|Publication number||US20090164794 A1|
|Application number||US 12/337,984|
|Publication date||Jun 25, 2009|
|Filing date||Dec 18, 2008|
|Priority date||Dec 13, 2002|
|Also published as||US7493289, US20040205028|
|Publication number||12337984, 337984, US 2009/0164794 A1, US 2009/164794 A1, US 20090164794 A1, US 20090164794A1, US 2009164794 A1, US 2009164794A1, US-A1-20090164794, US-A1-2009164794, US2009/0164794A1, US2009/164794A1, US20090164794 A1, US20090164794A1, US2009164794 A1, US2009164794A1|
|Inventors||Ellis Verosub, Sanjeev Tenneti, Kamal Acharya, Solomon D. Goldfarb, Todd Pringle, David S. Bill, Shailesh Prakash, Adam Milligan|
|Original Assignee||Ellis Verosub, Sanjeev Tenneti, Kamal Acharya, Goldfarb Solomon D, Todd Pringle, Bill David S, Shailesh Prakash, Adam Milligan|
|Export Citation||BiBTeX, EndNote, RefMan|
|Patent Citations (5), Referenced by (12), Classifications (7), Legal Events (3)|
|External Links: USPTO, USPTO Assignment, Espacenet|
This Application is a Divisional of and claims priority to application Ser. No. 10/734,991, filed 11 Dec. 2003, entitled Digital Content Store System; which claims priority to prior U.S. provisional application No. 60/433,734, filed 13 Dec. 2002, entitled Music Net. Each of the aforementioned documents is incorporated herein in its entirety by this reference thereto.
The invention relates to the transfer, processing, sale, distribution, and usage of digital content in a network environment. More particularly, the invention relates to secure sale, distribution, and usage of digital content in a network environment.
The Internet comprises a web of computers and networks, which are widely spread throughout the world. The Internet currently comprises millions of network connections, and is used by millions of people, such as for business, education, entertainment, and/or basic communication.
Digital content, such as sound recordings, e.g. songs, are often transferred across the Internet. In addition to the basic transfer of song files, numerous network enabled radio stations have been introduced, which provide content to listeners at computers across the Internet. Network enabled radio has significantly increased the magnitude and variety of content to recipients, as compared to conventional over-the-air radio broadcasts.
There are also several music stores on which are accessible across the Internet, by which songs and/or albums may be purchased, wherein digital content files are transferred to a user terminal upon purchase.
Several structures and methods have been described for the distribution of digital content in a network environment.
V. Shear, D. Van Wie, and R. Weber, Systems and Methods for Matching, Selecting, Narrowcasting, and/or Classifying Based on Rights Management and/or Other Information, U.S. Pat. No. 6,112,181, 29 Aug. 2000, describe that “[r]ights management information is used at least in part in a matching, narrowcasting, classifying and/or selecting process. A matching and classification utility system comprising a kind of Commerce Utility System is used to perform the matching, narrowcasting, classifying and/or selecting. The matching and classification utility system may match, narrowcast, classify and/or select people and/or things, non-limiting examples of which include software objects. The Matching and Classification Utility system may use any pre-existing classification schemes, including at least some rights management information and/or other qualitative and/or parameter data indicating and/or defining classes, classification systems, class hierarchies, category schemes, class assignments, category assignments, and/or class membership. The Matching and Classification Utility may also use at least some rights management information together with any artificial intelligence, expert system, statistical, computational, manual, or any other means to define new classes, class hierarchies, classification systems, category schemes, and/or assign persons, things, and/or groups of persons and/or things to at least one class.”
T. Reussner and M. Britting, Multi-Channel Device Having Storage Modules in a Loop Configuration with Main Control Unit for Controlling Data Rates and Modifying Data Selectively and Independently Therein, U.S. Pat. No. 5,517,672, 14 May 1996, describe “a multi-channel device for the digital recording and playback of audio signals, with a plurality of digital or analogue inputs and outputs and with one or more digital stores. For providing, with a not limited number of channels for recording and playback, possibilities for recording and playback over an unlimited period of time, with instantaneous access to any desired position of the recording, and carrying out overdubbing and editing without risk and freely selecting the time duration of the cross-fading, a bidirectional interface circuit with inputs and outputs is connected via a system-bus which conducts groups of parallel data, to one or more parallel connected storage modules, wherein a main control circuit driven by an operating unit is coupled to the system-bus and to the storage module or modules, and wherein each storage module comprises at least one digital store, containing an exchangeable storage medium, and at least one digital buffer store such that the audio signals which are to be stored are kept available in the buffer store for their processing or during the exchange of the storage medium.”
