JP2001274788A - Distribution of digital contents using web broadcast communication service - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide users with a method for surely receiving data on a system from a web broadcast communication interface through a plurality of channels. SOLUTION: This method includes a step, where promotion meta data that are available for reception are received through a 1st web broadcast communication channel and at least part of the data is assembled into promotion offering data, a step where data to be received are selected in relation to the above data, a step where data are received from a 2nd web broadcast communication channel, a step where the data are selected from the promotion meta data and encrypted by using a 1st encryption key, and a step where a computer- readable medium receives a 1st encryption decoding key, and the decoding key is used to decode at least part of the encrypted data received from the 2nd web broadcast communication channel.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

FIELD OF THE INVENTION The disclosed invention relates generally to the field of electronic commerce and, more particularly, to print media, film, and media over a global communications network such as the Internet, the World Wide Web, a cable or satellite digital broadcast network. And related tools for secure delivery and rights management of digital assets, such as video games, music, and the like.

[0002]

BACKGROUND OF THE INVENTION The use of global distribution systems, such as the Internet, for the distribution of digital assets, such as music, films, computer programs, pictures, games, and other content, is increasing. At the same time, owners or publishers of valuable digital content have been slow to use the Internet for distribution of digital assets for several reasons. One reason is that owners are concerned about unauthorized copying or piracy of digital content. Electronic delivery of digital content removes some barriers to piracy. One of the barriers removed by electronic distribution is the tangible recordable media itself (eg, diskette or CD-
ROM). Often blanks
Even though tapes or recordable CDs cost less than a dollar, copying digital content to tangible media requires money. However, for electronic distribution, tangible media is no longer needed. Because the content is distributed electronically, the cost of tangible media is no longer a factor. The second barrier is the format of the content itself, ie
Content is stored in an analog format rather than a digital format. Content stored in analog format, eg, printed pictures, when copied by photocopying, will have a lower quality copy than the original. Each subsequent copy of the copy is sometimes referred to as production, with each copy being of lower quality than the original. No such quality degradation exists when the pictures are stored digitally.
Each copy, as well as any copy generation, can be as crisp and clear as the original. The collective effect that combines the perfection of digital copies with the very low cost of distributing content electronically and distributing content more widely over the Internet,
It is relatively easy to create and distribute pirated copies of unauthorized copies. With a few keystrokes, a pirate can send hundreds or thousands of perfect copies of digital content over the Internet. Therefore, there is a need to ensure the protection and security of digital assets that are distributed electronically.

[0003] Providers of digital content are:
We want to establish a secure global distribution system for digital content that protects the rights of content owners. Issues relating to the establishment of a digital content distribution system include the development of systems for digital content electronic distribution, rights management and asset protection. Digital content distributed electronically includes content such as print media, films, games, programs, television, multimedia, and music.

The deployment of an electronic distribution system provides digital content providers with the ability to achieve rapid settlement of payments through immediate sales reporting and electronic arbitration, while at the same time acquiring secondary funding through content redistribution. Digital content providers and retailers can achieve reduced costs and improved margins because electronic digital content distribution systems are not affected by physical inventory loss or returns. Digital content providers could promote new distribution channels or enhance existing distribution channels to improve timed release of inventory. Transaction data from electronic distribution systems could be used to gain information about consumer buying patterns while providing immediate feedback on electronic marketing programs and promotions. To meet these goals, digital content needs to be made available to a wide range of users and businesses using an electronic distribution model, while ensuring the protection and metering of digital assets.

A2 by Real Audio, AT & T
B, Liquid Audio Pro by Liquid Audio Pro Corp.,
Other commercial electronic distribution systems for digital content, such as Audio Soft's City Music Network,
Provide transmission of digital data over protected and unprotected electronic networks. The use of a protected electronic network greatly reduces the requirements of digital content providers to distribute digital to a wide audience. The use of unprotected networks such as the Internet and the Web ensures that digital content can reach end users, such as by using encryption. However, encrypted digital
Once the content is decrypted on the end user's machine, the digital content is readily available to the end user for unauthorized redistribution. Thus, providing protection of digital assets, the rights of content providers are protected even after digital content is delivered to consumers and businesses;
There is a need for a secure digital content electronic distribution system. Thus, rights management is needed to enable secure delivery, licensing, and use control of digital assets.

Another reason that digital content owners have been struggling with electronic distribution is their desire to maintain and foster existing distribution channels. Most content owners sell through retailers. In the music market, these U.S. retailers include Tower Records, Peaches, Blockbuster, Circ
Including uit City. Many of these retailers have web sites that allow Internet users to make choices over the Internet and mail the choices to end users. Examples of music websites include Tower, Music Boulevard, Columbia House
including. The use of electronic distribution, particularly on the web, can remove the ability to distinguish retailers from each other and distinguish retailers from content owners. Accordingly, it would be desirable to provide retailers of electronic content, such as pictures, games, music, programs, videos, etc., with a method of distinguishing each other when selling music by electronic distribution and of distinguishing retailers from content owners. is necessary.

The content owner creates each digital content for electronic distribution from a distribution site such as an electronic store. Electronic stores on the Internet or by other online services want to distinguish stores from each other by their respective product offerings and product promotions. Traditional stores, i.e., non-electronic non-online stores similar to electronic stores, use product promotions, product sales, product samples, free return policies, and other promotional programs to create their own stores and their competitors. And is distinguished. However, in an online world where content providers impose terms on digital content,
The ability of electronic stores to distinguish stores is severely limited. In addition, even if the terms of use can be changed, e-stores will not be able to digitally promote and sell products electronically from content providers.
You face the difficult task of processing metadata related to content. Electronic stores need to manage some requirements when processing metadata. First, the electronic store must receive metadata associated with the digital content from the content provider. In many cases, this part of the metadata can be transmitted encrypted, so the content provider must create a mechanism for decrypting the encrypted content. Second
In addition, the e-Store may receive the content from the content provider or after the e-Store receives the content to assist in product marketing, product positioning, or other promotional considerations for that content. In some cases, one may wish to view metadata from a content provider in advance. Third, the electronic store must extract certain metadata to be used for promotional material, such as graphics and artist information.
In many cases, this promotional material is used directly by electronic stores in its online promotions. 4th
In some cases, an electronic store may wish to differentiate stores from one another by creating various offerings of digital content by changing some of the permitted usage conditions. Fifth, the e-store can automatically send the UR to the accounting arbitration house to direct the payment arbitration to the settlement arbitration house without having to go through the e-store for payment settlement.
A given address, such as L, may need to be inserted or changed in the metadata. Sixth, the electronic store may need to create a license for the authorized use of copyrighted digital content that matches the terms of use. For example,
This license may grant permission to make a limited number of copies of digital content. A license is required to reflect the terms of the license granted.

[0008] In view of all these requirements, in order to process metadata associated with digital content, many electronic stores create customized software programs to handle these requirements. The time, cost, and testing required to create such a customized software program can be significant. Therefore, it is necessary to provide a solution to such a requirement.

[0009] Further, another reason that the owner of digital contents has difficulty in electronic distribution is that it is difficult to create contents for electronic distribution. Today, many content providers have thousands or tens of thousands of titles in their portfolio. In the music example, there are several formats at the same time (for example,
It is not uncommon for the content owner to have a single master recording available on CDs, tapes, minidiscs). In addition, a single format may have a newly created or remixed master recording for a particular distribution channel. As an example, mixing for radio broadcasts is
Mixing for trucks may be different, and sound tracks for dance clubs may be different from commonly available consumer CDs. Creating and tracking an inventory of such various mixing can be cumbersome. Moreover, many owners of the master recording often republish old recordings in various subsequent collections, such as "Best Editions" or compilations of music soundtracks for other movies or other collections or compilations. As the content provided digitally increases, the need to remix and code the content for electronic distribution increases. In many cases, providers will need to use the old recording format as a guide to select the correct master recording and reprocess and code these recordings for release for electronic distribution. This may be especially true for content providers who want to help re-release old recordings for electronic distribution using that old format. The provider will consult the database to match titles, artists, and recordings and set coding parameters. This process of manually searching the database for record portfolios is not without its drawbacks. One disadvantage is that the operator must manually search the database and set the processing parameters appropriately. Another disadvantage is that
There is a possibility that an operator's transcription error occurs when selecting data from the database. Therefore, a method for automatically retrieving relevant data and master records for content, such as audio, has been developed.
It is necessary to provide to the provider.

[0010] The content owner creates digital content for electronic distribution by a process known as coding. Coding involves obtaining the content, digitizing the content if it is presented in an analog format, and further compressing it. Because of the reduced amount of data transmitted or stored, the process of compression allows digital content to be transferred over a network and stored more efficiently on recordable media. However, compression is not without its drawbacks. Most compression involves some loss of information and is called lossy compression. The content provider must decide which compression algorithm to use and the required level of compression. For example, in music, digital content or digital songs can have very different characteristics depending on the genre of music. The compression algorithm and compression level selected for one genre may not be the best choice for music of another genre. Also, the content provider
You may find that a given combination of compression algorithm and compression level works very well for certain genres of music, for example classics, but may give unsatisfactory results for other genres of music such as heavy metal. There is. In addition, audio engineers must equalize music, perform dynamic range adjustments, and perform other pre-processing and processing settings to ensure that the genre of coded music produces the desired result. No. The requirement that these coding parameters must always be set manually, such as equalization levels and dynamic range settings for each digital content, can be cumbersome. Returning to the music example, a music content provider with a collection covering various music genres must manually select the desired combination of coding parameters for each song or song set to be coded. right. Therefore, it is necessary to overcome the need for manual selection of process parameters for coding.

[0011]

The process for compressing content can require a large amount of dedicated computing resources, especially for large content items such as feature films. Compression algorithm providers offer various tradeoffs and advantages associated with their compression techniques. These trade-offs include the amount of time and computational resources required to compress the content, the amount of compression achieved from the original content, the desired bit rate for playback, the performance quality of the compressed content, etc. Including factors. It is problematic to use a coded program that takes a multimedia file as input, produces a coded output file, and does not provide any intermediate display of progress and status. Moreover,
In many situations, other programs are used to call or manage a coded program that does not provide any intermediate indication of the progress. Thus, there is no way for the calling application to measure the amount of coded content as a percentage of the total selection specified to be coded. This can be a problem in situations where the calling program attempts to schedule several programs to run at one time. Furthermore, this can be particularly troublesome if a content batch is selected for encoding and the content provider wishes to determine the course of the encoding process. Therefore, it is necessary to overcome such problems.

Yet another reason digital content providers have struggled to adopt electronic distribution for their content is to create digital players on end-user devices for electronically delivered content. There was no standard for it. Content providers, electronic stores, and others in electronic distribution chains may wish to provide a customized player on various devices, such as PCs, set-top boxes, handheld devices, and the like. There is a need for a set of tools that can handle the decryption of digital content in a tamper-proof environment, ie, an environment that prevents unauthorized access to the content during playback by third parties. In addition, there is a need for a set of tools that prevent end users from accessing content for uses other than those purchased, and allow end users to manage a local library of digital content.

[0013] Yet another reason digital content providers have struggled to adopt online distribution of digital content is the time it takes to deliver the content over a standard telephone line, even if it is compressed. The Intel Broadcasting System and the Hughes DirecP system enable digital content downloads through existing broadcast infrastructure.
There are other systems for providing information through the broadcast infrastructure, such as "C". While useful, these broadcast systems are not without their shortcomings. First of all, these systems do not provide a secure environment for the distribution of digital content. Many of the systems available today require the use of a back channel, usually a telephone line, to select the desired digital content. If the back channel or telephone line is unavailable, the content cannot be selected. Other systems do not provide promotion data, content data, and metadata on a single digital channel, but rather require additional bidirectional channels for one or more of these functions. The present invention allows the use of bidirectional channels if available for download-on-demand as well as efficient retransmission of corrupted content data blocks. Therefore, it is necessary to overcome this drawback.

Another disadvantage of current broadcast systems is that communication lines, broadcast infrastructure, DVDs
And that the content provider cannot use the same tool to reliably distribute the content on computer readable media such as CDs. Therefore, there is a need for a method and system for enabling delivery of digital content by a broadcast infrastructure to overcome these problems.

Details regarding the context of digital content protection can be gleaned from three sources: http: // w
ww.a2bmusic.com/about/papers/musicipp.htm
AT & T Labs available online at RL (Florham Par
k, NJ), "Music on the Internet and the IntellectualPr" by Jack Lacy, James Snyder, and David Maher.
operty Protection Problem. " http: //www.intertrus
InterTrust Technologies Corp. (Sunny), available online at the URL t.com/architecture/stc.html
vale, CA) Olin Silbert, David Bernstein, David V
`` Securing the Content, Not the Wire f '' by an Wie
or Information Commerce "Dig
A cryptographic protection container called iBox. http: //cyptolope.ibm.c
IBM White called "Cryptolope Container Technology" available online at the URL om / white.htm
Paper.

[0016]

SUMMARY OF THE INVENTION A method for reliably receiving data on a user's system from a web broadcast infrastructure over a plurality of channels. The method includes receiving promotion metadata from a first web broadcast channel, wherein the promotion metadata relates to data available for reception; Assembling, at least in part, a promotion offering for consideration by the user; selecting, by the user, data to receive in association with the promotion metadata; receiving data from the second web broadcast channel The step of
The data has been selected from the promotion metadata, the data has been pre-encrypted using a first encryption key, and a first decryption key is received by a computer readable medium. And wherein the first decryption key is for decrypting at least a portion of the data received over the second web broadcast channel.

In another embodiment, a method and system for reliably transmitting data from a web broadcast center is disclosed.

[0018]

DETAILED DESCRIPTION OF THE INVENTION To assist in quickly locating items in this embodiment, a table of contents relating to the present invention is provided.

I. Secure Digital Content Electronic Distribution System A. Outline of system Rights management 2. Weighing 3. Open architecture B. System functional elements 1. Content provider 2. 2. Electronic Digital Content Store Mid-market partners 4. Clearing house End user device 6. Transmission infrastructure C. System applications II. Cryptographic Concept and Application to Secure Digital Content Electronic Distribution System Symmetric algorithm B. Public key algorithm Digital signature D. Digital certificate E. Guide to SC graphic representation Examples of secure container encryption III. Flow of Secure Digital Content Electronic Distribution System IV. Rights management architecture model Architecture layer functions B. Function classification and flow 1. Content format layer 2. Content usage control layer 3. Content identification layer License control layer C. Content distribution license control A. Secure container structure General structure B. B. Rights management language syntax and semantics Overview of flow and processing of secure container D. E. Format of Metadata Secure Container 620 Format of Offer Secure Container 641 G. Format of Transaction Secure Container 640 Format of Order Secure Container 650 Format of License Secure Container 660 Format of Content Secure Container VI. Packing and unpacking secure containers Overview B. Material List (BOM) Parts Key description parts VII. Clearing House A. Overview B. Rights management processing C. Country specific parameters Audit logs and tracking Report of results Billing and payment validation Retransmission VIII. Content Provider A. Overview B. Work Flow Manager Product standby action / information process 2. 2. New content request process 3. Automatic metadata collection process 4. Manual metadata input process Use condition process 6. Supervised release process 7. Metadata SC creation process 8. Watermark process Pre-processing compression process Content quality management process 11. 11. Encryption process Content SC creation process 13. Final quality assurance process 14. Content distribution process 15. Work flow rules Metadata assimilation input tool Automatic metadata collection tool 2. 2. Manual metadata input tool Usage condition tool 4. 4. Each part of the metadata SC Supervised release tool D. Content processing tool Watermark tool 2. 2. Pre-processing compression tool Content quality management tool 4. E. Encryption tool Content SC creation tool Final quality assurance tool G. Content distribution tool Content Promotion Website I. Content Host Content host site 2. Content Host Site 11 Provided by Secure Digital Content Electronic Distribution System
1 IX. Electronic Digital Content Store A. Overview-Support for Multiple Electronic Digital Content Stores Point-to-point electronic digital content distribution service Integration requirements 2. Content collection tool 3. Transaction processing module 4. 4. Notification interface module Accounting arbitration tool C. Broadcasting electronic digital content distribution service 1. Embodiment of multi-tier digital TV Embodiment of Web Broadcasting by Individual Channel X. End User Device A. Overview B. Installation of application C. D. Secure container processor Player application Overview 2. 2. End user interface components Copy / playback management component 4. 4. Decryption 1505, decompression 1506, playback components 5. Data management 1502 and library access components 6. Inter-application communication component 7. Other various components General-purpose player End user device 109 in broadcast delivery mode 1. Embodiment of Multi-Tier Digital TV Embodiment of Web Broadcasting via Individual Channel

I. Secure Digital Content Electronic Distribution System A. System Overview Secure digital content electronic distribution system provides digital distribution to end-user client devices.
A technology platform that includes the technologies, specifications, tools, and software required for secure delivery and rights management of content and digital content-related content. End-user devices include PCs, set-top boxes (IRDs), and Internet appliances.
These devices can copy the content to external media or portable consumer devices authorized by the content owner. The term digital content or simply content means information and data stored in digital format, including pictures,
Includes movies, videos, music, programs, multimedia and games.

[0021] This technology platform creates digital content in a secure manner with a point-to-point and broadcast infrastructure (cable, internet, satellite, wireless, etc.) licensed to end-user devices. To protect it from unauthorized copying or playback. Moreover, the architecture of this technology platform allows for the integration and migration of various technologies such as watermarking, compression / coding, encryption, and other security algorithms as they evolve over time.

The base components of the secure digital content electronic distribution system include (1) rights management for protecting the ownership of the content owner, and (2)
Transaction metering for immediate and accurate compensation and (3) enabling content providers to author content and allow its secure delivery by multiple network infrastructures for playback on any compliant player Open, well-documented architecture.

1. Rights Management Rights management in secure digital content electronic distribution systems is implemented by a set of functions distributed among the operating components of the system. Its primary functions are: license permission and control so that only the authorized intermediate user or end user who has secured the license unlocks the content, the number of permitted copies, the number of plays, and the time interval during which the license is valid. Or control and enforcement of content use in accordance with purchase or license terms, such as duration. The secondary function of rights management is to combat piracy by means of identifying the source of unauthorized copying of the content.

Licensing and control consists of clearing house entities and secure containers (SC)
Implemented by the use of technology. The clearinghouse enables licensing by allowing intermediate or end users to unlock content after verifying the successful completion of a license transaction. Secure containers are used to distribute encrypted content and information among system components. An SC is a cryptographic carrier for information or content that uses encryption, digital signatures, digital certificates to protect against unauthorized interception or modification of electronic information and content. It also allows verification of the authenticity and integrity of the digital content. An advantage of these rights management features is that the electronic distribution infrastructure for digital content does not need to be secure or reliable. Thus, transmission over a network infrastructure such as the web and the Internet is possible. This is due to the fact that the content is encrypted in a secure container and its storage and distribution is decoupled from its unlocking and use control. Only the user with the decryption key can unlock the encrypted content, and the clearinghouse releases the decryption key only for the appropriate authorized use request. Clearing
The House will not clear false requests from unknown or unauthorized parties or requests that do not meet the content usage terms set by the content owner. Moreover, if the SC is tampered with during the transmission, the software in the clearinghouse determines that the content in the SC has been corrupted or altered and rejects the transaction.

Content usage control is enabled by an end-user player application 195 running on an end-user device. This application embeds a digital code defining the allowable number of secondary copies and playbacks in every copy of the content. Digital watermarking technology is used to generate this digital code and keep it hidden from other end-user player applications 195, making it resistant to modification attempts. In an alternative embodiment, this digital code is only retained as part of the terms of use associated with the content 113. Accessing digital content 113 within a compliant end-user device
The player application 195 reads the watermark, checks for usage restrictions, and updates the watermark as needed. If the usage of the requested content does not meet the usage conditions, for example, if the number of copies has been exhausted, the end user device will not fulfill the request.

Digital watermarks also provide a means for identifying the source of authorized or unauthorized copies of content. Initial watermarks in the content are embedded by the content owner to identify the content owner, specify copyright information, define distribution areas, and add other relevant information. The second watermark identifies the content purchaser (or license holder) and the end user device, specifies the purchase or license terms and dates, and adds other relevant information on the end user device side. Embedded inside.

Because the watermark is an integral part of the content, it is transmitted in a copy, regardless of whether copying is permitted. Thus, digital content always contains information about its source and its authorized uses, regardless of where the content resides or comes from. This information can be used to combat illegal use of the content.

2. Metering As part of its rights management function, the clearinghouse records all transactions whose key exchanges are cleared by the clearinghouse. This record allows licensing and metering of the original usage conditions. The transaction record can be reported to the content owner or a responsible party, such as a content provider, retailer, etc., immediately or periodically to facilitate electronic reconciliation of transaction payments and other uses.

3. Open Architecture Secure digital content electronic distribution system (system) with specifications and interfaces to facilitate widespread implementation and acceptance of the system in the market while maintaining rights protection for content owners Open architecture. The flexibility and openness of the system architecture also allows the system to evolve over time as various technologies, transmission infrastructures, and devices are delivered to the market.

This architecture is open in terms of the nature of the content and its format. The distribution of audio, programs, multimedia, video, and other types of content is supported by this architecture. The content could be in a proprietary format, such as linear PCM for digital music, or a format achieved by additional pre-processing or coding such as filtering, compression, pre-emphasis / de-emphasis. This architecture is open to various encryption and watermarking techniques. This is a variety of content
It allows for the selection of specific techniques to address types and formats and to enable the introduction or adoption of new technologies as they evolve. This flexibility allows content providers to secure digital
Data compression, encryption,
And the technology to use for the format
Can evolve.

This architecture is also open to various distribution networks and distribution models. This architecture supports content distribution over low-speed Internet connections or high-speed satellite and cable networks, and can be used with point-to-point or broadcast models. Moreover, the architecture is designed to perform functions within end-user devices on a wide variety of devices, including low-cost consumer devices. This flexibility allows content providers and retailers to provide content to intermediate or end users through a variety of service offerings, where users can purchase or license content, play it, and It can be recorded on a compatible player device.

B. System Functional Elements Turning now to FIGS. 1-4, there is shown a block diagram outlining a secure digital content electronic distribution system 100 according to the present invention. The secure digital content electronic distribution system 100 encompasses multiple business elements, including end-to-end solutions, and includes a content provider (101) or digital content owner, an electronic digital content store 103, a mid-market. Partners (not shown), clearinghouse 105, content host site 111, transmission infrastructure 107,
End user device 109 is included. Each of these business elements uses various components of the secure digital content electronic distribution system 100. Especially related to the distribution of electronic content 113,
A high-level description of these business elements and system components follows.

1. Content Provider 101 The content provider 101 or content owner is the owner of the original content 113 and / or a distributor authorized to package the independent content 113 for further distribution. . The content provider 101 can either directly leverage its rights or provide the content 113 to the electronic digital content store 103 or an intermediate market partner (not shown) in exchange for payment of the content usage, typically for electronic commerce revenue. Can be licensed. Content Provider 10
One example is Sony, Time Warner, MTV, I
Includes BM, Microsoft, Turner, Fox and others.

The content provider 101 uses tools provided as part of the secure digital content electronic distribution system 100 to create its own content 113 and associated data for distribution. The work flow manager tool 154 schedules the content 113 to be processed and tracks the content 113 as it goes through various steps of creation and packaging of the content 113 to maintain high quality assurance. The term metadata is used throughout this specification to mean data about the content 113, but this term does not include the content 113 itself in this embodiment. As an example, the song metadata may be a song title or song credit, but not a recording of the song. Content 113 will include a recording. Metadata assimilation input tool 161
Metadata from the provider's database 160 or data provided by the content provider in a predefined format (CD title, in the case of music,
Information of the content 113, such as artist names, song titles, CD artwork, etc., and use it to package it for electronic distribution. The metadata assimilation input tool 161 is also used to input usage conditions for the content 113. The usage condition data may include copy restriction rules, wholesale prices, and any business rules deemed necessary. The watermark tool is used to hide data identifying content owner, processing date, and other relevant data within content 113. In embodiments where the content 113 is audio, an audio pre-processor tool may be used to adjust the dynamics for optimal compression quality or equalize the content 113 or other audio to the desired compression level. The content 113 is compressed, and the content 113 is encrypted. These follow the technological advances in digital content compression / encoding, encryption and formatting methods and adapt the content providers 101 to use the best tools as they evolve in the market over time. Can be.

The encrypted content 113, digital content related data or metadata, and an encryption key
Packed into the SC (described below) by the SC Packer tool and used by the Content Host for electronic distribution
Stored on the site and / or promotion web site. The content host site may reside at the content provider 101 or at multiple locations including the electronic digital content store 103 and an intermediate market partner (not shown) facility. Since both the content 113 and the key (described below) are encrypted and packed in the SC, the electronic digital content store 103
Or other host agent may provide clearance from the clearinghouse and the content provider 10
It is not possible to directly access the decrypted content 113 without notifying the content 113.

2. Electronic Digital Content Store 103 Electronic Digital Content Store 103 is an entity that markets content 113 through a variety of services or applications, such as theme programming of content 113 or electronic merchandising of content 113. The electronic digital content store 103 is responsible for the design, development, business planning, settlement, merchandising,
Manage marketing and sales. An example of an online electronic digital content store 103 is a web site that provides electronic downloads of software.

In each service, an electronic digital
The content store 103 is a secure digital
Perform a given function of the content electronic distribution system 100. The electronic digital content store 103
Gather information from the content provider 101, pack the content and metadata into additional SCs, and deliver the SCs to consumers or businesses as part of a service or application. The electronic digital content store 103 uses tools provided by the secure digital content electronic distribution system 100 to assist in metadata extraction, secondary terms of use, SC packaging, and tracking of electronic content transactions. . Content 1 is used as secondary usage condition data.
13, purchase price, pay-per-listen price, copy permission,
It may include retail business offers such as target device types, timed availability restrictions, and the like.

Electronic Digital Content Store 10
3 completes a valid request for electronic content 113 from the end user, the electronic digital content store 103 clears the right to release the decryption key for the content 113 to the customer.
05 is responsible for awarding. The electronic digital content store also permits the download of the SC containing the content 113. Electronic digital content
The store may choose to host the SC containing the digital content on its local site side, or may use other content host site hosting and distribution facilities.

The electronic digital content store is:
Secure Digital Content Electronic Distribution System 1
00 can be used to provide customer service for any questions or problems the end user may have, or
Store 103 may also outsource its customer service support to clearing house 105.

3. Intermediate Market Partners (not shown) In an alternative embodiment, the secure digital content electronic distribution system 100 can be used to ensure that content 113 is provided to other businesses, called intermediate market partners. Such partners may include digital content affiliates that provide non-electronic services, such as television or video clubs that distribute content 113, radio broadcasters or record clubs. Such partners may also include other trusted parties that deal with material as part of the production or marketing of recordings, such as record studios, duplicators, producers, and the like. Such an intermediate market partner needs clearance from clearing house 105 to decrypt content 113.

4. Clearing House 105 The clearing house 105 provides licensing and record keeping for all transactions related to the sale and / or authorized use of the encrypted content 113 within the SC. Clearing
When house 105 receives a request for an decryption key for content 113 from an intermediate or end user, clearing house 105 validates the integrity and authenticity of the information in the request and the request is It verifies that it has been authorized by the electronic digital content store or content provider 101 and verifies that the requested use meets the content usage terms defined by content provider 101.
When such a verification is performed, the clearing house 105 transmits the content 113 packed in the license SC.
The decryption key for the requesting end user.
This key is encrypted so that only authorized users can retrieve it. If the end user's request cannot be verified, is incomplete, or is not authorized, clearing house 105 rejects the request for the decryption key.

The clearinghouse 105 can record all transactions and report them immediately, on a regular basis, or with limitations to responsible parties such as the electronic digital content store 103 and the content provider 101. . This report can thereby inform the content provider 101 of the sale of the content 113 and provide the electronic digital content
A means by which the store 103 can obtain an audit trail of electronic delivery to its customers. When the clearing house 105 detects that the information in the SC is damaged or does not conform to the usage conditions of the content, the clearing house 105 notifies the content provider 101 and / or the electronic digital content store 103. You can also. The transaction record repository function of the clearinghouse 105 database is structured for data mining or reporting.

In another embodiment, clearinghouse 105 can provide customer support and exception handling for transactions, such as redemptions, transmission failures, purchase disputes, and the like. The clearinghouse 105 can operate as an independent entity that provides a trusted steward for rights management and metering. It performs billing and settlement as needed. Examples of electronic clearinghouses include Secure-Bank.com and Secure Electronic Transactions (SET) with Visa / Mastercard. In one embodiment, clearing house 105 is a web site accessible to end-user device 109. In another embodiment, the clearing house 105 is part of the electronic digital content store 103.

5. End-User Device 109 The end-user device 109 can be any player device that includes an end-user player application 195 (described below) that conforms to the specifications of the secure digital content electronic distribution system 100. Such devices can include PCs, set top boxes (IRDs), and Internet appliances. End-user player application 195
Could be implemented in software and / or consumer electronics hardware. In addition to playback, recording, and library management functions, the end-user player application 195 provides an SC for enabling rights management on the end-user device 109.
Perform processing. The end-user device 109 is a digital
Managing the download and storage of the SC containing the content, requesting and managing the receipt of the encrypted digital content key from the clearing house 105, processing the watermark each time the digital content is copied or played, It manages the number of copies made (or deletes copies) according to the usage conditions of the digital content, and executes copying to external media or portable consumer devices if permitted. The portable consumer device uses the end-user player application 1 to process the usage conditions of the content embedded in the watermark.
A subset of 95 functions can be performed. The terms end-user and end-user player application 195 will be used to mean through its use or execution on the end-user device 109.

