Classifications

• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/60—Protecting data
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q50/00—Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
  • G06Q50/10—Services
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
  • H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
  • H04N21/633—Control signals issued by server directed to the network components or client
  • H04N21/6332—Control signals issued by server directed to the network components or client directed to client
  • H04N21/6334—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
  • H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management

Definitions

• the present invention relates to the field of content delivery. More particularly, the present invention relates to the field of distributing digital content that is governed by digital licenses.
• DRM Digital Rights Management
• a content server receives encrypted content from the storage device and packages the encrypted content for distribution.
• a license server holds a description of rights and usage rules associated with the encrypted content, as well as associated encryption keys. (The content server and license server are sometimes part of a content provider system that is owned or controlled by a content provider (such as a studio) or by a service provider.)
• a playback device or client receives the encrypted content from the content server for display and receives a license specifying access rights from the license server.
• Some DRM processes consist of requesting an item of content, encrypting the item with a content key, storing the content key in a content digital license, distributing the encrypted content to a playback device, delivering a digital license file that includes the content key to the playback device, and decrypting the content file and playing it under the usage rules specified in the digital license.
• Methods and systems of distributing digital content governed by a digital license are disclosed.
• the issuance of licenses and content to users is facilitated so that one license can govern usage rights to a plurality of items of content that are received by a client device after the license has been received.
• the licenses have data located in licensed content identification fields that remain unchanged after the license has been received by the user.
• embodiments of the invention can be used as part of a subscription business model whereby one license is issued to a client, and thereafter a plurality of items of content can be transmitted to and used by the client under the control of this one license.
• a license having identification data for licensed content is transmitted to the client.
• a first item of content is transmitted to the client after receipt by the client of the license.
• the first item of content has first content identification data, and at least a portion of the first item of content is in encrypted form.
• a second item of content is transmitted to the client after receipt by the client of the license.
• the second item of content has second content identification data that is different from the first content identification data. At least a portion of the second item of content is in encrypted form.
• the first item of content is decrypted if the first content identification data corresponds to the identification data for licensed content.
• the second item of content is decrypted if the second content identification data corresponds to the identification data for licensed content.
• the identification data for licensed content remains unchanged after the license is transmitted to the client.
• the first and second items of content are transmitted to the client at different points in time, wherein the points in time are spaced apart from each other by a time interval of at least about one day.
• the license has a first subkey
• the first item of content has a second subkey
• the second item of content has a third subkey.
• a first decryption key is generated using the first and second subkeys
• a second decryption key is generated using the first and third subkeys.
• the first item of content is decrypted using the first decryption key
• the second item is decrypted using the second decryption key.
• a license having identification data for licensed content and having play count data is transmitted to a client.
• a first item of content is transmitted to the client after receipt by the client of the license. At least a portion of the first item of content is in encrypted form.
• the first item of content has first content identification data and is comprised of N discretely-usable items of subcontent, where N is an integer greater than 2. At least a portion of P of the N discretely-usable items of subcontent are decrypted if the first content identification data corresponds to the identification data for A-
• the N discretely-usable items of subcontent can be comprised of N television shows or can be comprised of N musical works.
• a data structure for being transmitted to a client and for licensing a first plurality of items of content for use by the client.
• Each of the first plurality of items of content has a first content identification field.
• the data structure comprises a first license identification field for specifying the identity of each of the first plurality of items of content and for holding a first set of identification data corresponding to the identity each of the first plurality of items of content.