G. Lau, Method and System for Subscription Digital Rights Management, U.S. Patent Application Publication No. 20020198846, filed 6 Jun. 2002, describes “[a] system and method for managing use of items having usage rights associated therewith. The system includes an activation device adapted to issue a software package having a public and private key pair, the public key being associated with a user, a license device adapted to issue a license, a usage device adapted to receive the software package, receive the license and allow the user to access the item in accordance with the license, and a subscription managing device adapted to maintain a subscription list including the public key associated with the user. License's is issued by the license device upon verifying presence of the public key in the subscription list corresponding to requested content.”
T. Akashi, System for Delivering Music and Apparatus for Receiving Music Data, U.S. Patent Application 20020152878, filed Japan 23 Apr. 2001, JP 2001-124342, filed U.S. 19 Apr. 2002, Published 24 Oct. 2002, describes a music data receiving apparatus, wherein “the music data receiver receives the music data broadcast by the broadcasting station, and then the reproducer reproduces the music data while the related information storage stores the related information for the music. The user, who is listening to the reproduced music, may give a download instruction, which orders to download the air, to the user's input receiver, if the user is pleased with the air. The download instruction is transmitted to the server accessor. The server accessor accesses the music delivery server, takes out the information for specifying the air to be downloaded from the related information storage, and then notifies it to the music delivery server. The music delivery server confirms the user or charges a fee executes, and then sends the specified air data.”
D. Hughes, M. Carpenter, M. Massiha, and P. Nguyen, Media Player for Distribution of Music Samples, U.S. Patent Publication No. US 20020152876, filed 20 Apr. 2001, published 24 Oct. 2002, describe a “method and apparatus of music distribution from a media player. A media player is provided with a “send to friend” icon. In one embodiment, when the icon is selected, a clipping of the currently playing music selection is taken from a predetermined location in the music selection and compressed using a fidelity reducing compression technique to produce a sample of the current selection suitable for distribution. The compressed clipping is sent to a selected recipient or recipients by email in the background while the music selection continues to play. The recipient(s) can be either a default recipient(s) or a recipient(s) selected from a list as in an address book application.”
J. Dunn, P. Lee, E. Stern, and B. Willner, Broadcast Data Radio System and Receiver Apparatus Therefore, U.S. Pat. No. 6,163,683, 19 Dec. 2000, describe a “radio broadcasting system for a virtual radio program broadcasting station uses a divided regional approach to broadcast digital and analog signals over a large geographic region divided into multiple overlapping but separate areas constituting small portions of the region. The small areas are served by separate transmission sources/towers supplied from a common source central to the station. The system supports reuse of allocated transmission parameters within non-neighboring small areas in the region. The station is “virtual” because its central source need not be in any of the small areas, and because it uses different transmission parameters in neighboring small areas in a manner that previously would be used by plural different stations. System transmissions include information signals sent in both analog and digital forms. The analog signals representing audibly reproducible programs, and the digital signals include instructions for controlling operations of receiver devices operating in the region. The digital signals also may include audibly reproducible program matter and instructions for controlling insertion of that matter into a program stream defined by analog transmissions. These transmissions are particularly useful for varying tuning parameters of mobile receiver devices disclosed herein to automatically and seamlessly maintain the devices tuned to the respective virtual station throughout the region, while the devices are transported across virtual boundaries between the small areas within the region. The system enables the virtual station to alternately present audible matter of general interest throughout the region and audible matter relevant exclusively to a small area within the region (e.g. advertisements specifying locations and services offered by commercial establishments within a respective area, and announcements specifying locations of public facilities such as libraries, hospitals, etc.). Transmitted digital information is retained in mass storage units associated with receiver devices and is used for adjusting tuning parameters as a device is transported across the small areas of the region, as well as for providing a portion of the program content that is played at the device during such movement.”
M. Gell, M. Manning, and J. L. Martin, System for Selective Communication Connection Based on Transaction Pricing Signals, U.S. Pat. No. 5,802,502, 01 Sep. 1998, describe a “communications network in which user equipment is provided with a selecting device which communicates with a pricing device in service provider equipment. When communications or other services are required, the selection circuit polls a plurality of service providers, and the pricing circuit of each service provider generates a price signal indicating the level of price for its services. The selection circuit then selects a service provider, based on price (and also other factors such as quality of service).”
D. Stebbings and J. Kadin, Method and Apparatus for High Speed Duplication of Audio or Digital Signals, U.S. Pat. No. 5,325,238, describe a “method of and apparatus for recording information from a master medium onto a slave medium. In one embodiment, digital information on a master medium is reproduced and stored at a first rate, typically at real time, in a first high speed digital storage device such as a magnetic disk drive. The digital information stored in the first storage device, when needed, is transferred at a second rate, much higher than the first, to a second digital storage device in which it is stored until it is scheduled for duplication, at which time the digital information is repeatedly played back at a third rate, much higher than the first rate and slower than the second rate, is converted from digital information into analog information and applied to a duplicating device for recording the analog information onto a slave medium. Because the information stored in the first digital storage device is not directly used in production, the duplicating device can be duplicating information previously transferred from the first storage device to the second at the same time information is being reproduced from a master medium and loaded, in real time, into the first storage device.”
