2001. This hierarchy also contains financial models generated by stakeholder applications. 2. Documents by authors: A hierarchy indicating the popularity of Authors 15 pertaining to the use of documents, the top two directory levels for example being publisher and author, the next being based on the publication, document names and paths, then year-month and date directories. An example directory path would be \\Log-Server\Author-Logs\Poplular Publishing\Bill.Smith@isp.com\Daily Times\Front Page\First Story\2001-05\07\. 20 This represents the use of Bill Smith's article appearing on the front page of Popular Publishing's Daily Times, on the 7th of May 2001. 3. Reader record: A hierarchy indicating the use of documents by readers, the top two directory levels for example being based on the reader, year-month, then publication. An example directory path would be \\Log-Server\Reader 25 Logs\ Fred.Jones@isp.com\2001-05\07\Daily Times\. This represents Fred Jones' use of the Daily Times, on the 7th of May 2001. 4. Document by reader: A hierarchy indicating reader document accesses rights. The top two directory levels for example are reader and publisher, the next based on the publication, document names and paths. An example 30 directory path would be \\Log-Server\Author Logs\Fred.Jones@isp.com\Poplular Publishing\Daily Times\Front Page\First WO 03/050715 PCT/AU02/01667 13 Story\. This represents Fred Jones right to review an article appearing on the front page of Popular Publishing's Daily Times, on the 7th of May 2001. 5. Document to link: A hierarchy indicating which documents had hyperlinks clicked within them, the top two directory levels for example being publisher and 5 publication, the next being based on the document names and paths, then year month and date directories. An example directory path would be \\Log Server\To-Link-Logs\Poplular Publishing\Daily Times\Front Page\First Story\2001-05\07\. This represents the hyperlinks clicked in the first story located on the front page of Popular Publishing's Daily Times, on the 7th of May 10 2001. 6. Document from link: A hierarchy indicating how users reached particular documents, the top two directory levels being for example publisher and publication, the next being based on the document names and paths, then year month and date directories. An example directory path would be \\Log 15 Server\From-Link-Logs\Poplular Publishing\Daily Times\Front Page\First Story\2001-05\07\. This represents the hyperlinks clicked in the first story located on the front page of Popular Publishing's Daily Times, on the 7th of May 2001. 7. Advertising record: A hierarchy based on where and when advertising 20 appeared, the top two directory levels for example being publisher and publication, the next being advertiser, then advertisement, year-month and date directories. An example directory path would be \\Log-Server\Advertiser Logs\Poplular Publishing\Daily Times\Mighty Marketing\Better Mouse Trap\2001-05\07\. This represents the display of Mighty Marketing's Better 25 Mouse Trap ad on the 7th of May, 2001 to readers of Popular Publishing's Daily Times. 8. Documents by Advertising Executive: A hierarchy indicating the viewing of advertising in relation to their account managers, the top two directory levels for example being publisher and executive, the next being based on the 30 publication, advertiser, advertisement, next, year-month and date directories then document names and paths. An example directory path would be \\Log Server\Ad-Executive-Logs\Poplular Publishing\David.Brown@isp.com\Mighty WO 03/050715 PCT/AU02/01667 14 Marketing\Better Mouse Trap\2001-05\07\Daily Times\Front Page\First Story\. This represents David Brown's sales of Mouse Trap ads appearing on the front page of Popular Publishing's Daily Times, on the 7th of May 2001. 9. Document by resolution: A hierarchy based on screen sizes and viewing 5 distances, the top two directory levels for example being publisher and publication, the next being screen size, then zoom level, year-month and date directories. An example directory path would be: \\Log-Server\Resolution Logs\Poplular Publishing\Daily Times\1024x768\120\2001-05\07\. This represents the use of 1024 x 768 pixel sized screens at a zoom level of 120 10 percent on the 7th of May, 2001 by readers of Popular Publishing's Daily Times. 10. ASP server usage: A hierarchy based on Application service providers and their servers, with the top two directory levels for example being ASP and server, then year-month, date and hour directories. An example directory path would be \\Log-Server\ASP-Logs\Reliable ASP\Production Server 2\2001 15 05\07\09. This represents how Reliable ASP's number two server was utilised from 9 to 10 AM on the 7th of May 2001. 11. Document by IP address: A hierarchy based on IP addresses, with the top two directory levels for example being publisher and publication, the next four consisting of octet numbers of the IP address range. Below that the 20 structure shall be made up of year-month and date directories. An example directory path would be: \\Log-Server\lP-Logs\Poplular Publishing\Daily Times\203\036\032\102 \2001-05\07\. This represents the use of IP address 203.36.32.102 on the 7th of May, 2001 by readers of Popular Publishing's Daily Times. 25 12. Document by Error: A hierarchy based on documents which have generated errors, the top three directory levels for example being year-month, date and hour, then publisher and publication, the next being based on the document names and paths, then ASP and Server directories. An example directory path would be \\Log-Server\Error-Logs\2001-05\07\09\Poplular 30 Publishing\Daily Times\Front Page\First Story\Reliable ASP\Server 2. This represents the error recorded in the first story located on the front page of WO 03/050715 PCT/AU02/01667 15 Popular Publishing's Daily Times, on the 7th of May 2001, between 9 and 10 AM, running on Reliable ASP's number two server. 13. Document by Revenue: A hierarchy based on documents recording revenue generation, the top two directory levels for example being publisher 5 and publication, then document names and paths, the next being based on the year-month, date and hour, then ASP and Server directories. An example directory path would be \\Log-Server\Revenue-Logs\Poplular Publishing\Daily Times\Front Page\First Story\2001-05\07\09\Reliable ASP\Server 2. This represents the revenue made from the first story located on the front page of 10 Popular Publishing's Daily Times, on the 7th of May 2001, between 9 and 10 AM, running on Reliable ASP's number two server. This hierarchy may also be used to calculate frequent reader points. 14. User funds: A hierarchy based on the funds available in user accounts, the top directory level being for example user ID or the publisher's user ID, then 15 two sub directories at the same level - cleared funds and uncleared funds, then three sub-directories at the same level, Fundsln, FundsOut, FundsAdjust. An example directory path would be \\Log-Server\Funds-Logs\EricWilson\ ClearedFunds\Fundsln. This represents the funds deposited by Eric Wilson that have been cleared of the possibility of credit card fraud or cheque dishonour. 20 Being a user rather than a publisher's user identifies that the funds belong to a universal subscription, not an individual publisher. 15. Entity Lookup codes: A hierarchy of entities and their codes. These codes shall be used to abbreviate filepaths so descriptions exceeding Windows 256 character limit can be accommodated. For speed, such lookups do not 25 contain files, only directory names, and the last directory of the structure represents the desired code. In one embodiment there are four classes of processes to be supported by the Management subsystem. These are revenue, user, administration and system. All of these processes store their information in the hierarchies 30 described above. The following tables detail process names, functions and characteristics: WO 03/050715 PCT/AU02/01667 16 REVENUE PROCESSES Name Function Characteristics Check access Make sure user, Checks Document by publisher, ASP is not reader hierarchy for any restricted/suspended problems in allowing users to see the contents of a folder Get price Determines if the Uses the viewing block requested document is hierarchy to check. Prices chargeable and for how documents in relation to much or can be who is asking for the price reviewed free of charge (i.e. normal and discount user groups) Allocate funds Reserves subscription Reservation system allows moneys or viewing multiple users of the one blocks for a requested account plus documents document or service are only charged when successfully transmitted Open document Triggers a check access, Allows Knowledge get price, and allocate publisher to open a funds to allow a document. Once Opened, a document to be opened Document Sold function is sent to make the charge permanent. De-allocate funds Un-reserves subscription If a document fails to load moneys or viewing properly, free the reserved blocks for a requested funds for another document document or service choice Document sold Deducts viewing blocks Also triggers document or funds view system process to update various hierarchies USER PROCESSES Name Function Characteristics Subscribe Adds subscription details This is where a user first 'joins' CashForContent.Com Recharge account Processes credit card Via credit card COM object. details and amounts Must also gracefully handle rejected requests etc. Change details Changes subscription Allows end-users to alter details contact details stored in reader records hierarchy View account Allows user to see past (Stored in Reader Records transactions and hierarchy) account balances WO 03/050715 PCT/AU02/01667 17 ADMINISTRATIVE PROCESSES Name Function Characteristics Credit funds Add money to a user's This is used to adjust account balances for promotions etc Debit funds Deduct money from a This is used to transfer user's account funds between accounts etc Credit viewing Add viewing blocks to a This is used to adjust blocks document for a user balances for promotions etc Debit viewing blocks Deduct viewing blocks This is used to transfer from a document for a viewing blocks between user accounts etc Refund card Send unspent funds to Less handling fee in most credit card cases, via credit card COM object. Suspend document Stops a document from This is used to 'turn off a being approved for all troublesome document users by the billing system Suspend publication Stops all documents in a This is used to 'turn off a publication from being publication approved by the billing system Restrict user access Restricts users to and Allows businesses to from certain control where employees publications/documents go, blocks porn etc Suspend user Suspends all user 'Turn off a user, user can't requests recharge account Suspend server Denies a document Used to block access to a access based on the server causing problems server Suspend ASP Denies a document Used to block access to access based on the ASPs causing problems ASP SYSTEM PROCESSES Name Function Characteristics Clear funds Analyses the financial Part of the risk analysis unit hierarchies to see what funds can be moved from pending to cleared status Daily updates Summarises daily Based on date directories in updates into weekly and various hierarchies. monthly reports. Monthly updates Summaries weekly and Based on month directories WO 03/050715 PCT/AU02/01667 18 monthly reports. in various hierarchies. Transfers 'daily' directories to compressed archive. Quarterly and yearly Summaries monthly Based on monthly reports updates updates in year to date Transfers 'monthly' and quarterly updates directories to compressed archive. Full backup & Backs up and restores Backup device must not Restore archives interrupt any other process or function Error log monitoring Watches for critical Automatically raises alerts errors using email etc Requestlnfo Gets system information Used to check the status of about components services Halt process Terminates a process Used when services are abruptly misbehaving. Current process is instantly destroyed. Shutdown process Gracefully closes a Allows current activities to process at its earliest complete before terminating possible convenience Clear queue Destroys all XML Used when resetting documents in a processes nominated queue A viewing block is a particular implementation of a financial model, which includes a combination of time and document session access charges. Such viewing blocks may also span multiple documents or sites. 5 Storage of the XML hierarchies may take place on a tier of servers, used exclusively for file services, collectively known as repositories. Encrypted control and financial signals transmitted by XML messaging units take place over virtual private networks which themselves are encrypted. One of these communications may contain a signal set, but even if it only consists of one 10 signal, such a communication is known as an operation. Every operation is assigned a unique number for auditing and control purposes, generated by the sending XML messaging unit. This forms the main part of the encrypted-XML file's name and also appears within the file, making any attempt to change an operation number while in transit easy to detect. 15 Operation numbers consists of an operation type code, an ASP ID, server ID, session ID and timestamp combined with a sequence number. The WO 03/050715 PCT/AU02/01667 19 operation type code allows receiving components to take basic actions with the encrypted-XML file without having to open it. The sequence number is used to differentiate operation numbers on systems capable of forming multiple signals within a single unit of their system 5 clock's time. Therefore a timestamp of 2001081000000000020 indicates the 20 th signal issued at exactly midnight (to the millisecond) on August 10, 2001. Thus, a properly formed operation number will look like this: Docl nfoReq.CFC. 10001.10FC23.2001081000000000020. Operation numbers allow the tracking of requests in relation to 10 processes. For example, an operation to extract all customer details may be disallowed, even for a user with high enough raw data access privileges, on the grounds the signals within the operation do not constitute a legal process. That is, all operations must match at least one set of predetermined signals and be executed within an acceptable timeframe. All attempted illegal operations are 15 duly logged. A group of like signals may be sent in one encrypted XML message as a signal batch. Whether sent individually or in a batch, every encrypted XML message has an operation number. The display units interacting with end-users are hardened against denial 20 of service attacks. This is implemented by monitoring end-user activity, limiting the number of repeat operations for which no payment is required. Most database, authentication and messaging mechanisms designed for corporate use (such as Microsoft's Active Directory, SQL Server and COM Plus) do not perform well for more than 20,000 simultaneous users. A medium 25 sized magazine, a typical publisher user, has 80,000 subscribers and there are around 144,000 magazines in the English-speaking world. The billing and tracking aspect of the management system must provide universal, publisher 'stable' and individual title subscription services for all of these. Therefore the Management and Stakeholder subsystems and messaging units are file-based 30 for simplicity, with inbuilt load balancing mechanisms.