• the first license identification field and the plurality of first content identification fields are adapted to allow the client to use the first plurality of items of content when the client receives the first plurality of items of content after a point in time that the data structure is transmitted to the client.
• the first set of identification data is adapted to remain unchanged after the data structure is transmitted to the client.
• FIG. 1 is a simplified block diagram of a content providing system according to some embodiments for use in distributing content
• FIG. 2 is a simplified block diagram of a hardware environment for a client device according to one embodiment of the invention
• FIG. 3 is a simplified block diagram of a portion of a content providing system according to some embodiments for use in distributing content;
• FIG. 4 is a simplified diagram of a digital license according to some embodiments of the invention.
• FIG. 5 is a simplified diagram of one item of digital content according to some embodiments of the invention.
• FIG. 6 is a simplified diagram of another item of digital content according to some embodiments of the invention.
• FIG. 7 is a simplified diagram of another item of digital content according to some embodiments of the invention.
• FIG. 8 is a simplified diagram of another item of digital content according to some embodiments of the invention.
• FIG. 9 is a chart showing the assignment of identification field values according to one embodiment of the invention.
• FIG. 10 is a simplified flow diagram of a method of distributing content according to some embodiments of the invention.
• FIG. 1 there is shown an. exemplary configuration of a content providing system 10 to which the present invention is applied.
• the content providing system 10 handles protected content which can include video data, audio data, image data, text data, etc.
• a license server 12, a content server 14, and an accounting server 16 are each connected to a client 18 and to each other via a network 20 which is the Internet for example.
• a network 20 which is the Internet for example.
• client 18 is shown, but those skilled in the art will appreciate that any number of clients may be connected to the network 20.
• the content server 14 provides content to the client 18.
• the license server 12 grants a license 22 having a subscription section 24 necessary for the use by the client 18 of the content.
• the accounting server 16 is used to bill the client 18 when it is granted the license 22. While the illustrated embodiment shows three servers in communication with the client 18, it will be understood that all of these server functions could be included in a fewer or greater number of servers than the three which are shown here.
• FIG. 2 illustrates an exemplary configuration of the client 18.
• a central processing unit (CPU) 30 executes a variety of processing operations as directed by programs stored in a read only memory (ROM) 32 or loaded from a storage unit 34 into a random access memory (RAM) 36.
• the RAM 36 also stores data and so on necessary for the CPU 30 to execute a variety of processing operations as required.
• the CPU 30, the ROM 32, and the RAM 36 are interconnected via a bus 38.
• the bus 38 further connects an input device 40 composed of a keyboard and a mouse for example, an output device 42 composed of a display unit based on CRT or LCD and a speaker for example, the storage unit 34 based on a hard disk drive for example, and a communication device 44 based on a modem, network interface card (NIC) or other terminal adaptor for example.
• the ROM 32, RAM 36 and/or the storage unit 34 stores operating software used to enable operation of the client 18.
• a buffer 46 receives and buffers sequential portions of streaming encrypted content from the content server 14 (FIG. 1) via the network 20 while using an associated decryption key (not shown) needed to decrypt the encrypted content.
• the encrypted content and the associated decryption key are sent to a decoder 48.
• the decoder 48 decrypts and decodes the content using the decryption key associated with the content.
• the communication device 44 executes communication processing via the network 20, sends data supplied from the CPU 30, and outputs data received from the network 20 to the CPU 30, the RAM 36, and the storage unit 34.
• the storage unit 34 transfers information with the CPU 30 to store and delete information.
• the communication device also communicates analog signals or digital signals with other clients.
• the bus 38 is also connected with a drive 50 as required on which a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory for example is loaded for computer programs or other data read from any of these recording media being installed into the storage unit 34.
• the content server 14, the license server 12, and the accounting server 16 are also each configured as a computer which has basically the same configuration as that of the client 18 shown in FIG. 2. While FIG. 2 shows one configuration of the client 18, alternative embodiments include a set top box, a personal computer, a portable playback device, or any other type of a computer device.
• the license and content servers 12, 14 send the license 22 and the content to the client 18.