6 Transmission Infrastructure 107 Secure Digital Content Electronic Distribution System 1
00 is independent of the transmission network connecting electronic digital content store 103 and end-user device 109. It supports both point-to-point distribution models, such as the Internet, and broadcast distribution models, such as digital broadcast television.

Even when using the same tools and applications to acquire, package, and track transactions for content 113 with various transmission infrastructures 107, the presentation and method of delivering services to customers depends on the chosen infrastructure. Can vary depending on structure and distribution model. Also, high-bandwidth infrastructure can deliver higher quality digital content with more acceptable response times than low-bandwidth infrastructure,
The quality of the content 113 being transferred may also vary. Service applications designed for the point-to-point distribution model can be adapted to also support the broadcast distribution model.

C. System use Secure digital contents electronic distribution system 1
00 ensures that a high quality electronic copy of the content 113 can be delivered to the end user device 109, whether a consumer or a business, and can regulate and track the use of the content 113.

The secure digital content electronic distribution system 100 could be deployed in a variety of consumer and business-to-business services using both new and existing distribution channels. Each particular service could use a different financial model that can be implemented by the rights management function of the secure digital content electronic distribution system 100. Models such as wholesale or retail purchases, pay-per-listen use, subscription services, copy / copy prohibition restrictions, or redistribution are enabled by clearinghouse 105 rights management and end-user player application 195 copy protection features. Will be able to.

The secure digital content electronic distribution system 100 provides the electronic digital content store 103 and mid-market partners with great flexibility in creating services to sell content 113. At the same time, the system provides the content provider 101 with a certain level of assurance that its digital assets are protected and metered so that the license for the content 113 is properly compensated.

II. Cryptographic Concept and Application to Secure Digital Content Electronic Distribution System Secure Digital Content Electronic Distribution System 1
The license control in 00 is based on the use of encryption. This section introduces the basic encryption technology of the present invention. The use of public key encryption, symmetric key encryption, digital signatures, digital watermarks, digital certificates is known.

A. Symmetric algorithm Secure digital contents electronic distribution system 1
At 00, the content provider 101 encrypts the content using a symmetric algorithm. This algorithm is called a symmetric algorithm because it encrypts and decrypts data using the same key. The data sender and the message receiver must share this key. The shared key is referred to herein as a symmetric key. The architecture of secure digital content electronic distribution system 100 is independent of the particular target algorithm selected for a particular implementation.

The general symmetric algorithm is DES, R
C2 and RC4. DES and RC2 are both block ciphers. Block ciphers use one block of data bits at a time to encrypt data. DES
Is the official United States government encryption standard, has a block size of 64 bits, and uses a 56-bit key.
Triple DES is commonly used to increase the security achieved by simple DES. R
C2 was designed by RSA Data Security. RC2 uses variable key size encryption and has a block size of 64 bits. Also R
RC4 designed by SA Data Security
Is a variable key size stream cipher. Stream ciphers operate on a single data bit at a time. RS
A-Data Security claims that RC4 requires 8-16 machine operations per output byte.

At IBM, a high-speed algorithm called SEAL was designed. SEAL uses a variable length key and 3
Stream algorithm optimized for 2-bit processors. SEAL requires about five basic machine instructions per data byte. If the used 160-bit key is already preprocessed and in the internal table, a 486-based computer at 50 MHz will execute the SEAL code at 7.2 megabytes / second.

Microsoft reports cryptographic performance benchmark results in its CryptoAPI overview document. This result is the result with Windows NT 4.0.
Obtained by running an application using Microsoft's CryptoAPI on a 20 MHz Pentium-based computer.

[0055]

[Table 1]

B. Public Key Algorithm Secure Digital Content Electronic Distribution System 1
At 00, the public key is used to encrypt the symmetric key and other small data pieces. The public key algorithm uses two keys. The two keys are mathematically related so that data encrypted with one key can be decrypted only with the other key. The owner of these keys keeps one key secret (private key) and publicly distributes a second key (public key).

To ensure the transmission of a confidential message using a public key algorithm, the message must be encrypted using the recipient's public key. Only the recipient with the associated secret key can decrypt the message. Public key algorithms are also used to generate digital signatures. The private key is used for that purpose. The following sections provide information on digital signatures.

The most commonly used public key algorithm is RSA public key cryptography. This has become the de facto public key standard in the industry. Other algorithms that also work well for encryption and digital signatures include ElGamal and Rabin. RSA is a variable key length encryption.

The symmetric key algorithm is significantly faster than the public key algorithm. In software, DES is typically at least 100 times faster than RSA. For this reason, RSA is not used for encrypting bulk data. RSA Data Security has a secret key operation (encryption or decryption using a secret key) throughput of the RSA Data Security toolkit BSAFE 3.0 on a 90 MHz Pentium machine with 21.6 on a 512 bit module. Kilobits per second, with a 1024-bit module reporting 7.4 kilobits per second.

C. Digital Signature Secure Digital Content Electronic Distribution System 1
At 00, the issuer of the SC protects the integrity of the SC by signing it digitally. In general,
To create a digital signature for a message, the message owner first computes a message digest (defined below), and then encrypts the message digest using the owner's private key. The message is distributed with its signature.
The recipient of the message can verify the digital signature by first decrypting the signature using the message owner's public key to recover the message digest. Next, the receiver calculates the digest of the received message and compares the digest with the recovered digest. If the message has not been modified during distribution, the calculated digest and the recovered digest must be equal.

In the secure digital content electronic distribution system 100, since the SC includes a plurality of data parts, a digest is calculated for each part, and a summary digest is calculated for the connected part digests. The digest is encrypted using the SC issuer's private key. The encrypted digest will be the publisher's digital signature for the SC. The part digest and the digital signature are contained in the body of the SC. The receiving side of the SC uses the received digital signature and the part digest to generate the S
The integrity of C and its parts can be verified.

Use a one-way hash algorithm to calculate the message digest. The hash algorithm takes a variable length input message and converts it to a fixed length string, the message digest. One-way hash algorithms operate in only one direction. That is, it is easy to calculate a digest for an input message, but it is very difficult (calculationally impossible) to generate an input message from the digest. Due to the nature of the one-way hash function, the message digest can be considered as a fingerprint of the message.

A more general one-way hash function is RS
MD5 by A Data Security and US National
Institute of Technology and Standards (NITS)
SHA designed by the company.

D. Digital Certificates Digital certificates are used to establish or verify the identity of the person or entity that sent a digitally signed message. Certificates bind a public key to a person or entity,
A digital document issued by a certification authority. This certificate contains the public key, the name of the person or entity,
Includes expiration date, name of certification authority, and other information. Also,
The certificate also contains the certificate authority's digital signature.

When an entity (or person) signs a message with its public key and sends a message with the digital certificate attached, the recipient of the message accepts the message using the entity's name from the certificate. Judge whether or not.

In the secure digital content electronic distribution system 100, all SCs except those issued by the end user device 109 include a certificate of the creator of the SC. End user device 109 need not include the certificate in its SC. This is because many end users do not need to obtain or have a certificate issued by a non-authentic certificate authority. The clearing house 105 of the secure digital content electronic distribution system 100 has the option to issue a certificate to the electronic digital content store 103. Thus, end user device 109 can independently verify that electronic digital content store 103 is authorized by secure digital content electronic distribution system 100.

E. Guide to SC graphic representation In this document, in order to graphically represent SC, encrypted parts,
Use drawings showing unencrypted parts, encryption keys and certificates. Next, referring to FIG. 5, FIG. 5 is a drawing example of the SC 200. The following symbols are used in the SC diagram. Key 20
1 is a public key or a secret key. The key tooth is the key
Indicates the owner, for example, CLRNGH for a clearinghouse. The PB inside the handle indicates that it is a public key, so key 201 is the clearinghouse public key. PV inside handle
Indicates that it is a secret key. The diamond is the end-user digital signature 202. The initials indicate which secret key was used to create the signature, so the EU is the end user's digital signature according to the following table. The symmetric key 203 is used to encrypt the content. The encrypted symmetric key object 204 contains the symmetric key 203 encrypted with the CLRNGH PB. The key at the top edge of the rectangle is the key used to encrypt the object.
The symbol or text inside the rectangle indicates an encrypted object (in this case, a symmetric key). In this example, the transaction ID encrypted object 205 is another one.
One encrypted object. The usage conditions 206 for content license management are as described below. SC 200 includes terms of use 206, transaction ID encryption object 205, application ID encryption object 207, and encryption symmetric key object 204, all signed with end-user digital signature 202.

The following table shows initials that identify the signer of the SC.

[0069]

[Table 2]

F. Secure Container Encryption Example The following table and figure outline the encryption and decryption process used to create and recover information from the SC. The SC created and decrypted in this process outline is a general SC. This does not represent any of the specific SC types used for rights management in the secure digital content electronic distribution system 100. This process consists of the steps described in FIG. 6 for the encryption process.

Process Flow of the Encryption Process of FIG. 6 Step Process 301 The sender generates a random symmetric key and uses it to encrypt the content. 302 The sender executes the encrypted content by a hash algorithm to generate a content digest. 303 The sender encrypts the symmetric key using the receiver's public key. PBRECPNT means the public key of the receiving side. 304 The sender performs the encryption symmetric key with the same hash algorithm used in step 302 to generate a symmetric key digest. 305 The sender performs the concatenation of the content digest and the symmetric key digest using the same hash algorithm used in step 302 to generate an SC digest. 306 The sender encrypts the SC digest with the sender's secret key to generate a digital signature for the SC. PV SENDER means the secret key of the sender. 307B The sender creates an SC file containing the encrypted content, encrypted symmetric key, content digest, symmetric key digest, sender's certificate, and SC signature. 307A The sender must have obtained a certificate from a certification authority before initiating secure communication. The certification authority
Include the sender's public key and the sender's name in the certificate,
Sign it. PV CAUTHR means the private key of the certification authority. The transmitting side transmits the SC to the receiving side.

Process Flow of the Decryption Process of FIG. 7 Step Process 408 The receiver receives the SC and disassembles its parts. 409 The recipient can decrypt the digital certificate in the sender's certificate by decrypting it with the certification authority's public key.
Verify the signature. If the certificate's digital signature is valid, the receiver obtains the sender's public key from the certificate. 410 The receiver uses the sender's public key to decrypt the SC's digital signature. This is SC
Recover the digest. PB SENDER means the public key of the sender. 411 The receiver performs the concatenation of the received content digest and the encryption key digest using the same hash algorithm used by the sender to calculate the SC digest. 412 The receiver compares the calculated SC digest with the digest recovered by the sender's digital signature. If they are the same, the receiving party verifies that the receiving digest has not been modified and continues the decryption process. If they are not the same,
The receiving side discards the SC and notifies the transmitting side. 413 The receiver performs the encryption symmetric key using the same hash algorithm used in step 411 to calculate a symmetric key digest. 414 The receiver compares the calculated symmetric key digest with the digest received at the SC. If this is the same, the receiver knows that the encryption symmetric key has not been changed. The receiver proceeds with the decryption process. If this is not valid, the receiver shall
Is discarded and the sender is notified. 415 The receiver executes the encrypted content with the same hash algorithm used in step 411 to calculate a content digest. 416 The receiving side compares the calculated content digest with the digest received by the SC. If this is the same, the receiving side knows that the encrypted content has not been changed. The receiver then proceeds with the decryption process. If this is not valid, the receiver discards the SC and notifies the sender. 417. The receiver decrypts the encrypted symmetric key using the receiver's private key. This recovers the symmetric key. PV RECPNT means a secret key of the receiving side. 418 The receiver decrypts the encrypted content using the symmetric key. This will restore the content.

III. Secure Digital Content Electronic Distribution System Flow Secure Digital Content Electronic Distribution System 1
00 is comprised of multiple components used by various parties in the system. Such parties include content provider 101, electronic digital content store 103, end-user device 109
, Including the clearinghouse 105. The high-level system flow is used as an overview of the secure digital content electronic distribution system 100. This flow, outlined below, is based on the system 10
Track content passing through all zeros. Moreover, this flow outlines the steps used by parties to perform transactions for purchasing, unlocking, and using content 113. Some of the assumptions made in this system flow include: This is a digital content service (PC
Is a system flow for a point-to-point interface to the system. Content provider 101 provides audio in PCM uncompressed format (as a music audio example)
Present digital content. The content provider 101 has metadata in an ODBC compliant database, or the content provider 101 can enter data directly into the content information processing subsystem or use a standard ASCII
You have already provided the data in file format. • Financial settlements are made by electronic digital content stores. The content 113 is processed as a host at the single content host site 111;

Those skilled in the art will note that these assumptions can be modified to address the exact nature of the digital content being broadcast, for example, music, videos, programs, and electronic distribution systems. I want to be.

The following process flow is shown in FIGS.
Is shown in Step Process 121 The uncompressed PCM audio file is provided as content 113 by content provider 101. The file name is entered into the workflow manager 154 tool along with the unique identifier of the content provider 101 for the content 113. 122 The metadata is retrieved from the content provider database 160 by the content information processing subsystem using the unique identifier of the content provider 101 for the content 113 and the information provided by the database mapping template. 123 Work Flow Manager Tool 154
Is used to indicate the content flow through the collection creation process at the content provider 101. It can also be used to track the status of a content piece in the system at any time. The usage conditions for 124 content 113 are entered into the content information processing subsystem, which can be done manually or automatically. This data includes copy restriction rules and other business rules deemed necessary. All input of the metadata can be performed in parallel with the audio processing of the data. The 125 watermark tool is used to hide data in the content 113 that the content provider 101 deems necessary to identify the content. This is when it was captured and where it came from (in this case the content provider 101)
And other information specified by the content provider 101. The content processing tool 125 performs equalization to the content 113, adjustment of dynamics, and resampling as needed for the various supported compression levels. The content 113 is a content processing tool 125
To the desired compression level. The content 113 can then be played back to verify that this compression provides the required level of content 113 quality. If necessary, equalize, adjust for dynamics,
Compression and reproduction quality checks can be executed a desired number of times. The content 113 and a subset of its metadata are encrypted with a symmetric key by the SC packer. The tool then uses the clearinghouse 105 public key to encrypt the key and generate an encrypted symmetric key. This key can be transmitted anywhere without compromising the security of the content 113, since the only entity that can decrypt it is the clearinghouse 105. Next, the encryption symmetric key, metadata, and other information about the content 113 are packed into the metadata SC by the SC packer tool 152. 127. Next, the encrypted content 113 and the metadata are packed in the content SC. At this point, the processing regarding the content 113 and the metadata is completed. Next, the metadata SC is sent to the content promotion website 156 using a content distribution tool (not shown). 129 The content distribution tool sends the content SC to the content host site 111. content·
The host site can be at the content provider 101, the clearing house 105, or at a special location dedicated to the content host. The URL for this site is a part of the metadata added to the metadata SC. 130 The content promotion web site 156 stores new content 113 added to the system 100 in the electronic digital content store 10.
Notify 3. 131 Using the content collection tool, the electronic digital content store 103 then downloads the metadata SC corresponding to the content 113 that they want to sell. 132 Electronic Digital Content Store 103
Can use their content collection tools to
Any data desired to be used for promoting the content 113 on the site is extracted from the metadata SC. Access to portions of this metadata can be secured and billed if desired. 133 This Electronic Digital Content Store 1
The usage conditions for the content 113 unique to 03 are input using a content collection tool. Such usage conditions include retail prices and copy / playback restrictions for various compression levels of content 113. 134 Electronic Digital Content Store 103
The unique terms of use and the original metadata SC are packed into the offer SC by the SC Packer tool. 135 Electronic Digital Content Store 103
After updating its web site, content 113 is made available to end users surfing the web. 136 When the end user finds the content 113 that the end user wants to purchase, the end user clicks on a content icon, such as a music icon, and the item is displayed in the end user's shopping list maintained by the electronic digital content store 103.・ It is added to the cart. When the end user completes the shopping, the end user submits a purchase request to the electronic digital content store 103 for processing. 137 Next, Electronic Digital Content Store 1
03 interacts with a credit card clearing organization to secure funds as if they are currently doing business. 138 Electronic Digital Content Store 103
Receives the credit card authorization number from the credit card clearing organization, stores it in a database and calls the SC packer tool to construct a transaction SC. This transaction SC includes all of the offers SC for the content 113 purchased by the end user and the electronic digital content store 103
Includes a transaction ID that can be tracked to, information identifying the end user, compression level, usage conditions, and a price list of purchased songs. 139 Next, this transaction SC is transmitted to the end user device 109. 140 When the transaction SC arrives at the end user device 109, it opens the transaction SC and starts an end user player application 195 that approves the end user's purchase. The end-user player application 195 can then open the individual offer SC and, in an alternative embodiment, notify the user of the estimated download time. The application then requests the user to specify when the content 113 is to be downloaded. 141 Based on the time at which the end user requested the download, the end user player application 195 wakes up,
Constructing an order SC that includes the encrypted symmetric key for three, the transaction ID, and the end-user information will initiate the start of the download process. 142 The order SC is then sent to the clearing house 105 for processing. 143 The clearing house 105 receives the order SC, opens it, and verifies that none of the data has been tampered with. Clearing House 10
5 validates the terms of use purchased by the end user. Such terms of use must match those specified by content provider 101. This information is logged into the database. 144 After all checks have been completed, the encrypted symmetric key is decrypted using the clearinghouse 105 private key. The symmetric key is then encrypted using the end user's public key. This new encrypted symmetric key is then packaged in the license SC by the SC packer. 145 Next, the license SC is transmitted to the end user. When the license SC is received by the end user device 109, the license SC is stored in the memory until the content SC is downloaded. 147 The end user device 109 transmits the corresponding license SC for the purchased content 113 and requests it from the content host facility 111. 148 Content 113 is the end user device 109
Sent to Upon receipt, the content 113 is decrypted by the end-user device 109 using the symmetric key.

IV. Rights management architecture model Architecture Layer Functions FIG. 8 is a block diagram of the rights management architecture of the secure digital content electronic distribution system 100. Architecturally, a license control layer 501, a content identification layer 503, a content use control layer 505,
The content format layer 507 is composed of four layers: the secure digital content electronic distribution system 10.
Represents 0. The overall functional goals of each layer and the individual key functions of each layer are described in this section. The function of each layer is completely independent of the function of the other layers. Within a wide range of limitations, the function of each layer can be replaced by a similar function without affecting the functionality of the other layers. Clearly, the output from one layer needs to satisfy acceptable formats and semantics for the adjacent layer.

The license control layer 501 guarantees the following points. • Digital content is protected from illegal interception and tampering during distribution. Content 113 originates from a legitimate content owner and is distributed by a license distributor, eg, electronic digital content store 103. Digital content purchasers have properly licensed applications. The distributor receives payment from the buyer before a copy of the content 113 is made available to the buyer or end user. • A record of the transaction is kept for reporting.

The content identification layer 503 enables verification of the copyright and the identity of the content purchaser. The copyright information of the content and the identity of the content purchaser allow source tracking of all copies of the content 113, whether authorized or not. Thus, the content identification layer 503 provides a means to combat piracy.

The content use control layer 505 ensures that a copy of the content 113 is used in the purchaser's device according to the store use condition 519. The store use condition 519 can specify the number of times of reproduction and the number of local copies permitted for the content 113, and whether or not the content 113 can be recorded on an external portable device. The functions in the content usage control layer 505 track the copy / playback usage of the content and update the copy / playback status.

The content format layer 507 can convert the format of the content 113 from its unique expression in the facility of the content owner to a format compatible with the service function and distribution means of the secure digital content electronic distribution system 100. It is to be. This conversion process may include compression coding and associated pre-processing such as frequency equalization and amplitude dynamic adjustment. If the content 113 is audio, the purchaser also needs to process the received content 113 to achieve a format suitable for playback or transfer to a portable device.

B. Functional Division and Flow The rights management architecture model is shown in FIG. 8, which shows the mapping of the architecture layers to the operational components that make up the secure digital content electronic distribution system 100 and the key functions of each layer.

1. Content Format Layer 507 General functions related to the content format layer 507 include content pre-processing 502 and compression 511 at the content provider 101 and the end user device 1.
09, the content descrambling 513 and the decompression 515. The need for preprocessing and examples of specific functions are as described above. Content compression 511
Is used to reduce the file size of the content 113 and its transmission time. Secure Digital
In the content electronic distribution system 100, the content 1
13 and any suitable compression algorithm for the type of transmission medium. MPEG for music
1/2/4, Dolby AC-2 and AC-3, Sony Adaptive Transform Coding (ATRAC), low bit rate algorithms are some of the commonly used compression algorithms. Content 113 is stored in end user device 109 in a compressed form to reduce the required storage size.
Is stored. It is decompressed during active playback. During active playback, descrambling is also performed. The purpose and type of scrambling will be described later when the content use control layer 505 is described.

2. Content Usage Control Layer 505 The content usage control layer 505
9 allows specification and enforcement of conditions or restrictions imposed on the use of content 113. This condition is based on the number of times the content 113 is allowed to be played, the content 1
It is possible to specify whether the secondary copy of 13 is permitted, the number of secondary copies, and whether the content 113 can be copied to an external portable device. The content provider 101 sets an acceptable use condition 517, puts it into the SC, and stores it in the electronic digital content store 1.
03 (see license control layer 501). The electronic digital content store 103 can increase or decrease the usage conditions 517 as long as the original conditions set by the content provider 101 are not invalidated thereby. Electronic digital content store 103 then transmits all store usage conditions 519 (in SC) to end user device 109 and clearing house 105. The clearing house 105 performs a usage condition validity check 521 before allowing release of the content 113 to the end user device 109.

The execution of the content use condition 517 is performed by the content use control layer 505 in the end user device 109.
Performed by First, upon receiving the content 113, the copy from the content identification layer 503 in the end user device 109 marks the content 113 with a copy / play code 523 indicating initial copy / play permission. Second, the player application 195
Scrambles the content 113 before storing it in the end-user device 109. The player application 195 generates a scramble key for each content item, the key being encrypted,
Hidden by end-user device 109. Next, the end user 109 sends the content 113 for copying or playback.
, The end-user device 109 verifies the copy / play code before allowing descrambling and playing or copying of the content 113.
Also, the end user device 109 appropriately updates the copy / play code in the original copy of the content 113 or on the new secondary copy. Copy / playback coding is performed on the compressed content 113. That is, it is not necessary to decompress the content 113 before embedding the copy / playback code.

The end user device 109 has a license
The copy / playback code is embedded in the content 113 using the watermark 527. The embedded data can be read or modified by an end-user player application 195 that is familiar with the embedded algorithm and the associated scrambling key.
Only. This data is invisible or inaudible to a human observer, ie, it does not cause appreciable degradation to the content 113. Since the watermark survives several steps of content processing, data compression, D / A and A / D conversion, and signal degradation caused by normal content processing, the watermark can be in any representation format, including analog representations Content 1
Lasts with 13. In an alternative embodiment, instead of using the license watermark 527 to embed the copy / play code in the content 113, the end-user player application 195 uses the stored terms of use 519.

3. Content identification layer 503 As part of the content identification layer 503, the content provider 101
, Data such as a content identifier and a content owner, and other information such as a publication date and a distribution area are embedded in the content 113. This watermark is referred to herein as a copyright watermark 529. Upon receipt, the end-user device 109 includes a copy of the content 113 with the content purchaser's name and transaction ID 5
35 (see license control layer 501 below), and other information such as license date and usage conditions 517. This watermark is referred to herein as a license watermark. Any copy of the content 113 that is subject to audio processing that has been or is otherwise obtained in an approved manner and that preserves content quality has a copyright watermark and a license watermark. Content identification layer 5
03 prevents copyright infringement.

4. License Control Layer 501 The license control layer 501 protects the content 113 from unauthorized interception, properly licenses the end user device 109, and successfully completes a license purchase transaction with the authorized electronic digital content store 103. Ensure that content is released individually to users only. The license control layer 501 uses the double encryption 531 to transmit the content 1
13 is protected. Content 113 is encrypted using an encrypted symmetric key generated by content provider 101, which is encrypted using clearinghouse public key 621. Initially, only the clearing house 105 can recover the symmetric key.

License control is based on “trusted parties”
As well as the clearing house 105. License request 537 (ie, symmetric key 623 for content 113 to end-user device 109)
Prior to releasing the authorization for Clearing House 105, the Clearing House 105 will confirm that Transaction 541 and License Authorization 543 are complete and authentic, and that Electronic Digital Content Store 103 has secured electronic distribution of Secure Digital Content with respect to the sale of Electronic Content 113. Verify that you have authorization from the system 100 and that the end user has a properly licensed application. The audit / report 545 allows a report to be generated and license transaction information to be shared with other authorizing parties within the electronic secure digital content distribution system 100.

The license control is performed by the SC process 533. The SC is used to distribute the encrypted content 113 and information between the system operation components (for details, see the detailed structure section of the SC below).
The SC is a cryptographic carrier of information that protects electronic information or content 113 from unauthorized interception and modification using encryption, digital signatures, and digital certificates. This also allows for authenticity verification of the electronic data.

In the license control, the content provider 101 and the electronic digital content store 10
3. It is necessary for the clearing house 105 to have a genuine cryptographic digital certificate from a reputable certificate authority used to prove such components. End user device 109 need not have a digital certificate.

C. Content Distribution License Control FIG. 9 is a block diagram showing an outline of content distribution license control when applied to the license control layer of FIG. In the figure, the electronic digital content store 103, the end user device 109, the clearing
Houses 105 are interconnected via the Internet,
It illustrates the use of unicast (point-to-point) transmission between these components. Communication between the content provider 101 and the electronic digital content store 103 may also be via the Internet or other networks. End-user device 109 and electronic digital content store 103
Assume that the content purchase commercial transaction with is based on the standard Internet web protocol. As part of a web-based interaction, the end user selects content 113 to purchase, provides personal and financial information, and agrees to the purchase terms. The electronic digital content store 103 would be able to obtain payment authorization from the acquiring agency using a protocol such as SET.

In FIG. 9, it is also assumed that the electronic digital content store 103 has already downloaded the end-user player application 195 to the end-user device 109 based on a standard web protocol. This architecture uses electronic digital
The content store 103 stores an application I specific to the downloaded player application 195.
D and must be stored by the end-user device 109 for later application license verification (see below).

The overall license flow is based on the content
It starts with the provider 101. Content provider 101 encrypts content 113 using a locally generated encrypted symmetric key and encrypts symmetric key 623 using public key 621 of clearing house 105. The symmetric key in an alternative embodiment may be sent from the clearing house 105 to the content provider 101 instead of being generated locally. The content provider 101 creates a content SC 630 around the encrypted content 113 and generates the encrypted symmetric key 6.
23, store usage conditions 519, other contents 11
3. Create metadata SC620 around the related information.
One metadata SC620 and one content SC630 for all the content 113 objects
Exists. The content 113 object may be at the same song compression level, the content 113 object may be each song on the album, or the content 113 object may be the entire album. For each content 113 object, metadata SC620 is stored in content usage control layer 5
Also, the store use condition 519 related to 05 is transmitted.

The content provider 101 may include one or more electronic digital content stores 103
The metadata SC620 is distributed to (step 601)
Distribute the content SC630 to one or more content host sites (step 602). Next, each electronic digital content store 103 creates an offer SC641. Offer SC641 typically conveys much of the same information as metadata SC620 and provides digital signature 62 for content provider 101.
4 and a certificate of the content provider 101 (not shown). As described above, the electronic digital content store 103 initially stores the content provider 1
The store usage condition 519 (processed by the content usage control layer) defined by 01 can be increased or decreased. Optionally, the content SC630
Alternatively, the metadata SC 620 or both are signed with the digital signature 624 of the content provider 101.

After the completion of the content purchase transaction (step 603) between the end user device 109 and the electronic digital content store 103, the electronic digital content store 103 executes the transaction SC.
Create 640 and transfer it to end-user device 109 (step 604). Transaction SC640
Is a unique transaction ID 535, the name of the buyer (ie, the name of the end user) (not shown),
It includes a public key 661 of the end user device 109 and an offer SC641 related to the purchased content 113. The transaction data 642 in FIG. 9 includes the transaction ID 535 and the name of the end user (not shown).
Represents both. Transaction data 642
Is encrypted with the public key 621 of the clearing house 105. Optionally, transaction SC640
Is signed with the digital signature 643 of the electronic digital content store 103.

Upon receiving the transaction SC 640 (and the offer SC 641 contained therein), the end-user player application 195 running on the end-user device 109 solicits a license authorization from the clearing house 105 by order SC 650. Order SC650 includes the encryption symmetric key 623 from offer SC641 and store usage conditions 519.
And the encrypted transaction data 642 from the transaction SC 640 and the encrypted application ID 551 from the end user device 109. The order SC650 of the alternative embodiment includes an end user device 1
Sign with a digital signature 652 of 09.

The order SC6 from the end user device 109
Upon receiving 50, clearing house 105 verifies the following. 1. The electronic digital content store 103 is a secure digital content electronic distribution system 100
(Resides in the database 160 of the clearing house 105). 2. Order SC650 has not been changed. 3. Transaction data 642 and symmetric key 623
Is complete and authentic. 4. The electronic store use condition 519 purchased by the end user device 109 conforms to the use condition 517 set by the content provider 101. 5. The application ID 551 has a valid structure,
It is an authorized electronic digital content store 103
Provided by

If this verification is successful, clearing
The house 105 has a symmetric key 623 and a transaction
The data 642 is decrypted, a license SC660 is constructed, and the license SC660 is transferred to the end user device 109 (step 606). License SC660 conveys symmetric key 623 and transaction data 642, both of which are encrypted using public key 661 of end-user device 109. If any of the verifications fail, the clearing house 105 rejects the license to the end user device 109 and notifies the end user device 109. Also, the clearing house 105 immediately notifies the electronic digital content store 103 of the verification failure. Alternative embodiment clearing house 105
Is licensed under its digital signature 663.
Sign C660.