WO 03/050715 PCT/AU02/01667 20 With information stored in a number of hierarchical file structures, the management subsystem repository naturally lends itself to partitioning between directories, volumes and servers. These hierarchies may also be further partitioned according to the logical groupings within them (alphabetically A-K 5 and L-Z for example), as required. Thus load balancing can be achieved using simple partitioning techniques. Presentation subsystem The Presentation subsystem operates in four stages under the control of 10 the management subsystem. It consists of four units, for display, cache, formatting and rendering of documents: 1. Display Unit: This is responsible for maintaining the end user interaction and imaging documents for transmission using remote display protocols. The display unit also incorporates a number of features to detect 15 misuse of the system. 2. Multi-resolution, multi-magnification document caches: Documents are fed from to display unit from the cache. This minimizes the need for processing by reusing previously formatted content. If a document is not available in the cache to suit the combination of the end-user's device, viewing 20 distance and publisher and end user preferences, the formatting and rendering units are activated to provide one. 3. Formatting units: These minimize the need for end users to scroll though documents by dividing them into smaller, more manageable sections. These reformatted documents may or may not fit completely on the screen, 25 depending on how the content has been marked up, the device size it's images are being viewed on plus publisher and end-user preferences. The reformatting process resizes and moves content to fit, as well as employing various 'blank space' reduction and insertion techniques. These include condensing text, reducing tab stops, adjusting margins etc. The basic layout of the document in 30 which this is done is predetermined by a rendering unit. 4. Rendering units: By examining the dimensions of the available viewing area, the rendering unit analyses end-user and publisher preferences to WO 03/050715 PCT/AU02/01667 21 determine a suitable document layout and navigation system. This basic layout is then used by the formatting unit to measure and manipulate content. Information pertaining to end-user interactions, such as document navigation, is encrypted. This prevents unauthorized display units or external 5 viewers from improperly accessing content. Documents may also be password protected to prevent opening by unauthorized display units or viewers. Using the current embodiment of the invention, the presentation subsystem may be used in a commercial publishing environment in the following manner: 10 1. Presentation subsystems are loaded on Application Service Provider machines; 2. Publishers allow their content to be connected to Application Service Providers running the Presentation Subsystems; 3. Stakeholder subsystems provide information to the interface 15 subsystems, allowing links to the presentation subsystems to be published in Web pages or other browser display protocols such as WAP; 4. An end-user requests to see a document by clicking on a link; 5. The interface subsystems forward locational information to the management subsystems; 20 6. A logon session is created (such as via a secure Web page or remote display protocols) to find out who the user is in relation to the publisher, which if successful, causes the management subsystem to create a unique session number for that user's session with the presentation subsystem; 7. The logon session forwards locational information to the 25 Management subsystem; 8. The display unit forwards locational information to the Management subsystems; 9. The display unit finds the document in the Cache unit; 10. The caching unit may attempt to obtain the document from 30 another's Presentation subsystem's cache WO 03/050715 PCT/AU02/01667 22 11. If the document is not in or found by the cache, the display unit obtains the document's location from the Management sub-system, allowing it to draw on the publisher's master document repository. If the Management Subsystem is not aware of the document's location, the display unit forwards a 5 request to the management subsystem to issue a new document ID to the document, which in most cases becomes its filename and path; the location of this newly named document is then sent back to the Presentation Subsystem; 12. Once the desired document's filename has been established, the management subsystem evaluates the request, authorizing it according to the 10 business models associated with the document; 13. Once authorized by the management subsystem, the display unit seeks a document from the cache corresponding or suitably sized to the display area, user and publisher preferences. If one can be found (the majority of cases), it is loaded and displayed for image transmission, if not, the rendering 15 unit is engaged to determine an appropriate layout and navigation system and the reformatting unit then handles the content accordingly; 14. The caching unit may attempt to obtain a suitable document from another's Presentation subsystem's cache, rather than initiate fresh reformatting. 20 15. After being loaded from the cache, the document image is displayed via remote display protocols; 16. The display unit accepts navigation commands from the user; 17. The display unit monitors end-user activity in relation to time or session charges as controlled by the management subsystem; 25 18. The display unit monitors 'revenue content' such as advertising, informing the management subsystem of its exposure; 19. The display unit also provides account management tools and activity reports to end users; 20. The display unit also provides end-users integrated searching 30 between sites, documents and the content within a document; WO 03/050715 PCT/AU02/01667 23 21. The display unit also provides histories of previously seen documents, favorites and 'to-do' lists of must-see documents; 22. The display unit also embodies the functions of the interface subsystems, allowing further content to be viewed without leaving the remote 5 display protocol environment. 23. From time to time, the caching unit may delete from itself infrequently used documents. Conversely, it may be pre-loaded with previously formatted documents in anticipation of heavy use. This may be implemented under Management system control according to the business models 10 associated with a document. The above scenario would not contain as many steps if the invention is used to display documents on an end-user's machine to their cell phone over the Internet. Organisations running the publishing system in-house may also require fewer steps. Depending upon the implementation, the order of steps 15 may also vary. However in all cases, the unique four-stage architecture of the presentation subsystems remain the same. It will be appreciated that the presentation subsystem, and in particular the display unit, is not limited to on-screen display. For example, content may be sent directly to a commercial printer for one-time hard copy printing, to a 20 sound studio for one-time listening, or to a cinema for viewing. In all cases, a 'screen' also may be understood as the display area in which a document is to be imaged, such as within a box on a Web page. Cache, rendering, reformatting and display units may be distributed across one or more machines for load balancing and performance optimization. 25 Stakeholder subsystems The stakeholder subsystems provide management functions for authors, publishers, advertisers advertising executives, editors, developers, the invention's operators or any other party with an interest in content. They 30 comprise a set of workflow applications linked to document and information repositories. These are linked via virtual private networks and an XML messaging unit to the invention's other subsystems. In the preferred WO 03/050715 PCT/AU02/01667 24 embodiment of this invention these repositories are comprised of file system hierarchies, although they well could be other stores such as relational databases. The stakeholder workflow applications comprise of: 5 1. Stakeholder information captures: These associate information such as Title, Author, Summary and Business Model indicators to documents. By noting these indicators, the management subsystem is able to determine the way a document should be treated, by consulting the business models to which the indicators refer. 10 2. Advertising information captures: These allow advertising executives and creative staff to associate objects embedded within documents to an advertising model. An example of an advertising model could be to display a set of advertisements in random order as a page is accessed or change the advertisements if a user revisits a page, with the appropriate fees for each type 15 of exposure. 3. Business modeling: These applications create a marketing structure around a collection of documents through associations with business models. A business model will typically contain pricing information to which documents refer via their indicators, as well as revenue and expense splitting 20 ratios between stakeholders. A special kind of business model is an advertising model, embodying the terms and conditions of embedded content for automated billing and display. 4. Content markup and staging: These applications are used to govern the release of documents and information from the Stakeholder's master 25 document and model repositories to the presentation, interface and management subsystems. This allows publishers to perform functions such as setting 'opening dates' on new parts of their site, managing the document update process or rolling back their sites to previous versions of documents. 5. Other information captures and functions: A number of other 30 functions complete the stakeholder application suite. This includes reporting tools allowing all the stakeholders to review the progress of their interest in sites and documents.

