WO2000075787A1 - Digital product license control system based on independent digital product registration server - Google Patents

Digital product license control system based on independent digital product registration server Download PDF

Info

Publication number
WO2000075787A1
WO2000075787A1 PCT/KR1999/000277 KR9900277W WO0075787A1 WO 2000075787 A1 WO2000075787 A1 WO 2000075787A1 KR 9900277 W KR9900277 W KR 9900277W WO 0075787 A1 WO0075787 A1 WO 0075787A1
Authority
WO
WIPO (PCT)
Prior art keywords
digital product
user
license
registration server
file
Prior art date
Application number
PCT/KR1999/000277
Other languages
French (fr)
Inventor
Hyo Joon Park
Original Assignee
Hyo Joon Park
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hyo Joon Park filed Critical Hyo Joon Park
Priority to PCT/KR1999/000277 priority Critical patent/WO2000075787A1/en
Priority to JP2001501992A priority patent/JP2003501745A/en
Publication of WO2000075787A1 publication Critical patent/WO2000075787A1/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/101Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM] by binding digital rights to specific entities
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2211/00Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
    • G06F2211/007Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
    • G06F2211/008Public Key, Asymmetric Key, Asymmetric Encryption

Definitions

  • the registration server is independent of digital product manufacturers and
  • the digital product manufacturer is registered to the registration server.
  • the digital product execution program processes the digital
  • the program decrypts said digital product and reads the product ID
  • said program asks the user to buy a license of
  • the digital product has specific file type such as "sampleMP3.ds2". If there is -s the license, the program can change the public digital product to a
  • the program calls player to execute personal digital product.
  • the license file is digital
  • the license file includes 3 information in
  • license information are user ID, CPU ID and owner ID.
  • license file is different from CPU ID of the processor, such as PSN of Intel
  • the central registration server distributes the
  • This user-ID file is
  • Digital product usage license is given to a specific CPU of a specific user.
  • the license file is dependent on a specific CPU.
  • file and license file is encrypted by user public key and digital signed by
  • license there are two more methods. One is user-based license.
  • the license is user-based license. The license
  • This license can be used on any CPU and strongly controlled by the
  • the other method is CPU-based license.
  • the license is given to a
  • the pair of secret/public key of the user is
  • product registration server comprising the steps of:
  • digital product information includes product ID, price, player name, etc. So,
  • User digital product license control program attaches the user secret/public
  • This user-ID file is
  • product registration server database for backup purpose and for cross digital
  • product registration server function such as the change of digital product
  • License file has owner information.
  • Digital product license control system works based on following servers and
  • Central digital product registration server gets digital product information
  • central registration server does the interface between all digital product
  • Normal digital product registration servers give user the digital product

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Multimedia (AREA)
  • Technology Law (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

The registration server is independent of digital product manufacturers and open to all digital product manufacturers. The manufacturer registers his digital product to the server and gets product registration file of the product from the server. The product manufacturer merges the product and the product registration file and encrypts them using manufacturer digital product license control program. If a public digital product is executed on user computer, said digital product is linked to digital product execution program which is subsystem of user digital product license control program. The program decrypts said digital product and reads the product ID from the product registration file and checks the license file received from a digital product registration server. If there is no license for the digital product, said program asks the user to buy a license of the product.