After receiving the license SC660, the end-user device 109 sends the clearing house 105
Decrypts the symmetric key 623 and transaction data 642 previously received from and requests the content SC 630 from the content host site 111 (step 607). Upon arrival of the content SC 630 (step 608), the end-user device 109 decrypts the content 113 using the symmetric key 623 (step 609), and license watermark, copy / play as described above with respect to FIG. The content 113 and the transaction data 642 are passed to another layer for coding, scrambling, and other processing of the content 113.

Finally, the clearing house 105
Periodically transmit summary transaction reports to content provider 101 and electronic digital content store 103 for auditing and tracking (step 610).

V. A. Secure container structure General Structure Secure Container (SC), together with Content 1
It is a multi-part structure that defines a portion of 13 units or transactions, and also defines related information such as usage conditions, metadata, and encryption methods. S
C is designed to verify the completeness, completeness, and authenticity of information. Some of the information in the SC can be encrypted so that it can only be accessed after obtaining the appropriate permission.

The SC includes at least one material list (BOM) part having a record of information regarding the SC and each part included in the SC. For each part, MD-
The message digest is calculated using a hash algorithm such as 5, and is included in the BOM record for that part. The digest of each part is concatenated together, from which another digest is calculated and encrypted using the secret key of the entity creating the SC to create a digital signature. The party receiving the SC verifies all digests using its digital signature and
The integrity and perfection of C and all of its parts can be validated.

The following information can be included as a record in the BOM together with the record of each part. Which records need to be included depends on the type of SC. -SC version-SC ID-SC type (for example, offer, order, transaction, content, metadata, promotion, license)-SC issuer-Date SC was created-Expiration date of SC-Clearing -House URL-Digest algorithm description used for included parts (default is MD-5)-Algorithm used for digital signature encryption (default is RSA)-Digital signature (concatenation of included parts) All encrypted digests of the digest)

An SC can include a plurality of BOMs.
For example, offer SC641 includes its BOM,
Each part of the original metadata SC620, additional information added by the electronic digital content store 103, and a new BOM. Metadata SC620
Is included in the offer SC641 BOM. This record contains a digest for the BOM of the metadata SC620 that can be used to validate its completeness, and thus the metadata SC620
Can also be validated using the part digest value stored in the BOM of metadata SC620. None of the parts from metadata SC620 have a record in the new BOM created for offer SC641. Electronic digital content store 103 and metadata SC
Only those parts added by the 620 BOM have records in the new BOM.

An SC can also include a key description part. The key description part may include a record including the following information on the encrypted part in the SC. The name used for the part when it is decrypted.The encryption algorithm used to encrypt the part.The publication used to encrypt the part. A key identifier to indicate the encryption key or an encryption symmetric key used to decrypt the encrypted part when decrypting • The encryption algorithm used to encrypt the symmetric key. This field is only present if the record in the key description part contains the encryption symmetric key used to encrypt the encryption part. • The key identifier of the public encryption key used to encrypt the symmetric key. This field is only present if the record in the key description part contains the encryption symmetric key and the encryption algorithm identifier of the symmetric key used to encrypt the encryption part. If the SC does not include an encryption part, there is no key description part.

B. Rights Management Language Syntax and Semantics A rights management language consists of parameters that can be assigned values to define restrictions on the use of content 113 by end users after purchase of the content 113. The restriction on the use of the content 113 is a use condition 517. Each content provider 101 specifies a use condition 517 for each item of the content 113. Electronic digital content store 103
Interprets the terms of use 517 in the metadata SC 620 and uses that information to provide the customer with the option to present and to add retail purchase information for the content 113. After the end user selects an item of content 113 for purchase, the end user device 1
09 is the content 11 based on the store use condition 519.
Request permission for 3. Clearing House 10
Before 5 sends the license SC 660 to the end user, the clearing house 105 determines that the requested store usage conditions 519 are in the metadata SC 620 in the content SC 620.
It verifies that it matches the acceptable use condition 517 specified by the provider 101.

When the end user device 109 receives the purchased content 113, the store usage conditions 519 are coded into the content 113 using a watermark tool or are coded into the securely stored usage conditions 519. Is done. End-user player application 195 running on end-user device 109
Guarantees that the store usage terms 519 encoded in the content 113 are enforced.

An example of the store use condition 519 in the case where the content 113 is music is shown below.・ Songs can be recorded.・ The song can be played n times.

C. Overview of Secure Container Flow and Processing Metadata SC620 is the content provider 10
1 and used to define items of the content 113 such as songs. The size of the content 113 is typically the size of the electronic digital content store 103
The content 113 itself is not included in such a SC because it is too large for the end user to efficiently download the container only to access the descriptive metadata. Rather, the SC includes an external URL (Uniform Resource Locator) to point to the content 113. Also, the SC is descriptive information about the content 113 and, in the case of the song content 113, a C for music.
Also includes metadata that provides other relevant data, such as D-cover art and / or digital audio clips.

Electronic Digital Content Store 10
3 is the metadata SC6 for which authorization has been granted
20 and build offer SC641. In short, the offer SC641 is composed of a part of all parts from the metadata SC620 and the BOM together with the additional information included in the electronic digital content store 103. When offer SC641 is constructed, a new BOM for offer SC641 is created. The electronic digital content store 103 also uses the metadata SC 620 to extract the metadata information from the end user so that the end user can typically purchase the content 113, and provide the end user with the content 11.
Build an HTML page presenting the description on page 3 on the web site.

Electronic Digital Content Store 10
The information in the offer SC641 added by 3 is typically the usage condition 517 specified in the metadata SC620.
And to narrow down the selection of promotional data such as a graphic image file of the store logo or a URL to the store's web site. Metadata S
The template for offer SC641 in C620 includes information that electronic digital content store 103 can override in offer SC641, what additional information electronic digital content store 103 needs, and embedded metadata. It shows which parts are retained in SC620.

If the end user decides to purchase content 113 from electronic digital content store 103, offer SC641 is included in transaction SC640. Electronic digital content
The store 103 constructs a transaction SC 640 and includes an offer SC 641 for each item of the content 113 to be purchased and transmits it to the end user device 109. The end-user device 109 receives the transaction SC640 and validates the integrity of the transaction SC640 and the included offer SC641.

The order SC 650 is constructed by the end user device 109 for each item of the content 113 to be purchased. Includes information from offer SC641, information from transaction SC640, and information from the configuration file of end-user device 109. Order S
C650 one at a time clearing house 105
Sent to Order SC650 is metadata SC620
The URL of the clearing house 105 included as one of the records in the BOM for
1 included.

The clearing house 105 has the order S
The C650 is validated and processed to provide the end-user device 109 with everything needed for the license watermark 527 and to access the purchased content 113. One of the functions of the clearinghouse 105 is that the watermark instruction from offer SC641 and the symmetric key 623 needed to decrypt the content 113 from content SC630.
Is decrypted. The record of the encryption symmetric key 623 actually contains more than the actual encryption symmetric key 623. Prior to performing the encryption, the content provider 101 can optionally append its name to the actual symmetric key 623. Symmetric key 62
3, the name of the content provider 101 is encrypted, so that it is protected from the copyright infringing content provider 101 who has constructed its own metadata SC620 and content SC630 from a legitimate SC. The clearing house 105 determines that the name of the content provider 101 encrypted with the symmetric key 623 is S
It verifies that it matches the name of the content provider 101 in the C certificate.

If any changes need to be made to the watermark instruction by clearing house 105, clearing house 105 decrypts symmetric key 623 and then changes the watermark instruction to produce a new symmetry. Use the key 623 to encrypt it again. Thereafter, the symmetric key 623 is
9 is re-encrypted using the public key 661. Also,
The clearing house 105 also decrypts the other symmetric key 623 in the SC and encrypts it again with the public key 661 of the end-user device 109. The clearing house 105 has a license SC66 containing the newly encrypted symmetric key 623 and the updated watermark instruction.
0 and send it to the end-user device 109 in response to order SC650. If the processing of order SC 650 does not complete successfully, clearing house 105 returns an HTML page or the like to end user device 109 reporting the failure of the authorization process.

The license SC660 is the content 11
Provide the end user device 109 with everything needed to access the third item. End user device 1
09 requests the appropriate content SC630 from the content host site 111. Content SC630
Is constructed by the content provider 101,
Includes encrypted content 113 and metadata parts.
The end-user player application 195
Using the symmetric key 623 from the license SC 660, the content 113, metadata, and watermark command are decrypted. Next, the watermark instruction is attached to the content 113, and the content 113 is scrambled and stored in the end user device 109.

D. Metadata Secure Container 62
Format of 0 The following table shows the parts included in the metadata SC620. Each box in the parts row is S with BOM
This is an individual object included in C (excluding the part name surrounded by the character []). The BOM includes a record for each part included in the SC. The part presence column indicates whether the part itself is actually included in the SC, and the digest column indicates whether a message digest is calculated for the part. The entire original BOM is propagated, but may not be propagated by some parts if one SC is included in another SC (as determined by the associated template). This is a clearing process to verify the digital signature in the original SC.
This is because the house 105 needs the entire BOM.

The key description part column in the following table defines a record included in the key description part of the SC. The records in the key description part define information about the encryption key and algorithm used to encrypt parts in that SC or parts in other SCs. Each record is an encrypted part name and, if necessary,
And a URL pointing to another SC containing the encrypted part. The result name column defines the name assigned to the part after it has been decrypted. The encryption algorithm sequence defines the encryption algorithm used to encrypt the part. The key ID / encryption key string is the base 6 of the bit name of the encryption key used to encrypt the part or the bit string of the encryption symmetric key 623 used to encrypt the part.
Define any of the four encodings. The symmetric key algorithm sequence is an optional parameter that defines the encryption algorithm used to encrypt the symmetric key 623 when the previous column was the encryption symmetric key 623. The symmetric key ID string is an identification name of an encryption key used to encrypt the symmetric key 623 when the key ID / encryption key string is the encryption symmetric key 623.

[0119]

[Table 3]

The terms used in the table of the metadata SC will be described below. • [Content URL]-a parameter in the record of the key description part. This is a URL pointing to the encrypted content 113 in the content SC630 and related to the metadata SC620. Metadata S
C620 itself does not include the encrypted content 113. • [Metadata URL]-A parameter in the record of the key description part. This is a URL in the content SC630 that points to encrypted metadata related to the metadata SC620. Metadata SC62
0 itself does not include encryption metadata. Content ID-a part that defines a unique ID assigned to the item of content 113. When the metadata SC620 refers to a plurality of items of the content 113, a plurality of content IDs are included in this part. Metadata—Parts containing information about items of content 113 such as artist names and CD cover art for songs. There can be multiple metadata parts, some of which can be encrypted. The internal structure of a metadata part depends on the type of metadata contained therein. Terms of use-parts containing information describing usage options, rules and restrictions imposed on end users for use of the content 113. SC template-a part that defines a template that describes the required and optional information for building the offer, order, and license SC660. • Watermark Instructions-Parts that include encryption instructions and parameters for implementing watermarks in content 113. The watermark command can be modified by the clearing house 105 and returned to the end user device 109 in license SC660. The encryption algorithm used to encrypt the watermark instruction, the name of the output part used to decrypt the watermark instruction, and the bits of the encryption symmetric key 623 used to encrypt the watermark instruction. String base 64 encoding, symmetric key 62
There is a record in the key description part that defines the encryption algorithm used to encrypt 3 and the public key identifier required to decrypt the symmetric key 623. Clearing House Certificate-a certificate from a certification authority or from Clearing House 105, including the signed public key 621 of Clearing House 105.
There may be more than one certificate, in which case a hierarchical level structure is used, delivering the highest level certificate including the public key to open the second highest level certificate, which is the clearinghouse 105 public key 6
21. Certificate-a certificate from the certification authority or from the clearing house 105, including the signed public key 621 of the entity that created the SC. There may be multiple certificates, in which case a hierarchical level structure is used and S
Until the lowest level certificate including the C creator's public key 621 is reached, the highest level certificate includes the public key for opening the next level certificate, and so on. SC version-the version number assigned to the SC by the SC Packer tool. SC ID-a unique ID assigned to the SC by the entity that created the SC. SC type-indicates the type of SC (eg, metadata, offer, order, etc.). SC Issuer-Indicates the entity that created the SC. Creation Date-The date when the SC was created. • Expiration Date-the date when the SC expires and is no longer valid.・ Clearing House URL-Content 11
The address of the clearinghouse 105 with which the end-user player application 195 must interact to obtain the proper authorization to access 3. Digest algorithm ID-the identifier of the algorithm used to calculate the digest of the part.・ Digital signature algorithm ID −
The identifier of the algorithm used to encrypt the digest of the concatenated part digest. This encrypted value is a digital signature. Digital signature-a digest of the concatenated part digest encrypted with the public key of the entity that created the SC. -Output part-The name assigned to the output part when decrypting the encrypted part. RSA and RC4-the default encryption algorithm used to encrypt the symmetric key 623 and data parts. • Encryption Symmetric Key-Base 64 encoding of the encryption key bit string used to decrypt the SC part when decrypted. CH public key-an identifier indicating that the data was encrypted using the clearing house 105 public key 621.

E. Offer Secure Container 641
The following table shows the parts included in the offer SC641. The parts except for a part of the metadata parts and the BOM from the metadata SC620 are also offered in SC641.
include.

[0122]

[Table 4]

Among the terms used in the offer SC641, the terms not described above with respect to other SCs will be described below. Metadata SCBOM-original metadata SC6
BOM from 20. The record in the BOM of the offer SC641 includes the digest of the BOM of the metadata SC620. • Add and Override fields-terms of use information overridden by the electronic digital content store 103. The clearing house 105 validates this information with the received SC template, and confirms that any changes made by the electronic digital content store 103 are within its authorization. Electronic Digital Content Store Certificate-A certificate provided to Electronic Digital Content Store 103 by Clearing House 105 and signed by Clearing House 105 using its private key.
This certificate will be sent to the electronic digital content store 10
3 is used by the end-user player application 195 to verify that it is a valid distributor of the content 113. The end-user player application 195 and the clearing house 105 decrypt the certificate signature with the public key 621 of the clearing house 105 to provide the electronic digital
It can be verified that the content store 103 is an authorized distributor. The end-user player application 195 is a clearinghouse 105 that it receives as part of its initialization upon installation.
Holds a local copy of the public key 621 of the.

F. Format of Transaction Secure Container 640 The following table shows the parts included in transaction SC 640 and their BOM and key description parts.

[0125]

[Table 5]

Among the terms used in the above-described transaction SC640, terms not described above with respect to other SCs will be described below. • Transaction ID 535-an ID assigned by the electronic digital content store 103 to clearly identify the transaction. • End User ID-The end user's distinguished name that the electronic digital content store 103 obtains when the end user makes a purchase selection and provides credit card information. • End-user public key-End-user public key 661 used by clearing house 105 to re-encrypt symmetric key 623. The end user's public key 661 is transmitted to the electronic digital content store 103 during the purchase transaction. • Offer SC-Offer SC641 for items of purchased content 113. Content usage selection-an array of usage conditions for each item of content 113 purchased by the end user.
There is one item for each offer SC641. -Display HTML-Transaction SC640
One or more HTMs that the end-user player application 195 displays in an Internet browser window after receiving the
L page.

When the end user device 109 receives the transaction SC 640, the following steps can be performed to verify the integrity and authenticity of the SC. 1. The public key 621 of the clearing house 105 is used to verify the integrity of the certificate in the electronic digital content store 103. After the clearing house 105 public key 621 has been received as part of the end-user player application 195 initialization during its installation process, the end-user device 1
09 is stored. 2. The public key from the certificate of the electronic digital content store 103 is used to verify the digital signature 643 of the SC. 3. Verify the SC part hash. 4. It verifies the completeness and authenticity of each offer SC641 included in the transaction SC640.

G. Format of Order Secure Container 650 The following table shows the parts included in order SC 650 and their BOM and key description parts. These parts provide information to the clearing house 105 for decryption and verification, or are validated by the clearing house 105. Parts from offer SC641 and BOM are also ordered SC6
50 included. A character string of a part in the part existence column of the BOM of the metadata SC indicates that a part of these parts is not included in the order SC650. The BOM from the metadata SC 620 is also included without any changes so that the clearing house 105 can validate the integrity of the metadata SC 620 and its parts.

[0129]

[Table 6]

[Table 7]

[0130] Among the terms used in the above order SC650, terms not described above with respect to other SCs will be described below. Transaction SCBOM-BOM in original transaction SC640. BO of order SC650
The record in M is the BOM of transaction SC640
Including the digest. • Encrypted Credit Card Information-Optional encrypted information from the end user used to charge the purchase to a credit or debit card. This information is needed when the electronic digital content store 103 that created the offer SC641 does not process the customer bill, in which case the clearing house 105 can process the bill.

H. License Secure Container 66
Format of 0 The following table shows the parts included in the license SC660 and their BOMs. As shown in the key description part, the watermark command, the content 113, and the symmetric key 623 required to decrypt the metadata of the content 113 are provided by the clearing house 105 using the end user's public key 661. Re-encrypted. The end user device 109 is licensed SC6
Upon receiving 60, it decrypts the symmetric key 623 and uses them to access the encrypted parts from license SC660 and content SC630.

[0132]

[Table 8]

Among the terms used in the license SC660, terms not described above with respect to other SCs will be described below. EU Public Key-End User Public Key 661
An identifier indicating that the data was encrypted using. ID of order SC650-ID of SC obtained from BOM of order SC650.・ Certificate withdrawal list-Clearing House 105
An optional list of certificate IDs previously issued and signed by, but no longer considered valid. An SC with a signature verifiable by a certificate included in the revocation list is an invalid SC. The end-user player application 195 stores a copy of the clearing house 105 certificate revocation list on the end-user device 109. Upon receiving the revocation list, the end-user player application 195 replaces its local copy if the new list is more up-to-date. The revocation list includes a version number and / or time stamp to determine which list is the most recent.

I. Format of Content Secure Container The following table shows the parts included in the content SC630 and their BOMs.

[0135]

[Table 9]

[0136] Among the terms used in the content SC 630, terms not described above with respect to other SCs will be described below. • Encrypted content-content 113 that has been encrypted by the content provider 101 using the symmetric key 623. • Encrypted metadata-metadata associated with the content 113 that has been encrypted by the content provider 101 using the symmetric key 623.

Since the key necessary for decrypting the encrypted part is included in the license SC660 constructed by the clearing house 105, the content SC630 is used.
Does not include any key description parts.

VI. Packing and unpacking secure containers Overview The SC packer can be called in a multi- or single-step process to create an SC using all of the specified parts, and a 32-bit Wind with API (Application Programming Interface)
ows program. SC packers 151, 152,
153 is a content provider 101, a clearing house 105, an electronic digital content store 103, and other sites that require a pack of SCs.
Various hardware platforms that support Windows programs. A BOM and, if necessary, a key description part are created and included in the SC. A set of packer APIs allows the caller to create records in the BOM and key description parts and specify the information needed to include the parts in the SC. The encryption of parts and symmetric keys 623 and the calculation of digests and digital signatures are also performed by the packer.
The encryption and digest algorithms supported by the packer are included in the packer code or invoked via an external interface.

The interface to the packer for building the SC is provided by a single API, which accepts the following parameters as input. A pointer to a buffer with a concatenated structure. Each structure in the buffer is a command to the packer, with the information needed to execute that command. Packer commands include adding a part to an SC with an associated BOM record, adding a record to a BOM, and adding a record to a key description part. -A value indicating the number of connected structures included in the above buffer. -The name and location of the BOM part. A value where each bit is a predefined flag or a reserved flag for future use. Currently, the following flags are defined. An indication as to whether all parts of the SC must be bundled together into a single file after all structures in the buffer have been processed. Bundling all parts into a single object is the last step performed when building a SC. An indication as to whether the digital signature has been omitted from the BOM part. If this flag is not set, the digital signature is calculated just before the SC is bundled into a single object.

In an alternative embodiment, the interface to the packer for building the SC is provided by multiple APIs, which accept the following parameters as input. First, a name to be used for the BOM part and a part to be added are searched for as a pointer indicating a structure including information used for initial setting of the SC indicated as an IP record in the BOM part of the SC. The API is called to create a material list (BOM) part by passing the default position for the MAP and the flag value. This API returns the SC handle used by the subsequent Packer API. This packer has an API that is used whenever a part is added to the SC. This API accepts the SC handle previously returned from the previous Packer API, a pointer to a structure consisting of information about the part to be added, and a flag value. Information about the part to be added includes the name and position of the part, BOM
Contains the name to use for the part within, the type of part to be added, the hash value for the part, flags, etc. After all parts have been added to the SC, the Packer API is called to pack all parts, including BOM parts, into a single SC object, usually a file. This API includes the SC handle previously returned from the previous Packer API, a name to use for the packed SC, a pointer to a structure with information to sign the SC, and a flag value. accept.

The packer or the entity that invokes the packer can build the SC using the SC template. The SC template has information defining parts and records required by the SC under construction. Also,
The template may also define the encryption symmetric key 623 and the encryption method and key reference to use for the encryption part.

The packer has an API used to unpack the SC. Unpacking an SC is the process of obtaining the SC and separating it into individual parts.
Thereafter, the packer can be invoked to decrypt any of the unpacked encrypted parts from the SC.

B. Material List (BOM) Parts BOM parts are created by the packer when constructing the SC. The BOM is a text file that contains a record of information about the SC and parts included in the SC. Each record in the BOM is on a single line, and the start of a new record is indicated by the new line. Typically, the BOM contains a digest of each part and a digital signature that can be used to validate the authenticity and integrity of that SC.

The record types in the BOM are as follows. IP An IP record contains a set of name = value pairs associated with the SC. The following names are reserved for SC specific properties: V major.minor.fix The V property specifies the SC version. this is,
This is the version number of the SC specification when the SC was created. Subsequent strings must be of the form major.minor.fix, where major, minor, and fix are the major release number, minor release number, and modification level, respectively. ID value The ID property is a unique value assigned by the entity creating this SC to this particular SC. The format of this value will be defined in a future version of this document. T value The T property specifies the type of SC and must be one of the following: ORD-order SC650 OFF-offer SC641 LIC-license SC TRA-transaction SC640 MET-metadata SC620 CON-content SC630 A value The A property identifies the creator or issuer of the SC.
The creator / publisher identity must be unambiguous or registered with the clearinghouse 105. D value The D property identifies the date when the SC was created, and optionally the time. This value is year / month / day / hour: minute: second.
Yyyy / mm / dd [@hh: mm [: ss [.fse] for fractional seconds (time zone)
c]] [(TZ)]]. Optional parts of this value are surrounded by the characters []. E value The E property identifies the date on which the SC expires, and optionally the time. This value must be in the same format as used for the D property defined earlier. Expiration date/
The time should be, if possible, the Clearing House 10
5 must be compared with the date / time. The CCURL value CCURL property identifies the URL of the clearinghouse 105. This value must be in the form of a valid external URL. The H value H property identifies the algorithm used to calculate the message digest for the parts included in the SC. An example of a digest algorithm is MD
5 DD The D record contains the part type, the part name, the (optional) digest of the part,
Is a data or part item record that contains information identifying an (optional) indication that it is not included in the record. The-sign immediately after the type identifier is used to indicate that the part is not included in the SC. The reserved types of data or part records are: K part_name [digest] Specify the key description part. W part_name [digest] Specifies the watermark instruction part. C part_name [digest] Specifies the certificate used to validate the digital signature. T part_name [digest] Specify the usage condition part. YF part_name [digest] Specifies a template part for offer SC641. YO part_name [digest] Specifies a template part for order SC650. YL part_name [digest] Specifies a template part for license SC660. ID part_name [digest] Specifies the ID of the content 113 of the item of the content 113 being referred to. CH part_name [digest] Specifies the certificate part of the clearing house 105. SP part_name [digest] Specifies the certificate part of the electronic digital content store 103. B part_name [digest] Designates a BOM part of another SC having the part or a subset of the part included in this SC. BP part_name sc_part_name [digest] BOM of another SC included in this SC as a single part
Specify parts. The parameter sc_part_name is
This is the name of the SC part included in this SC and defined by this BOM part. The same BOM, sc_part_na
It is included in the SC defined by the me parameter. D part_name [digest] Specifies the data (or metadata) part. The SS record is a signature record used to define the digital signature of the SC. The digital signature is specified as follows: S key_identifier signature_string signature_algori
The thm S record is a ke that indicates the encryption key of the signature.
y_identifier and signature_string, the base 64 encoding of the digital signature bitstring
And the signature_algorithm used to encrypt the digest to create the digital signature.

C. Key description part The key description part is created by the packer to provide information about the encryption key needed for decryption of the SC encryption part. The encrypted part may be included in the SC under construction, or may be included in another SC referenced by the SC under construction. The key description part is a text file that contains a record of the encryption key and information about the part where the encryption key was used. Each record in the key description part is on a single line, and the start of a new record is indicated by a new line.

The following record types are used in the key description part and are defined as follows: K encrypted_part_name; result_part_name; part_en
cryption_algorithm_identifier; public_key_identifi
er; key_encryption_algorithm; encrypted_symmetric_
The key K record specifies an encrypted part that may be included in this SC or may be included in another SC that this record references. encrypted_part_name
Is either the name of a part in this SC or a URL pointing to the name of an encrypted part in another SC.
result_part_name is the name given to the decrypted part. part_encryption_algorithm_identifier
Indicates the encryption algorithm used to encrypt the part. public_key_identifier is an identifier of a key used to encrypt the symmetric key 623. key_encryption_algorithm indicates the encryption algorithm used to encrypt the symmetric key 623. en
crypted_symmetric_key is the base 64 encoding of the bit string of the encrypted symmetric key 623 used to encrypt the part.

VII. Clearing House 105 A. Overview The clearing house 105 is responsible for the rights management function of the secure digital content electronic distribution system 100. The functions of the clearinghouse 105 include enabling the electronic digital content store 103, verifying rights to the content 113, and validating the integrity and authenticity of purchase transactions and related information. , A content encryption key or a symmetric key 623
, Tracking the distribution of these keys,
This includes reporting the transaction summary to the electronic digital content store 103 and the content provider 101. The content encryption key is used by the end-user device 109 to unlock content 113 for which the end-user device has acquired rights, typically through a purchase transaction from the authorized electronic digital content store 103. Before the content encryption key is sent to the end user device 109, the clearing house 105 undergoes a verification process to verify the authenticity of the entity that sells the content 113 and the end user device 109 has for the content 113. Validate your rights. This is called the SC analysis tool 185. In some configurations, the clearing house 105 includes an electronic digital content store 103 for credit card authentication and billing.
Clearing house 10
5, the financial settlement of the purchased content 113 can be processed. The clearinghouse 105 uses an OEM package such as ICVerify and Taxware to handle credit card processing and local sales tax.

Embodiment of Electronic Digital Content Store Secure Digital Content Electronic Distribution System 1
Electronic digital content store 1 that wants to be involved as a seller of content 113 at 00
03 makes a request to one or more of the digital content providers 101 that provide the content 113 to the secure digital content electronic distribution system 100. As long as the two parties reach an agreement, there is no definitive process to make the request. After a digital content label, such as a music label such as Sony or Time Warner, has determined that electronic digital content store 103 can sell its content 113, clearing house 105 will typically send an email. Via a request to add the electronic digital content store 103 to the secure digital content electronic distribution system 100. Digital Content Label is an electronic digital content store 1
03 and any other information that the clearing house 105 may need to create a digital certificate for the electronic digital content store 103. The digital certificate is sent to the digital content label in a secure manner and transferred to the electronic digital content store 103 by the digital content label. Clearing House 105
Maintains a database of digital certificates to which it has been assigned. Each certificate has a version number, a unique serial number, a signature algorithm, the name of the publisher (for example,
The name of the electronic digital content store 103, the public key of the electronic digital content store 103, and the private key of the clearing house 105 for the period during which the certificate is deemed valid. Hash of all other information signed
Including code. The entity having the public key 621 of the clearing house 105 can validate the certificate, and then the SC with a signature that can be validated using the public key from the certificate will have a valid S
C is guaranteed.

Electronic Digital Content Store 10
3 begins providing the content 113 available for purchase to the end user after receiving from the digital content label the digital certificate created by the clearinghouse 105 and the tools needed to process the SC. be able to. The electronic digital content store 103 stores the certificate and the transaction SC.
640, and sign the SC using its digital signature 643. The end user device 109
First, the digital certificate withdrawal list is checked, and then the public key 621 of the clearing house 105 is used to verify the information in the digital certificate for the electronic digital content store 103, thereby providing an electronic digital content store. 103 is Secure Digital
Content 11 on content electronic distribution system 100
3. Verify that you are a valid distributor. The digital certificate revocation list is maintained by the clearing house 105. The withdrawal list is for Clearing House 105
Of license SC660 parts created by
Can be included as one. End user device 109
Maintains a copy of the revocation list on end-user device 109 so that it can be used as part of the digital certificate validation of electronic digital content store 103. The end user device 109 has a license S
Upon receipt of C660, it is determined whether a new revocation list is included, and if so, the local revocation list on end-user device 109 is updated.

B. Rights Management Processing Order SC Analysis After the end user receives a transaction SC640 from the electronic digital content store 103 containing the offer SC641, the clearing house 10
5 receives the order SC650 from the end user. The order SC 650 includes parts including information related to the content 113 and its use, information related to the electronic digital content store 103 that sells the content 113, and information related to an end user who purchases the content 113. Before starting to process the information in order SC650, clearing house 105 first proceeds to S
Performs some processing to ensure that C is actually valid and that the data it contains has never been corrupted.