WO 03/050715 PCT/AU02/01667 25 Another major component of stakeholder subsystems are the advertising and business model repositories. These hierarchies of XML documents are referred to by indicators attached to documents. One document may be thus associated with many business models. When this happens, by default, the 5 system will determine the cheapest option for the end-user or advertiser or offer them a choice of under which set of terms and conditions the document is to be made available. Stakeholder master document repositories are file or document management systems where documents are stored and released to 10 presentation subsystems via virtual private networks. They also form the staging area for future document releases plus an archive of past releases which have been withdrawn from circulation. An XML messaging unit is provided to facilitate information transfers between stakeholder subsystems and the other subsystems. 15 The preferred embodiment of these subsystems could be used in the following scenario: 1. A publisher nominates an application service provider or elects to run a stakeholder application suite on their own systems; 2. The publisher registers the stakeholders to be recognized by the 20 site; 3. Authors use the stakeholder application suite to stake their claim on a document via document indicators; 4. A publisher submits the document to the system, in so doing acknowledging the claims made by the author indicators; 25 5. Business model indicators are associated, recognizing the role of advertisers, editors, advertising executives, developers and others; 6. At any stage, documents may be marked up for manual optimization for image display using remote display protocols. For example, it might be necessary to stop image resizing where a picture's detail must be 30 displayed, such as with a map; WO 03/050715 PCT/AU02/01667 26 7. At any stage, documents and their organisation within the repository may be marked up to control the timing of their release; 8. Document information is retrieved from the various repositories via XML Messaging units by the management subsystems; 5 9. Application service providers running interface subsystems also access repositories to display information in Web, WAP or pages described by other protocols or formats, for end-users not currently being handled by the presentation subsystems; 10. As requested by the user and allowed by the management 10 subsystem, copies of documents are released from the stakeholder's master document repository to various presentation subsystems; 11. Reports are provided to stakeholder applications from the invention's other subsystems, for realtime management of documents, sites and stakeholder relationships; 15 12. All of the above functions are also designed to maintain their currency on an ongoing basis. For example, a document's author revenue shares may change over time as a document is updated by different people. The stakeholder subsystem is designed to support rich collaboration between all the participants. Therefore stakeholder subsystems may be 20 distributed across a large number of locations, while the management subsystems are designed to be centralized over a small number of locations. However there may also be a market for management subsystems to be deployed for private in-house use for secure publishing operations within organisations, such as armed forces. 25 Payments subsystem The Payments subsystem is the gateway by which transactions between financial institutions such as credit card companies or banks are conducted. Transactions with non-financial institutions which non-the-less manage funds, 30 such as telecommunications carriers or utility companies, are also supported.