Description

Title of invention
Digital product license control system based on independent digital product
registration server
Technical field
Digital product license control
Background art
Software license control, digital product license control, cryptography
Publication - Garfinkel, Simson. PGP(Pretty Good Privacy).
Schneier, Bruce. Applied Cryptography
Disclosure of invention
The registration server is independent of digital product manufacturers and
open to all digital product manufacturers. Every digital product needs to be
modified to participate in this new digital product license control system.
The digital product manufacturer is registered to the registration server.
Normally such digital products as MP3 or VOD files, which cannot be executed alone, are processed by specific programs (players). The
manufacturer registers his digital product, with the player information, to the
server and gets product registration file of the product from the server. The
product manufacturer merges the product and the product registration file
and encrypts them using manufacturer digital product license control
program. The output is the format of public digital product. Public digital
product has specific file type such as "sampleMP3.dsl". If a public digital
product is executed on user computer, said digital product is linked to digital
product execution program which is subsystem of user digital product
license control program. Normally digital products are downloaded from
Internet and are executed by double clicking. Upon double clicking of the
digital product, the digital product execution program processes the digital
product. The program decrypts said digital product and reads the product ID
from the product registration file. And said program checks the license file
to know whether there is usage license for said digital product. The license
file was received from a digital product registration server. If there is no
license for the digital product, said program asks the user to buy a license of
the product. If user doesn't buy it, said program stops the running of the
digital product. If the user buys it, the program receives new license file,
which includes the purchased license, from the server and the program
changes the digital product to a personal digital product format. Personal
digital product has specific file type such as "sampleMP3.ds2". If there is -s the license, the program can change the public digital product to a
personal digital product any time. Personal digital product cannot be
interpreted without the user-ID file which was used in creating said personal
digital product . The program calls player to execute personal digital product.
Unauthorized user cannot use the personal digital product. Also the license
file cannot be used by unauthorized user because said file is encrypted by
the user public key and digital signed by the secret key of a digital product
registration server. To use a license file, user needs the secret key of the user
and needs passphrase to activate the secret key. The license file is digital
signed by digital product registration server and cannot be modified by a
user to add unauthorized license. The license file includes 3 information in
addition to license information. They are user ID, CPU ID and owner ID.
If user ID in license file is different from user ID of user-ID file, the license
file is ignored by user digital product license control program. If CPU ID in
license file is different from CPU ID of the processor, such as PSN of Intel
processor Pentium III, the license file is ignored by user digital product
license control program. So, even authorized user cannot execute personal
digital product on unauthorized computers.
All digital product manufacturers register their products to the central digital
product registration server. The central registration server distributes the
registered product information to digital product registration servers all over
the world. 3 types of registration need to be done by user. User registration, CPU registration and digital product usage license registration. User does
user registration for himself once per person. After that, the user registers
his CPU once per CPU. User registers digital product usage license once per
every product of specific CPU. All the registration is done after the
connection to a digital product registration server. On user registration, the
user gets partial user-ID file from the digital product registration server.
After receiving the partial user-ID file, user digital product license control
program attaches public/secret key pair of the user and public key of the
registration server of the user to the partial user-ID file. This user-ID file is
essential in registering CPU and purchasing digital product. The user-ID file
is independent of any CPU and this file needs to be copied to all of his
CPUs. On CPU registration, user gets license file from digital product
registration server. And the license file is updated every time the user
purchases new digital product or upgrades a digital product. The digital
product information is added to the license file every time new product is
purchased or a product is upgraded. Also because of expiration date, the
license file is refreshed periodically. Expiration date or refresh period
prevents unauthorized long-term use of the user-ID file or license file.
Digital product usage license is given to a specific CPU of a specific user. In
addition to direct purchase through public digital product execution, there is
a indirect purchase. To purchase a digital product without executing the
public digital product, user selects product category on license control program screen, and then selects the digital product on displayed relevant
digital products in that product category. Then, the user license control
program sends digital product purchase request to the digital product
registration server. The license file is dependent on a specific CPU. The
license file is given to a specific CPU of a specific user. Both the user-ID
file and license file is encrypted by user public key and digital signed by
digital product registration server secret key. So, only the registration server
can modify said files. In addition to above method - called user/CPU based
license, there are two more methods. One is user-based license. The license
is given to a specific user without having any CPU restriction on its license
file. This license can be used on any CPU and strongly controlled by the
user. The other method is CPU-based license. The license is given to a
specific CPU without having any user restriction on its license file.
Normally license file is encrypted by user public key but CPU based license
file is encrypted by the CPU public key. For CPU based license, one pair of