Validation The clearinghouse 105 begins validating the order SC650 by verifying the digital signature, and then the clearinghouse 105 verifies the integrity of the parts of the order SC650. . digital·
To validate the signature, the clearing house 105 first decrypts the signature's own content 631 using the public key 661 of the included signing entity, if signed. (Sign entity is content provider 101,
It could be electronic digital content store 103, end-user device 109, or any combination thereof. Next, Clearing House 10
5 computes the digest of the SC's concatenated part digest and compares it to the decrypted content 113 of the digital signature. If the two values match, the digital signature is valid. Clearing House 10 to verify the integrity of each part
5 calculates the digest of the part and calculates it as BO
Compare with the digest value in M. The clearing house 105 follows the same process to verify the digital signature and part integrity for each part of the metadata and offer SC641 contained in the order SC650.

The transaction and offer S
The process of verifying the digital signature of the C641 is such that the electronic digital content store 103 uses the secure digital content electronic distribution system 100.
Also indirectly verifies that it is authorized by This is based on the fact that the clearing house 105 is the issuer of the certificate. Alternatively, the clearing house 105 is the electronic digital content store 1
Transaction SC6 using public key from 03
The digital signature of 40 and offer SC641 could be successfully verified, but only if the entity that signed the SC has ownership of the associated private key. Only the electronic digital content store 103 has ownership of the private key. Note, however, that clearing house 105 need not have a local database of electronic digital content store 103. Because the store uses the clearing house public key to
This is because the public keys of C640 and offer SC641 are signed.

Next, the store use condition 519 of the content 113 purchased by the end user is stored in the metadata SC 620.
The conditions are validated by the clearinghouse 105 to ensure that they fall within the limits set for Metadata SC620 is order SC6
Recall that it is contained within 50.

Key Processing The processing of the encrypted symmetric key 623 and the watermark instruction is performed by checking the authenticity and integrity of the order SC650,
It is performed by the clearinghouse 105 after the validation of the electronic digital content store 103 and the validation of the store usage conditions 519 have been completed successfully. The metadata SC 620 portion of the order SC 650 typically has a plurality of symmetric keys 623 located within the key description part encrypted using the clearing house 105 public key 621. The encryption of the symmetric key 623 is performed by the content provider 101 when the metadata SC 620 is created.

One symmetric key 623 is used to decrypt the watermark command, and the remaining symmetric keys are used to decrypt the content 113 and any encrypted metadata. Since the content 113 can represent a single song or an entire collection of songs on a CD, a different symmetric key 623 can be used for each song. The watermark instruction is included in the metadata SC620 portion of order SC650. Content 11
3 and the encrypted metadata are in the content SC 630 of the content host site 111. The URL and part name of the encrypted content 113 and the metadata part in the content SC630 are in the order SC65.
0 is included in the key description part of the metadata SC620 part. The clearing house 105 uses its private key to decrypt the symmetric keys 623 and then uses the public key 661 of the end-user device 109 to encrypt each of them. Public key 6 of end user device 109
61 is taken out of order SC650. The new encrypted symmetric key 623 is included in the key description part of the license SC660 that the clearing house 105 returns to the end user device 109.

During the processing time of the symmetric key 623, the clearing house 105 may wish to make changes to the watermark command. If so, after the clearing house 105 decrypts the symmetric key 623, the watermark instruction is changed and re-encrypted.
The new watermark instruction is sent to the end user device 109
Is included as one of the parts in the license SC660 that is returned.

If all the processes of the order SC 650 are successful, the clearing house 105 returns the license SC 660 to the end user device 109. The end-user device 109 downloads the content SC630 using the license SC660 information and accesses the encrypted content 113 and the metadata. The watermark command is also executed by the end user device 109.

The clearing house 105 is ordered SC
If 650 cannot be processed normally, the end user device 1
An HTML page is returned at 09, and the page is displayed in an Internet browser window. That HT
The ML page indicates why the clearing house 105 could not process the transaction.

In an alternative embodiment, if the user purchased a copy of the content 113 before the release date set for the sale, the license SC 660 is returned without the symmetric key 623. License SC660 is returned to clearing house 105 after the release date to receive symmetric key 623. As an example, the content provider 101 allows the user to download the song before the release date of the new song, and the customer downloads the song and plays the song before the date set by the content provider 101. Be ready. Thus, the content 113 can be opened immediately on the release date without having to eliminate complaints about bandwidth and download time on the release date.

C. Country Specific Parameters Optionally, the clearinghouse 105 uses the domain name of the end user device 109 and, if possible, the credit card billing address to determine the end user's country location. If there are any restrictions on the sale of the content 113 in the country in which the end user resides, the clearing house 105 will request that the transaction being processed violate any of these restrictions before transmitting the license SC660 to the end user device 109. Guarantee not to. The electronic digital content store 103 is also expected to be involved in managing the distribution of content 113 to various countries by performing the same checks as the clearing house 105. Clearing House 105 is the content provider 1
If the electronic digital content store 103 ignores the country-specific rules set by 01, any check that can be performed is performed.

D. Audit Log and Tracking The clearing house 105 maintains an audit log 150 of information about each operation performed during purchase and report request transactions for content 113. This information can be used for a variety of purposes, such as auditing the secure digital content electronic distribution system 100, creating reports, and data mining.

[0162] Clearing house 105 also maintains an account balance in billing subsystem 182 for electronic digital content store 103. The pricing structure for the electronic digital content store 103 is provided to the clearing house 105 by a digital content label. This information can include such things as current specials, volume discounts, and account balance shortfall limits that need to be imposed on the electronic digital content store 103. Clearing House 10
5 uses the pricing information to track the balance of the electronic digital content store 103 and to ensure that its balance shortage limit set by the content provider 101 is not exceeded.

The following operations are typically logged by the clearinghouse 105. The end-user device 1 seeking the license SC660
09 • Credit card authorization number when clearing house 105 processes the claim • License SC660 to end-user device 109
-Request for report-Content SC630 and license SC660
Notification from end user that it was received and validated

The following information is usually stored in the license SC66.
0 is logged by clearing house 105. The date and time of the request The date and time of the purchase transaction The content ID of the item to be purchased The identification name of the content provider 101 The store usage conditions 519 The change of the watermark instruction Transaction ID 535 • Identifier for electronic digital content store 103 • Identifier for end-user device 109 • End-user credit card information (if clearing house 105 processes billing)

The following information is typically logged by clearinghouse 105 for end-user credit card validation. The date and time of the request The amount charged to the credit card The content ID of the item to be purchased The transaction ID 535 added by the electronic digital content store 103 The identification name of the electronic digital content store 103 The end user Equipment identifier • End-user credit card information • Authentication number received from credit card clearing house

The following information is usually stored in the license SC66.
Logged by clearing house 105 when a zero is sent to end user device 109. The date and time of the request; the content ID of the item to be purchased; the identifier of the content provider 101; the terms of use 517; the transaction ID 535 added by the electronic digital content store 103;・ End user equipment identifier

[0167] The following information is usually logged when a report request is made. The date and time of the requestThe date and time the report was sentThe type of report requestedThe parameters used to generate the reportThe identifier of the entity that requested the report

E. Reporting Results Reports are produced by the clearing house 105 using the information logged by the clearing house 105 during the end-user purchase transaction.
The content provider 101 and the electronic digital content store 103 form a clearing house 105
Clearing house 1 via payment verification interface 183 to enable reconciliation of the information logged by the transaction with its own transaction database.
From 05, a transaction report can be requested. The clearing house 105 can also make periodic reports to the content provider 101 and the electronic digital content store 103.

[0169] The clearing house 105 defines a secure electronic interface that allows the content provider 101 and the electronic digital content store 103 to request and receive reports. Report request S
C contains the certificate assigned by clearing house 105 to the entity making the request. The clearinghouse 105 uses the certificate and the SC's digital signature to verify that the request was issued by the authorizing entity. The request also includes parameters that define the scope of the report, such as the time period. The clearinghouse 105 validates the request parameters and ensures that only the information the requestor is allowed to have about it is received.

If clearing house 105 determines that report request SC is authentic and valid, clearing house 105 creates a report and packs it into the report SC to be sent to the requesting entity. . Some reports are automatically generated at defined time intervals and stored in the clearinghouse 105 so that they can be sent immediately upon receipt of a request. The format of the data contained in the report will be defined in a future version of this document.

F. Billing and Payment Validation Billing of content 113 is based on clearing house 10
5 or the electronic digital content store 103. When the clearing house 105 processes a request for electronic content 113, the electronic digital content store 103 separates the end user's order into an electronic product and, if applicable, a physical product. Next, the electronic digital content store 103 notifies the clearing house 105 of the transaction containing the end user's billing information and the total amount that needs to be authenticated.
The clearing house 105 authenticates the end user's credit card and returns a notification to the electronic digital content store 103. Clearing House 105
Authenticates the end user's credit card, the electronic digital content store 103 can charge the end user's credit card for the physical goods to purchase. End user device 109
After downloading each electronic item, clearing house 105 is notified so that the end user's credit card can be charged. This is done as a last step by the end user device 109 before making the content 113 available for use by the end user device 109.

Electronic Digital Content Store 10
If 3 processes a claim for electronic content 113, clearing house 105 will not receive notification about the transaction until end user device 109 sends order SC 650 to clearing house 105. The clearing house 105 receives a notification from the end user device 109 after downloading each electronic item.
Upon receiving the notification, the clearing house 105 sends a notification to the electronic digital content store 103 so that the electronic digital content store 103 can charge the end user's credit card.

G. Retransmission Secure digital content electronic distribution system 1
00 provides the ability to handle retransmission of content 113. This is typically performed by the customer service interface 184. The electronic digital content store 103 provides a user interface that can be executed step by step by the end user to initiate the retransmission. The end user navigates to the site of the electronic digital content store 103 where he purchased the item of content 113 to request retransmission of the content 113.

Retransmission of content 113 occurs when the end user requests a new copy of a previously purchased item of content 113 because the content 113 could not be downloaded or the downloaded content 113 was unavailable. . Electronic digital content store 103 determines whether the end user is entitled to perform retransmission of content 113. If the end user is entitled to retransmission, the electronic digital content store 10
3 is an offer S of an item of the content 113 to be retransmitted.
Construct transaction SC640 including C641. Transaction SC640 is the end user device 1
09 and the same steps are performed by the end user as in the purchase transaction. If the end-user device 109 has a scrambled key in the key library for the item of content 113 to be retransmitted, the transaction SC640 includes information instructing the end-user device 109 to delete the scrambled key.

When the clearing house 105 processes financial settlement for the purchase of the content 113, the electronic digital content store 103 includes a flag transferred to the clearing house 105 in order SC650 in the transaction SC640. Clearing house 105 interprets the flag in order SC 650 and proceeds with the transaction without charging the end user for purchase of content 113.

VIII. Content Provider A. Outline Secure Digital Content Electronic Distribution System 1
The content provider 101 at 00 is a digital content label or entity that owns the rights to the content 113. The role of the content provider 101 is to create content 113 for distribution and to
3 or a downloadable electronic version of the content 113 to make the information about the content 113 available to retailers. To provide maximum security and rights control to the content provider 101, ensure that when the content 113 leaves the domain of the content provider 101 it is secure and never published and inaccessible by unauthorized parties There is now a set of tools that allow content providers to create their own content 113 on their premises and package it securely in the SC. Thus, the content 113 can be freely distributed throughout insecure networks, such as the Internet, without fear of being disclosed to hackers or unauthorized parties.

[0177] The ultimate goal of the tool for the content provider 101 is to create and package content 113, such as a song or a series of songs, in the content SC630, and to provide information describing the songs, Approved use of the song (Content usage conditions 51
7) to package the promotion information about the song in the metadata SC620. To do this, the following set of tools is provided. • Work flow manager 154-schedules processing activities and manages essential synchronization between processes. Content processing tools 155-tools for controlling file creation of content 113, including watermarking, pre-processing (for audio examples, mandatory equalization, dynamics adjustment, resampling), coding, and compression Set of. A metadata assimilation input tool 161-a collection of tools used to collect descriptive information of the content 113 from the content provider database 160 or a third party database or data import file or through operator interaction; ,
A means for designating the use condition 517 of the content is provided. It also provides an interface for capturing or extracting content, such as digital audio content for CD or DDP files. • Quality management tools allow for preview of created content and metadata. Corrections that need to be made to the metadata or re-presentation of the content for further processing can be made. SC Packer Tool 152-encrypts and packages all content 113 and information,
Call the packer and pack it in the SC. Content distribution tool (not shown)-SC at designated distribution centers such as content host site 111 and electronic digital content store 103
Disperse.・ Content Promotion Website 15
6-Authorized Electronic Digital Content Store 10
3 for storing the metadata SC620 and optionally additional promotional material.

B. Work Flow Manager 154 The purpose of this tool is to schedule, track, and manage content 113 processing activities. This application allows for multi-user access, as well as scheduling and context checking of content 113 from a remote location within the content provider 101 intranet or extranet. The design also allows for cooperative processing, in which multiple individuals can work on multiple pieces of content 113 in parallel, and each individual can be assigned specific responsibilities, such as Individuals can be dispersed around the world.

Turning next to FIG. 11, it is a block diagram showing the main process of the work flow manager 154 corresponding to FIG. The main process of FIG. 11 is the content 11 provided by the tools described in this section.
It summarizes the three processing functions. The work flow manager 154 is responsible for supplying jobs to these processes and directing the job to the next required process upon completion of its current process. This is implemented by a series of application programming interfaces (APIs) that each processing tool calls to perform the following operations. -Retrieve the next job to be processed. -Indicates normal termination of the process. -Indicates the process termination failure and the reason for the failure. • indicate the tentative status of the process (to allow the start of processes that only require partial completion of dependent processes) • add comments that can be used for the specified process to the product.

The work flow manager 154 also has a user interface. As an example, the work flow manager user interface 700 is shown in FIG.
This provides the following functions: • Configuration panels to allow specification of default values and conditions to be assigned and executed at various stages of processing • Customize workflow rules and automated processing flows • Job scheduling • Status queries and reports • One or more Adding job comments or instructions related to multiple processes • Job management (ie suspend, release, remove, change priority (order of processing))

Each process has its associated queue managed by the work flow manager 154. Work flow manager 1 for both processes
Requesting a job from 54 causes the workflow manager 154 to suspend the process (tool) if no jobs are currently in its associated queue, or to place each process in a waiting state. Returns all information about the job needed to run to the process. If a process is suspended and put into a wait state, when a job is placed on the queue by the work flow manager 154, the process resumes processing.

The work flow manager 154
Also manages the flow or order of processing based on a set of predefined rules. These rules can be customized by the content provider 101 if it has special processing requirements or configures certain default rules. When a process reports the completion of its assigned task, the process notifies the workflow manager 154 of this situation, and the workflow manager 154 then assigns the job to which queue based on defined rules. Decide what to put.

[0183] By programming API or by work flow manager user interface 70
Comments indicating special processing instructions or notices can be added to the product at any processing step, either manually at 0 or by the processor interface.

The processes in the work flow manager 154 are implemented in Java in the preferred embodiment, but other programming languages such as C / C ++, assembler, and the like can be used.
However, it should be noted that the processes described below with respect to the workflow manager 154 can be run on a variety of hardware and software platforms. The workflow manager 154, either as a complete system or as part of its configuration process,
Electronic distribution of the web or floppy (registered trademark)
It can be distributed as an application program on a computer readable medium, including, but not limited to, a diskette, CD-ROM, and removable hard disk drive.

Turning next to FIG. 11, it is a block diagram showing the main process of the work flow manager 154 corresponding to FIG. The following sections summarize each process and describe the information or actions required by each process.

1. Product Standby Action / Information Process 801 If all the information required by the process is available and the job has successfully completed all subordinate processing, the job is placed in a specific process queue. The work flow manager 154 has a special queue that is used to hold jobs that are not currently available for processing because of a loss of information or a failure that would prevent further processing. These jobs are placed in the queue of the product waiting action / information process 801. Each job in this queue indicates the action or information it is serving, the last process that affected this job, the missing or additional information, or the completion of a required action. It has an associated status to indicate the next process to be queued.

Upon completion of any process, the work flow manager 154 checks this queue and any job in the queue will either complete this process (action) or provide information provided by this process. It is determined whether it is waiting for. If so, the job is queued in the appropriate process queue.

2. New Content Request Process 802 The content provider 101 provides a product that it sells and wants to deliver electronically (eg, the product may be a single song or a collection of songs). ). Work Flow Manager 15
An initial function of 4 is to enable an operator to identify such a product and place it in a queue for a new content request process 802. The content provider 101 can specify which information is required in the product selection interface through configuration options. Sufficient information is entered to clearly identify the product. Optionally, additional fields can be included to require manual entry of the information needed to initiate the audio processing phase in parallel with the metadata collection. If not provided manually, this information can optionally be retrieved from the content provider's database 160 obtained in the first stage of metadata processing, such as an automatic metadata collection process 803, or from default configuration settings. Content 11 in Content Provider Database 160
The content selection process is determined by the configuration and functions of the third embodiment.

[0189] If the necessary information necessary to execute the inquiry to the database 160 of the content provider 101 is specified, the job is processed by the automatic metadata collection process 803. In the music embodiment,
To properly schedule the product for audio processing, the genre of the product and the desired compression level as well as the audio PCM or WAV file name are specified. This information can be entered as part of the product selection process or selected by a customized query interface or web browser function. Given this information, the product can be scheduled for content processing.

The product selection user interface provides an option that allows the operator to specify whether the product can be released for processing or whether to keep it until additional information is entered. If so, the job is added to the queue of the new content request process 802 and waits for the next action to complete data entry and / or release the product for processing. When a product is released, the workflow manager 154 evaluates the specified information to determine which processes are ready to be passed to the job.

If sufficient information has been provided to allow automatic querying of the content provider 101 to the database 160, the job is queued for the automatic metadata collection process 803. If no database mapping table has been configured for the automatic metadata collection process 803, the job is queued for the manual metadata entry process 804 (see Automatic Metadata for details regarding the database mapping table). See section Data Collection Process 803).

If essential general information for audio processing and special information required for the watermark are specified, the job is queued for the watermark process 808 (the first phase of content processing). . If any of the required information is missing when the job is released, the job will have a status indicating the missing information, along with a product standby action / information process 801.
Is queued in the queue.

For example, if the content 113 is audio and the situation indicates the file name of the content 113 such that a PCM or WAV file is missing, this may need to be captured (or digitally extracted from a digital medium). In some cases. In the audio processing function, the song file is a standard file
Must be accessible by the system interface. If the song is located on an external medium or a file system that is not directly accessible by the audio processing tool, the file is first copied to an accessible file system. If the song is in digital format but is on a CD or digital tape, the song is extracted to a file system accessible to audio processing tools. When the file becomes accessible, it assumes that all other information needed for the watermark has also been specified and uses the workflow manager user interface 700 to put it into the watermark process. Specify or select the path and file name for the job so that it can be released.

[0194] 3. Automatic Metadata Collection Process 803 The automatic metadata collection process 803 attempts to automatically obtain as much of the product information as possible, into the content provider 101 database 160 or a staging database into which the data was imported. Perform a query for The automatic metadata collection process 803 needs the following information before it can place an item in its queue. A database mapping table with sufficient information to generate a query to the database 160 of the content provider 101; product information needed to perform the query; and enough products to clearly define the product. information

In order to obtain information necessary for processing the contents 113, the contents provider 1
01 to the database 160 is executed.
For example, if the content 113 is music, the information needed to perform this query could be the album name, but could be UPC or a specific album or selection ID defined by the content provider 101. You can also. Some of the information to be obtained is designated as mandatory (see section on automatic metadata collection process 803 for details). Having obtained all the required information, the job is then queued for the terms of use process 805. If any essential information is missing, the song is queued for manual metadata entry process 804. If any job in the queue for the product wait action / information process 801 is waiting for any of the information obtained in this step, the job status will be updated to indicate that it is no longer waiting for this information. Is done. If the job no longer has outstanding requirements, it is enqueued to the next defined queue.

[0196] 4. Manual Metadata Entry Process 804 The manual metadata entry process 804 provides a means for an operator to enter missing information. It has no dependencies. Once all the required information has been specified, the job is queued for the terms of use process 805.

[0197] 5. Use Condition Process 805 The use condition process 805 allows the specification of product applications and restrictions. The terms of use process 805 may require some metadata. Once the terms of use have been specified, the job is
The metadata SC creation process 8 until the process 806 option has already been requested or configured as a default in the workflow manager 154 rules.
07 are entitled to be queued. In that case, the job is a monitored release process 806
Queued for Before queuing to the metadata SC creation process 807, the workflow manager 154 first ensures that all dependencies for the process are satisfied (see below).
If not, the job is queued to the product standby action / information process 801.

6. Supervised Release Process 806 The supervised release process 806 allows for quality checking and validation of the information specified for the digital content product. It has no dependencies. Any comments previously added to the job at any stage in the processing of this product can be reviewed by the supervisor and appropriate action can be taken. After reviewing all information and comments, the supervisor has the following options: Approve release and create metadata SC 8
Queue the product for 07. Change and / or add information and queue the product for the metadata SC creation process 807. • Add comments to the job and re-queue for manual metadata entry process 804. Add a comment and queue the job in the queue for the product standby action / information process 801.

7. Metadata SC creation process 807 The metadata SC creation process 807 collects all the information collected above and other information necessary for the metadata SC620, and calls the SC packer process to create the metadata SC620. . This tool requires the following as input: • Required metadata • Terms of use • Encryption keys used at all quality level encryption stages for this product

In this last dependency, the metadata SC
Before creating 620, the associated audio object must have completed the audio processing phase. When the metadata SC creation process 807 is completed,
The job is queued in a queue for either the final quality assurance process 813 or the content distribution process 814 based on the defined work flow rules.

8. Watermark Process 808 The watermark process 808 adds copyright and other information to the content 113. For embodiments where the content 113 is a song, the tool requires the following as input:・ Song file name (multiple file names in case of album) ・ Watermark command ・ Watermark parameter (information to be included in watermark)

Upon completion of the watermark process 808, the job is queued for the pre-processing compression process 809 if the required input is available, otherwise the product wait action / It is queued in the information process 801.

9. Pre-Processing Compression Process 809 The pre-processing compression process 809 encodes the content 113 according to the specified compression level and executes any required pre-processing first. Enqueuing a job in this queue actually creates multiple queue entries.
One job is created for each compression level of the desired product. The encoding process can be performed on multiple systems in parallel. This tool requires the following inputs: -Watermarked content file names (multiple file names if content 113 is an album)-Product quality level (pre-configurable)-Compression algorithm (pre-configurable)-Product genre (if pre-processor required)

Upon completion of the encoding process, the job is queued to the content quality management process 810 if configured by the work flow rules. If not, the job is encrypted
Queued for 11.

[0205] A method for displaying the ratio of already processed contents among contents 113 such as audio, or among contents 113, the amount of already coded contents is selected. If the third party provider of the coding tool does not provide a method for indicating as a percentage, FIG.
Flowchart 11 for Determining Digital Content Encoding Rate for Content Preprocessing Compression Tool
00 is shown in FIG. The method starts with the selection of the desired coding algorithm and bit rate in step 1101. Next, in step 1102, a query is made to determine if the algorithm and coding rate have a previously calculated rate factor.
This rate factor is a factor used to determine the compression rate for a particular coding algorithm and a particular bit rate. If no previously calculated speed factor is stored, the content 1
Code 13 samples. In the preferred embodiment, the predetermined time period is a few seconds. Using this coding rate for a given time period, a new rate factor RNEW is calculated. In step 1108, knowing the amount of time and the amount of coded content 113, calculate a new speed factor RNEW as RNEW = (length of coded digital content) / (amount of time). In step 1109, the content 113 is encoded, and the encoding status is displayed using the speed coefficient RNEW calculated previously. The coded rate factor RNEW is then stored at step 1107 for use in the future for the coded algorithm and coded bit rate. Step 110
The algorithm selected in step 3 is the previously calculated speed factor R
If it has STORED, in step 1104 content 1
13 and uses the previously calculated rate factor RSTORED to indicate progress. Meanwhile, step 1105
Calculates the current rate factor Rcurrent for this selected algorithm and bit rate. Step 1
At 106, using the current speed coefficient Rcurrent,
Update the stored speed factor as the average of RNEW = (RSTORED + RCURRENT). Iterative updating of the rate factor may make the determination of the coding rate increasingly accurate each time it is subsequently used for a particular coding algorithm and bit rate. In step 1107, the new speed RNEW is stored for future use. Current speed coefficient Rc
If the urrent exceeds the range of the previously stored rate factor RSTORED by a given range or threshold value, then RSTORED may not need to be updated.

Next, a display of the coding status can be presented. The encoding status includes an indication of the current encoding rate, as well as the percentage of total content 113 displayed as a progress bar based on the encoding rate and the total length of the file for content 113. Also, the encoding status is
The time remaining for coding can also be included. The remaining time for coding is the calculated coding rate RCURR
It can be calculated by dividing ENT by the total length of the file for the content 113. The encoding status can be transferred to another program that can invoke the calling process. This can facilitate the operation of a monitoring program for coding or a co-dependent program at the time of coding and batch processing for more efficient processing. Note, however, that in alternative embodiments, the encoding may include a step of watermarking.

10. Content Quality Management Process 810 The content quality management process 810 is similar in function to the supervised release process 806. This is an optional step that allows someone to validate the quality of the content processing performed so far. It has no dependencies other than the completion of the watermark process 808 and the coded portion of the pre-processing compression process 809. Upon completion of the content quality management process 810, the following options become available. The job can be released and queued for the encryption process 811. • Add comments and requeue one or more jobs for the pre-processing compression process 809.

In the last option, an uncoded watermarked version of the song file must remain available until after the content quality management process 810.

[0209] 11. Encryption Process 811 The encryption process 811 invokes the appropriate secure digital content electronic distribution rights management function to encrypt each of the watermarked / coded song files. This process has no dependencies other than the completion of all other audio processing. Upon completion of the encryption process 811, the job is queued for the content SC creation process 812.

12. Content SC Creation Process 812 In the content SC creation process 812 process, some metadata files may have to be included in the content SC 630. If a file other than the content 113 is required, the file is collected and S
The C packer process is called to create the content SC630 for each compression level of the created content 113 (eg, song). When the content SC creation process 812 is completed, the song is assigned to a defined work
It is queued to either the final quality assurance process 813 or the content distribution process 814 based on the flow rules.

13. Final Quality Assurance Process 813 The final quality assurance process 813 can verify by cross-reference check between the related metadata and the content SC 630 that both match correctly and that all information and content 113 included therein are correct. This is an optional step. When the final quality assurance process 813 is completed, the job is queued for the content distribution process 814. If problems are found, in most cases the job must be requeued to the failed stage. The rework at this stage is very expensive, as the product must undergo re-encryption and re-packing, in addition to the re-processing required to correct the problem. It is highly recommended to use conventional assurance steps to ensure the quality of content 113 and the accuracy and completeness of the information.

14. Content Distribution Process 814 The content distribution process 814 process is responsible for transferring the SC to the appropriate host site. After the successful transfer of the SC, the job completion status is logged and the job is removed from the queue. If a problem occurs during the transfer of the SC, after a defined number of attempts, the job is flagged as failed in the workflow manager tool 154 along with any errors detected.