WO 03/050715 PCT/AU02/01667 27 The Payments subsystem, working under the authorization of the Management subsystem, enables both deposits and withdrawals from accounts operated by all those associated with the use and operation of the system. This facilitates both content end-user payments and refunds plus monetary transfers 5 to and from stakeholders, including authors and advertisers. It communicates to the Management subsystem the success, failure and nature of payments. It is also used for the updating of account balances, risk analysis and other purposes. The Payments subsystem also has human interfaces for manual 10 transaction entry, such as for cash or checks. Interface subsystem The job of the Interface subsystem is to enable interaction between the 15 system's secure publishing environment and other publishing systems. This is often necessary because publishing document images using remote display protocols is orders of magnitude more expensive to set up and run than traditional online publishing systems. This is because the entire end user experience must be supported by the publishing system rather than simply 20 sending off a few files for a browser to interpret and render. This means information which cannot be sold, such as a catalogue of documents for sale, will most likely be presented using cheaper Web-based protocols such as HTML and Java-Script. Another scenario is where the publisher chooses to accept the risk of 25 allowing readers to download encrypted content for offline use (such as large tables or diagrams), by employing an alternative publishing system. In this case the management subsystem may need to inform such document download software of details concerning both the document and the reader. To support business models such as these, an Interface subsystem is 30 required to supply information stored in the management subsystem to other publishing systems. Functions of the Interface Subsystem are also included in the Presentation subsystem, allowing document browsing, searching and pricing information to be accessed from within the system. Once a user is WO 03/050715 PCT/AU02/01667 28 interacting with the Presentation subsystem there is no need to leave it to make another purchase. This convenience aside, the ability to access the Interface subsystem from within the invention allows catalogs of content for sale to be displayed on devices which cannot easily render Web pages, such as small 5 screen mobile devices. The operation of the Interface subsystem therefore depends on the kind of publishing system requiring management system support. An-end user may wish to access a conventional web page of a publisher to browse a catalog of content available through the invention. In this case, the Interface subsystem 10 will provide the publisher's Web server with such information as a full hierarchical or list view of the content available on a site, or a search result subset of this. Pricing, conditions, summary and other information may also be supplied, according to stakeholder business models. In order to apply business models to obtain the correct price for a 15 particular end user, the Interface subsystem may also ask for or accept an end user login. If no end-user login is supplied, anonymous user prices and conditions or no prices and conditions will be supplied, depending on the business model(s) associated with the document. Information shared between Stakeholder, Management and Interface 20 subsystems is likely to be repetitious. In order to minimize the use of network resources and speed response times, a caching mechanism for these common signals may be employed. The Interface subsystem has the capability to generate Web pages for transmission by a Web server. Alternatively, publishers can design their own 25 Web pages that programmatically insert the desired information drawn from the Interface subsystem. Another method is to insert an applet into a Web page or use stand-alone programs, which communicate with the Interface subsystem in real-time, enabling a more dynamic display of its information. To support more complex interactions, such as the issuing of instructions 30 to another publishing system to send or allow content to be downloaded, a driver architecture is employed to suit the interfaces provided by the alternate publishing system.