D. Spencer, W. Lutton, M. Hsu, G. Anderson, D. McMahon, and A. Schaller, Closed-Loop Delivery to Integrated Download Manager; U.S. Patent Application Publication No. US 20030014436, filed 27 Jun. 2001, Publication 16 Jan. 2003, describe “[m]ethods, apparatus and system, including computer program products, implementing and using techniques for delivery of media files to a particular digital media playback device. The system comprises a content server and a download manager located in the digital media playback device. The content server receives device-identifying information obtained from the digital media playback device, and distributes media files in response to the received device-identifying information. The download manager forwards device-identifying information to the content server over a public communication network and receives media files over the public communication network from the content server for playback on the particular digital media playback device.”
Other structures and methods have been described for the distribution of content in a network environment, such as: Method and System for Downloading Digital Music, Taiwan Patent No. TW 497055; Network-Based Published Works Reproduction System, Japanese Patent No. JP 2003069768; Digital Music Data Reproduction Device Consists of Decoding and Expanding Circuits Connected Through Internal Path of Computing Element; Japanese Patent No. JP 2002108395; Web-Based Protection and Secure Distribution for Digital Music; International Conference on WEB delivering of 23-24 Nov. 2001, Changseng Xu, Yongwei Zhu, and David Dagan Feng, Florence Italy; IP Data Over Satellite to Cable Headends and a New Operation Model with Digital Store and Forward Multi-Media Systems; Conference Paper.
An iTUNES™ internet music store has been introduced by Apple Computer, Inc., of Cupertino, Calif., as seen at http://www.apple.com/music/store/, which provides for the browsing and purchase of digital music files, which are associated with usage rights, such as for playing or burning onto media.
It would be advantageous to provide a digital content store system and an associated methodology which provides acquisition and distribution of secure digital content, e.g. such as but not limited to music, video, games and software, and controlled usage of the secure digital content. The development of such a digital music store system would constitute a major technological advance.
It would also be advantageous to provide a digital content store system over a network, and an associated methodology which provides secure content and controlled usage of the secure content, wherein the client machine is not required to be connected to the network during use of the content. The development of such a digital content store system would constitute a major technological advance.
Furthermore, it would be advantageous to provide a network-enabled digital content store system and an associated methodology which provides secure digital content and controlled usage of the secure digital content, wherein the digital rights management is provided within the client machine after the content is transferred to the client machine. The development of such a digital content store system would constitute a major technological advance.
The digital content store provides users with an opportunity to purchase authorized usage of digital content, such as single or multiple music tracks, video, movies, and/or video games. The users can also buy license to a desired track for a fixed number of times, e.g. preferably the users can listen on three different machines simultaneously. Users can also burn a play list of X number of times, for example ten. The burn limit preferably applies to the play list, not the song. Mixed media capability is provided that allows the purchase of digital content and/or physical media. The digital content store system comprises a unique digital rights management system and a back-end enabling system that controls these digital rights.
The store module 38 is typically associated with a selectable inventory of assets 304 (
A user USR at a client machine 16 can selectably purchase encrypted assets 18, through the entry of purchase information 34, whereby the encrypted assets 18 are delivered, such as through streaming 48 and/or downloading 50, which may comprise a download prompt 52 and download delivery 54, wherein the download delivery 54 comprises both asset delivery 174 (
In some system embodiments 12, the user USR may also purchase physical inventory of content 56, e.g. such as compact discs CDs and/or digital video disks DVDs, which are then shipped 58 to the intended user USR. Upon purchase 34, some system embodiments comprise both delivery of physical content 56, along with streaming 48 and/or downloading of encrypted digital content 18, whereby the intended user USR can quickly access content 18, such as songs, movies, games, or other content 18.
As seen in
The license information 20 comprises the asset rights 20 for the encrypted content 18, and comprises both an asset key 22 and usage rights 24, which are retained within a secure key locker 26. Playback of an encrypted asset 18 requires that the asset rights 20 are retrieved, i.e. extracted from the secure key locker 26, whereby the asset key 22 operates upon the asset 18, such as through decryption, decoding and/or rendering. The enabled asset is then played as desired by the user USR, in compliance with the usage rights 24. The asset key 22 is preferably bound to the client machine 16, such as through machine fingerprinting or in conjunction with the machine identification 21.