[0213] 15. Work Flow Rules The work flow rules for FIG. 11 are as follows:
Works on one major system. A: Work flow manager tool 154 1. New content request process 802 2. Product standby action / information process 801 3. Final quality assurance process 813 Content distribution (and notification) process 814 B: Metadata assimilation input tool 161 1. Automatic metadata collection process 803 2. Manual metadata input process 804 3. Supervised release process 806 Metadata SC creation process 807 C: Content processing tool 155 1. Watermark process 808 (requires copyright data) 2. Pre-processing compression process 809 3. Content quality management process 810 4. Encryption tool 811 Content SC creation process 812

Work Flow The content 113 selection operator inputs a new product and starts queuing to A1 (new content request process 802). A1: When the content 113 selection operator releases it to the workflow manager tool 154, it is B1 (automatic metadata collection process 803).
A2: Step B1 (automatic metadata collection process 80)
3) or from step B2 (manual metadata input process 804) or from step B3 (supervised release process 806)
C creation process 807) [encryption key required] preceding step (metadata SC creation process 80)
7) to step A3 (final quality assurance process 813)
Or step A4 (content distribution process 814)
En route [requires content SC630] en route from step C1 (watermark process 808) to step C2 (pre-compression process 809) [requires metadata for pre-compression process 809] step C4 (Encryption process 811) to step C5
On the way to (content SC creation process 812) [requires metadata for packing content SC630] Step C5 (content SC creation process 81)
2) to step A3 (final quality assurance process 813)
Or step A4 (content distribution process 814)
A3: Queue B2 (manual metadata input process 804) after step A3 (final quality assurance process 813)
Put on or put on queue B3 (supervised release process 806) or put in the queue required by the quality assurance operator A4: Step A4 (content distribution process 814)
Later, the workflow manager tool 154 is executed for this product. B1: Step B1 (automatic metadata collection process 80)
3) After step C1 (watermark process 80)
8) If the required metadata is present, place an entry representing this product on queue C1 (also perform the following logic) 1-Missing any required metadata or 2-Manual metadata If there is a comment directed to the data provider, the product is also placed on queue B2 (manual metadata entry process 804) or, if a supervised release is requested for this product, the product is placed on queue B3. (Supervised release process 80
6) Place the product on the pre-queue (metadata SC creation process 807) or encrypt if the product has all the information from the content processing tool 155 for all required quality levels. A flag indicating that a key is required is added to the product, and the product is placed in queue A2 (product standby action /
Put on the information process 801) B2: Step B2 (manual metadata input process 80)
4) During step C1 (watermark process 80)
If step 8) has not been performed and there is metadata required for step C1, an item representing this product is placed on queue C1 (the following logic is also executed).
2 (metadata required for pre-processing compression process 809) has just been provided (also perform the following logic)
If there is metadata that can be collected by the metadata assimilation input tool 161 If a supervised release is requested for this product, place the product on the queue B3 (supervised release process 806) or the content processing tool 155 Step C4 (encryption process 81)
If all the information from 1) is present, place the product on a pre-queue (metadata SC creation process 807) or flag the product as requiring an encryption key and attach the product Put the product on queue A2 (product wait action / information process 801) or if the metadata provider requests a mandatory supervised release, put the product on queue B3 (supervised release process 806) or nothing. Do not execute (keep the product on queue B2 (manual metadata entry process 804)) B3: Step B3 (supervised release process 80)
If during 6) the operator returns the product to step B2 (manual metadata entry process 804), the product is placed on queue B2 or if the operator releases the product.
If all the information from step C4 of 55 (encryption process 811) is present, place a flag indicating that this product is to be placed on a pre-queue (metadata SC creation process 807) or that an encryption key is required. Put on the product and place this product on queue A2 (product wait action / information process 801) or the product remains on queue B2 (supervised release process 806) Predecessor: Preceding step (metadata SC Creation process 80
7) If all (product / quality level) tuples are flagged on the product afterwards to indicate that the metadata has been packed If the configuration of the content provider 101 specifies SC quality assurance, this product On the queue A3 (final quality assurance process 813) or put this product on the queue A4 (content distribution process 813).
14) A flag is added to the product to indicate that the product is to be placed on top or that the content 113 needs an SC, and the product is placed in the queue A2 (product standby action / information process 8).
01) Put on top C1: Step C1 (Watermark process 80)
8) If there is metadata required for step C2 (pre-compression process 809) later, create an entry for each (product / quality level) tuple and place it on queue C2 or pre-process / compress A flag is added to the product indicating that metadata for the product is required, and the product is placed in the queue A2 (product standby action / information process 80).
1) Put on top C2: If the configuration of the content provider 101 specifies the content quality management process 810 after step C2 (pre-processing compression process 809), this (product / quality level) tuple is placed in the queue C3 (content quality management). Put on process 810) or put this (product / quality level) tuple on queue C4 (encryption process 811) C3: Step C3 (content quality management process 81)
0) Later, place this (product / quality level) tuple on queue C4 (encryption process 811) C4: Information needed after step C4 (encryption process 811) (ie, content 113 generated by the process) Symmetric key 6 used to encrypt
23) is supplied to the metadata assimilation input tool 161. If all the necessary metadata exists for the content SC630, this (product / quality level) tuple is placed on the queue C5 (content SC creation process 812) or Flag the product as requiring metadata for SC630 packing and place this (product / quality level) tuple on A2 (product standby action / information process 801) C5: Step C5 (content) SC creation process 81
2) Afterwards, when all the (product / quality level) tuples are packed with a flag indicating that the content 113 of this quality level has been packed, the flag indicating that the metadata has been packed is displayed for that product. If the content provider 101 has the configuration S
If you specify C quality assurance, place this product in queue A3
(Final quality assurance process 813) or put this product on queue A4 (content distribution process 814)
Put a flag on the product indicating that it should be placed on top or require metadata SC620 and place this product on queue A2 (product standby action / information process 801) or (all (product / quality level) tuples). Do nothing (not packed)
Quality level) tuple triggers action

C. Metadata Assimilation Input Tool Metadata consists of data describing the content 113, for example, for music, the title of the recording, the artist, the author / composer, the producer, and the length of the recording. Although the following description is based on the case where the content 113 is music, those skilled in the art will recognize that other content types, such as video, programs, multimedia, movies, and the like, may be used in accordance with the present invention. Note that it is within the true scope and meaning.

This subsystem is used by the content provider 10 to support product sales promotions.
1 provides data to the electronic digital content store 103 (eg, in the case of music, sample clips by the artist, biographies of the artist, a list of albums containing the recordings, and / or the artist and / or product). Related genre), data provided by the content provider 101 to the end user along with the purchased product (eg, artist, producer, album cover, track length), various purchases that the content provider 101 wishes to provide to the end user. The options (usage conditions 517) are grouped together. This data is metadata SC62
0 and packaged with electronic digital content
The store 103 becomes usable. To do this, the following tools are provided:・ Automatic metadata collection tool ・ Manual metadata input tool ・ Terms of use tool ・ Supervised release tool

[0217] These tools enable the content provider 101 to perform the processes described above with respect to the work flow manager 154.
The tools described herein are toolkits based on Java in the preferred embodiment, but other programming languages can be used, such as C / C ++, assembler, and the like.

[0218] 1. Automatic Metadata Collection Tool The automatic metadata collection tool provides the user with the ability to perform the automatic metadata collection process 803 described above.
The automatic metadata collection tool accesses the database 160 of the content provider 101 and is used to retrieve as much data as possible without operator assistance. Configuration methods can be used to automate this process. The content provider 101
The type of data that the content provider 101 wishes to provide to the end user (eg, composer, producer, accompaniment instrument, track length) and the promotion provider that the content provider 101 provides to the electronic digital content store 103 The type of data (for example, in the case of music, sample clips by this artist, biographies of this artist,
List of albums containing this recording, the genre associated with this artist)
You can adjust the metadata template. Default metadata templates include data fields required by end-user device 109, and data fields that can optionally be provided to end-user device 109.
Field, Electronic Digital Content Store 10
3 and includes a sample set of multiple data fields promoting artists, albums, or singles, or a combination thereof.

To extract the template data fields from the database 160 of the content provider 101, the automatic metadata collection tool can detect the type of data (eg, composer, producer, artist history). Use a table that maps to a location in the database. Each content provider 101 assists in specifying a mapping table for each environment.

The automatic metadata collection tool collects any data available from the database 160 of the content provider 101 using the metadata template and the mapping table of the content provider 101. . The status of each product is updated with the result of the automatic metadata collection process 803. Products that are missing any essential data are queued for the manual metadata entry process 804, otherwise the products are available for packing into metadata SC620.

[0221] 2. Manual Metadata Entry Tool The manual metadata entry tool provides the user with the ability to perform the manual metadata entry process 804 described above.
The manual metadata entry tool allows an appropriately authorized operator to provide missing data.
If the operator determines that the missing data is unavailable, the operator can add a comment to the product and request a supervised release. The content provider 101 can request a supervised release for the product for quality assurance.
If all required data is present and a supervised release has not yet been requested, the product is
Can be used to pack into C620.

3. Terms of Use Tool The terms of use tool provides users with the ability to perform the terms of use process 805 described above. Content 113 for sale or lease (limited use) using electronic delivery
The process of providing a business requires a series of business decisions. The content provider 101 provides the content 11
3. Determine the compression level that will enable 3 Next, one or more usage conditions are specified for each compressed coded version of the content 113. Each usage condition defines an end user's rights and restrictions on the end user regarding the use of the content 113.

As a part of the content processing tool 155, a set of use conditions (end user rights and restrictions)
Is added to the product.

One use condition defines the following. 1. 1. A compressed and coded version of the content 113 to which these use conditions apply. 2. The type of user to whom the terms of use apply (eg, business, personal consumer) Whether these terms of use enable purchase or lease of content 113 For a rental transaction: • A unit of measure (eg, days, views) used to limit the lease period • Content 113 thereafter For the above unit purchase transactions where the CD is no longer played: • the number of reproducible copies that the end user is allowed to make • the type of media on which copies can be made (eg, CD Recordable (CD-R), minidisc) ,personal·
Computer) 4. The period during which the purchase / lease transaction can be performed (that is, the end user can purchase / lease under the conditions of use only after the availability start date and only before the availability end date). 5. Countries in which the end user can make this purchase (or lease) transaction. 6. Price of purchase / lease transaction under these conditions of use 7. Watermark parameters Types of events that require notification of clearing house 105

Example Set of Terms of Use Content provider 101 decides to test whether the North American market will accept the re-release of children's songs by popular children's singers during the fourth quarter of 1997. There are cases. In this test, the song will be provided in two compressed coded versions, 384 Kbps and 56 Kbps. 384Kbps version purchased (and can be copied once on minidisk)
Alternatively, it can be rented (for 2 weeks), and the 56 Kbps version can be purchased only (copy creation is not possible). The watermark instruction is the same for any purchase / rental arrival, and the content provider 101 wants the clearing house 105 to count all copies made. This would create the terms of use as follows:

[0226]

[Table 10]

[0227] 4. Parts of Metadata SC620 Some of the types of data collected by the metadata assimilation input tool 161 to be included in the metadata SC620 are shown below. An attempt was made to group data into each part of the SC by function and destination.

Product ID [Source: Content Provider] [Destination: Everyone;] Licenser Record Company [Destination: EMS; End User;] License Holder Record Company [Destination: EMS; End User;] This object (2 Source (Issuer) of Next License Holder Record Company [Destination: Everyone;] Object Type (ie Single Object or Array of Multiple Objects) Object ID [Destination: Everyone;] International Standard Record Code (ISRC) International Standard Music Number (ISMN) Terms of Use (Source: Content Provider; Destination: EMS, End User, Clearing House 105) Purchased Terms of Use (Source: EMS; Destination: End User, Clearing House 105) Using objects (recordings) Set of terms and conditions for use (consumer restrictions and rights) individual items in an array of terms and conditions compressed and coded version of content 113 to which these terms apply Whether to enable lease For a rental transaction: a unit of measure used to limit the duration of the lease (eg, number of days, number of plays) Number of such units after which the content 113 will no longer be played For a purchase transaction: Number of reproducible copies that end user is allowed to create Types of media on which copies can be made (e.g., CD Recordable (CD-R), minidisc, personal computer) The period during which a purchase / lease transaction can take place (i.e., end The user may not be able to (Purchase / lease is allowed only under the last available date under the terms of this agreement.) A pointer to the country where the end user can transact this purchase (or lease). Purchase / Lease Transaction Price Pointer to Encrypted Watermark Instruction and Parameter Pointer to Type of Event Requiring Clearing House 105 Notification Purchase Data (Encryption; Optional Information; Source: EMS; Destination: End User, Clearing House 105) Purchase Date Purchase Price Billing Name and Address Consumer Name and Address Consumer Country (best guess) Metadata 1 (Source: Content Provider; Destination: EMS, End User) Array II Copyright information For composition For recording For song ties Le Main artist ｛Pointer ｛Artwork (eg, album cover) Artwork format (eg, GIF, JPEG)｝ Optional information: Array of additional information 曲 Composer Publisher Producer Accompaniment musician Record date Release date Lyrics Track Name (description) / track length List of albums containing this recording Genre｝ Metadata 2 (Source: Content Provider; Destination: EMS) Array of multiple structures, each representing a different quality level of the same recording 録音 Recording; Recording quality level; size of recording (possibly compressed) in bytes｝ Metadata 3 (Source: Content Provider; Destination: EMS, End User) Optional Information: Promotional Material: Pointer to Artist Promotional Material URL to the artist's web site; artist background description; artist-related interviews (with interview format (eg, text, audio, video)); review (with review format (eg, text, audio, video)); Sample clips (and their formats and compression levels); recent and upcoming concerts / appearances / events-their dates and locations; ｛pointers to album promotional material ｛sample clips (and their formats and compression levels) Background description of producer / composer, movie / theatre / casting, album making, etc .; non-artist related interviews (with interview formats (eg, text, audio, video)); Discussion (with critic format (eg, text, audio, video)); Genre;｝ Single promotion: sample clip (and its format and compression level) producer / composer, movie / theatre / casting, single making, etc. Background description; review (with review format (eg, text, audio, video))

[0229] 5. Supervised Release Tool The supervised release tool provides the user with the ability to perform the supervised release process 806 described above.
Content with supervised release rights
The individual designated by provider 101 invokes the product waiting for the supervised release (ie, the product on the queue of supervised release process 806), examines its content 113 and its accompanying comments, and either: Or you can do. Approve the content 113 and release the product for packing into the metadata SC 620, make the necessary corrections, release the product for packing into the metadata SC 620, or specify the corrective action to be performed And resubmit the product to the manual metadata entry process 704.

In another embodiment, after the SC is created, another
There are two optional quality assurance steps, where S
C's content 113 can be opened and inspected for completeness and accuracy, at which point final approval for or release of the product to the retail channel can be given or rejected.

D. Content Processing Tool The content processing tool 155 is actually a collection of software tools used to process digital content files and create a watermarked coded encrypted copy of the content. These tools make use of industry-standard digital content processing tools and allow plug-in and swap technologies as watermarking, coding, and encryption technologies evolve. If the selected industry tool is loaded with a command line system call interface and can pass parameters to it or provide a toolkit that can call functions through a DLL interface, its content processing can be automated to some extent. it can. The front-end application to each tool queries the appropriate queue in the content processing tool 155 for the next available job, retrieves required files and parameters, loads industry-standard content processing tools and loads required functions. Execute
Once the task is completed, a manual update to the queue may be required if the tool does not report exit status.

A general-purpose version of the content processing tool 155 will be described, but customization is also possible.
The content processing tool 155 can be created with Java, C / C ++, or equivalent software. Also, the content processing tool 155 includes a diskette, C
D can be delivered by computer readable means or by a web site.

[0233] 1. Watermark Tool The watermark tool provides the user with the ability to perform the watermark process 808 described above. This tool applies the copyright information of the owner of the content 113 to the song file using audio watermark technology. The actual information to be exported is
Determined by the provider 101 and the particular watermark technology selected. This information is used so that it can properly pass this information to the watermark function.
Available for front-end watermarking tools. This imposes synchronization requirements on the metadata assimilation input tool 161, for example, to ensure that this information was obtained before the song audio file could be processed. The song will not be available for audio processing until the watermark information is obtained.

[0234] Since the watermark is common to all encodings of the created song, the first watermark in the audio processing is used.
Is applied as a step. As long as the watermark can survive beyond the coding technique, the watermarking process need only be performed once per song.

[0235] Various watermarking techniques are known and are commercially available. However, the front-end watermark tool can support various industry watermark tools.

[0236] 2. Preprocessing Compression Tool The preprocessing compression tool uses the preprocessing compression process 809 described above.
To the user. Audio coding requires two processes. The encoding is basically based on PCM audio
Applying a lossy compression algorithm to the stream. Typically, the encoder can be adjusted to generate different playback bit stream rates based on the level of audio quality required. Higher quality results in a larger file size, and for high quality content 113, the file size can be very large, so the download time for high quality content 113 is lengthy and sometimes Standard 2
Can be very high on an 8800 bps modem.

Therefore, the content provider 10
One is for both hasty, low-bandwidth customers who do not want to wait hours for a single download, and audiophiles or high-bandwidth customers who only purchase high quality content 113 or have faster connections. To soothe, one can choose to present various digital content qualities for download.

The compression algorithm differs in each technique for copying the content 113 at a low bit rate. This technique is algorithm-specific (ie, MP
EG, AC3, ATRAC) and compression level. To achieve a higher level of compression, the data is typically resampled at a lower sampling rate before being delivered to the compression algorithm. To allow for more efficient compression with lower loss of fidelity, or to prevent drastic dropouts in some frequency ranges, the digital content must be equalized for a given frequency. In some cases, it may be necessary to make adjustments in accordance with changes in recording intensity. Content preprocessing requirements are directly related to the compression algorithm and the level of compression required. In some cases, the style of content 113 (eg, music genre) can be successfully used as a basis for determining pre-processing requirements.
This is because songs of the same genre usually have similar dynamics. For some compression tools, such pre-processing functions are part of the encoding process. In other tools, the desired pre-processing is performed before compression.

Downloadable Audio for Sale
In addition to the file, each song has a low bit rate (LB
R) It also has a coded clip so that the song can be sampled by the LBR streaming protocol. This LBR encoding is a content processing tool 1
55 responsibilities. This clip is provided by the content provider 101 as a separate PCM file or as offset and length parameters.

As in the case of the watermark, it is expected that the coding tool can be loaded by a DLL or command line system call interface, and that all required parameters for preprocessing and compression are passed. Front-end coding tools, for example,
If the content is music and it is determined that the genre of the song is obtained from the content provider's database 160 before performing the audio pre-processing, it may have synchronization requirements with the metadata assimilation input tool 161. is there. This depends on the coding tool selected and how the genre of the song is uncertain. If the content provider 101 changes the selection of the coding quality level per song, this information is also provided prior to the coding step and is consistent with the metadata generated by the metadata assimilation input tool 161.

[0241] Various high quality coding algorithms and tools are known today. However, front-end coding tools can support a variety of industry coding tools.

Turning now to FIG. 15, a flowchart of one embodiment for the automatic metadata collection tool of FIG. 11 is shown in accordance with the present invention. The process begins with the content provider 101 reading the identifier from the media to be inspected. One example of content is an audio CD embodiment. For audio CD embodiments, Universal Price Code (UPC), International Standard Record Code (IS
RC), International Standard Music Number (ISMN). In step 1201, a suitable player for the content, eg, audio C
Audio CD player for D, DVD for DVD movie
This identifier is read by a player, a DAT recorder for DAT recording, and the like. Next, in step 1202, the database 160 for the content provider 101 is indexed using the identifier. In step 1203, as shown in FIG.
Some or all of the information needed by the flow manager process is retrieved from database 160 and other related sources. This information includes the content 113,
It may include metadata associated with it. In step 1204, the workflow manager 154 is started to create the electronic content 113 using the extracted additional information. However, it should be noted that multiple media options, such as multiple audio CDs, can be queued so that the automated metadata collection tool can create a set of content 113 for electronic distribution. For example, all content 113 could be created from a series of CDs or tracks selected from one or more CDs examined by content provider 101.

In an alternative embodiment, the preprocessing parameters can be automatically retrieved from the content provider database 160. Referring now to FIG. 16, there is shown a flowchart of a method for automatically setting pre-processing compression parameters of the pre-processing compression tool of FIG. 11 in accordance with the present invention. The content 113 of this embodiment is music. In step 1301, the content processing tool 15
In step 5, music (contents 113) to be coded is selected. In step 1302, the genre of the selected music is determined. This can be entered manually or by using other available metadata, such as additional data retrieved from the process described in FIG. Next, in step 1303, the selected audio compression level and audio compression algorithm are checked. Next, in step 1304, a look-up is performed by genre to select a compression setting and a compression algorithm for which compression parameter to use in the pre-processing compression process 809.

[0244] 3. Content Quality Management Tool The content quality management tool provides the user with the ability to perform the content quality management process 810 described above.
This is an optional content processing tool that gives quality control professionals the opportunity to review coded and watermarked content files and approve or reject them based on quality decisions I do. The expert can re-code the content with manual pre-processing adjustments until the quality is reasonable, or flag the song for re-processing and note the problem Can be added.

This process step can be configured by the content provider 101 as an optional or mandatory step in the content processing work flow. After packaging all SCs for this content (eg, each SC for multiple songs on a CD), additional and optional steps of final quality assurance process 813 are provided at which point the content The coding quality can be tested, but catching the problem early before encryption and packaging allows for more efficient content processing. Therefore, it is highly desirable to guarantee content quality at this step, as opposed to waiting until the final completion of all processing.

[0246] 4. Encryption Tool The encryption tool provides the user with the ability to perform the encryption process 811 described above. Content encryption is the final step of the content processing tool 155. Each version of the content created by the coding tool is encrypted here. The encryption tool is one of the functions of the SC Packer. Call SC Packer to encrypt the song,
Returns the generated encryption key used. Then this key
It is passed to the SC packer for use when creating the metadata SC620.

E. Content SC Creation Tool Once all metadata has been collected, the content SC creation tool groups the metadata into categories based on their intended use. These metadata groups are created in files passed to the SC Packer tool as metadata parts for metadata SC620. Each part (file) has its own processing requirements. The related song is processed and encrypted, and the target destination (URL of the content host site 111)
Is determined, the content SC for the content 113 is determined.
630 is ready to be created. Content 113 that has been processed and meets all the above requirements
Are queued for packing into the work flow manager 154 packer queue.

Next, the content SC creation tool extracts all the essential files created by the preceding step of the metadata assimilation input tool 161 and calls the SC packer function to create the metadata SC 620 and the content SC 630. This process involves a single metadata SC620 and multiple content SC6 for each song.
Create 30. For example, if the content is music, each audio file created during audio processing for various quality levels of the entire song is packed into a separate content SC630. The audio file created for the sample clip has the metadata SC62
0 is passed as the metadata file to be included.

F. Final quality assurance tool The final quality assurance tool is based on the final quality assurance process 8 described above.
13 to the user. When all SCs are constructed for one content file,
The content is ready for final quality assurance checks. Quality assurance can be performed at various stages of the content 113 creation process. content·
Provider 101 may choose to perform quality assurance at the completion of each major step to prevent subsequent overwork, or wait until all audio creation processes are complete and You can also choose to perform quality assurance. If the latter is selected, quality assurance is performed at this point when the creation of the SC is completed. This tool allows each SC for the song to be opened, inspected, and played audio.

If any problems are detected, even a small text change must reconstruct the SC through the SC's internal security mechanisms. Use interim quality assurance steps to ensure the accuracy of the metadata to avoid unnecessary reprocessing time, and to validate the proper cross-reference between the SCs associated with this song. It is highly recommended to book specific quality assurance steps. If a problem is detected, the guarantor can enter the problem description to be added to the song and re-queue it to the appropriate processing queue for re-processing. Work status, indicating the status of all related components of the song
Update the status appropriately in the flow manager 154.
If no problems are detected, the content 113 is marked or flagged as releaseable.

G. Content Distribution Tool The content distribution tool provides users with the ability to perform the content distribution process 814 described above. Once the content 113 has been approved for release, the SC for the content 113 is placed in the queue of the content distribution process. The content distribution tool monitors the queue and performs an immediate transfer of the SC file or a batch transfer of a group of SC files based on the configuration settings provided by the content provider 101. Also, the content provider 101 can optionally configure the content distribution tool to automatically keep all SCs in this queue until manually flagged for release. As a result,
The provider 101 can create the content prior to the scheduled release date and retain it until it wishes to release it, for example, a new song, movie, or game.
Also, since the SC can control access to the content 113 based on a defined release date, there is no requirement for the content provider 101 to actually stop delivering the SC, but this manual release option Can still be used for this purpose or to manage the network bandwidth required to transfer these large files.

When flagged for release,
The content SC 630 for the content 113 is transferred to the designated content host site 111 by FTP. The metadata SC 620 is transferred to the content promotion web site 156 by FTP. In this case, the SC is staged in a new directory of content 113 until it can be processed and integrated into the content promotion web site 156.

FIG. 21 is a flowchart of an alternative embodiment for automatically retrieving additional information for the automatic metadata collection tool of FIG. 11 in accordance with the present invention. This process is similar to that described above in FIG. But,
Supervised Release 806 and Content Quality Management 80
Nine quality checks are combined into one quality check, Quality Management 1704. Metadata SC creation 80
7 and a quality check is performed before the content SC creation 812. When the quality check is performed before the SC creation, the content 113 and the related metadata SC620 are created.
The step of unpacking is removed. In addition, in this embodiment, the queue for the product standby action / information 801 has been removed. Jobs are placed on a particular process queue depending on what action is being requested. For example, if the job requires the entry of manual metadata, ie, additional metadata, the job is placed on a manual metadata entry queue. Further, the automatic metadata collection 803 includes the metadata assimilation input tool 161 and the content processing tool 15.
5 has been merged with the new content request, as done beforehand. Finally, it is important to point out that usage conditions 804 are entered both during automatic metadata collection 803 and during manual metadata entry 803. After that, many of the usage conditions are automatically collected
It can be filled out automatically during step 3.

H. Content Promotion Website In order to most effectively distribute information about what the content provider 101 makes available for sale by digital download, it also distributes this content 113 for download to its customers. In order to obtain the necessary files in the electronic digital content store 103 so that they can be made available to the public, each content provider 101 must have a secure web site containing this information. Must. This is currently part of the content, to make the promotional content available to its retailers and others who need this information.
This is the same as the method used by the provider 101.
If a service of this type already exists, an additional section can be added to the web site so that the electronic digital content store 103 can go to a list of content available for sale by download.

Whether the content provider 101 has complete control over the design and layout of this site,
Alternatively, one may choose to use a turnkey web server solution provided as part of a toolkit for the secure digital content electronic distribution system 100. To implement each design for this service, the content provider 101
It is only necessary to provide a link to the metadata SC620 for the electronic digital content server 103 that accesses each site. This is implemented using a toolkit for the secure digital content electronic distribution system 100. The selection process and what information is shown depends on the content provider 101
Is at the discretion of

The metadata SC 620 received in the new content directory by FTP from the content distribution tool is processed by the content promotion web site 156. These containers are used to display or extract information from the containers.
Can be opened by the preview tool. This information can then be used to update HTML web pages or add information to a searchable database maintained by the service. The SC preview tool is actually a subset of the content collection tool used by the electronic digital content store 103 to open and process the metadata SC620. See the section on content collection tools for details. Next, metadata S
The C620 file must be moved to a permanent directory maintained by the content promotion website 156.

When the metadata SC 620 is integrated into the content promotion web site 156, its availability is announced. Content provider 101
Can send a notification to all subscribing electronic digital content stores 103 as each new metadata SC 620 is added to the site, or all metadata SC 620 added that day (or period). A single notification can be performed daily (or at any defined cycle). This notification is performed by a standard HTTP exchange with the electronic digital content store 103 web server by sending a predefined CGI string containing parameters that reference the added metadata SC620. This message is processed by the notification interface module of the electronic digital content store 103 described below.

I. Content Hosting The entertainment industry produces thousands of content titles each year, including CDs, movies and games, further increasing the tens of thousands of content titles currently available. Secure digital content electronic distribution system 100 is currently designed to support all content titles available in stores.

Finally, the number of content titles that can be downloaded to the customer every day by the secure digital content electronic distribution system 100 is thousands or tens of thousands. For a large number of titles, this requires a large amount of bandwidth. Such a need for computer disk space and bandwidth requires a distributed scalable implementation with multiple content host sites 111. The system also supports customers around the world. This will require overseas sites to facilitate delivery to customers around the world.

A content host on the secure digital content electronic distribution system 100 can have the content provider 101 host its own content 113 or share a common facility or set of facilities. It is designed to be.

A content host on the secure digital content electronic distribution system 100 includes a plurality of content host sites 111 that collectively include all of the contents 113 provided by the secure digital content electronic distribution system 100.
And a plurality of secondary content sites (not shown) that include the current hot hits provided by the content provider 101. The number of content host sites 111 will vary depending on the number of end users using this system. Secondary content sites host a limited number of songs, but represent a large portion of the bandwidth used on this system. The secondary site goes online when the volume on the primary site increases to the point of maximum capacity. The secondary site is a network
It can be located near an access point (NAP), which helps to accelerate download time.
Secondary sites can also be located in various parts of the world to accelerate download time.

If the content provider 101 chooses to host all content 113 in its own system, a single content host site 111 with or without additional secondary content sites Can work as Therefore, it is possible to construct its own scalable distributed system. In another embodiment, the electronic digital content
Store 103 can also operate as content host site 111 for given content 113.
This embodiment requires a special financial agreement between the electronic digital content store 103 and the content provider 101.

[0263] 1. Content Host Site Content 113 may be provided by FTP or HTTP by a content distribution tool as described in the content provider section of this specification, or by tape, CD-ROM,
Offline means such as delivery of content on flash or other computer-readable media
Added to host site 111. Metadata SC620 created by content provider 101
Includes a field indicating a URL for locating the content SC630 for the content 113. This URL
Corresponds to the content host site 111. The electronic digital content store 103, if permitted by the content provider 101,
This URL can be changed within C641.
If the end user device 109 wishes to download the content SC630, it contacts this content host site 111.

[0264] The end user device 109 stores the content
By sending license SC660 to host site 111, a request for content SC630 is initiated. This is the same license SC660 returned by clearing house 105. Upon verifying the digital signature of license SC660, it can be determined whether it is a valid license SC660. It is valid license SC660
, The download can be initiated or the download request can be redirected to another content host site 111.

[0265] 2. Content provided by secure digital content electronic distribution system 100
Host Site 111 Secure Digital Content Electronic Distribution System 1
In the case of 00, the determination as to which site to use to download the content 113 is based on the content SC63.
Made by the primary content site that received the initial request for zero. This site uses the following information to make this determination. -Is there a secondary content site that hosts the requested content 113? (Most of the content 113 provided by the secure digital content electronic distribution system 100 is located only at the primary site.)-Where is the end user device 109 geographically located? (This information indicates that the request is for the end-user device 109
, Which is available from the end-user device 109, which is passed to the clearing house 105 in order SC650. -Is the appropriate secondary site functioning? (In some cases, the secondary site may be offline.) • What is the load on the secondary site? (If the secondary site is responsible for the activity, you can choose another site that is less crowded.)

The content SC is stored in the end user device 109.
Before transmitting 630, analysis and verification are performed at the end user's request. A database of all license SCIDs used to download the content 113 is held. This database is checked and the content 11 purchased by the end user device 109 is checked.
It can be guaranteed that only one request is made for each of the three pieces. For this reason, a malicious user cannot repeatedly access the content host site 111 in expectation of a reduction in the speed of the content host site 111, thereby preventing unauthorized download of the content SC630.

Content 1 to Secondary Content Site
13 Promotions and Demotions, Content 1
Periodically based on customer demand for the thirteen individual pieces.

Content Host Router A content host router (not shown) exists in the content host
3 receives all requests from end users waiting to download. The router performs validation on the end user's request and ensures that the end user has indeed purchased the content 113. A database is maintained of the status of secondary content sites, including which content 113 is present and its current status. This current situation includes the amount of activity on the site and whether the site is down for maintenance.

The only interface to the content host router is license SC660, which is
Is sent by the end-user device 109 when the content 113 needs to be downloaded. License SC660 includes information indicating that the user can download content 113.