WO 03/050715 PCT/AU02/01667 29 A preferred embodiment is to have at least one interface subsystem on each alternate publishing system, connected to the management system via a virtual private network. The preferred embodiment for the Interface subsystem implicit to the Presentation subsystem is to implement one per user session. 5 The Interface subsystem is also capable of obtaining locational information from end-users, in order to restrict the content catalog in legal jurisdictions which may be offended by the material. Acquired locational information may also be used to determine content offerings pertinent to the end-user's locale. Information on the end-user's whereabouts may be supplied 10 to the Interface subsystem from a mobile device, Internet/Application service provider, telecommunications carrier or other hardware, software or other location-knowing entity. End-user location details may also be approximated using information supplied by the networks through which end users are connected. 15 A particular embodiment of an Interface subsystem may support different levels of the functionality described. For example, in a mobile device such as a cell phone, a connection from the Management system to a carrier's own billing system may imply a logon, by virtue of possession of the phone connected to the network. In this case, the Interface subsystem provided to the carrier's WAP 20 gateway would not necessarily need to provide a separate login function. On the other hand, for privacy or security reasons, some locational functions may be omitted in Interface subsystems deployed in some places or disabled when the system is accessed by 'location sensitive' persons. 25 SECURITY The division of the invention into various subsystems lends itself to the creation of security zones, safeguarding the privacy and integrity of information stored by the system. The preferred embodiment operates within (but is not limited to) six general security zones: 30 1. End users interacting using Web pages through the Interface Subsystem are considered to be in the un-trusted Internet zone.