An authorized use of the encrypted asset 18 may comprise an authorized transfer 29 of the asset 18 to media or storage on a player 390 (
The client software 84 typically comprises a download module 92, a license download module 94, and may also comprise other functionality, such as stored user interface pages 90 and/or promotional links 88, e.g. for a digital content store 14.
The digital content player 86 typically comprises a secure digital content/music store (DMS) content handler 96, digital rights management (DRM) 98, AOL Comm 100, and secure AAC 102.
On the server side 14, promotional links and user account 38 typically comprises a user interface 103, download and order history 46, content download 104, license download 106, and license purchase 108. An encrypted content store 110 stores encrypted content 18, such as is available for purchase within the digital content store system 12. Other server storage comprises content metadata and usage rights 112, keys database 114, and a user database 116.
As seen in
The back office support system 108 shown in
As seen in
During playback, the digital content player playback engine 250 (
If the digital content player 86 detects that the key 22 is missing, or is not valid for the machine 16 in question, the digital content player 86 preferably first plays a sample of the song 18, e.g. such as a 30 second clip, and then the digital content player 86 presents the user USR with a purchase opportunity. If the user USR chooses to purchase 34, they are taken to the digital music store 14 to complete the process 34. The entire key mechanism is preferably seamless to the user experience.
The ticket 165 shown in
In some system applications, a browser 84 within the client machine 16 is used to send purchase information 166 and receive the ticket 165. For example, the browser 84 may be internet browser software 84, or proprietary client software 84, e.g. AOL CLIENT™ software 84, available through America Online Inc. (AOL), of Dulles, Va., which acts as an embedded browser 84, such as within INTERNET EXPLORER™, available through Microsoft, Inc., of Redmond, Wash.
At step 170 shown in
The download manager 162 requests 172 the asset 18 from the content fulfillment server 40, such as over an established http connection 173. The asset 18 is sent or streamed 174 down to the client 16, in response to the request 172. The download manager 162 also requests 176 a license 20 corresponding to the asset 18 from the fulfillment server 40, and sends 180 machine characteristics 21, e.g. machine identification, to the server 40. In preferred embodiments of the digital content store system 12, the machine identification comprises machine fingerprinting, available through AMToolkit™, by TryMedia Systems, Inc, of San Francisco, Calif.
In response to a proper license request 176, the fulfillment server 40 sends or streams 178 the license 20 to the client 16. The license 20 comprises both an asset key 22 and usage rights 24 for the asset 18. The request 176 for the license 20, the transmission 180 of machine characteristics 21 to the server 40, and the transmission 178 of the license 20 from the server 40, are preferably performed over a secure connection 181, e.g. https, established between the client machine 16 and the server 40. In some system embodiments, the secure session 181 comprises an authenticated session 181. In alternate system embodiments 12, the secure session 181 is initiated through a one-time, i.e. single use, ticket.
The download manager 162 binds the received license 20 to the client machine 16, and stores the asset key 22 in the secure key locker 26 (
The download manager 162 also sends an acknowledgement 182 to the content fulfillment server 40, wherein the acknowledgement 182 comprises the receipt of the asset 18 and the license 20.
In some system embodiments, the download manager 162 comprises a portion of digital content player software 86, e.g. such as a subset of AOL MediaPlayer 244 (
As seen in
The input module 205 is preferably tamper resistant, such as provided by SAFEWRAP™, and provides encryption of asset keys 22, and encryption of usage rights 24.
The output module 211 is also preferably tamper resistant, and performs decryption of usage rights 24, determination of sufficient usage rights for assets 18, decryption of asset keys 22, and upon a proper request, decryption of encrypted assets 18 with the associated asset key 22. As well, if usage rights are to be affected by any action or use, the output module 211 follows the required steps for updating the asset rights into the secure key locker 26.
The asset rights module 207, which is preferably tamper resistant and uniquely linked to a client machine 16, such as through machine fingerprinting, provides a variety of secure functions, such as for downloading operations between the input module 205 and the secure key locker 26, or for playback or burn functions between the secure key locker 26 and the output module 211.
For example, the asset rights module 207 binds encrypted asset keys 22 to the client machine 16, combines machine-bound encrypted asset keys 22 and encrypted user rights 24 into asset rights, i.e. licenses 20, stores asset rights 20 within the secure key locker 26, retrieves the asset rights 20 as needed from the secure key locker 26, breaks asset rights 20 into asset keys 22 and usage rights 24, and unbinds asset keys as needed from the client machine 16.