Secondary Content Site A secondary content site (not shown) hosts the popular content 113 of the electronic secure digital content distribution system 100. These sites are geographically distributed around the world and network access points (NAs) to improve download times.
P) It is located near. These sites are added to the system near the maximum capacity as required at the primary content host site 111.

IX. Electronic Digital Content Store A. Overview-Multiple Electronic Digital Content Store 1
03 Support The electronic digital content store 103 is essentially a retailer. This is the entity that markets the content 113 to be distributed to customers. In the case of distribution of content 113, this would include a digital content retail website, a digital content retail store, or a company that wants to be involved in marketing electronic content 113 to customers. These companies can either market the sale of the electronic content 113 alone or choose to add the sale of the electronic product to other products currently offered for sale. Downloadable electronic products are converted to electronic digital content
Incorporating into the service offering of the store 103 is to provide electronic digital content distribution as part of the secure digital content electronic distribution system 100.
Implemented by a set of tools developed for store 103.

[0272] Such a tool is used by the electronic digital content store 103 for the following operations. Obtain the metadata SC620 packaged by the content provider 101. Extract content 113 from these SCs and use it as input to build its service offering. Create offer SC641 describing downloadable content 113 to be offered for sale. Handle the acknowledgment of the sale and the start of the download by creating and sending the transaction SC640 to the end user device 109. Managing a transaction log indicating the sale of downloadable contents 113 and the status of each download. Process status notifications and transaction authentication requests.・ Execute accounting arbitration.

[0273] These tools are designed to allow for flexibility when the electronic digital content store 103 wishes to integrate the sale of downloadable electronic content 113 into its service. This is not required, but these tools can be used to require that all financial payments for purchased downloadable content 113 be processed by clearinghouse 105. These tools are also available in the electronic digital content store 103
Will be able to fully serve its customers and process the financial transactions themselves, including the provision of promotions and special offers. These tools allow the electronic digital content store 103 to quickly integrate the sale of downloadable content 113 into its existing services. Moreover, the electronic digital content store 103 does not need to host downloadable content 113 and does not need to manage its distribution. This feature is supported by the content provider 10
1 is executed by the selected content host site 111.

Electronic Digital Content Store 10
The tools for 3 are implemented in Java in the preferred embodiment, but other programming languages may be used, such as C / C ++, assembler, and the like. However, the electronic digital content store 10
Note that the tools described below with respect to 3 are operable on a variety of hardware and software platforms. Electronic digital content store 103 as a complete system or as part of its component components includes, but is not limited to, electronic distribution or floppy diskettes such as the web, CD-ROM, removable hard disk drives. It can be distributed on a computer readable medium as an application program.

In another embodiment, the components of electronic digital content store 103 are part of a programmer's software toolkit. This toolkit enables electronic digital content
Predefined interfaces to the general components of the store 103 and the various components of the tool are possible. Such predefined interfaces are in the form of APIs or application programming interfaces. Developers using such APIs can implement any of the functionality of the various components from high-level application programs. By providing an API for such components, a programmer can quickly develop a customized electronic digital content store 103 without having to recreate the functions and resources of any of these components. .

Electronic Digital Content Store 10
3 is not limited to web-based service offerings. The tools provided are
All electronic digital content stores 103 that want to sell downloadable electronic content 113, regardless of the transmission infrastructure or mode of delivery used to deliver to the end user
Used. Broadcast services provided by satellite and cable infrastructure also use the same tools to acquire, package, and track sales of electronic content 113. The presentation of electronic merchandise for sale and the manner in which these offers are delivered to end users are a major variation between broadcast-based service offerings and point-to-point interactive web service type offerings. is there.

B. Point-to-point electronic digital content distribution service Point-to-point primarily refers to a one-to-one interaction service between the electronic digital content store 103 and the end-user device 109. This typically represents an Internet web-based service provided by a telephone or cable modem connection. Networks other than the Internet are also supported in this model, as long as they conform to the web server / client browser model. FIG. 12 shows the main tools, components, and components of the electronic digital content store 103.
It is a block diagram showing a process.

[0278] 1. Integration Requirements Secure Digital Content Electronic Distribution System 1
00 not only creates a new online business, but also provides a way for existing businesses to integrate the sale of downloadable electronic content 113 into their current inventory. Electronic Digital Content Store 10
The set of tools provided in 3 simplifies this integration effort. The content collection tool 171 and the SC packer tool 153 are used by the electronic digital content store 103.
Gathering information about what they have available for sale from participating content providers 101 and the files needed to reference such downloadable objects as items in their own inventory Provides a way to create This process is batch driven, can be largely automated, and is performed only to integrate new content 113 into the site.

The tools for the secure digital content electronic distribution system provide the web-based electronic digital content store 10 with minimal changes to its current content 113 retail paradigm.
It is designed to integrate the sale of downloadable electronic content 113 into three exemplary embodiments (ie, Columbia House Online, Music Boulevard, Tower) and the like. Several integration methods are possible, and in the preferred embodiment, the electronic digital content store 103 supports all product searches, previews, selections (shopping carts), and purchases. Each electronic digital content store 10
3 establishes loyalty to the customer with the customer, provides its own stimulus, and continues to market the product as it currently does. The secure digital content electronic distribution system 100 indicates which products in the inventory are available for electronic download,
It would only be necessary to allow the customer to select the electronic download option when making a purchase choice. In other embodiments, the customer's shopping cart may include a mixture of electronic media selection (content 113) and physical media selection. After the customer checks and electronic digital content store 103 completes the financial settlement and logs or notifies its shipping processing function to process the purchased physical goods, electronic digital content store 103 The transaction processing function calls the transaction processor module 175 to handle all electronic downloads. It only passes the essential information, and all processing from that point on is handled by the toolset for the secure digital content electronic distribution system 100. In another embodiment, the electronic digital content store 10
3 only wants to sell downloadable products or wants to separate financial payments between physical and downloadable products, secure digital content electronic distribution system 100 for processing financial payments. Other transaction processing methods using tools are possible.

To handle the download of various items, the electronic digital content store 103 contains a product for each downloadable product that it obtains from the content promotion web site 156 for the content provider 101. An ID (not shown) is provided. This product ID is associated with the customer's purchase selection for a downloadable product. Product ID is
Electronic digital content store 103 passes to transaction processor module 175 to identify the product purchased by the user. SC created to describe the product (offer SC641)
Is maintained in the offer database 181 in an attempt to simplify the management of such objects and make their existence transparent to the electronic digital content store 103, separated from the electronic digital content store 103. You.

The transaction processor module 175 and other additional functions include web server-side executable functions (ie, CGI and NSAPI,
ISAPI callable function) or just an API in the DLL or C object library. These functions handle the runtime processing of end-user and optional interactions with the clearinghouse 105. These functions interact with the web server's commerce services to create the files needed to initiate the content 113 download process,
It is downloaded to the end user device 109. They also handle optional interaction to authenticate and accept activity completion notifications.

Itself and the clearing house 10
An accounting reconciliation tool 179 is also provided to assist the electronic digital content store 103 in contacting the clearing house 105 to reconcile accounting based on the transaction log of No. 5.

[0283] 2. Content collection tool 171 The content collection tool 171 is used for metadata SC620
Interface with the content promotion web site 156 to preview and download the content. Since the content promotion site is a standard web site, an electronic digital content store 103 is required to navigate the site.
Uses a web browser. The navigation function varies based on the site design of the content provider 101. Some sites may offer extensive search capabilities with many promotional information screens. Other sites may have a simple browser interface with titles, performers, and a list of new releases to choose from. Each site has metadata SC62 that includes all of the promotional and descriptive information for a single song or album.
Includes 0 choices.

Alternatively, the electronic store 103 can subscribe to the content update and automatically receive the updated content by FTP.

Browsing of metadata The content collection tool 171 uses the metadata SC 620 on the content promotion web site 156.
A web browser helper application that launches whenever a link is selected. Selecting the SC downloads it to the electronic digital content store 103 and launches the helper application. The content collection tool 171 opens the metadata SC620 and displays the non-encrypted information included therein. The displayed information includes the extracted metadata 173. In the case of music, the displayed information includes a graphic image related to the song and information describing the song. You can also hear the preview clip of. In one example where the content 113 is music, if provided by the content provider 101, the promotion information, album title, and artist for that song or album are also shown. This information is displayed in a browser window as a series of linked HTML pages. Purchasable content 113 such as songs and lyrics
And other metadata that the content provider 101 would like to protect is the Retail Content Web
The site 180 is inaccessible.

In another embodiment, the content provider 101 offers optional promotional content for a predetermined fee. In this embodiment, such promotional content is stored in metadata SC620
Encrypted. The financial settlement to open this data can be processed by a clearing house 105 with an account for the electronic digital content store 103 for which a specified fee is charged.

Metadata Extraction In addition to the preview function, this tool provides two additional functions: metadata extraction and creation of offer SC641. Upon selecting the metadata extraction option, the electronic digital content store 103 is required to enter a path and file name where the metadata will be stored. Binary metadata such as graphic and audio preview clips are stored as separate files. Text metadata is used for retail content
Web site 180 is stored in an ASCII delimited text file that can be imported into its database. A table describing the layout of the ASCII delimited file is also created in an individual TOC file.
Additional options are also available to allow extraction into other National Language Support (NLS) supported formats.

One of important information provided as extracted data is a product ID. This product ID requires a commerce processing function for the electronic digital content store 103 to identify the user purchased content 113 to the transaction processor module 175 (see transaction processing section for details). It is assumed that. Transaction processor
The module 175 uses this product ID to correctly retrieve the appropriate offer SC641 from the offer database 181 for future download to the end user device 109. The electronic digital content store 103 stores the content 11 that it can download.
3 has full control over how it is presented on the site. Secure digital content electronic distribution system 10
In order to properly interface with the 0 tool, it is only necessary to maintain a cross-reference between the product ID and the content 113 being provided. If you provide this information here, the Electronic Digital Content Store 1
03 can integrate this product or content 113 into its inventory and sales page (database) in parallel with the process of creating offer SC641. Because both processes use the same product ID to refer to the product. This will be described in detail below.

Offer SC Creation Packer 153 The electronic digital content store 103 needs to create an offer SC641 describing the downloadable content 113 for sale. Offer SC6
Most of the information that falls within 41 is derived from metadata SC620. The content collection tool 171 creates the offer SC641 by the following operation. -Remove from the metadata SC620 those parts that do not need to be included in the offer SC641 defined by the offer SC template in the metadata SC620. Add additional required parts defined by the defaults specified in the configuration options in this tool for the electronic digital content store 103. • Request additional mandatory inputs or selections defined by the offer SC template in the metadata SC620. S to pack this information into SC format
Call the C packer 153.

The metadata displayed on the end user device 109 by the player application 195 (described in detail below) is held in the metadata SC620. Other promotional metadata used only by the electronic digital content store 103 as input to its web service database is removed from the metadata SC620. Content provider 1 such as watermark instructions, encryption symmetric key 623, and usage conditions 517 that define the authorized use of the object
01 is also held.

[0291] The metadata SC6 excluding the unnecessary ones
20 is included in offer SC641. The electronic digital content store 103 has a store use condition 519.
Is also added to the offer SC641. This can be done automatically by a set of defaults or interactively.
When configured for interactive processing, electronic digital content store 103 is dictated by a set of authorized object usage conditions 517 defined by content provider 101. Next, the store selects the options that it wants to offer to its customers. These become new usage conditions or store usage conditions 519. To process automatically, electronic digital content store 103 configures a set of default purchase options to provide for all content 113. These default options are automatically checked against the permission conditions 517 defined by the content provider 101 and set in the offer SC641 if there is no conflict.

When the offer SC641 is created, it is stored in the offer database 181 and indexed with the pre-assigned product ID in the metadata SC620. This product ID is provided in the offer database 18
1 and later used by the electronic digital content store 103 to identify downloadable content 113 for purchase by the customer in retrieving the offer SC641 for packaging and transmission to the end user. I do. See the Transaction Processor Module 175 section for details.

In another embodiment, electronic digital content store 103 stores content SC on its own site.
641 host. In this embodiment, the offer SC641 needs to be changed, such as replacing the URL of the content host site 111 with the URL of the electronic digital content store 103.

[0294] 3. Transaction processing module 17
5 Electronic digital content store 103 directs billing to clearing house 105. Alternatively, electronic digital content store 103 can request a financial settlement directly from clearing house 105. There are two basic modes for processing an end-user purchase request for downloadable content 113. The electronic digital content store 103 does not wish to process the financial settlement of the purchase, has no special promotions or incentives to influence the sale of the product, and to batch purchase requests. If you do not use the shopping cart metaphor, download the content 113
You can choose to provide a link on the page that goes directly to the offer SC641 file. Such an offer SC641 would need to be built with retail pricing information included in the metadata. The offer SC641 also includes a special HTML offer page that presents purchase options along with terms of sale. This page is constructed from the template created when the offer SC641 was constructed. When the end user clicks the direct link to offer SC641, offer SC641 is downloaded to the browser and end-user device 109 launches a helper application, opens a container, and offers SC
The offer page included in 641 is presented. This page contains a form for collecting customer information, including credit card information and purchase option selections. This form is presented directly to the clearinghouse 105 for financial settlement and processing. Optionally, the form can include end user credit information or fields required to use an industry standard local transaction handler.

Next, an embodiment in which the electronic digital content store 103 processes a request will be described.
In a more typical purchase request processing mode, the electronic digital content store 103 can process financial payments and present download authorization to end users.
In this method, the electronic digital content store 1
03 can integrate the sale of downloadable content 113 with other merchandise offered for sale on its site, to customers (by shopping cart metaphor) instead of individual billing for each download request Only one integrated billing allows batch processing of purchase requests, allowing electronic digital content store 103 to directly track its customer purchase patterns and offer special promotions and club options. In this embodiment, an offer for downloadable content 113 is included on the shopping page, which is added to the shopping cart when the end user selects, and in the current shopping model of the electronic digital content store 103. It is processed and financial settlement is performed. Upon completion of the financial settlement, the electronic digital content store commerce processing process calls the transaction processor module 175 to complete the transaction.

Transaction Processor Module 175 The role of the transaction processor module 175 is to organize the information needed by the end-user device 109 to initiate and process the download of the purchased content 113. This information is packaged in a transaction SC640 that is returned by the web server to the end-user device 109 in response to the purchase offer. The transaction processor module 175 includes three pieces of information from the transaction processing process of the electronic digital content store 103: the product ID for the purchased content 113, the transaction data 642, and the HTM for confirming the purchase settlement.
Requires L pages or CGI URL.

The product ID is a value provided to the electronic digital content store 103 in the metadata SC 620 relating to the content 113 just sold. This product ID is provided in the offer database 181.
Used to retrieve the associated offer SC641 from.

The transaction data 642 correlates the processing of the clearing house 105 with the financial settlement transaction performed by the electronic digital content store 103 and includes it in the watermark of the content 113 downloaded to the end user device 109. Electronic digital content store 10 for later use to provide user identity information
3 is a structure of information provided by the transaction processing function. Upon receiving the valid order SC 650, the clearing house 105 receives the sold content 113, which electronic digital content store 1
03 has sold it or logs a transaction indicating the relevant transaction data 642 including the end user's name and transaction ID 535. Transaction ID 535 indicates a reference to a financial settlement transaction. This information is later returned by clearinghouse 105 to electronic digital content store 103 for use in reconciling the account with billing statements received from content provider 101 (or its agents). Clearing House Transaction Log 178
Can be used by the content provider 101 to determine which of its content 113 has been sold, and the provider can invoice each electronic digital content store 103 for the fees it incurs. Can be created. Alternatively, other electronic means other than billing may be used to settle accounts between the content provider 101 and the electronic digital content store 103.

The information provided in transaction SC 640 and the security and integrity of transaction SC 640 provide clearing house 105 with sufficient credibility that the purchase transaction is valid, and thus clearing house 105 No further validation is required before logging this sale. However, the electronic digital content store 103 can require authentication before it is charged to its account (transactions logged at the clearing house 105 will not The content provider 101 indicates that money related to the sale of the content 113 has been collected). This request for authentication / notification is indicated by a flag in the transaction data 642. In this scenario, clearing house 105 contacts electronic digital content store 103,
Authorization is received from electronic digital content store 103 prior to billing his account and releasing encryption key 623. The transaction ID 535 is passed from the clearing house 105 to the electronic digital content store 103 as part of this authentication request, and the electronic digital content store 103 associates the request with a preceding transaction performed by the end user. To be able to This transaction ID 535 can be any unique value that the electronic digital content store 103 wishes to use, and is only for that store.

The transaction data 642 also includes the customer name. This name can be obtained from the username field of the purchase form filled out by the user when making the purchase, or from information previously logged during some user registration process at the electronic digital content store 103, Alternatively, it can be the official name obtained from the credit card information associated with the card used in this transaction. This name will later be included in the license watermark 527.

The transaction data 642 also includes the store usage conditions 519 purchased by the end user. This information is included in the license watermark 527,
Used by the end user device 109 in copy reproduction control.

The final parameter required by the transaction processor module 175 is an HTML page or CGI URL confirming the purchase settlement. Its purpose is to create an electronic digital content store 103
Is able to respond to the end user with an acknowledgment of the financial settlement and any other information that he or she wishes to include in the response. This HTML page or CGI
The URL is included in transaction SC640 and is displayed in the browser window of end-user device 109 when transaction SC640 is received and processed.

[0303] Transaction SC640 displays electronic digital content store 1 after processing the purchase offer.
03 is an HTTP response sent to the end user.
Sending the SC as a direct HTTP response forces the automatic loading of the SC processor helper application to the end-user device 109, so that the transaction automatically completes without depending on further end-user initiated actions. Becomes possible. This process is described in more detail below in the end user device 109 and player application 195 sections.

When the transaction processor module 175 is called with the required parameters,
This module includes transaction data 642,
Construct a transaction SC640 containing a transaction acknowledgment HTML page, a reference URL to the SC's other required security features, and retrieve and embed the offer SC641 associated with this purchase. It also logs information about this transaction for later use by the notification interface module 176 and the accounting reconciliation tool 179.

[0305] 4. Notification interface module 17
6 The notification interface module 176 contains executable routines (CGI or NSAPI,
ISAPI or equivalent). This is clearing house 10
5. Process optional requests and notifications from end-user devices 109, content host sites 111, and content providers 101. The events for which the electronic digital content store 103 can optionally request notification are as follows. The end user device 109 requests the encryption key 632 and the clearing house 105 specifies the specified content 1
Notification from clearing house 105 to release encryption key 623 for 13. This notification may optionally be configured to require authentication from electronic digital content store 103 before sending encryption key 623 to end-user device 109. A notification from the content host site 111 that the content SC 630 has been sent to the end user device 109; -Content SC630 and license SC660
From the end-user device 109 has been received and found to be successfully used to process the content 113 or has been corrupted. A notification from the content provider 101 that the new content 113 has been placed in the content promotion web site 156;

None of these notifications is an essential step in the flow of the secure digital content electronic distribution system 100, but the electronic digital content store 103 provides an opportunity to close the record when the sale is completed. It is provided as an option to give to. It can also serve the customer service by notifying the electronic digital content store 103 which functions have occurred since the final settlement of the transaction or which errors occurred while attempting to complete the sale. Also provide any information you may need to process the request. Or, in many of these situations,
It can be obtained from clearinghouse 105 via customer service interface 184 as needed.

The notification frequency of new content 113 available on the content promotion web site 156 is determined by the content provider 101. Notifications can be provided each time new metadata SC 620 is added or with every new metadata SC 620 added on that day each day.

Any of these notifications results in an entry into the transaction log 178. If the electronic digital content store 103 wishes to perform its own processing on such notifications, it intercepts the CGI call, performs its own functions, and optionally performs the notification interface module 17.
6 can be given the request.

[0309] 5. Accounting Reconciliation Tool 179 The accounting reconciliation tool 179 contacts the clearing house 105 to compare the transaction log 178 with the clearing house 105 log. this is,
Secure Digital Content Electronic Distribution System 1
00 is an optional process that can be used to assist the electronic digital content store in making the accounting process comfortable.

In another embodiment, the tool can be updated to allow electronic fund transfers for automatic recurring payments to content provider 101 and clearinghouse 105. It can also be designed to automatically process payment upon receipt of an electronic bill from clearinghouse 105 after reconciling the bill against transaction log 178.

C. Broadcasting Electronic Digital Content Distribution Service Broadcasting primarily involves no personal interaction between the end-user device 109 and the electronic digital content store 103 in order to customize on-demand viewing. Means many transmission methods. This is typically provided by a digital satellite or cable infrastructure where the content 113 is pre-programmed so that all end-user devices 109 receive the same stream.

[0312] Due to the great commonality in site design,
A hybrid where the electronic digital content store 103 provides digital content services configured to provide both a web distribution interface with an Internet connection and a higher bandwidth satellite or cable distribution interface with a broadcast service. -Models can also be defined. IRD
If the back channel serial interface is connected to the web and the IRD supports web navigation, the end user will navigate and purchase digital content services in the usual manner with the back channel internet interface Content 113 for preview and selection. The user selects the high-quality downloadable content 113 via Internet connection, purchases such a selection, and sets the required license SC
660 can be received, and then delivery of the content 113 (content SC630) can be requested via a higher bandwidth broadcast interface. The web service can indicate which content 113 is thus available for download based on the broadcast schedule, or can build a broadcast stream based entirely on the purchased content 113. right. In this manner, a web-based digital content service contracts with a broadcast facility to make a limited number of specific content 113 (eg, songs or CDs) available daily in this manner and to catalog High quality content 113 could be delivered to a user equipped with appropriate equipment that would make the whole available for lower quality downloads via a web interface.

[0313] Other broadcast models can also be designed in which there is no web interface to the end-user device 109. In this model, promotional content is packaged into a specially formatted digital stream for broadcast delivery to end-user devices 109 (ie, IRDs), where the stream is decoded and a purchase selection is made therefrom. Special processing is performed to present the available promotional content to the end user.

The actual purchase selection will still be initiated by back channel communication from the end user device 109 to the clearing house 105 and will perform all data exchanges using the SC. The toolset provided to the electronic digital content store 103 has been designed and developed so that most of its tools apply to both point-to-point Internet service offerings as well as broadcast satellite or cable offerings. ing. The tools used by the electronic digital content store 103 of the digital content web site to acquire and manage the content 113 while creating the SC are content 113 for distribution over the broadcast infrastructure. A satellite-based electronic digital content store 103 is also used to manage and create content. The SC distributed by the web service is the same as that distributed by the broadcast service.

[0315] 1. Multi-Tier Digital TV Embodiment Turning now to FIG. 22, a high-level logic diagram illustrating an alternative embodiment of electronic distribution of digital content using a broadcast infrastructure in accordance with the present invention is shown. In this embodiment, the content provider 101 stores metadata SC6 in one or more electronic digital content stores 103, as described above in FIG.
20 and one or more content hosts
The content SC630 is provided to the site 111. The electronic store 103 customizes the metadata SC620 to create the offer SC641. Offer SC641
Is sent to one or more broadcast centers 1802. In addition, the content SC 630 corresponding to the metadata SC 620 is sent from one or more content hosts 111 to the broadcast center 1802. Offer SC641 is sent to one or more end-user devices 109 by a broadcast infrastructure such as satellite, cable, DirectTV, or other broadcast mechanism. In this embodiment, end-user device 109 is coupled to television display 1806 and set-top box 1804. However, it should be noted that the set-top box 1804 and the end-user device 109 can be logically and physically different devices or one device. End user device 1
09 makes a regular connection to the clearing house 105 via a back channel such as a telephone line.

FIG. 23 is a detailed block diagram of FIG. 22, illustrating an alternative embodiment of electronic distribution of digital content using a broadcast infrastructure in accordance with the present invention. Broadcasting center 1802 offers SC
641 is received. Carousel Builder & Broadcaster 1902 creates various additional broadcast content that is sent with the broadcast stream. Techniques for transmitting digital information or digital content along with the primary broadcast stream include Intel's I / O, which inserts information during the vertical blanking interval of standard television broadcasts.
Including ntellicast system. In other embodiments, this information can be sent as an MPEG-2 standard transport stream for broadcast transmission, thereby deploying the solution with virtually any type of digital broadcast system. be able to. FIG.
FIG. 23 is a block diagram of a packet broadcast in the alternative embodiment of FIG. 22 according to the present invention. Offer SC641
Is the content SC 630 and the global SC 204
Decomposed into a series of packages 2006 of length N containing 0, which is similar to transaction SC 640, but with important differences regarding symmetric key 623. The global SC symmetric key 623 is used by the clearinghouse 1 with the end user device 109 to reconcile accounting information.
05 when the regular connection is not established
13 has a timeout mechanism that disables it. By providing the symmetric key 623 with a timeout facility, the end-user device 109 may first
The content 113 can be received, assembled, and decrypted for a predefined period without having to connect to the house 105. One of the periods could be a subscription-based service where one of the users of the end-user device 109 pays a monthly subscription fee. If the user neglected to pay the subscription fee and arbitrate with the clearinghouse 105, the content 113 would be unusable.
In addition to the package 2006, the content SC63
0 and the global SC 2040 and each content 11
Every third track 2002 is sent. In a music embodiment, track 2002 is a music track. Figure 2 shows the carousel format of the package format
As shown in FIG. 4, the package 2006 is transmitted by the broadcast infrastructure in a cyclic structure and appears periodically and repeatedly. Part of the circular broadcast is a master catalog (not shown), which contains a series of packets (P_1 ... P_
The bug catalog as part of N) is sent as part of the packet stream.

[0317] As described above, digital content 1
Reference numeral 13 denotes a package 2006. One package 2006 is associated with promotional material, metadata, package descriptors, and one (optional) video clip. The promotional material consists of graphics and text material associated with the packaged digital content (eg, cover art associated with a music album), and the metadata is a set of attribute value pairs associated with the package (eg, A package descriptor is a set of attribute value pairs (eg, package size and number of sections) used to extract structured digital content from a package, and a video clip is the package's Present and promote the content in video format (eg, a short music video of an artist playing a song contained in a music album associated with the package).

The package 2006 and promotional material, video clips, metadata, and package descriptors are transmitted by the broadcast center 1802 on one or more digital broadcast channels in a carousel manner. A carousel is a continuous digital stream that repeats with a set of broadcast intervals. The broadcast receiver allows a user to select and download a package 2006 while simultaneously extracting digital content from the package.

[0319] The package 2006 has two types, a static offering (not shown) and a dynamic offering (not shown).
Is composed of three sets. The static offering represents the active package 2006, ie, the set of packages 2006 currently being broadcast on the carousel. The dynamic offering represents a set of packages 2006 that are available on the server side and are not currently being broadcast. The static offering set is then organized into two subsets: a video clip static offering and a video catalog static offering. Video clip static offering is active video
Represents a set of packages 2006 with clips,
The video catalog static offering represents a set of packages 2006 that have no active video clips.

As described in detail in the section “X. End User Equipment” below, the application running on set-top box 1804 provides a video decoder, a graphical user interface, and provides user input. receive. Set-top box 1804 allows the user to tune to a digital TV channel and display video clips associated with the video clip static offering. Also, the set-top box 1804 allows the user to select packages 2006 for download from both static and dynamic offering sets. The user can select a video clip static offering, by selecting the appropriate icon displayed.
The packages 2006 are selected for download and the video clips associated with each package 2006 are played by the set-top box 1804. The user may select (1) the icon that displays the static offering catalog (ie, package 2 available in this set).
006 icon-based graphic expression)
(2) Navigate the catalog to determine the desired selection, and (3) select and download the video catalog static offering by selecting the desired package. Set-top box 1804 communicates with broadcast center 1802 to communicate with this dynamic offering
Request broadcast of package. Broadcasting center 18
02 collects all requests from the user's set-top box 1804 and places the package 200 in the carousel.
6 and implement a scheduling algorithm that assigns a carousel to the broadcast interval. When a dynamic offering package is assigned to a carousel (and thus to a broadcast interval), it becomes a static offering package.

[0321] All packages 2006, promotional material, metadata, and descriptors are collected in the master catalog. The master catalog is broadcast on a preset carousel. Packages 2006 belonging to the static offering set are listed in the bug catalog. The bug catalog includes: Broadcast addressing and tuning information needed to receive the package in the static offering set Broadcast addressing information needed to receive video clips Broadcast address needed to receive the master catalog Designated information-A pointer to the package associated with the currently broadcasted video clip-Packages 200 belonging to the static offering set
Set of pointers representing 6 Master catalog version Bug catalog version Since the bug catalog contains only pointers, it is very small and can be updated and downloaded frequently.
In this manner, set-top box 1804 can be constantly updated with the state of the broadcast channel.

To build and represent a graphical user interface, set-top box 1804 downloads the master catalog and extracts the contained data. To download the selected package, set-top box 1804 tunes to the carousel containing the package and begins collecting data associated with the package. The package data is configured in sections. Due to digital transmission errors, sections may be corrupted or lost. Section integrity is determined using CRC-32 style information. In one embodiment, set-top box 1804 collects all package sections according to a carousel cycle. Once all sections have been collected and reordered, set-top box 1804 reassembles the package. If a separate two-way unicast channel (such as the Internet) is available, set-top box 1804 can use this channel to collect missing parts of the package. Using the latter mechanism will greatly reduce package download time.

Use the store manager application (not shown) in the broadcast center 1802 to build video clip static offerings, video catalog static offerings, and dynamic offering sets. The same application is also used to associate the package 2006 with the carousel and determine the broadcast interval for each carousel and each video clip. Actions performed by the broadcast manager application are performed by the broadcast center 1802 in real time.

[0324] Package descriptors and promotional material are broadcast using a two-tier paradigm that allows real-time updates of the receiver.