WO 03/050715 PCT/AU02/01667 30 2. End users accessing live content images using the Presentation subsystem located at an Application service provider are considered to be in the end-user zone. They typically access the invention through a remote display protocol or other login using a guest account through tightly 5 controlled TCP/IP ports. 3. The publisher-zone is where interpreted document macros, screened for suspicious looking or possibly dangerous system calls, may execute. Authorised, embedded or linked applications, including embedded remote display protocol sessions, also fall within this zone. 10 4. The ASP (Application Service Provider) zone is where the Presentation and Interface subsystems typically run. This is a semi-trusted environment, where information and instructions are conveyed to and from the management system through encrypted-file transfers via virtual private networks operating through tightly controlled TCP/IP ports. 15 5. The fifth zone is the management zone, where records are kept and maintenance functions are performed. 6. The administrative zone is for the invention's operators, allowing them access to customer account and reporting information. Because the bulk of the invention's communications and storage is file 20 based, access between zones may be enforced using standard operating system security mechanisms. Monitoring the information flows themselves for legitimate use enhances the zone-based access controls. To prevent the management system from being bypassed, business logic concerning the eligibility to view documents is typically compiled into the 25 Presentation subsystem. In order to prevent tampering of end user accounts, business logic executing financial transactions is preferably located on Management subsystem servers, behind the system operator's firewalls. Storage takes place on a third tier of Management subsystem servers, used exclusively for file services. Thus Presentation subsystems located on 30 service provider machines never have direct access to the encrypted files located in hierarchical data structures, which are given the strictest access controls. All correspondence between storage repositories and users of their WO 03/050715 PCT/AU02/01667 31 information takes place using signals from duly authorised management and stakeholder processes, never directly from the Presentation subsystems. Signals between all subsystems are conducted using encrypted files. This communication typically takes place over virtual private networks which 5 themselves are encrypted. The invention provides a system of modifying, distributing and accounting for live document images, made suitable for transmission via remote display protocols through automated reformatting of source documents, with 10 limited selection and copying of text or graphics for publisher copyright control. It enables higher value content to be sold online, plus enhances the end-user experience, making document images more readable when viewed in a live application (not downloaded like the Web's HTML) over slow networks. Document production costs are also reduced with single-document publishing, 15 utilizing reformatting engine(s) to handle the complexity of suitably resizing content for most devices. The system and method also secures documents for e-commerce by only allowing their images to be viewed. The viewed documents are easily read over the Internet via remote display protocols and navigated by users from their PCs, servers, or various mobile devices. 20 Documents are made available to the invention for reformatting, to suit a combination of varying remote display protocol environments, screen sizes, viewing distances, plus end-user and publisher preferences. Copyright protection is achieved by only sending live images of these documents via remote display protocols, both modifying the original content for easy navigation 25 on the display device while disabling its reproductive capabilities. Live image transmission only occurs after the management subsystem has authorized such end-user requests. The task of billing and tracking and reformatting documents for better remote display protocol transmission is split between two types of computing infrastructures: One serves the management subsystem and 30 maintains unified control while the other widely distributes the presentation subsystem for image processing between machines, thus the invention can securely enable millions of simultaneous live document image users.