As seen in
Upon encryption of the asset key 22 and usage rights 24, the input module 205 sends 208 the encrypted asset key 22 and encrypted usage rights 24 to the asset rights module 207, such as over a secure access channel 230. The asset rights module 207 binds 217 the encrypted asset key 22 to the client machine 16, combines the machine-bound encrypted asset key 22 and encrypted user rights 24 into machine bound asset rights 20, and stores 210 the machine-bound asset rights 20 within the secure key locker 26, typically over a secure access channel 230.
As seen in
The asset rights module 207 sends a request 216 a to the secure key locker 26, such as over a secure access channel 230, to get the machine-bound asset rights 234. In return, the machine-bound asset rights 234 which correspond to the encrypted asset 18 are sent 218 a from the secure key locker 26 to the asset rights module 207, preferably over a secure access channel 230. The asset rights module 207 breaks 219 the machine-bound asset rights 234 into the encrypted asset key 22 and encrypted usage rights 24, and sends 220 a the encrypted asset key 22 and encrypted usage rights 24 to the output module 211, preferably over a secure access channel 230.
The output module 211 decrypts the usage rights 24, and confirms that the playback 27 is allowed by the usage rights 24. If playback 27 is allowed, the output module decrypts the asset key 22 that is associated with the encrypted asset 18, and decrypts the encrypted asset 18 with the asset key, to serve 224 a the playback request 212 a.
If playback 27 is not allowed, the output module 211 typically prevents decryption and full playback 27 of the asset 18. In some preferred embodiments, the output module 211 may proceed to authorize the playback 27 of a portion or sample of the asset 18, which may be accompanied with a prompt or link to obtain asset rights 20 for the encrypted asset 18.
If usage rights are affected by playback, the output module 211 initiates the required steps to update asset rights 20 into the secure key locker 26. For example, the output module may update and encrypt the asset key 22 and usage rights 24, and send 222 a the encrypted updated asset key 22 and usage rights 24 to the asset rights module 207, preferably over a secure access channel 230. The asset rights module 207 binds 217 the encrypted updated asset key 22 to the client machine 16, combines the machine-bound encrypted updated asset key 22 and encrypted updated user rights 24 into machine bound updated asset rights 20, and stores 226 a the machine-bound updated asset rights 20 within the secure key locker 26, typically over a secure access channel 230.
As seen in
The asset rights module 207 sends a request 216 b to the secure key locker 26, such as over a secure access channel 230, to get the machine-bound asset rights 234. In return, the machine-bound asset rights 234 which correspond to the encrypted asset 18 are sent 218 b from the secure key locker 26 to the asset rights module 207, preferably over a secure access channel 230. The asset rights module 207 breaks 219 the machine-bound asset rights 234 into the encrypted asset key 22 and encrypted usage rights 24, and sends 220 b the encrypted asset key 22 and encrypted usage rights 24 to the output module 211, preferably over a secure access channel 230.
The output module 211 decrypts the usage rights 24, and determines if the burn 29 is allowed by the usage rights 24. If burn 29 is allowed, the output module 211 decrypts the asset key 22 that is associated with the encrypted asset 18, and decrypts the encrypted asset 18 with the asset key 22, to serve 224 b the burn request 212 b.
If the requested burn 29 is not allowed, the output module 211 typically prevents a burn of the asset 18. In some preferred embodiments, the output module 211 may proceed to authorize a playback 27 of a portion or sample of the asset 18, which may be accompanied with a prompt or link to obtain asset rights 20 for the encrypted asset 18.
If usage rights are affected by burn 29, the output module 211 initiates the required steps to update asset rights 20 into the secure key locker 26. For example, the output module may update and encrypt the asset key 22 and usage rights 24, and send 222 b the encrypted updated asset key 22 and usage rights 24 to the asset rights module 207, preferably over a secure access channel 230. The asset rights module 207 binds 217 the encrypted updated asset key 22 to the client machine 16, combines the machine-bound encrypted updated asset key 22 and encrypted updated user rights 24 into machine bound updated asset rights 20, and stores 226 a the machine-bound updated asset rights 234 within the secure key locker 26, typically over a secure access channel 230.
The digital content player core 244 is linked to the operation system and network 260, such as through ODBC/MDB 262 and/or through CD burning SDK 264. A playback engine 250 is also linked to the operation system and network 260, such as to provide functionality for MP3 266, nsv 268, Quicktime™ (QT) 270, secure AAC 272, and/or MC 274.
While some elements of the digital content player 86 are specific to operation within the digital content store system 12, other elements, such as the playback engine 250, are preferably shared by one or more music client products, e.g. such as for internet radio. As well, some elements may be provided through codec plugins.