• the license 22 is required to enable the client 18 to use (Le., render, reproduce, copy, execute, etc.) the protected content which typically is in encrypted form.
• Each item of content is configured and encrypted by a service provider organization using one or more encryption keys.
• the client 18 decrypts and reproduces the received item of content on the basis of the license information and the content.
• the license information includes usage rights, such as for example, the expiration date beyond which the item of content may not be used, the number of times that the content may be used, the number of times that the content can be copied to a recording medium such as a CD for example, and the number of times that the content may be checked out to a portable device.
• FIG. 3 illustrates a mechanism for granting rights to content and for the usage of the content in accordance with an embodiment of the invention.
• a license server 62 a license 64, a client 66, and a plurality of items of content.
• the license server 62 is owned or controlled by a trusted issuer and issues the license 64 to the client 66 belonging to a user.
• video preview #2 etc., through “video preview #10,” comprising previews often movies, other television shows (which can be other "Sex and the City” shows or different television programs), or other types of video content
• audio preview #10 ten items of audio preview content 74a - 74j, entitled “audio preview #1,” “audio preview #2,” etc., through “audio preview #10,” comprising previews often musical works, such as for example, songs or instrumentals, or of other types of audio content.
• one or more of these items of content may be used by the client 66. However if the license 64 does not grant rights to one or more of these items of content, they cannot be used, although they could be received by and stored on the client 66 in unusable form.
• FIG.4 is a simplified representation of the license 64 and certain data or information contained within the license 64 according to one embodiment of the invention.
• the license 64 has a subscription section 76 and a subkey section 78.
• the subkey section 78 contains one or more subkeys 80, which as explained further below, can be used in the generation of one or more decryption keys.
• the subscription section 76 contains a principal content identification field 82, a preview identification field 86, a clip identification field 84, and a play count field 88. As explained further below, value or attribute data can be inserted in these fields for controlling access or use by the client 66 of certain items of content. [0047] FIG.
• FIG. 5 is a simplified representation of the item of principal content entitled, "Sex and the City - Series 1.”
• 68a Referring to FIG. 5, the item of content 68a has a subscription section 102, a subkey section 104, and a content section 106.
• the subjcey section 104 contains one or more subkeys 108 that can be combined by the client 66 with the one or more associated subkey(s) 80 contained in the license 64 (FIG. 4) whereby algorithms are used to derive one or more decryption keys (not shown) for the content.
• the subscription section 102 contains a principal content identification field
• the content section 106 contains ten discretely-usable items of subcontent, which in this example are ten episodes or shows 112a - 112j which make up the principal content of the series, "Sex and the City - Series 1.” 68a
• the episodes 112a - 112j are entitled “Series 1 - Episode 1", “Series 1 - Episode 2", through “Series 1 - Episode 10.”
• FIG. 5 illustrates the item of content, "Sex and the City - Series 1" 68a, it will be appreciated that the remaining four items of principal content 68b - 68e (FIG. 3) have a similar content structure.
• FIG. 6 is a simplified representation of the item of bonus track or clip content entitled, "Clip: Sex and the City - Series 1.” 70a Referring to FIG. 6, the clip content 70a has a subscription section 114, a subkey section 116, and a clip content section 118.
• the subkey section 116 contains a subkey 120 which can be combined by the client 66 with an associated subkey 80 contained in the license 64 (FIG. 4) whereby algorithms are used to derive a decryption key for this item of clip content 70a.
• the subscription section 114 contains a clip identification field 122 into which can be placed value or attribute data corresponding to the identity of this item of clip content, "Clip: Sex and the City - Series 1.” 70a
• the content section 118 contains the bonus track or clip content 124 associated with the item of principal content of the series, "Sex and the City - Series 1.” 68a While FIG. 6 illustrates the item of clip content, "Clip: Sex and the City - Series 1" 70a, it will be appreciated that the remaining four items of clip content 70b - 7Oe (FIG. 3) have a similar content structure.
• FIG. 7 is a simplified representation of the item of audio preview content entitled, "Audio Preview #1.”
• the content 74a has a subscription section 126, a subkey section 128, and a preview content section 130.
• the subkey section 128 contains a subkey 132 which can be combined by the client 66 with an associated subkey 80 contained in the license 64 (FIG. 4) whereby algorithms are used to derive a decryption key (not shown) for this audio preview content 74a.
• the subscription section 126 contains a preview identification field 134 into which can be placed value or attribute data corresponding to the identity of this item of audio preview content, "Audio Preview # 1.” 74a