[0325] 2. Embodiment of Web Broadcasting over Individual Channel FIG. 31 is a detailed block diagram of FIG. 22, illustrating an alternative embodiment of electronic distribution of digital content using a dedicated channel within a web broadcasting service in accordance with the present invention. ing. The overview of this exemplary architecture of FIG. 31 has been used to illustrate the small number of changes that need to be made from other embodiments for the delivery of music content by broadcast or communication line. In particular, Hughs
Using a current webcast infrastructure such as DirecPCTM, triggering is required to adapt only embodiments of the present system to work with existing Hughs DirecPCTM systems, as described in more detail below with respect to end-user devices 109. -Only a few elements are added, such as manager 2726.

As described above, the broadcast communication center 2702
Receives offer SC641 from electronic digital content store 103. Along with the offer SC641, the corresponding content SC630 is extracted.
In this embodiment, offer SC641 and content SC630 are stored locally on computer storage device 2704. Web Store 2 running CGI or servlet scripts 2708 and 2710
706 retrieves the promotion content and forms sample buttons and catalog listings as shown in FIG. 32 and described in detail below. credit card,
The e-commerce CGI 2710 interfaces with the financial clearinghouse 2710 to process payment authorizations such as debit cards and other payment verification systems. Content placed on web store 2706 is sent to repository 2712.

In one embodiment, the content sent to the repository is responsive to a user selection received from the end-user device 109 via the back channel. Thus, in this embodiment, the content can be scheduled to match the demand generated by the end user device 109. Moreover, if more popular user selections are broadcast more frequently, the periodicity of the content sent to repository 2712 can be changed.

[0328] Offer SC641 and content SC
Are selected for broadcast by transmitter 2716 across various channels. In one embodiment, the server / crawler 2714 retrieves the content to be transmitted using a technique known as "web crawling"
In that case, the crawler automatically and recursively retrieves the content reference by an identifier such as a URL or some other search process. In another embodiment, the electronic digital content store 103 stores the offer SC64
1 and the content implemented in the content SC 630 can be “pushed”. When the content is assembled, the transmitter 2716 transmits the offer SC641 on one or more selected channels and transmits the corresponding content SC on other channels. The transmitter is a DirecPCTM or compatible transceiver. The content SC 630 can be packaged to be broadcast each on a separate download channel. All available communication bandwidth for broadcast is shared by all channels. In a broadcast system having multiple channels, each content SC630 for a particular title or selection may be broadcast on a separate channel. This schedule can be statically designed to guarantee a specific periodicity for each channel. This design allows very popular content to be broadcast more frequently on one or more channels. If there is a back channel, such as a telephone line or network, the broadcast content is dynamically scheduled based on user selection.

In one embodiment, the promotional material in offer SC641 is retrieved from the SC and transmitted by channel. The necessity of holding the promotion material in the SC depends on the promotion material.

[0330] The end user device 109 is connected to the receiver 180.
4 receives the broadcast. The receiver 2718 in the direct broadcast embodiment is a USB modem coupled to a DirecPC ™ parabolic antenna or a DirecPC ™ / DirectTV ™ parabolic antenna or an equivalent webcast broadcast system. Cache manager 2720 is a software program that manages the download of content and promotional material on end user device 109. Promo Cash 27
22 and album + DSC buffer 2224
Two repositories are shown. Although shown as two separate storage locations in the end-user device 109, these repositories 2722 and 2724 may be further divided into more storage locations or may be combined into a single storage location on the end-user device. It will be apparent to those skilled in the art that they can be combined. Moreover, many components within end-user device 109 are combined into one unit or as separate hardware including receiver 2718, cache manager 2720, web browser 191, promo cache 2722, album + DSC buffer 2724. Can be realized. For example, the DirecPC ™ of one embodiment is housed in a set-top box 1804.

It is important to note the use of the term DSC. DSC is an abbreviation for “disconnect SC”. This is the same as the content SC 630, except that the prefix “D” is in this embodiment when the end-user device is disconnected, ie, has not received a broadcast from the transmitter 2716, or It is used to emphasize that the content DSC can be retrieved locally on the end-user device 109 even if it has not responded to the web store 2706 or both.

As described above, the promo cache 272
2 stores the promotion received by the end user device 109, and similarly, the album + DSC2724 stores the content SC641. Promo Cash 272 for users subscribing to the promotion channel
Promotional material or offer SC stored in 2
641 is updated whenever a new version of the promotion package is broadcast. By keeping the promotion content up to date, the user is assured that the promotion content is the most up-to-date when browsing offline. In a system having a larger album + DSC buffer 2724, when the promotion material is updated, the corresponding content SC630 is stored and updated. Storing both promotional materials for the content locally will keep the user system containing the content up to date.

The user using the web browser 191 browses the promotion material previously cached in the promo cache 2722. An exemplary user interface is shown in FIG. 32 below.
It should be noted that the promotion material is stored as described above, so that the user can browse the promotion material regardless of whether or not "connected" to receive the broadcast from the broadcast center 2702. It is important.

In one embodiment, when the user selects a promotion material, the sample clip can be played by the player application 196 launched by the trigger manager 2726. When the user makes a selection using the web browser 191, the cache manager causes the corresponding content SC630
Performs a check to see if it is available in the album + DSC buffer 2724, and if the corresponding content SC630 has already been downloaded, it is given to the cache manager and activates the trigger manager 2726 , Begin processing the content SC 630 as described above with respect to the player application 195 of the “Connect” embodiment.
If the corresponding content SC630 is not available in the album + DSC buffer 2724, the cache manager 2720 makes a request. The request or join request to cache manager 2720 controls the receiver to select the appropriate channel for broadcasting content SC630. The channel for content SC630 may be stored in one table in promo cache 2722 for each promotion to download. Therefore, a change in the broadcast schedule can be tracked locally. Content SC
The next scheduled broadcast of 630 is the receiver 2718
And cached locally in the album + DC buffer 2724. Cache manager 2720 can be programmed to automatically wake up at the correct interval to select the corresponding channel for download.

In an optional embodiment, the next time a user signs on or logs on using a back channel, such as the Internet, to the broadcast center 2702, a credit card payment is made using an e-commerce site 2710. Confirmation of user accounting information such as is performed.
In other embodiments, by allowing a user to make a given number of purchases without having to reconnect to the clearing house 105 or web store 2706,
An “offline” purchase of the content 113 is performed.
This "offline" embodiment uses several categories such as credit limit, purchase limit, subscription, timed use of content 113, etc., until reconnection occurs within a given time period or deferred value. be able to.

When the cache manager 2720 completes the scheduling and downloading of the requested appropriate content SC630, the trigger manager manager
Application 2726 notifies player application 195 and the content is available for import from album + DSC buffer 2724 into player application 195. In addition to notifying the player application that the content SC has been downloaded, the status of the download, errors during the download, and other information useful to the user when the user wishes to play or play the desired content 113, etc. Other situations cache manager 272
0 to the player application 195 can be reported.

As described above for the "online" or "connected" version of the current delivery system, the steps necessary to update the terms and conditions associated with the content can be monitored by the clearinghouse 105. .

X. End user device 109 Secure digital content electronic distribution system 1
The application in the 00 end user device 109 performs two main functions: first, SC processing and copy control, and second, playback of the encrypted content 113. End user device 109, whether a personal computer or a dedicated electronic consumer device, must be able to perform these basic functions. The end-user device 109 also provides various additional mechanisms and functions, such as creating a playlist, managing a digital content library, displaying information and images during content playback, and recording to external media devices.
Such functionality varies based on the services supported by these applications and the type of device for which these applications are designed.

A. Overview Referring now to FIG. 13, the main components and processes and the functional flow of the end user device 109 are shown. Applications designed to support the services of PC-based web interface content 113 consist of two executable software applications: SC processor 192 and player application 195. The SC processor 192 is an executable application configured as a helper application within the end user's web browser 191 to process SC file / MIME types. This application sends the electronic digital content store 103, clearing house 105, and content host site 111 to the
It is always launched by the browser when C is received. It is responsible for performing all essential processing for the SC and ultimately adding the content 113 to the end user's digital content library 196.

The player application 195 executes the content 113 in its own digital content library 196, manages its own digital content library 196, and, if permitted, creates a copy of the content 113. A stand-alone executable application that is loaded by the end user. Applications for both the player application 195 and the SC processor 192 are Java, C / C
++ or equivalent software. In a preferred embodiment, the application can be downloaded from a computer readable means, such as a website. But diskette or C
Other delivery mechanisms are possible, such as delivery by computer readable means such as D.

Searching and browsing information of the contents 113, for example, previewing song clips and selecting songs for purchase, are all processed by the end user's web browser 191. The electronic digital content store 103 provides a shopping experience in the same manner as provided today by many content 113 retail websites. The difference for end users over today's web-based content 113 shopping is that they can select the object of downloadable content 113 to add to their shopping cart. If the electronic digital content store 103 has other products available for sale in addition to the downloadable objects, the end user may place a combination of physical and downloadable electronic products in their shopping cart. Can have. The end user checks and gives his / her final purchase permission to the electronic digital content store 1
Until presented at 03, the end-user device 109 for electronic distribution of secure digital content is irrelevant.
All interactions before this point take place between the web server for the electronic digital content store 103 and the browser 191 on the end-user device 109. This includes a preview of the sample digital content clip. The digital content clip is not packaged in the SC, but rather is integrated into the electronic digital content store 103 web service as a downloadable file or supplied from a streaming server. The format of the content 113 clip is not dictated by the system architecture. In other embodiments, the player application 195 may be an electronic digital content store 103 or a clearing house 105
You could interact directly with, or offline using a promotional CD.

B. Application Installation The player application 195 and helper application 1981 are packaged in a self-installing executable program that is available for download from many web sites. Clearing House 10
5 acts as a central location hosting the master download page on the public web site. This includes a link to the location from which the installation package can be downloaded. This installation package is available at all content host sites 111 to allow for geographic distribution of download requests. Each participating electronic digital content store 103 may also be able to make the package available for download from the site, or a clearing house 105
May simply provide a link to the master download page on the public web site at

An end user who wishes to purchase the downloadable contents 113 downloads and installs this package. This installation is independent within this downloadable package. This unpacks and installs both the helper application 198 and the player application 195, and also configures the helper application 198 according to the installed web browser.

As part of the installation, a public / private key 661 pair is created for the end user device 109 for use in processing the order and license SC660. A random symmetric key (secret user key) is also generated for use in protecting the song encryption key in the license database 197. This confidential user key (not shown) is protected by breaking the key into multiple parts and storing pieces of the key in multiple locations throughout the end user's computer.
This area of the code is protected by tamper-proof software technology so as not to disclose how the key is segmented and stored. Preventing the end user from even accessing this key helps to prevent sharing or piracy of the content 113 with other computers. See the SC Processor 192 section for details on how to use these keys.

[0345] Tamper-resistant software technology is a method for preventing hackers from unauthorized entry into computer software applications. Typically, hackers want to understand the software or modify the software to remove restrictions on its use. In particular, there are no computer programs that cannot be penetrated, which is why tamper-proof software is not called “tamper-resistant”. But,
Since the effort required to penetrate a tamper-proof protection application is not worth the benefits, it usually stops most hackers. In this case, the effort would access keys to one piece of content 113, perhaps one song on a CD.

One type of tamper-proof software technology is available from IBM. One product that incorporates this code is included in IBM's ThinkPad770 laptop computer. In this case, tamper proof software was used to protect DVD movie players in the computer. Digital content providers, such as Hollywood Studios, have been concerned about the emergence of digital movies and the ease with which perfect copies can be made, and have argued that movies on DVD discs should include a copy protection mechanism. IBM anti-tampering software makes it difficult to avoid such copy protection mechanisms. This is a very typical application for tamper-proof software, which is used to enforce rules regarding the use of some type of protected content 113.

[0347] IBM anti-tamper software places several types of obstacles on the attacker's path.
First, it includes standard software tools used by hackers, ie, techniques for disabling or at least reducing the effectiveness of debuggers and disassemblers. Second, since it involves a self-integrity check, a single change or even a few changes can be detected,
This will cause incorrect behavior. Finally, it contains obfuscation to mislead hackers about their true behavior. The latter technique is primarily concerned with specific issues only, but the first two are based on tools well known in the art of encryption, encryption and digital signatures.

C. Secure Container Processor 19
2. Electronic digital content store 10 for products collected by end users in their shopping carts
After submitting the final purchase permission to 3, the web browser remains active waiting for a response from the web server. Electronic digital content store 103
Web server processes the purchase, performs a financial settlement, and returns transaction SC640 to end-user device 109. An SC processor 192 (helper application 198) is launched by the web browser to process the SCMIME type associated with transaction SC640. FIG. 17 is an example of a user interface screen of a player application 195 for downloading content to a local library as described in FIG. 13 according to the present invention.

The SC processor 192 opens the transaction SC640 and provides the offer S contained therein.
Extract C641 and response HTML page. Response HTM
The L page is displayed in a browser window confirming the end user's purchase. Next, in step 1401, offer SC641 is opened, and the name of content 113 (eg, song or album) is extracted therefrom along with the scheduled download time. Then step 140
A new window containing this information is displayed at 2 and the end user is presented with options for scheduling the download of the content 113 (eg, multiple songs or an entire album for music). The end user can select immediate download or schedule the download to occur later. If you choose to do it later, the download schedule information is stored in a log and the end user device 10
If the power is turned on at the scheduled time, the download is started at that time. If the computer is not active or the communication link is not active at the scheduled download time, the end user will be required to reschedule the download the next time the computer is powered on.

When the scheduled download time occurs or immediate download is requested, the SC processor 1
92 is transaction SC640, offer SC6
41. The order SC 650 is created from the information in the end user's public key 661 created at the time of installation.
The order SC650 is sent to the clearing house 105 by an HTTP request. Clearing House 1
05 returns the license SC660, the license SC
Helper application 19 to process 660
8 is recalled. Next, the license SC660 is opened, and the content / contents are read from the referenced order SC650.
The URL of the host site 111 is extracted. Next, the license SC660 is transmitted to the designated content host site 111 by an http request by the browser requesting the download of the content SC630. When the content SC 630 returns to the browser, the helper application 198 is called again. The SC processor 192 displays the content 11 being downloaded with the download progress indicator and the estimated completion time.
Display the third name.

When content 113 is received by SC processor 192, it loads the data of content 113 into a memory buffer for decryption. The size of the buffer is determined by the requirements of the encryption algorithm and watermarking technology 193, and is the smallest size possible to reduce the amount of unencrypted content 113 exposed to hacker code. When the buffer is full, it is decrypted using the end-user key 623 (corresponding to the public key 661) extracted from the license SC 660, but itself is first decrypted using the private key. Is done. Next, the decrypted buffer is passed to the watermark function.

The watermark 193 indicates the license SC
Extract the watermark instruction from 660 and decrypt the instruction using the end user's private key. Next, the watermark data is
13 is extracted from a license SC660 containing transaction information such as the name of the purchaser registered in the purchased electronic digital content store 103;
Alternatively, when the electronic digital content store 103 does not provide a registration function, it is derived from credit card registration information. The watermark also includes the purchase date and the transaction ID 5 assigned by the electronic digital content store 103 to reference the particular record logged for this transaction.
35 is also included. Player application 1
Store usage conditions 51 for use by copy control 95
9 is also included.

The watermark 193 is protected by tamper-proof code technology from leaking watermark instructions, thus preventing hackers from discovering the location and technique of the watermark. This prevents removal or change of the watermark by a hacker.

After having noted the mandatory watermark in this content buffer, the buffer is passed to the scramble function for re-encryption 194. Using a processor-enabled secure encryption algorithm, such as IBM's SEAL encryption technology, the content 11
3 is re-encrypted. When the download, decryption, and re-encryption 194 processes are completed, the content 11
The encryption key 623 used by the content provider 101 to encrypt 3 is now destroyed, and the new SEAL key itself is encrypted using the confidential user key created and hidden during installation. This new encrypted SEAL key is then stored in license database 107.

The different sources implemented at the content provider 101 and the user watermark implemented at the end user device 109 will need to be an industry standard to be effective. Such standards are still evolving. This technique can be used to embed control signals in music and allow it to be updated many times. Until the point at which the copy control standard became more stable, the secure digital content electronic distribution system 100 provided an alternative copy control method, so that copy control was implemented to enable rights management within the consumer device. Do not rely on watermarks. The security of storage and playback / recording usage conditions is controlled by an encrypted DC library coupled to the end-user device 109.
Implemented using collection 196 and protected by a tamper-proof environment. Software hooks are in place to support copy control watermarks when standards are adopted. Currently, there is support for watermark AAA and other coded audio streams at various compression levels, but this technique is still somewhat premature at this point to be used as the sole method of copy control.

The process of decryption and re-encryption 194 consists of the encryption key of the original content 113, the new SE.
AL key, confidential user key, another code protected by tamper proof code technology to prevent leaking where the segments of the confidential user key are stored and how the key is segmented Area.

The decryption and re-encryption 194 process serves two purposes. Storing content 113 encrypted by an algorithm such as SEAL is faster than real-time decryption, and uses the processor required to perform decryption more than running a more industry-standard type algorithm such as DES The rate drops considerably. This allows the player application 195 to perform real-time simultaneous decryption decoding playback of the content 113 without having to decrypt the entire file for the content 113 first before decoding and playback. The efficiency of the SEAL algorithm and the very efficient decoding algorithm not only allows simultaneous operation (streaming playback from encrypted files), but also allows this process to be performed on a fairly low power system processor. . Therefore, this application is
z on a Pentium system and lower end-user devices 109 and below. Separating the encryption format in which the content 113 is ultimately stored from the original encryption format allows for greater flexibility in selecting the original content encryption algorithm. Therefore, widely accepted and proven industry standard algorithms can be used, resulting in secure
The acceptance of digital content electronic distribution system 100 is further enhanced.

The second purpose of the decryption and re-encryption 194 process is that the original master encryption key 623 used by the content provider 101 to encrypt the content 113 is Is required to be stored on all end-user devices 109 that have granted the license. The encrypted master key 623 as part of the license SC 660 is only cached on the hard disk of the end-user device 109 for a very short time, and is only stored in memory in plain text for a very short time. Become.
During this execution phase, key 623 is protected by tamper-proof code technology. This decryption and re-encryption 19
After phase four, the key 623 no longer needs to be held in any form on the end-user device 109, greatly reducing the possibility of hacker piracy.

When the song is re-encrypted, the digital
It is stored in the content library 196. All metadata required for use by the player application 195 is extracted from the associated offer SC641 and also stored in the digital content library 196 at step 1403. Any part of the encrypted metadata, such as the lyrics of a song, is decrypted and re-encrypted as described above for other content. The relevant metadata that needs to be encrypted includes the same SEA used to encrypt the content 113.
Use the L key.

D. Player application 195 Overview Secure digital content electronic distribution player
Application 195 (herein referred to as player application 195) is similar to both CD, DVD, and other digital content players and CD, DVD, and other digital content storage management systems. This is, at its simplest level, content, such as playing a song or video.
Execute Another level provides end users with tools for managing their digital content library 196. Quite importantly, it allows the editing and playback of a collection of content such as songs (herein referred to as playlists).

The player application 195 is individually assembled and assembled from a set of components that can be customized according to the requirements of the content provider 101 and the electronic digital content store 103. A general-purpose version of this player will be described, but customization is possible.

Referring now to FIGS. 18 and 19, there is shown a block diagram of the major components and processes of the player application 195 running on the end user device 109 of FIG.

The player object manager 15
There are several component sets that make up the 01 subsystem. 1. End user interface component 1
509 2. 2. Copy / playback management component 1504 Decryption 1505, decompression 1506, playback 15
07 components, records can be included4. Data management 1502 and library access 1
4. Each component of 503 Inter-application communication component 1508 6. Miscellaneous (installation, etc.) components

A component can be selected from each of these sets based on the following requirements.・ Platforms (Windows (registered trademark),
UNIX (registered trademark) or equivalent) • Communication protocol (network, cable, etc.) • Content provider 101 or electronic digital content store 103 • Hardware (CD, DVD, etc.) • Technology of clearing house 105 Such

The following sections detail various component sets. The final section details how these components are organized into a general purpose player and describes how they can be customized.

In another embodiment, the components of the player application 195 and the SC processor 192 are made available as part of the programmer's software toolkit. This toolkit allows a predefined interface to the various components of the generic player application described above. Such predefined interfaces are in the form of APIs or application programming interfaces. A developer using such an API can implement any of the functionality of the various components from a high-level application program. By providing an API for such components, a programmer can customize a player application 1 without having to recreate the functionality and resources of any such components.
95 can be developed quickly.

[0367] 2. End User Interface Component 1509 The components from this set work together to enable the on-screen presentation of player application 195. Note, however, that the design does not set a definitive layout for these components.
One such layout is provided in general-purpose players. Alternative layouts are possible based on requirements from the content provider 101 and / or the electronic digital content store, as well as other requirements.

This set includes the end user display 1510
, Starting with components used to handle controls called end-user controls 1511 used for low-level functions such as audio playback and presentation of metadata. Next, the end user display component 15
10 is further divided by special function grouping (playlists, digital content libraries)
The object container component is then used to group and arrange such low-level components.

In the following component list, C
References to the creation of D or the copying of the content 113 to a CD or other recordable medium apply only if the player application 195 has enabled such functionality. It should also be noted that the term CD as used in that context is generic and may also refer to various other recording devices, such as minidiscs or DVDs.

FIG. 20 is a cross-sectional view according to the present invention.
9 is an example of a user interface screen of a No. 9 player application 195. The functions for the end user control 1511 include the following (the corresponding screens of the end user interface 1601 to 16
05). Controls for executing the content 113:-Play / Stop button-Play button-Stop button-Pause button-Forward skip button-Reverse skip button-Volume control-Track position control / display-Audio channel volume- Controls for displaying metadata related to the content 113 such as level display • Cover picture button • Cover picture object • Artist picture button • Artist picture object • Track list button • Track list Information object-Track list selector object (click to play)-Track name object-Track information object-Track lyrics button-Tiger Lyrics object ・ Track artist name object ・ Track credit button ・ Track credit object ・ CD name object ・ CD credit button ・ CD credit object ・ General purpose (configurable) metadata button ・ General purpose metadata ・Objects

The functions for the end user display 1510 include the following (the corresponding screens of the end user interface are shown as 1601 to 1605). Display container playlist • Playlist management button • Playlist management window • Digital content search button • Digital content search definition object • Digital content search presentation button • Digital content search result object • Playlist Select search result item copy button ・ Playlist object (can be edited) ・ Playlist save button ・ Playlist play button ・ Playlist pause button ・ Playlist restart button ・ CD creation button from playlist
Display of content library 196-Digital content library button-Digital content library window-Digital content category button-Digital content category object-Artist-specific button-Genre-specific button-Label-specific button -Category button-Delete button-Add button to playlist-Copy button to CD-Song list object-Song list display container etc. Containers and others-Player window container-Audio control container-Metadata -Control container-Metadata display container-Toolbar container object-Sample button-Download button-Purchase button • Record button • Player name object • Label / provider / store advertisement object • Label / provider / store URL button • Artist URL button, etc.

[0372] 3. Copy / playback management component 15
04 These components handle encryption key setup, watermarking, copy management, etc.
There is also an interface for charging each time the user accesses the special service or the content 113, such as pay-per-listening, for communication with the clearing house 105, transmission of a purchase request, and the like. Currently, communication to the functions of the clearinghouse 105 is handled by the SC processor 192.

The use of content 113 by player application 195 on end-user device 109 is logged in a database such as license database 197. Player application 19
5 for each use of content 113 by clearing house 105 or content provider 1
01 or electronic digital content store 103
Or, it can be transmitted to one or more logging sites, such as any site designated and coupled to the transmission infrastructure 107. This transmission can be scheduled at a predetermined time to upload usage information to the logging site. One of the predetermined times contemplated is early in the morning when the transmission infrastructure 107 is not expected to be congested with network traffic. The player application 195, using known techniques, wakes up at the planned time and transmits information from the local logging database to its logging site. By reviewing the logging site information, the content provider 101
You can measure the popularity of thirteen.

In another embodiment, the use of the content 113 is always uploaded to the log recording site while the content 113 is being used, instead of logging the use of the content 113 for later uploading to the log recording site. For example, if the content 113 stored on the end-user device 109 is to be copied or copied onto an external device such as a DVD disc, digital tape, flash memory, mini-disc, or equivalent removable read / write media, Usage is uploaded to a logging site. This is content 11
3 may be a precondition for copying the content 113 in the use condition 206 transmitted when the user purchases the content 3. This is the content provider 10
1 is performing its own reproduction, duplication, and other actions on the contents 113
13 assures accurate tracking of usage.

[0375] In addition, other information regarding the content 113 can be uploaded to the log recording site. For example, the time at which the content 113 was last executed (eg, time and date), the number of times the content 113 was executed, the copying or copying of the content 113 to an authorized external device such as a DVD disc, digital tape, mini-disc, etc. And so on. For a single player application 195 on the end-user device 109, if there are multiple distinct users, such as various families in one household, the user's identifier of the content 113 is transmitted to the logging site along with usage information. . By reviewing the usage information uploaded to the logging site, the content provider 101 can measure the popularity of the content 113 based on actual usage, the user's identification name, and the number of times the content 113 has been executed. Based on actual usage measurements, the system uses a sampling method that only samples a limited number of users at a time, such as a Nielsen rating system for television or a telephone survey, and uses the results as a basis for inference. It is more fact-driven than the system. In the present embodiment, the electronic digital content
Actual usage can be measured for a user logging on to a designated web site, such as store 103 or content provider 101.

[0376] 4. Decrypt 1505, Decompress 150
6. Playback 1506 components These components use the keys obtained by the copy / playback management component to unlock the audio data obtained from each of the data management and library access components, and perform appropriate decompression. Apply and prepare it for playback, system audio
Play it using the service. In an alternative embodiment, audio data obtained from the data management and library access components can be copied to a removable medium such as a CD, diskette, tape, or minidisk.

[0377] 5. Data Management 1502 and Library Access 1503 Components These components are used to store and retrieve song data on various storage devices on the end user's system while processing requests for information about the stored songs. I do.

[0378] 6. Inter-Application Communication Component 1508 This component is a secure digital content electronic distribution player and other applications that can invoke or otherwise use the player application 195 to perform its functions. Used for coordination with (for example, browsers, helper applications, or plug-ins). For example, when the URL control is activated, it calls the appropriate browser and directs it to load the appropriate page.

[0379] 7. Miscellaneous components Individual components that do not fall into the above categories (eg, installation) are grouped here.

[0380] 8. Generic Player This section describes the combination of the above components with a version of the player application 195. This is only one of a wide variety of possible examples, as the player application 195 is designed for customization by being based on software objects.

[0381] Player Object Manager 15
01 is a software framework that collectively holds all other components. As mentioned in the sections above, the blocks under the player object manager 1501 in this figure are required for any player, but the encryption or scrambling format used, the type of audio compression, the content 113 Can be replaced with a special version according to the access method for the library.

[0382] Player Object Manager 15
Above 01 is a variable object 1512, which is usually derived from metadata associated with the content 113 being played or searched. These variable objects are made available to the end-user device 109 via the end-user display 1510 and receive input from the end-user controls 1511. All objects are configurable, and the layout of all containers is customizable. These objects can be implemented in C / C ++, Java, or an equivalent programming language.

Use of Player Application 195 The following embodiment describes a case where the player application 195 running on the end user device 109 is an audio application.
This relates to an example in which the content 113 is music. However, those skilled in the art will recognize that other types of content
Note that 5 can be supported. A typical audiophile has a library of CDs holding multiple songs. All of these are available within the secure digital content electronic distribution system 100. Song sets purchased from the electronic digital content store 103 are stored in a digital content library 196 on your system. Groupings of songs similar to a physical CD are stored as playlists. In some cases, the playlist accurately emulates a single CD (eg,
All tracks on a commercial CD are purchased from the electronic digital content store 103 as an online version of the CD and are defined by a playlist equivalent to that of the CD). However, most playlists are organized by the end user to group the songs that the end user has stored in the digital content library on their system. However, for the purposes of the following description, when referring to the term playlist, the example of an ordered music CD will be used.

When the end user explicitly starts the player application 195, rather than starting with a call from the SC processor 192 application, it is preloaded to the last accessed playlist. Digital Content Library 196
If there are no playlists in the playlist,
The editor starts automatically (unless the user has turned off this feature by preference). See the playlist below for details.

The player application 195 can also be called by specifying a particular song as an argument, in which case the application immediately enters song playback mode. Optionally, the song can be prepared for playback, but may wait for action by the end user before processing. See Song Play below for details of this situation.

Play list (corresponding screen of end user interface 1603): When the end user calls the play list function, the following functions become available. Opening a playlist Calling up the digital content library to display a list of playlists stored for selection. See also the Digital Content Library below for details. -Edit the playlist-Call the playlist editor (see below), providing the current playlist if it is already loaded. If not, the editor first creates an empty playlist. • Run the playlist • Play the songs one at a time, starting with the selected song (or the beginning of the playlist if no songs are selected). The options set in the playlist editor affect the order of playback. However, several controls are provided here to override the options for this playback of the playlist. -Play song-Play only the song selected from the playlist. See song playback below for details. -Playlist information-Displays information about playlists.・ Song information ・ Information about the selected song in the playlist is displayed. Visit a web site. Load the web site associated with this playlist into the browser. -Library-Opens the Digital Content Library window. See also the digital content library below for details.