The content acquisition and processing 118 comprises asset encoding and encryption 120. In some embodiments of the digital content store system 12, encryption of a received asset 304 comprises NSS encryption or 128-bit AES encryption, such as specified at http://csrc.nist.gov/CryptoToolkit/aes/. An associated asset key 22 is generated for the encrypted asset 18, such as by random generation, e.g. 128-bit random generation. While the asset key 22 is preferably unique to different encrypted assets 18, the same asset key 22 is preferably used, i.e. the key 22 is reused or shared, for content delivered to multiple users USR and/or recipients RCP, which simplifies digital music store operations and provides fast delivery of content 18.
The encrypted asset 18 file typically also comprises an ETK, DMS, or other file extension, wherein the file comprises an asset/file header, comprising header length, encryption cipher type, and asset metadata, along with the encrypted asset 18.
The content acquisition and processing module 118 uploads encrypted assets 18 to the download server 110, which acts as content storage 110 (
The combined intake, processing, and storage of encrypted assets 18 and associated asset rights 20 provides a secure means to make assets available for licensed purchase and subsequent use through the digital content store 14.
For example, a user who is interested in an item, e.g. a song 16, that is available from the digital content store 14 can enter purchase information 34 (
As well, usage of the content 18 may include the controlled specification of one or more machines 16 from which the purchased asset 18 may be associated. For example, while a user may purchase access to a song 18 from a desktop computer 16 a, the user may also desire to play the acquired song at a mobile computer 16 b, or at another alternate terminal 16, e.g. such as during travel. As well, a user may wish to burn a compact disk CD, such as for personal use or for a gift, either at a primary computer 16 having burn capabilities, or at an alternate terminal 16 that comprises burn capabilities.
The digital music store system 12 provides users USR with an opportunity to go to the content store 14 for single or multiple music tracks.
Different embodiments of the digital content store system 12 may comprise different usage rights 24 for an acquired asset 18, such as to allow a user to play and/or burn a song 18 or a playlist 340 a set number of times, e.g. unlimited playing 27 and ten burns 29, and/or to allow a user USR to play 27 and/or burn 29 a song 18 or playlist 340 on a set number of client machines 16, e.g. on three machines 16.
In the digital music store system 12, a burn limit may apply either to each song 18 individually, or may apply to a playlist 340, which comprises one or more songs 18, as specified by a user USR, to be burned 29 or loaded 31.
The digital music system 12 prevents unauthorized use 27, 29, 31 of encrypted assets 18 from client machines 16 which do not have proper authorization. For example,
Some embodiments of the digital content store system 12 provide mixed media capability, wherein digital assets 18 and/or physical media 57 may be purchased within the same content store 14. For example, as seen in
As well, in some embodiments of the digital music store system 12, a user USR who purchases physical media 56 may additionally be provided with the ability to stream or download any or all of the album comprised of encrypted assets 18. A user USR can then quickly access and use desired content 18, as specified within associated asset rights 20, while waiting for the physical media 56 to be delivered. The digital rights 20 are controlled by the digital rights management system and a back-end enabling system associated with the digital content store 14.
The digital content store system 12 and associated methods provide significant advantages over existing content sales and delivery systems. The versatility of the digital content store system 12 readily provides a key entry point for the purchase of content assets 18, such as but not limited to music, video, game, and/or software commerce. For example, in a digital content store system 12 implemented as a digital music store system 12, users USR can search and browse a catalog of downloadable music, such as integrated with a physical goods store 57, providing a physical inventory of music and/or movies.
Furthermore, some embodiments of the digital content store system 12 allow streaming or download of music and/or video programming, such as to provide internet enabled broadcasting of content, whereby a user USR can readily access and purchase desired content, such as if the listener user likes a song or artist which is played through the digital content player 86.
The digital content store system 12 provides transparent rights management and commerce-enabled sharing of assets 18. For example, when a user consumes, buys, or shares media, the digital content store system 12 intelligently manages the rights to the media. When a user USR shares and asset 18, the digital content store system 12 preferably enables either the sharer user USR or sharee recipient RCP to purchase rights to the media 18.
The digital content store system 12 provides a facility through which a user USR can readily browse and purchase usage rights 34 for secure digital assets 18, and prevents casual users from “stealing” assets.
The digital content store system 12 also provides controlled defined usage, such as to provide basic “counters based” digital rights management, as currently required by labels 124, such as to provide a limited number of burns, as specified by standard Redbook Audio™ standards, or to provide user ownership on a specified number of machines, e.g. three machines 16.
As well, the digital content store system 12 is readily flexible to meet the needs of future digital rights management standards, since there is minimal impact on code, or on purchased assets.
In the digital content store system 12, each raw asset 306 is typically pre-encrypted with a unique, symmetric asset key 22, wherein the asset can only be played using this associated asset key 22. When a user USR purchases an encrypted asset 18, the asset key 22 and usage rights 24 are seamlessly downloaded 54. A license 20, comprising both the usage rights 24 and asset key 22, are preferably downloaded over a secure client/server channel, e.g. such as though SSL.