secret/public key is created just for the CPU. In case of User/CPU based
license and user based license, the pair of secret/public key of the user is
used without creating new key pair for the CPU. In case of company, there
is an owner in addition to an user of a PC/workstation. This owner has right
to change the user of a PC/workstation. If an employee quits the company,
the company (owner) is to assign new user to the PC/workstation. There is
owner information in addition to user information in license file. If digital product is executed on a specific machine such as MP3 player, which
doesn't have such full configuration as personal computer, the digital
product needs to be purchased on a computer and to be transferred to said
machine. The user needs to move his user-ID file, license file and personal
digital products to said machine. Said user-ID file, license file are simplified
ones and created by user digital license control program. Basically said
machine is treated as part of the computer which has the license file. Said
machine has no CPU ID and is treated as if said machine has same CPU ID
as said computer. If a user of said machine doesn't have a computer, it "can
be done on any computer. User digital license control program provides the
way to create user-ID file and license file for said machine.
Best mode for carrying out the invention
Method of digital product license control based on independent digital
product registration server comprising the steps of:
. creating secret/public key pair for a digital product manufacturer by the
manufacturer digital product license control program on the manufacturer
computer.
. connecting central digital product registration server, sending said
manufacturer's public key to said registration server and receiving the public key of said registration server.
. registering manufacturer once per manufacture to the central digital
product registration server and receiving partial user-ID file from digital
product registration server. Manufacturer digital product license control
program attaches the manufacturer secret/public key pair and the public key
of central digital product registration server to the partial user-ID file that
includes manufacturer information encrypted by manufacturer public key
and digital signed by the sever secret key.
. registering digital product, with player information, to central digital
product registration server and receiving product registration file of the
product from the server.
. distributing the product iwformation to all digital product registration
servers in the world by central digital product registration server. Registered
digital product information includes product ID, price, player name, etc. So,
user can select digital product from the registered digital product list. It is
easier for user to buy a digital product by double clicking the public digital
product and following the instruction given by the user digital product
execution program.
. merging the product and said product registration file and encrypting them
by manufacturer digital product license control program. The output is the
format of public digital product.
. creating secret/public key pair for a user by the user digital product license control program on the user computer.
. connecting digital product registration server by selecting one from the
digital product registration server list, sending said user's public key to said
registration server and receiving the public key of said registration server.
. registering user once per person to the digital product registration server
and receiving partial user-ID file from digital product registration server.
User digital product license control program attaches the user secret/public
key pair and the public key of the user's digital product registration server to
the partial user-ID file that includes user information encrypted by user
public key and digital signed by the sever secret key. This user-ID file is
essential in registering CPU and in registering digital product usage license.
. registering CPU for his computer hardware once per CPU to said digital
product registration server and receiving license file that includes CPU
information encrypted by user public key and digital signed by digital
product registration server secret key.
. downloading public digital products from Internet by user
. double clicking public digital product on user computer.
. linking said digital product to digital product execution program of user
digital product license control program.
. processing public digital product, decrypting said public digital product
and reading the product ID from the product registration file by the linked
digital product execution program. . checking the license file to know whether there is usage license for said
digital product.
. buying a license for the product or stopping the process, if there is no
license for the digital product.
. receiving new license file which includes the purchased license.
. changing the digital product to a personal product format if there is license.
. calling player to execute personal digital product
.storing user information, CPU information and digital product usage license
information in digital product registration server database by the server.
. replicating digital product registration server database to central digital
product registration server database for backup purpose and for cross digital
product registration server function such as the change of digital product
registration server and change of user who is registered to a different
digital product registration server from the former user.
. updating user-ID file and license file based on expiration date or refresh
period by user. Expiration date or refresh period prevents unauthorized long-
term use of the user-ID file or license file.
. changing the user of a CPU by the owner of the CPU in case of user
change. License file has owner information. Industrial applicability
Digital product license control system works based on following servers and
software packages:
. Central digital product registration server gets digital product information
from all digital product manufacturers and distributes the registered product
information to digital product registration servers all over the world. Said
central registration server does the interface between all digital product
manufacturers and digital product registration centers.
. Normal digital product registration servers give user the digital product
information that is given by central digital product registration server, get
registration request from users and give license file to users.
. Software packages for general users, normal digital product registration
servers, central digital product registration server and digital product
manufacturers.