WO 03/050715 PCT/AU02/01667 32 The system is designed to thus sell reformatted document images, or subscriptions to them, from single or multiple publishers to single or multiple users, or to distribute document images free of charge to end-users with their reformatting, distribution and tracking paid for by third parties. The system is 5 also able to automatically split revenues and expenses generated by the documents, between all of a document's relevant stakeholders (authors, editors, publishers, ISPs, etc) made known to the system. Of greatest value to publishers is the system's support for copyright protection (resistance to wholesale reproduction). Only being sent the live 10 image of a document, not the document itself, means the receiver is prevented by the system from selecting the text to copy unless the management system allows it, plus the user never gets the formatting tags, navigational links or source code required to redistribute documents intact for viewing on another system. As with paper, all the user can access is an image of the final 15 document, not the original artwork from which it was created. However awkward and un-navigable screen dumps are possible, which is considered fair use of the material, similar in principle to photocopying portions of paper-based documents. The system displays documents on small-screen devices with high 20 fidelity, having reformatted them accordingly for a much improved user experience. Having an image maintained on a server and only displayed on user machines also provides publishers with total font control. They can even publish the live image of applets within documents. Because they are live images within a live image, these applets need no downloading or installation 25 and therefore are not subject to the unexpected problems Java or Java-Script applets sometimes cause. For publishers, the reformatting function of the presentation subsystem avoids many of the costs currently associated with Web development. For example, one document can be displayed on any sized device, big or small, 30 whereas often Web pages have to be completely redesigned for this purpose. By using remote display protocols, no local content handling takes place on end-user machines, allowing the system to be usable with many more device types than just Web browsers, such as millions of DOS PCs in third-world WO 03/050715 PCT/AU02/01667 33 countries or tens of millions of new mobile devices being sold in more developed countries. The system attaches business model indicators to documents rather than pricelists, the business model determines how a document is charged for under 5 different circumstances. The billing/tracking aspect of the management subsystem uses these business models, evaluating them against end-user records and their current status, thus determining the appropriate price. In this way publishers can implement a wide range of marketing options for their content, without having to pay for a custom-built billing and tracking system. 10 Finally, in relation to the Internet's rampant credit card fraud, the system reduces the risks for publishers in three ways, better supporting the added expense of document image publishing. Firstly, the billing/tracking aspect of the management subsystem has the capacity to distinguish 'cleared funds' from those where a dishonor from a bank or credit card company is still possible. 15 Publishers can therefore adjust their business models accordingly, perhaps offering bonuses for the better payments. The system is also able to identify users with good track records, informing publishers of low risk users from records generated from their prior use across all publishers- without violating the end user's privacy. And the aggregation of transactions across multiple 20 publishers can be leveraged to get a better deal from financial institutions. Throughout the specification the aim has been to describe embodiments of the invention without limiting the invention to any specific combination of alternate features.

Claims (43)

1. A system for secure distribution of electronic content comprising: a management subsystem that checks business models associated with electronic content to determine one or more of viewing conditions, levying of 5 fees and distribution of fees; and one or more presentation subsystems that retrieve electronic content from repositories, reformat the electronic content, and render the electronic content primarily for display by remote display protocols.

2. The system of claim 1 wherein the management subsystem resides on 10 centralized server groups.

3. The system of claim 1 wherein the presentation subsystems reside across many distributed servers.

4. The system of claim 1 wherein the management subsystem further comprises: 15 files containing encrypted cookies of information to reflect the context in which the information was generated; processes that summarize these files into reports; signals to communicate messages or pass information between processes; and extracts being aggregates of selected reports, files or archived files captured for 20 detailed off-line analysis.

5. The system of claim 1 wherein the management subsystem includes means for tracking fees paid and distinguishing between fees paid with cleared funds from fees paid with uncleared funds.

6. The system of claim 1 wherein the presentation subsystem further 25 comprises: a display unit that maintains the end user interaction and images documents for transmission using said remote display protocols; document caches that store previously viewed electronic content; formatting units that divide electronic content into manageable sections; and 30 rendering units that analyze end-user and publisher preferences or conjunction with end-user display device characteristics to determine a suitable layout and navigation system. WO 03/050715 PCT/AU02/01667 35

7. The system of claim 6 wherein the electronic content is transferable between said document caches

8. The system of claim 6 wherein the caches are pre-loaded with previously formatted documents. 5

9. The system of claim 1 further comprising an interface subsystem that provides access for users to the electronic content and indicates any fees to be levied.

10. The system of claim 9 wherein the interface subsystem obtains location information about the user and restricts access to the electronic content 10 according to legal restrictions of the location.

11. The system of claim 9 wherein the interface subsystem obtains location information about the user and determines content offerings pertinent to the location.