• the content section 130 contains the audio preview content 136 itself that corresponds to a full version of the audio content (not shown) that is being previewed. While FIG. 7 illustrates the item of audio preview content, "Audio Preview #1" 74a, it will be appreciated that the remaining nine items of audio preview content 74b - 74j (FIG. 3) have a similar content structure.
• FIG. 8 is a simplified representation of the item of the video preview content entitled "Video Preview #1.”
• 72a the item of content 72a has a subscription section 138, a subkey section 140, and a preview content section 142.
• the subkey section 140 contains a subkey 144 which can be combined by the client 66 with an associated subkey 80 contained in the license 64 (FIG. 4) whereby algorithms are used to derive a decryption key (not shown) for this video preview content 72a.
• the subscription section 138 contains a preview identification field 146 into which can be placed value or attribute data corresponding to the identity of this item of video preview content, "Video Preview #1.” 72a
• the content section 142 contains the video preview content 148 itself that corresponds to a full version of the video content (not shown) that is being previewed, which could be a movie, a television series or episode, a music video, or other video content. While FIG. 8 illustrates the item of video preview content, "Video Preview #1" 72a, it will be appreciated that the remaining nine items of video preview content 72b - 72j (FIG. 3) have a similar content structure. [0056] The following is a description of the operation of one embodiment of the inventions. FIG.
• FIG. 9 is a chart showing an assignment of attribute or value data that are placed in the identification fields of the items of principal content 68a - 68e, clip content 70a - 7Oe, audio preview content 74a - 74j, and video preview content 72a - 72j (FIG. 3), according to this example.
• the content identification field 110 (FIG. 5) for the item of principal content entitled “Sex and the City - Series 1" 68a contains the value or attribute "1".
• the content identification field 110 for the item of principal content entitled "Sex and the City - Series 2" 68b contains the value or attribute "2", etc.
• a similar pattern of value assignments is established for the clip content 70a - 7Oe. (FIG.
• AU items of video preview content fields 146 (FIG. 8) contain the same value, which in this example is the value "2.”
• all items of audio preview content fields 134 (FIG. 7) contain the value "1.”
• the issuance of licenses and content to users is facilitated so that one license can govern usage rights to a plurality of items of content that are received by the client 66 after the license 64 has been received.
• the data in the identification fields 82, 84, 86, 88 of the license 64 remains unchanged after the license 64 has been received.
• certain embodiments of the invention can be used as part of a subscription business model whereby one license is issued to a client, and thereafter a plurality of items of content can be transmitted to and used by the client under the control of this one license.
• the items of content can be transmitted to the client at later points in time, being spaced apart by about an hour, a day, a week or other time intervals as desired by the user and permitted by the content provider.
• the client 66 will onlybe able to use the item of content entitled "Sex and the City - Series 1.” 68a However, all ten episodes 112a - 112j in Series 1 would be usable.
• the client 66 reads the principal content identification field data found in the license 64 and compares this data with the content identification field data found in the item of principal content 68a itself. If the data correspond with one another (e.g., they match or fall within a range of values, etc.), then the client 66 can use the content by using one or more decryption keys that were generated with the subkeys as previously described.
• the other items of content, such as "Sex and the City - Series 2", etc. while potentially able to be downloaded to or received by the client 66, will nevertheless not be able to be used under this license 64 in this example.
• the play count field 88 (FIG. 4) in the license 64 designates how many episodes within any given item of principal content series may be used. If the play count field is empty, then all episodes may be used, assuming the content identification field 82 of the license 64 has appropriate value data in it. On the other hand, for example, if the license 64 has a content identification field value of "3,” and a play count field value of "5,” then the client 66 may only use any 5 episodes of the content entitled "Sex and the City - Series 3.” 68c No more than 5 different episodes may be used, however, under this license 64 in this example.
• the client 66 will be able to use all ten episodes in each of all five "Sex and the City" series.
• the client 66 will be able to use all ten episodes each of only the two specific items of principal content: "Sex and the City - Series 1" 68a and "Sex and the City - Series 4.”
• 68d [0062]
• the contents of the clip content identification field 84 in the subscription section 16 of the license 64 (FIG. 4) is used in a similar manner by the client 66.
• the data in the clip content field 84 designates which clip or bonus track items of content are licensed for use by the client 66.