Playlist Editor (corresponding screen of end-user interface 1603): When calling the playlist editor, the options of the end user are as follows. View / load / delete playlists Call up the digital content library and display a list of stored playlists to select what to load or delete. See also the digital content library below for details. • Save Playlist • Store the current version of the playlist in the Digital Content Library 196. -Delete song-Delete the currently selected song from the playlist. -Add songs-Call the digital content library in song search mode to select songs to add to the playlist. See also the digital content library below for details. -Set song information-Display information about the selected song in the playlist and allow changes to it. This information is stored in the playlist and does not change the information about the songs stored in the digital content library 196.
The following items can be changed: -The displayed song title-End user's note on the song-Introduction delay when playing the song-Subsequent delay after playing the song-Start point in the song during playback-End point in the song during playback-Weighting for random mode・ Volume adjustment for this song

Setting of playlist attributes: The attributes of this playlist are displayed, and changes can be made to them. The following attributes can be set. • Playlist title • Playlist mode (random, sequential, etc.) • Repeat mode (play once, restart upon completion, etc.) • End-user notes on this playlist Library (corresponding screen of end-user interface 1601) • Open the Digital Content Library window. See also the digital content library below for details.

Song Playback When the song is prepared for playback, either by calling the player application 195 with the song specified as an argument or by selecting the song for playback from a playlist or in the digital content library, User options (end user interface 16
01 corresponding screen) is as follows.・ Play ・ Pause ・ Stop ・ Backward skip ・ Forward skip ・ Volume adjustment ・ Track position adjustment ・ Browsing lyrics ・ Browsing credits ・ Browsing CD covers ・ Browsing artist pictures ・ Browsing track information ・ Other metadata Browsing ・ Website visit ・ Playlist ・ Library etc.

Digital Content Library The digital content library may be called implicitly when a song or playlist is selected (see above), or may be managed on the end user's system. You can also open it in its own window for In that case, the end user options are: Song processing: Sort all songs by artist, category, label, etc. Select song by artist, category, label, etc. Add selected song to current playlist Copy song to CD (if possible) Delete song To category Adding songs, etc. Playlist processing: Sorting by name Sorting by category Searching by keyword Searching by included song title Loading the selected playlist Renaming the playlist Deleting the playlist Creating a CD from the selected playlist (If possible) etc.

E. End user device 109 in broadcast delivery mode 1. Multi-Tier Digital TV Embodiment Next, an end-user device 109 using broadcast delivery
An alternative embodiment will be described. Moving to FIG. 23, the content 1
An alternative embodiment for receiving the T.13 is shown. Package 20 transmitted by broadcast center 1802
06 is transmitted and received by the set-top box 1804. The set-top box 1804 is shown in FIG. 26 below.
GU, such as an exemplary diagram of the user screen shown in FIG.
Generate a GUI using an I (graphical user interface) generator. GU of this embodiment
I generates a transparent overlay to minimize interference by the primary program that the user is viewing. When the user makes a selection, the package is extracted by the packet filter 1906. The set top box 1804 collects catalog information and
An application that displays the video clip on 806 and allows the user to select and download the package is executed. Set Top Box 1804
Extracts and collects the sections associated with the desired package and reassembles the package. The end-user device 109 allows the user to store and play digital content (again, "play").
The term is used in a broad sense.) Set-top box 1804 is a single logical module, which can be implemented with separate software modules, which may or may not run on separate physical devices.

Based on the information communicated in the bug catalog, set-top box 1804 partially overlays the video clip with icons representing actions that can be performed by the user at any moment. The two main actions that a user can perform are requesting that the content currently promoted be downloaded and browsing a static or dynamic offering catalog. Set Top Box 180
4 overlays the viewed material with the correct icons for only the allowed user actions.

After the user has selected content to download, the set-top box 1804 can contact the server to perform typical user authentication / credit authorization steps, if necessary. If the selected package belongs to the dynamic offering set, set-top box 1804 contacts broadcast center 1802 (if such a channel is available) to broadcast the selected package. Request. After receiving the request for set-top box 1804, broadcast center 1802 validates the request and schedules the transmission of the desired package. The broadcast center 1802 provides the set-top box 180 with a broadcast acknowledgment and a broadcast interval associated with the carousel carrying the selected package.
Respond to 4. The set-top box 1804 can display the broadcast interval to the user and request that a particular interval be selected.

At the planned download time, set-top box 1804 tunes to the digital channel specified in the bug catalog and begins filtering the desired package section from the multiplexed broadcast stream. Set-top box 1804 detects transmission errors and suppresses corrupted blocks (this mechanism could be, for example, a cyclic redundancy check). Set-top box 1804 reassembles the package using the package descriptor information contained in the master catalog. After a successful download of a package in the dynamic offering set, the set top box 1804 notifies the broadcast center 1802.

[0395] Also, the broadcast system 1
It also has the ability to use a separate unicast network connection between 802 and set-top box 1804 to facilitate the recovery of a broken section. Typically, the number of corrupted sections is small, so the volume of retransmitted data is small, and so unicast networks use unicast or multicast, as opposed to waiting for the entire carousel cycle. Re-transmission of these sections by the connection is faster. In addition, this channel will make it faster to download the entire package.
If box 1804 determines, it can do so.

The packet filter 1906 can filter packets based on a set frequency or channel or other known filtering means. The carousel has broadcast information and content SC
640 is received. The receiver transmits the broadcasted packet to the content SC640, the artwork SC2041,
Complete package 2006 for Global SC2040
These SCs are collectively referred to as a broadcast SC. Software application 1910 running on end-user device 109 has received package 2006 from set-top box 1804. The software application 1910 of this embodiment is a daemon that starts the content host emulator 1912 to interface with the player application 191. The content host emulator 1912 allows the same player application 191 to be used on the broadcast infrastructure, the communication infrastructure (such as the Internet), and a computer-readable medium. The player application 191 and related parts including the secure container processor 191, the helper application 193, the watermark 193, and the decryption / re-encryption 194 are not changed. To this end, the developer is provided with a set of APIs and tools for building the player for this broadcast embodiment and the communication or computer readable media embodiments.
Plus, clearinghouse emulator 1914
This allows transactions to be logged until the user reconnects the end user device 109 to the clearing house 105 for final accounting reconciliation.

Turning now to FIG. 25, a flowchart 2 of a process performed on an end-user device to purchase content according to the present invention in accordance with the alternative embodiment of FIG.
100 is shown. For a better understanding of this flow chart, reference is made to FIGS.
This is a series of screen shots showing a user purchase on television 1806 using the alternative embodiment of FIG. 22 according to the present invention.

Process flow 2100 includes step 21
Starting from 01, a "purchase" and "catalog" icons are displayed. Step 2104 receives user input. In steps 2106 and 2108, a test is performed to determine the user's selection of "purchase" or "catalog" during the broadcast of the program 2204. If "purchase" is selected, step 2110 requires the user to identify himself for billing. Step 2110
2116 and the embodiment shown in FIG. 28 uses a personal identification number (PIN) associated with a "smart card". Other billing mechanisms are possible, including the use of a debit card. Once the user has identified himself,
In step 2118, the download starts. If “Catalog” is selected in step 2106, step 21
A menu panel of products available for purchase is displayed at 20, allowing the user to navigate between the products with a selection cursor (steps not shown). Step 212
2. Receive user input. If the input is "purchase", the viewer proceeds with the authentication process 2110-2116. If the input is "end", the viewer returns to selecting "purchase" and "catalog" in step 2126. If the authentication is successful, the download process begins with an optional message indicating this to the viewer, as shown in FIG. Note, however, that all graphic images are overlaid on video that is not interrupted by consumer purchasing activity.

It should be noted by those skilled in the art that the broadcast embodiment of the present invention allows the following: Fast and reliable downloading of digital content by the digital television broadcasting infrastructure (if the digital content is a package to be downloaded as a unit for later playback,
"Regenerate" to indicate any form of ingestion and interpretation
Is used in a broad sense) • Independent description of digital content by the digital television broadcast infrastructure. This system allows the digital television broadcast infrastructure to download digital content when the return channel from the content receiver to the content sender is unavailable (or rarely available). -Improved download time when a return channel from the content receiver to the content sender is available.-Digital set-top box 1804 connected to the digital television broadcast infrastructure.
User selects and downloads digital content using TV and TV; user selects and downloads digital content while simultaneously watching a video program; and content provider using graphics and video. Promote digital content available for download by managersManagers update the number and type of digital content available for download in real time

[0400] 2. Embodiment of Web Broadcasting over Individual Channel Next, the end user device 10 using the individual channel within the web broadcasting service by the broadcast delivery of the present invention.
Nine alternative embodiments will be described. Turning to FIG. 31, an alternative embodiment for receiving content 113 using a dedicated channel within the web broadcast infrastructure is shown. FIG. 32 is a flowchart 2800 of a process performed on an end-user device to purchase content according to the present invention in accordance with the alternative embodiment of FIG. The set-top box 1804 is shown in FIG.
Receive web pages constructed by web store 2306, such as the exemplary views of the user screens shown in FIGS.

The following description uses the flowchart 2800 of FIG. 32 in connection with the exemplary user screens of FIGS. This process is performed by the webcast channel in step 2802 via the promo cache 232
Start by downloading the promotional material to 2. If the user selects the button labeled "Album List", a selection list as shown in FIG. 33 is presented in step 2806. In this example, "Madonn
Three options are available: "a", "Fleetwood Mac", and "Jewel". More or fewer options can be displayed, but only an example is shown here. If the user selects "Madonna" or the like, step 2810 presents details about the artist as shown in FIG. Note, however, that the "Sample" button allows you to preview a music sample. When the user selects the "Sample" button, the promotion clip is played by the web browser 191 or by the player application 191. If the user selects to purchase an option, steps 2812 and 2814 present a screen for verifying the "account" and "password" as shown in FIG. In this example, the accounting information can be synchronized with the web store 2306 or with the clearing house 105, as determined by the provider of the content 113. Cache Manager 2320 is an album +
The DSC buffer 2324 is examined to determine whether the corresponding content SC630 is locally available for search. If the correct content SC is available, it is retrieved and passed to the player application 195 for processing the selection. If the corresponding content SC 630 is unavailable, the cache manager 2320 subscribes to the next content SC 630 broadcast. Returning to the music example, broadcast and download are the options for "Madonna Material Girl". When the cache manager 2320 schedules the correct download channel and time as shown in FIG. 36, a screen containing additional optional information is presented to the user.

When the user selects “my choice”,
As shown in FIG. 37 and steps 2816 and 2818, a list of options that the cache manager 2320 has scheduled for download by web broadcast is shown. In this example, the user repeats the process of purchasing a second piece of content 113. The second piece of content 113 is “Fleetwood Ma
c Greatest Hits. " The user then proceeds to steps 2804, 2806, 2808, 281 as described above.
FIGS. 38-40 corresponding to the process flow 0, 2814 are presented. At this point, two options have already been selected by the user, but when the “my choice” button is selected, the user is presented with “Madonna” in FIG.
Note that the status of two items is presented, and "Fleetwood Mac", but two statuses are shown, one for each selection. The status for "Fleetwood Mac" is "to be delivered." The status for "Madonna" is "Delivered" and an "Add to Library" button is shown. When the user clicks the "Add to Library" button,
Select the corresponding content SC631 and the DSC called here to emphasize that this process can be performed when the user is "disconnected", ie, not receiving a broadcast from the broadcast center 2302. Then, in steps 2822, 2824, 2826, the trigger manager 2326 application starts, retrieves the content SC631 for that option from the album + DSC buffer 2324, and sends it to the player application 195 for processing. Content SC
Upon receiving 631, the player application 19
5 uses the content 113 as described above for the "Connect" embodiment. In one embodiment, the player application 195 arbitrates with the clearing house 105 for accounting information using a back channel, such as the Internet. FIG. 42 shows that the title “Madonna” is stored in the library 196 on the end user device 109.
Here is an example that is added to The license SC147 may include the Internet or other communication network or broadcast, or may use a physical mailer to
It can be transmitted to the end-user device 109 using any computer-readable medium, such as a DVD, smart card, debit card, or CD. The process flow 2800 ends at step 2830.

Note that this web broadcast according to the Individual Broadcast Channel embodiment does not require a user to be connected to order and browse promotional material, such as offer SC641. Rather, the promotional material is stored locally on the end-user device 109 for the user to "cut" or browse offline.

Although a particular embodiment of the present invention has been disclosed, it is to be noted that those skilled in the art can make changes to this particular embodiment without departing from the spirit and scope of the invention. Therefore, the scope of the present invention is not limited to this particular embodiment, and the claims are intended to cover all such applications, modifications, and embodiments within the scope of the present invention. .

Copyright Disclaimer All material in this patent application is subject to copyright protection under United States and other countries' copyright laws. As of the first effective filing date of this application, this material is protected as unpublished. However, permission is granted here to copy this material, unless the copyright owner disagrees with anyone facsimile copying a patent document or patent disclosure that may appear in a U.S. Patent and Trademark Office patent file or record. , But reserve all copyrights for the rest.

Cross-Reference of Related Applications This application describes “Multi-Tier Digital TV Programming for
This is a continuation-in-part of the non-provisional patent application No./ filed on Dec. 9, 1999 for "Content Distribution" and assigned to the present applicant. The aforementioned patent application is incorporated herein by reference in its entirety.

In summary, the following items are disclosed regarding the configuration of the present invention.

(1) A method for reliably providing data to a user's system by a web broadcasting infrastructure having a plurality of channels, wherein the data is encrypted using a first encryption key. Encrypting a first decryption key using a second encryption key; and encrypting the encrypted data over a first web broadcast channel for reception on at least a user's system. Broadcasting at least a portion of the promotion metadata associated therewith; broadcasting at least a portion of the encrypted data over a second broadcast channel; and an encrypted first decryption. Transferring the key to the user's system via a computer readable medium, wherein the encrypted first decryption key is a second decryption key.
Encrypted with the encryption key of the above. (2) The method of (1) above, wherein the step of broadcasting the promotion metadata comprises periodically broadcasting the promotion metadata at predetermined time intervals. (3) The method of (1) above, wherein broadcasting the promotion metadata comprises at least a sub-step of converting the promotion metadata into a format readable by a web browser. (4) the step of broadcasting at least a portion of the encrypted data includes broadcasting a broadcast time and a web broadcast channel schedule for at least a portion of the encrypted data; ). (5) the step of broadcasting at least a part of the encrypted data through the second web broadcasting channel comprises:
The method of (1) above, including broadcasting the encrypted data in a format compatible with CTM. (6) The method of (1) above, wherein the promotion metadata includes a broadcast time schedule for the data. (7) A method for reliably receiving data on a user's system from a web broadcast infrastructure via a plurality of channels, comprising receiving promotion metadata from a first web broadcast channel. , The promotion metadata is metadata about the data available for reception;
Assembling at least a portion of the promotion metadata into a promotion offering for review by the user; selecting by the user data to be received in connection with the promotion metadata; a second web broadcast Receiving data from the channel, the data being data selected from promotion metadata, wherein the data has been pre-encrypted using a first encryption key; Receiving a first decryption key by the medium, the first decryption key being a key for decrypting at least a portion of data received by the second web broadcast channel. And a method comprising: (8) assembling at least a portion of the promotion data includes assembling at least a portion of the promotion data into a format readable by a web browser, and the selecting includes selecting by the web browser. The method according to the above (7), comprising: (9) The method of (7) above, wherein the step of selecting comprises selecting a promotional material previously received and stored on the user's system. (10) The selecting step includes a sub-step of determining a schedule for the next web broadcast of the selected data, and a trigger for activating the user's system and receiving the next web broadcast on the second channel. (9). The method according to (9), further comprising: (11) receiving the data from the second web broadcast channel comprises receiving the selected data from the promotion metadata at the web broadcast channel and at the time provided by the trigger; ). (12) The method of (7) above, wherein receiving data from the second web broadcast channel comprises receiving data in a format compatible with DirecPCTM. (13) receiving data from the second web broadcast channel includes sub-authorizing by a back channel that the user's system is authorized to receive the selected data; Receiving the first decryption key of (7), wherein the receiving of the first decryption key comprises receiving the first decryption key only if the user's system is authorized to receive the selected data. the method of. (14) receiving the data from the second web broadcast channel may include: when the data selected from the promotion metadata is received on the user's system, when the user next starts the user's system The method according to (7), further comprising a sub-step of notifying the user of the status. (15) receiving the first decryption key,
The method according to (7), including receiving a first decryption key encrypted with the second encryption key. (16) receiving the first decryption key,
The method according to (15), including receiving the first decryption key via a broadcast stream. (17) The method according to (15), wherein the second decryption key is transmitted from the clearinghouse to the user's system. (18) In the above (15), wherein the second decryption key has a timeout facility for decrypting data encrypted by the second encryption key transmitted from the clearinghouse to the user's system. The described method. (19) A system for reliably providing data to a user's system by a web broadcasting infrastructure having a plurality of channels, the system supporting a content system, a first public key, and a first public key. First
The data encryption key, the data decryption key that decrypts the data encrypted using the data encryption key, and the data decryption key A first data encryption means for encrypting data, a second data encryption means for using the first public key to encrypt the data decryption key, a clearing house, The promotion data associated with the data broadcast on the web broadcast channel of the first web broadcast channel.
A broadcast center that broadcasts to one or more user systems and broadcasts data encrypted with a data encryption key over a second broadcast channel; and decrypts the encrypted data. A first transfer means for transferring a key to a clearing house, wherein the clearing house owns a first secret key and encrypts data using the first secret key. A first decryption unit for decrypting the decryption key, a second public key, a second secret key corresponding to the second public key, and data encryption using the second public key Re-encryption means for re-encrypting the decryption key, and second transfer means for transmitting the re-encrypted data decryption key to the user's system, wherein the user's system owns the second secret key A second transfer means and a second secret System and a second decryption unit to decrypt the data encryption release key re-encrypted using chromatography. (20) The promotion metadata (19), wherein the promotion metadata includes a broadcast time schedule for the data.
System. (21) A user's system for reliably receiving data from a web broadcast infrastructure over a plurality of channels, the receiver receiving promotion metadata from a first web broadcast channel;
A receiver whose promotion metadata is metadata relating to data available for reception; an interface to an output device for presenting at least a portion of the promotion metadata for review by a user; An interface to an input device for receiving a user selection of data to be associated with, and a control device for controlling a receiver to receive data from a second web broadcast channel, wherein the data is a promotion. A control device, which is data selected from the metadata, the data being pre-encrypted using a first encryption key, and an interface for receiving a first decryption key by a computer readable medium And wherein the first decryption key is a second web broadcast channel. Users of the system including the interface is a key to decrypt at least part of the data received by Le. (22) The user's system according to (21), wherein the output device is a web browser, and the input device is coupled to the web browser for receiving the user's selection. (23) The above (21), wherein the control device further comprises a schedule derived from the promotion metadata, the schedule being used to control the receiver to receive data from the second web broadcast channel. )
The user's system as described in. (24) The user system according to (21), wherein the receiver is adapted to receive the broadcast data in a format compatible with DirecPCTM.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an outline of a secure digital content electronic distribution system according to the present invention.

FIG. 2 is a block diagram showing an outline of a secure digital content electronic distribution system according to the present invention.

FIG. 3 is a block diagram showing an outline of a secure digital content electronic distribution system according to the present invention.

FIG. 4 is a block diagram showing an outline of a secure digital content electronic distribution system according to the present invention.

FIG. 5 is a block diagram showing an example of a secure container (SC) according to the present invention and a related graphic representation.

FIG. 6 is a block diagram outlining an encryption process for a secure container (SC) according to the present invention.

FIG. 7 is a block diagram outlining a decryption process for a secure container (SC) according to the present invention.

FIG. 8 is a block diagram outlining the layers for a rights management architecture of the secure digital content electronic distribution system of FIGS. 1-4 in accordance with the present invention.

9 is a block diagram showing an outline of content distribution license control when applied to the license control layer of FIG. 8;

FIG. 10 illustrates an example of a user interface for the work flow manager tool of FIGS. 1-4 in accordance with the present invention.

FIG. 11 is a block diagram illustrating the main tools, components, and processes of a workflow manager corresponding to the user interface of FIG. 10 in accordance with the present invention.

FIG. 12 is a block diagram illustrating key tools, components, and processes of the electronic digital content store of FIGS. 1-4 in accordance with the present invention.

FIG. 13 is a block diagram illustrating major components and processes of the end-user device of FIGS. 1-4 according to the present invention.

FIG. 14 is a flowchart of a method for calculating a coding rate factor for the content pre-processing compression tool of FIG. 11 according to the present invention.

FIG. 15 is a flowchart of a method for automatically retrieving additional information for the automatic metadata collection tool of FIG. 11 according to the present invention.

FIG. 16 is a flowchart of a method for automatically setting preprocessing compression parameters of the preprocessing compression tool of FIG. 11 according to the present invention.

FIG. 17 illustrates an example of a user interface screen of a player application for downloading content to a local library as described in FIGS. 18-19 in accordance with the present invention.

18 is a block diagram illustrating major components and processes of a player application running on the end-user device of FIG. 12 in accordance with the present invention.

19 is a block diagram illustrating major components and processes of a player application running on the end-user device of FIG. 12 in accordance with the present invention.

FIG. 20 is a diagram illustrating an example of a user interface screen of the player application of FIGS. 18 to 19 according to the present invention.

FIG. 21 is a flow chart of an alternative embodiment for automatically retrieving additional information for the automatic metadata collection tool of FIG. 11 according to the present invention.

FIG. 22 is a high-level logic diagram illustrating an alternative embodiment of electronic distribution of digital content using a broadcast infrastructure in accordance with the present invention.

FIG. 23 is a detailed block diagram of FIG. 22, illustrating an alternative embodiment of electronic distribution of digital content using a broadcast infrastructure in accordance with the present invention.

FIG. 24 is a block diagram of a packet broadcast in the alternative embodiment of FIG. 22 according to the present invention.

FIG. 25 is a flow chart of a process performed on an end-user device to purchase content according to the present invention according to the alternative embodiment of FIG. 22;

FIG. 26 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 22 in accordance with the present invention.

FIG. 27 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 22 in accordance with the present invention.

FIG. 28 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 22 in accordance with the present invention.

FIG. 29 is a screen shot showing a user purchase made on a television using the alternative embodiment of FIG. 22 according to the present invention.

FIG. 30 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 22 in accordance with the present invention.

FIG. 31 is a detailed block diagram of FIG. 22, illustrating an alternative embodiment of electronic distribution of digital content using a dedicated channel within a web broadcast service in accordance with the present invention.

FIG. 32 is a flowchart of a process performed on an end-user device to purchase content according to the present invention in accordance with the alternative embodiment of FIG. 31.

FIG. 33 is a screen shot illustrating a user's purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

FIG. 34 is a screen shot showing a user purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

FIG. 35 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

FIG. 36 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

FIG. 37 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

FIG. 38 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

FIG. 39 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

FIG. 40 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

FIG. 41 is a screen shot illustrating a user purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

FIG. 42 is a screen shot showing a user purchase made on a television using the alternative embodiment of FIG. 31 in accordance with the present invention.

[Explanation of symbols]

REFERENCE SIGNS LIST 100 secure digital content electronic distribution system 101 content provider 103 electronic digital content store 105 clearing house 107 transmission infrastructure 109 end-user device 111 content host site 113 content 152 secure container packer tool 154 Work flow manager tool 155 Content processing tool 156 Content promotion 160 Database 161 Metadata assimilation input tool

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification FI FI Theme Court II (Reference) H04L 9/00 601E (72) Inventor Magda Maurad United States 10598 Yorktown Heights, NY Chestnut Court 397 (72) Inventor Jonathan P. Manson United States 10579 Putnam Valley, NY Claimers Pond Road 24 (72) Inventor Giovanni Pachifichi United States 10024 New York, NY West 81st Street Number 14 101 (72) Inventor Ahmed Tantawee United States 10598 Yorktown Heights, NY Chestnut Court 397 (72) Who Alaa S. Youssef United States 10535 New York di Efason-Valley East Main Street 620 Apartment 5 de I over

Claims (24)

[Claims] 1. A method for reliably providing data to a user's system via a web broadcast infrastructure having a plurality of channels, comprising: encrypting data using a first encryption key; Encrypting a first decryption key using a second encryption key; at least one of the encrypted data on a first web broadcast channel for receipt on at least a user's system. Broadcasting a promotion metadata associated with the portion; broadcasting at least a portion of the encrypted data over a second broadcast channel; and an encrypted first decryption key. Transfer to a user's system via a computer readable medium, wherein the encrypted first decryption key is transmitted by a second encryption key. Method comprising the steps that have been encrypted. 2. The method of claim 1, wherein broadcasting the promotion metadata comprises broadcasting the promotion metadata periodically at predetermined time intervals. 3. The method of claim 1, wherein broadcasting the promotion metadata comprises at least a sub-step of converting the promotion metadata into a format readable by a web browser. 4. The method of claim 1, wherein the step of broadcasting at least a portion of the encrypted data comprises broadcasting a broadcast time and a web broadcast channel schedule for at least a portion of the encrypted data. Item 1. The method according to Item 1. 5. The step of broadcasting at least a portion of the encrypted data over a second web broadcast channel,
The method of claim 1, comprising broadcasting the encrypted data in a format compatible with DirecPCTM. 6. The method of claim 1, wherein the promotion metadata includes a broadcast time schedule for the data.
The method described in. 7. A method for reliably receiving data on a user's system from a web broadcast infrastructure over a plurality of channels, the method comprising receiving promotion metadata from a first web broadcast channel. Wherein the promotion metadata is metadata relating to data available for reception; assembling at least a portion of the promotion metadata into a promotion offering for review by a user; Selecting, by the user, data to be received in connection with the metadata; and receiving data from the second web broadcast channel, wherein the data is data selected from the promotion metadata. , The data is the first Pre-encrypting using an encryption key; and receiving a first decryption key by a computer readable medium, wherein the first decryption key is transmitted to a second web broadcast. A key to decrypt at least a portion of the data received by the communication channel. 8. The step of assembling at least a portion of the promotion data includes assembling at least a portion of the promotion data into a format readable by a web browser, and the step of selecting comprises: The method of claim 7, comprising selecting. 9. The method of claim 7, wherein the step of selecting comprises selecting a previously received and stored promotional material on the user's system. 10. The selecting step includes: determining a schedule for a next web broadcast of the selected data; activating a user's system to receive a next web broadcast on a second channel. Sub-step of setting a trigger to perform. 11. The method of claim 11, wherein receiving data from the second web broadcast channel comprises receiving data selected from promotion metadata at a web broadcast channel and at a time provided by the trigger. Item 10. The method according to Item 10. 12. The method of claim 7, wherein receiving data from the second web broadcast channel comprises receiving the data in a format compatible with DirecPCTM. 13. Receiving data from the second web broadcast channel includes sub-authenticating by a back channel that a user's system is authorized to receive the selected data; 8. The method of claim 7, wherein receiving the first decryption key comprises receiving the first decryption key only if the user's system is authorized to receive the selected data. The described method. 14. The method of receiving data from the second web broadcast channel, the method comprising: if the data selected from the promotion metadata is received on the user's system, then the user activates the user's system. 8. The method of claim 7, further comprising the sub-step of notifying the user of the situation when doing. 15. The method of claim 7, wherein receiving a first decryption key comprises receiving a first decryption key encrypted with a second encryption key. . 16. The method of claim 15, wherein receiving the first decryption key comprises receiving the first decryption key via a broadcast stream. 17. The method of claim 15, wherein the second decryption key is transmitted from the clearinghouse to the user's system. 18. The system according to claim 15, wherein the second decryption key has a timeout facility for decrypting data encrypted with the second encryption key transmitted from the clearinghouse to the user's system. The method described in. 19. A system for reliably providing data to a user's system via a web broadcast infrastructure having a plurality of channels, comprising: a content system; a first public key; and a first public key. , A first secret key corresponding to, a data encryption key, a data decryption key for decrypting data encrypted using the data encryption key, and decryption using only the data decryption key. First data encryption means for encrypting data so as to be enabled; second data encryption means for using the first public key to encrypt the data decryption key; House and promotion data associated with the data broadcast on the second web broadcast channel to one or more of the first web broadcast channel. A broadcast center for broadcasting to a system of a plurality of users and broadcasting data encrypted with a data encryption key on a second broadcast channel; and a data decryption key for encrypting the data. A first transfer means for transferring to a clearing house, wherein the clearing house owns a first secret key, and a data decryption key using the first secret key. A first decryption means for decrypting a second public key, a second private key corresponding to the second public key, and a data decryption key using the second public key. Re-encryption means for re-encrypting the data, and second transfer means for transferring the re-encrypted data decryption key to the user's system, wherein the user's system owns the second secret key. 2 transfer means and 2nd secret key System and a second decryption unit to decrypt the data encryption release key re-encrypted using. 20. The system of claim 19, wherein the promotion metadata includes a broadcast time schedule for the data. 21. A user system for reliably receiving data from a web broadcast infrastructure over a plurality of channels, the receiver system receiving promotion metadata from a first web broadcast channel. A receiver wherein the promotion metadata is metadata relating to data available for reception, an interface to an output device for presenting at least a portion of the promotion metadata for review by a user, An interface to an input device for receiving a user's selection of data to be received in connection with the data; and a control device for controlling a receiver to receive data from a second web broadcast channel, the control device comprising: Is data selected from promotion metadata A control device, the data of which is pre-encrypted using a first encryption key, and an interface for receiving a first decryption key by a computer readable medium, the first decryption key comprising: An interface, wherein the key is a key for decrypting at least a portion of the data received by the second web broadcast channel. 22. The system of claim 21, wherein the output device is a web browser and the input device is coupled to the web browser for receiving a selection by the user. 23. The controller further comprising a schedule derived from the promotion metadata, the schedule used to control the receiver to receive data from the second web broadcast channel. Item 22. The user system according to Item 21. 24. The user's system of claim 21, wherein the receiver is adapted to receive the broadcast data in a format compatible with DirecPC ™.