JP2009508412A5

JP2009508412A5 -

Info

Publication number: JP2009508412A5
Application number: JP2008530239A
Authority: JP
Filing date: 2006-09-07
Publication date: 2009-11-05

Claims

A method for delivering a media title by a non-volatile rewritable memory device having a secure memory area and at least one other memory area, the device comprising:
One or more content encryption keys stored in the secure area;
A media title stored in the memory area of the device and encrypted with the content encryption key (multiple keys), a selected portion of the media title, and / or a low quality version accessible without restriction of the title Content comprising: the method comprising:
Receiving information on rights and / or rules;
When authentication information is received by the device in the secure memory area of the device, the content encryption key (multiple keys) for decrypting the selected encrypted media title stored in the device Storing said rights and / or rules granting access;
Providing at least some of the selected portion of the media title or a low quality version of the title to a host for rendering.

The method of claim 1, further comprising: receiving the authentication information; and decrypting a selected encrypted media title stored on the device using a content encryption key. The method described.

The method of claim 1, further comprising encrypting the authentication information with a session key before the authentication information is received.

A method for the host to operate the device to render the encrypted media title, the method comprising:
Connecting the host to a server;
Sending a purchase authorization from the host to the server;
Receiving at the host side information about the authentication information and the rights and / or rules from the server;
2. The method of claim 1, further comprising: providing information regarding the authentication information and the rights and / or rules to the device.

Decrypting the selected encrypted media title stored on the device;
5. The method of claim 4, further comprising sending the decrypted media title to the host for rendering to a user.

6. The method of claim 5, further comprising encrypting the decrypted selected encrypted media title with a session key.

The method of claim 1, further comprising prompting the user to purchase the media title.

The media titles are organized into files, each file is encrypted with a corresponding content encryption key, and for each of at least some of the files, the device uses the corresponding content encryption key of the file. And further comprising an access control record including permissions and / or restrictions for use, wherein a first access control record of said file is said corresponding content encryption key when presented with said authentication information. Delegating the permission to access another access control record, wherein the method comprises:
Presenting the authentication information in the first access control record;
The method further comprises: delegating permission to access the corresponding content encryption key to the first access control record to a second access control record different from the first access control record. The method described in 1.

Further comprising delegating each of the plurality of access control records permission to access the corresponding content encryption key to a second access control record different from the first and the plurality of access control records. The method of claim 8.

A method for delivering a media title via a non-volatile rewritable memory device, the device comprising:
A media file that is respectively encrypted with a corresponding content encryption key, and a control structure for each of at least some of the files, wherein the structure includes the corresponding content encryption key of the file Including a permission and / or constraint for use, one first control structure in the file may delegate permission to access the corresponding content encryption key when authentication information is presented. Allowing to another control structure, the method comprising:
Presenting the authentication information to the first control structure;
Delegating permission to access the corresponding content encryption key to a second control structure different from the first control structure.

The method of claim 10, wherein the first and second control structures comprise access control records.

A method for delivering a media title by a non-volatile rewritable memory device having a secure memory area and at least one other memory area, the device comprising:
One or more content encryption keys and rights and / or rules that involve encrypted content stored on the device and stored in the secure memory area;
Including a media title stored in a memory area of the device and encrypted with the one or more content encryption keys, wherein the rights and / or rules are selected from at least some of the media titles Content that specifies that only a portion or a low quality version of the title can be accessed without restriction, or that the title can be played a limited number of times;
With
The method
Receiving information regarding rights and / or rules for providing access to the content encryption key (s);
The right to provide access to the content encryption key (s) in response to authentication information and / or to allow access to a selected and encrypted media title stored in the device and / or Changing the rules.

A method for a host to operate the device to render the encrypted media title, the method comprising:
Connecting the host to a service provider;
Sending purchase authorization from the host to the service provider;
Receiving the authentication information and information from the service provider to change the rights and / or rules in the device to provide access to the content encryption key (s). 13. The method of claim 12, comprising.

The rights and / or rules stored on the device are provided to provide access to at least one of the one or more content encryption key (s) in response to the received information 14. The method of claim 13, further comprising the step of modifying.

Decrypting the selected encrypted media title stored on the device;
15. The method of claim 14, further comprising: sending the decrypted media title to the host for rendering to a user.

The method of claim 15, further comprising encrypting the decrypted selected encrypted media title with a session key.

Playing for the user at least some of the selected portion of the media title or a low quality version of the title, or playing the title a limited number of times;
The method of claim 12, further comprising prompting the user to purchase the media title.

Decrypting the selected encrypted media title stored on the device with the one or more content encryption keys;
13. The method of claim 12, further comprising rendering the decrypted media title for a user.

The method of claim 12, further comprising encrypting the authentication information with a session key before the information is received.

A method for controlling delivery of encrypted media content stored in a plurality of non-volatile rewritable memory devices, the device having a unique identification code, the device Are divided into sets each containing N devices, each of the sets having a set identification code and a correspondence for controlling access to encrypted content in the devices of the set And a rights object to
Deriving at least one set identification code of the device from its unique identification code;
Identifying from the derived identification code the rights object for controlling access to encrypted content in the at least one device;
Providing the identified rights object to the at least one device for loading.

21. The method of claim 20 , wherein the identification code of each device is its serial number, and deriving the set identification code comprises dividing the serial number by a predetermined number.

A method for delivering media content using a non-volatile rewritable memory card, wherein the card has a memory area, and the card is stored in the memory area of the card. Wherein the content includes only selected unencrypted portions of at least some media titles or low quality unencrypted versions of the media titles, the method comprising:
Rendering the selected unencrypted portion of at least some media titles or a low quality unencrypted version of the media title to a user;
Sending a query to the user regarding the purchase of the right to access uncut or high quality version (s) of the at least some media titles.

The media title includes content information regarding purchase of rights to access an encrypted uncut or high quality version (s) of the at least some media titles, the method comprising: 23. The method of claim 22 , further comprising obtaining information, wherein the sending step sends the information to the user as part of the query.

Receiving the encrypted uncut or high quality version (s) of the at least some media titles, and after providing proof of purchase, the ciphers of the at least some media titles 24. The method of claim 23 , further comprising executing the rights and / or rules for versioned versions.

A method for delivering media content using a non-volatile rewritable memory card, wherein the card has a memory area, and the card comprises media content stored in the memory area of the card. The content includes at least some media titles, the method comprising:
Allowing the at least some media titles to be accessed within a time limit;
Tracking access to the at least some media ties;
Compiling an access profile based on the tracked access.

The at least some media titles are encrypted using one or more content encryption keys (multiple keys), and the card is transferred to at least some media titles when the access profile is downloaded. 26. The method of claim 25 , wherein the method stores rights and / or rules for providing an extension to a limited time access.

The at least some media titles are encrypted using one or more content encryption keys (multiple keys), and during the time limit or extension, the one or more content encryption keys ( 27. The method of claim 26 , wherein time limited access is allowed or extended by allowing access to the (multiple keys).

A method for enabling delivery of media content using a non-volatile rewritable memory card, comprising:
Verifying the certificate of the application accessing the non-volatile rewritable memory card to determine whether it is authorized to do so,
Providing an indication that the application is not authorized to access the non-volatile rewritable memory card if the certificate of the application does not meet the requirements.

When executed by a computer system, the system stores a list of pre-determined certificates for applications provided by an entity, and the computer has the pre-determined certificates for the application 30. The method of claim 28 , wherein the method is checked against a list of certificates.