• the client 66 would not only be able to use the principal content entitled “Sex and the City - Series 2" 68b, but also use the clip content "Clip: Sex and the City - Series 2.” 70b
• a license 64 would cost more money than a license having no value in the clip identification field, since the user would be able to view the clip or bonus track associated with the principal content as well as view the principal content itself.
• the music and video preview identification fields 134, 146 (FIGs. 7 & 8) operate in a different manner.
• the license preview identification field 86 permits the use of all of one kind of preview (e.g., video or audio) or the other or both.
• one kind of preview e.g., video or audio
• the client 66 could use all ten items of audio preview content, entitled “Audio Preview #1", “Audio Preview #2”, . . . "Audio Preview #10,” but the client 66 could not use any items of video preview content.
• the preview identification field 86 in the license 64 contained the value "2”
• the client 66 could use all ten items of video preview content, entitled “Video Preview #1", “Video Preview #2", . . .
• Video Preview #10 could not use any audio preview items of content.
• the audio and video preview contents could be grouped in other arrangements, or could be individually identified with unique values in each of their respective identification fields. In this event, access to preview contents could be controlled in a manner similar to the items of principal content previously described.
• FIG. 10 is a simplified flow diagram of a method of distributing content according to some embodiments of the invention.
• a license having identification data for licensed content is transmitted to a client.
• a first item of content is transmitted to the client after receipt by the client of the license.
• the first item of content has first content identification data, and at least a portion of the first item of content is in encrypted form.
• a determination is made whether the first content identification data corresponds to the identification data for licensed content. 164 If the data corresponds, then the encrypted portion of the first item of content in decrypted. 168
• a second item of content is transmitted to the client. 170
• the second item of content has second content identification data that is different from the first content identification data, and at least a portion of the second item of content is in encrypted form.
• the determination represented by block 164 shows that the data does not correspond, then the first item of content cannot be decrypted, and instead, the process goes to block 170 where the second item of content is transmitted to the client.
• a determination is made whether the second content identification data corresponds to the identification data for licensed content. 174 Ifthe data does not correspond, then the process stops. 172 On the other hand, ifthe data does correspond, then the encrypted portion of the second item of content is decrypted. 176 Throughout the above-described process, the identification data for licensed content remains unchanged after the license has been transmitted to the client.
• the issuance of licenses and content to users is facilitated so that one license can govern usage rights to a plurality of items of content that are received by a client device after the license has been received.
• the licenses have data in licensed content identification fields that remain ' unchanged after the license has been received by the user.
• embodiments of the invention can be used as part of a subscription business model whereby one license is issued to a client, and thereafter a plurality of items of content can be transmitted to and used by the client under the control of this one license.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Hardware Design (AREA)
• Theoretical Computer Science (AREA)
• General Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Business, Economics & Management (AREA)
• General Physics & Mathematics (AREA)
• Physics & Mathematics (AREA)
• Computing Systems (AREA)
• General Health & Medical Sciences (AREA)
• Tourism & Hospitality (AREA)
• Health & Medical Sciences (AREA)
• General Business, Economics & Management (AREA)
• Strategic Management (AREA)
• Primary Health Care (AREA)
• Marketing (AREA)
• Human Resources & Organizations (AREA)
• Economics (AREA)
• Multimedia (AREA)
• Bioethics (AREA)
• Software Systems (AREA)
• Storage Device Security (AREA)
• Management, Administration, Business Operations System, And Electronic Commerce (AREA)
• Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
• Television Signal Processing For Recording (AREA)

Priority Applications (5)

Applications Claiming Priority (1)

Publications (1)

Family

ID=38981751

Family Applications (1)

Country Status (5)

Families Citing this family (2)

Citations (4)

Family Cites Families (1)

• 2006
  • 2006-07-25 JP JP2009521725A patent/JP4959796B2/ja not_active Expired - Fee Related
  • 2006-07-25 WO PCT/US2006/028853 patent/WO2008013526A1/en active Application Filing
  • 2006-07-25 KR KR1020097003752A patent/KR101301360B1/ko not_active IP Right Cessation
  • 2006-07-25 CN CN200680055786A patent/CN101529462A/zh active Pending
  • 2006-07-25 EP EP20060800319 patent/EP2044567A4/de not_active Ceased

Patent Citations (4)

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events