Claims

What is claimed is:
1. Method of digital product license control based on independent digital
product registration server comprising the steps of:
. creating secret/public key pair for a digital product manufacturer by the
manufacturer digital product license control program on the manufacturer
computer.
. connecting central digital product registration server, sending said
manufacturer's public key to said registration server and receiving the
public key of said registration server.
. registering manufacturer once per manufacture to the central digital
product registration server and receiving partial user-ID file from digital
product registration server. Manufacturer digital product license control
program attaches the manufacturer secret/public key pair and the public key
of central digital product registration server to the partial user-ID file that
includes manufacturer information encrypted by manufacturer public key
and digital signed by the sever secret key.
. registering digital product, with player information, to central digital
product registration server and receiving product registration file of the
product from the server.
. distributing the product information to all digital product registration servers in the world by central digital product registration server. Registered
digital product information includes product ID, price, player name, etc. So,
user can select digital product from the registered digital product list. It is
easier for user to buy a digital product by double clicking the public digital
product and following the instruction given by the user digital product
execution program.
. merging the product and said product registration file and encrypting them
by manufacturer digital product license control program. The output is the
format of public digital product.
. creating secret/public key pair for a user by the user digital product license
control program on the user computer.
. connecting digital product registration server by selecting one from the
digital product registration server list, sending said user's public key to said
registration server and receiving the public key of said registration server.
. registering user once per person to the digital product registration server
and receiving partial user-ID file from digital product registration server.
User digital product license control program attaches the user secret/public
key pair and the public key of the user's digital product registration server to
the partial user-ID file that includes user information encrypted by user
public key and digital signed by the sever secret key. This user-ID file is
essential in registering CPU and in registering digital product usage license.
. registering CPU for his computer hardware once per CPU to said digital product registration server and receiving license file that includes CPU
information encrypted by user public key and digital signed by digital
product registration server secret key.
. downloading public digital products from Internet by user
. double clicking public digital product on user computer.
. linking said digital product to digital product execution program of user
digital product license control program.
. processing public digital product, decrypting said public digital product
and reading the product ID from the product registration file by the linked
digital product execution program.
. checking the license file to know whether there is usage license for said
digital product.
. buying a license for the product or stopping the process, if there is no
license for the digital product.
. receiving new license file which includes the purchased license.
. changing the digital product to a personal product format if there is license.
. calling player to execute personal digital product
.storing user information, CPU information and digital product usage license
information in digital product registration server database by the server.
. replicating digital product registration server database to central digital
product registration server database for backup purpose and for cross digital
product registration server function such as the change of digital product registration server and change of user who is registered to a different
digital product registration server from the former user.
. updating user-ID file and license file based on expiration date or refresh
period by user. Expiration date or refresh period prevents unauthorized long-
term use of the user-ID file or license file.
. changing the user of a CPU by the owner of the CPU in case of user
change. License file has owner information.
2. A method according to claim 1 wherein connecting to the only one
digital product registration server automatically. Only one registration server
exists in the world and does all registration service.
Consequently, there is no replication from registration server to central
registration server and no distribution of registered product information
from central registration server to registration servers, since there is only
one server.
3. A method according to claim 1 wherein validating digital product usage
license without giving limitation to a specific CPU. User digital product
license control program on user computer doesn't check CPU information if
"user based license" indicator is on in license file.
4. A method according to claim 1 wherein validating digital product usage
license without giving limitation to the specific user described in license file. User digital product license control program on user computer doesn't check
user information if ''CPU based license" indicator is on in license file.
Instead of entering "user passphrase" user enters "passphrase of the CPU".
In registering CPU for the computer once per CPU, user digital product
license control program creates secret/public key pair for the CPU and sends
the public key to digital product registration server. The license file is
encrypted by the CPU public key and digital signed by digital product
registration server
5. A method according to claim 1 wherein transferring user-ID file, license
file and personal digital products to a specific machine such as MP3 player.
If digital product is executed on said machine, which doesn't have such full
configuration as personal computer, the digital product needs to be
purchased on a computer and to be transferred to said machine. Said user-ID
file, license file are simplified ones and created by user digital license
control program. Basically said machine is treated as part of the computer
which has the license file. Said machine has no CPU ID and is treated as if
said machine has same CPU ID as said computer. If a user of said machine
doesn't have a computer, it can be done on any computer. User digital
license control program provides the way to create user-ID file and license
file for said machine.
PCT/KR1999/000277 1999-06-05 1999-06-05 Digital product license control system based on independent digital product registration server WO2000075787A1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
PCT/KR1999/000277 WO2000075787A1 (en) 1999-06-05 1999-06-05 Digital product license control system based on independent digital product registration server
JP2001501992A JP2003501745A (en) 1999-06-05 1999-06-05 Digital goods use right management system using independent digital goods registration server

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/KR1999/000277 WO2000075787A1 (en) 1999-06-05 1999-06-05 Digital product license control system based on independent digital product registration server

Publications (1)

Publication Number Publication Date
WO2000075787A1 true WO2000075787A1 (en) 2000-12-14