The user's order and download history 46 are stored on the server, and the user's machine ID (GUID) 21 is stored on the server, as part of the download history 46. The license 20 is bound to the machine 16, such as through “machine fingerprinting”, and is stored in the secure key locker 26. As well, client modules that use the licenses 20 and assets 18 are preferably protected using tamper-resistance, e.g. such as provided by SAFEWRAP™, by Macrovision, Inc.
The digital content store system 12 provides a significant music distribution channel, via digital downloads in a secure format. Copy-protection within the digital content store system 12 is a secure yet simple solution. The digital content store system 12 prevents illegal copying of individual songs from one machine 16 to another, while providing legitimate customers with the ability to use their songs 18 in a reasonable manner. As well, the digital content store system 12 enables simple rights management concerning CD burning.
Although the digital content store system 12 has an understanding of rights management, the system 12 is easy to deploy, and is transparent to the end user. For example, assets 306 are preferably protected using symmetric-key encryption. Once protected, the encrypted assets 18 is safe from all but the most sophisticated attackers, and encrypted assets 18 can be moved around at will by customers. Without the associated asset key 22 for an encrypted asset 18, however, the encrypted asset 18 cannot be played. An asset key 22 is bound to usage rights 24 at the moment of purchase 34, to create a license 20, and valid licenses 20 are only issued by the content store 14. Thus, only customers USR who have purchased valid licenses 20 through the store are able to play back 27 the encrypted asset 18.
In order to prevent users from being able to move licenses around, each license 20 is bound to a specific machine 16 at the time the license 10 is issued, which prevents users from transferring licenses 20. Machine fingerprinting is preferably used to bind the license 20 to the machine 20, and then the license 20 is stored in a secure key locker 26. Usage information, e.g. like the burn count, is also stored in the secure key locker 26. As well, the download module 205, the playback module 211, and the usage rights module 207 are preferably tamper-resistant, such as provided by SAFEWRAP™, by Macrovision, Inc., to deter reverse-engineering.
In preferred embodiments of the digital content store system 12, content assets 304 are protected by symmetric-key encryption using a secret asset key 22. Each separate asset 304 is protected with a unique asset key 22, but every copy of that asset uses the same asset key 22. Thus, two purchasers USR purchasing the same song 304 receive identically protected assets 18 and identical keys 22. During the content intake process 300 (
Once encrypted, these assets 18 are well protected, since without the key 22, AES encryption is very difficult to crack. The digital music store system 12 is designed with knowledge that users commonly try to move and/or distribute content 304, 18. Since encrypted assets 18 can not be played back without an associated key 22, encrypted assets 18 provide no value for unauthorized use or distribution.
Asset keys 22 can only be obtained through the digital music store 14. Once users have purchased a song, they can download the key on up to N machines, where N is configurable. At present, the default value is three machines. Users USR can also preferably download as many times as they want to the same N machines, in case they accidentally delete the file or their hard drive crashes. Once the user has reached their maximum number of allowed machines, the store does not issue new keys 22, unless the user purchases more licenses 20.
When a customer purchases an asset 18, that purchase is associated with a predetermined set of usage rights 24, which are combined with the asset key 22 to form a license 20. In some embodiments of the digital music store system 12, usage rights 24 only comprise limits on the number of times a user USR can burn a particular asset to CD. Once on the client machine 16, licenses 20 are bound to the machine 16, such as by machine fingerprinting. Both the licenses and the meter counts (for CD burning) are stored in the secure key locker 26.
Burning 29 is currently less secure that playing 27, because burning requires that the digital content player 86 write out the asset as an unprotected .wav file, which is currently a limitation of CD burning libraries. Since the burning process 29 necessarily exposes the content in standard Redbook™ CD audio format, there is currently no available alternative. After the burning is considered successful, the burn count stored in the secure key locker 26 is updated to reflect the new count.
Some embodiments of the digital content store system 12 provide a variety of optional benefits for users USR and/or recipients RCPs. For example, the system 12 may preferably provide a free burn count to a complaining user for list of his purchased assets. In such an embodiment, a user USR is typically directed to download this additional burn usage right to the machine 16, such as during the next burn attempt of content 18. As well, the system 12 may preferably provide an additional machine count to a complaining user, such as in exchange for a list of purchased assets 18. Furthermore, customer can buy additional “licenses” for the same song 18, to extend usage on more machine 16 or players 400. In addition, the system 12 may be readily adapted to provide the same or different usage rights to multiple users USR on a single machine 16. In some system embodiments 12, a customer care server at the digital store 14 preferably allows the user to view download history, whereby user USR provides machine ID 21 to view a download history on a specific machine 16.