12. The system of claim 1 further comprising a payment subsystem that 15 intermediates payments between fee payers, fee receivers and one or more financial institutions or organizations maintaining accounts on behalf of the fee payers and/or fee receivers.

13. The system of claim 1 wherein said one or more presentation subsystems limit the number of repeat operations for which no fees are 20 payable.

14. The system of claim 1 wherein said one or more presentation subsystems provide integrated searching between sites or documents or the content within a document.

15. The system of claim 1 further comprising one or more stakeholder 25 subsystems that provide management functions for one or more of: authors, publishers, advertisers, developers, operators of the system and other stakeholders, said management functions including associating business models with electronic content.

16. The system of claim 1 wherein the electronic content is selected from 30 one or more of an electronic document, video, audio, printer instructions or other digital media. WO 03/050715 PCT/AU02/01667 36

17. A system for secure distribution of electronic content comprising: a management subsystem that checks business models associated with electronic content to determine one or more of viewing conditions, levying of fees and distribution of fees; 5 one or more presentation subsystems that retrieve electronic content from repositories, reformat the electronic content, and render the electronic content for display; an interface subsystem that provides access for users to the electronic content and indicates any fees to be levied; 10 a payment subsystem that intermediates payments between fee payers, fee receivers and one or more financial institutions or organizations maintaining accounts on behalf of the fee payers and/or fee receivers; and one or more stakeholder subsystems that provide management functions for one or more of: authors, publishers, advertisers, developers, operators of the 15 system and other stakeholders, said management functions including associating business models with electronic content.

18. The system of claim 17 wherein the electronic content is displayed by remote display protocols.

19. The system of claim 17 wherein the repositories are pre-loaded with 20 previously formatted documents.

20. The system of claim 17 wherein documents are transferable between repositories.

21. The system of claim 17 wherein the management subsystem integrates the operation of said presentation subsystem, said interface subsystem, said 25 payment subsystem and said one or more stakeholder subsystems.

22. The system of claim 17 wherein the management subsystem supports revenue processes, user processes, administration processes and system processes.

23. The system of claim 17 wherein the presentation subsystem includes 30 means for searching and navigating within retrieved electronic content. WO 03/050715 PCT/AU02/01667 37

24. The system of claim 17 wherein the stakeholder subsystem includes means for preparation of electronic content by stakeholders for display by the presentation subsystems.

25. The system of claim 17 wherein the interface subsystem initiates an 5 authentication session to authenticate access to the system for secure distribution of electronic content.

26. The system of claim 17 wherein the interface subsystem obtains location information about the user and restricts access to the electronic content according to legal restrictions of the location. 10

27. The system of claim 17 wherein the interface subsystem obtains location information about the user and determines content offerings pertinent to the location.

28. A method of securing electronic content including the steps of: storing the electronic content in a repository; 15 associating business models with the electronic content; receiving a request from a user to view titles, and/or summaries, and/or other information pertaining to the electronic content; checking business models associated with the electronic content for determining fee structure information; 20 offering titles, and/or summaries, and/or other information pertaining to content to the user for sale or secure distribution; crediting accounts with fees according to the fee structure information; and presenting the electronic content to the user via remote display protocols.

29. A system for secure distribution of electronic content comprising: 25 one or more presentation subsystems that retrieve electronic content from repositories and render the electronic content for display by remote display protocols; and a billing subsystem that levies fees for display of said electronic content.

30. The system of claim 29 wherein the billing subsystem is part of a 30 management subsystem that also determines viewing conditions. WO 03/050715 PCT/AU02/01667 38

31. The system of claim 29 wherein the billing subsystem includes means for tracking fees paid and distinguishing between fees paid with cleared funds from fees paid with uncleared funds.

32. The system of claim 29 wherein fees are levied from a user. 5

33. The system of claim 29 wherein fees are levied from advertising or sponsorship associated with the electronic content.

34. The system of claim 29 wherein fees are calculated according to the time of continuing content or advertising image presentment or number of user accesses and exposures. 10

35. The system of claim 29 wherein the repositories are multi-resolution, multi-user caches.

36. The system of claim 29 wherein the repositories are pre-loaded with previously formatted documents.

37. The system of claim 29 wherein documents are transferable between 15 repositories.

38. The system of claim 29 wherein the repositories are multi-resolution, multi-user caches populated by documents: formatted to minimize scrolling; or suitable for end user, publisher and display device characteristics; created utilizing various rendering and formatting techniques. 20

39. The system of claim 29 wherein the one or more presentation subsystems display access to electronic document files, video, audio, printer instructions, or other digital media, for fees levied from users, advertisers, or sponsors.

40. The system of claim 29 wherein said one or more presentation 25 subsystems limit the number of repeat operations for which no fees are payable.

41. The system of claim 29 wherein said one or more presentation subsystems provide integrated searching between sites or documents or the content within a document. WO 03/050715 PCT/AU02/01667 39

42. The system of claim 29 further comprising an interface subsystem that obtains location information about the user and restricts access to the electronic content according to legal restrictions of the location.

43. The system of claim 29 further comprising an interface subsystem that 5 obtains location information about the user and determines content offerings pertinent to the location.