Family

ID=19570849

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/KR1999/000277 WO2000075787A1 (en) 1999-06-05 1999-06-05 Digital product license control system based on independent digital product registration server

Country Status (2)

Country Link
JP (1) JP2003501745A (en)
WO (1) WO2000075787A1 (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20010099077A (en) * 2001-08-25 2001-11-09 장기권 Realtime Trade System of Music & Sound Effects Data on The Internet
WO2002067548A1 (en) * 2001-02-21 2002-08-29 Rpk New Zealand Limited Encrypted media key management
GB2374432A (en) * 2001-04-10 2002-10-16 Mark Cross A pass key generation system
EP1667355A1 (en) * 2001-02-21 2006-06-07 RPK New Zealand Limited Encrypted media key management
US7865443B1 (en) * 2000-09-05 2011-01-04 Ixys Ch Gmbh Method and system for electronic data sales and distribution over wide area networks

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1998042098A1 (en) * 1997-03-14 1998-09-24 Cryptoworks, Inc. Digital product rights management technique

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1998042098A1 (en) * 1997-03-14 1998-09-24 Cryptoworks, Inc. Digital product rights management technique

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7865443B1 (en) * 2000-09-05 2011-01-04 Ixys Ch Gmbh Method and system for electronic data sales and distribution over wide area networks
WO2002067548A1 (en) * 2001-02-21 2002-08-29 Rpk New Zealand Limited Encrypted media key management
EP1667355A1 (en) * 2001-02-21 2006-06-07 RPK New Zealand Limited Encrypted media key management
GB2374432A (en) * 2001-04-10 2002-10-16 Mark Cross A pass key generation system
KR20010099077A (en) * 2001-08-25 2001-11-09 장기권 Realtime Trade System of Music & Sound Effects Data on The Internet

Also Published As

Publication number Publication date
JP2003501745A (en) 2003-01-14

Similar Documents

Publication Publication Date Title
WO1999015947A1 (en) Software license control system based on independent software registration server
US6920567B1 (en) System and embedded license control mechanism for the creation and distribution of digital content files and enforcement of licensed use of the digital content files
US7752139B2 (en) Method and system for managing software licenses and reducing unauthorized use of software
RU2402809C2 (en) Flexible licensing architecture for licensing digital application
EP1287416B1 (en) System and embedded license control mechanism for the creation and distribution of digital content files and enforcement of licensed use of the digital content files
US7162633B2 (en) Method and apparatus for hierarchical assignment of rights to documents and documents having such rights
US7096203B2 (en) Method and apparatus for dynamic renewability of content
US20040193545A1 (en) Method and system for digital licensing distribution
US8805743B2 (en) Tracking, distribution and management of apportionable licenses granted for distributed software products
US20010011253A1 (en) Automated system for management of licensed software
US20040073789A1 (en) Method for collaborative software licensing of electronically distributed computer programs
WO1997030575A2 (en) Automated system for management of licensed software
WO2002097694A1 (en) Insurance system
CA2485053A1 (en) System and method for multi-tiered license management and distribution using networked clearinghouses
JP5025640B2 (en) Method and apparatus for providing and processing DRM-based content
WO2006031127A2 (en) Methods and arrangements for distributing computer programs and user licenses in a secure manner
WO2000075787A1 (en) Digital product license control system based on independent digital product registration server
KR100479668B1 (en) Management System of Digital Right in Mobile Game and Method
KR100436983B1 (en) Digital product license control system based on independent digital product registration server
KR20060015797A (en) Digital rights management system of mobile content for pda
US20090112657A1 (en) Repository infrastructure to store transaction information for providing customer service
JP2002189526A (en) Distribution system
AU2002305506A1 (en) Method and apparatus for hierarchical assignment of rights to documents and documents having such rights

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): JP KR US

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
WWE Wipo information: entry into national phase

Ref document number: 1020017013982

Country of ref document: KR

ENP Entry into the national phase

Ref country code: JP

Ref document number: 2001 501992

Kind code of ref document: A

Format of ref document f/p: F

WWE Wipo information: entry into national phase

Ref document number: 09980621

Country of ref document: US

WWP Wipo information: published in national office

Ref document number: 1020017013982

Country of ref document: KR

122 Ep: pct application non-entry in european phase
WWG Wipo information: grant in national office

Ref document number: 1020017013982

Country of ref document: KR