Although the digital content store system and methods of use are described herein primarily in connection with the secure purchase, delivery and playback of music, i.e. songs and/or albums, the apparatus and techniques can be implemented for a wide variety of digital content, such as a wide variety of audio content, e.g. songs, dialog, discussion, video content, multimedia content, game or video game content, art content, or any combination thereof, as desired.
Although the digital content store system and methods of use are described herein in connection with personal computers, mobile devices, and other microprocessor-based devices, such as portable digital assistants or network enabled cell phones, the apparatus and techniques can be implemented for a wide variety of electronic devices and systems, or any combination thereof, as desired.
As well, while the digital content store system and methods of use are described herein in connection with interaction between a client machine and one or more digital content stores across a network, such as the Internet, the digital content store system and methods of use can be implemented for a wide variety of electronic devices and networks or any combination thereof, as desired.
Accordingly, although the invention has been described in detail with reference to a particular preferred embodiment, persons possessing ordinary skill in the art to which this invention pertains will appreciate that various modifications and enhancements may be made without departing from the spirit and scope of the claims that follow.
|Cited Patent||Filing date||Publication date||Applicant||Title|
|US6385596 *||Feb 6, 1998||May 7, 2002||Liquid Audio, Inc.||Secure online music distribution system|
|US6772340 *||Mar 15, 2000||Aug 3, 2004||Microsoft Corporation||Digital rights management system operating on computing device and having black box tied to computing device|
|US20030069904 *||Oct 9, 2001||Apr 10, 2003||Hsu Michael M.||Secure ticketing|
|US20030182471 *||Jun 27, 2002||Sep 25, 2003||Geoffrey Harris||Methods and systems for burning compact discs|
|US20030200202 *||Apr 23, 2002||Oct 23, 2003||International Business Machines Corporation||Content management system and methodology employing non-transferable access tokens to control data access|
|Citing Patent||Filing date||Publication date||Applicant||Title|
|US7797064||Oct 16, 2003||Sep 14, 2010||Stephen Loomis||Apparatus and method for skipping songs without delay|
|US7912920||Oct 16, 2003||Mar 22, 2011||Stephen Loomis||Stream sourcing content delivery system|
|US7937488||Aug 11, 2008||May 3, 2011||Tarquin Consulting Co., Llc||Multimedia scheduler|
|US8627500||Dec 31, 2010||Jan 7, 2014||Redigi, Inc.||Methods and apparatus for sharing, transferring and removing previously owned digital media|
|US8707450 *||Aug 3, 2012||Apr 22, 2014||Intel Corporation||Digital rights management (DRM) locker|
|US8966651||Mar 11, 2014||Feb 24, 2015||Intel Corporation||Digital rights management (DRM) locker|
|US9021608 *||Feb 27, 2012||Apr 28, 2015||Redigi, Inc.||Methods and apparatus for sharing, transferring and removing previously owned digital media|
|US9069444||Sep 24, 2012||Jun 30, 2015||Andrew S Hansen||Methods for synchronizing large files with a cloud network|
|US20040138948 *||Oct 16, 2003||Jul 15, 2004||Stephen Loomis||Apparatus and method for skipping songs without delay|
|US20120047228 *||May 7, 2009||Feb 23, 2012||Shady Hassan Sayed Hassan Aly||Method for delivering tag based services|
|US20130031643 *||Feb 27, 2012||Jan 31, 2013||Redigi, Inc.||Methods and Apparatus for Sharing, Transferring and Removing Previously Owned Digital Media|
|WO2012116365A1 *||Feb 27, 2012||Aug 30, 2012||Redigi, Inc.||Methods and apparatus for sharing, transferring and removing previously owned digital media|
|U.S. Classification||713/181, 726/29|
|International Classification||H04L9/32, G06F21/00|
|Cooperative Classification||G06Q30/0601, G11B20/00369, G06F21/10|
|Mar 23, 2009||AS||Assignment|
Owner name: AOL LLC,VIRGINIA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:VEROSUB, ELLIS;TENNETI, SANJEEV;ACHARYA, KAMAL;AND OTHERS;SIGNING DATES FROM 20031209 TO 20040724;REEL/FRAME:022436/0432
|Oct 15, 2009||AS||Assignment|
Owner name: TARQUIN CONSULTING CO., LLC,DELAWARE
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:AOL LLC;REEL/FRAME:023379/0103
Effective date: 20090917
|Oct 20, 2009||AS||Assignment|
Owner name: AMERICA ONLINE, INC., VIRGINIA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:VEROSUB, ELLIS;TENNETI, SANJEEV;ACHARYA, KAMAL;AND OTHERS;REEL/FRAME:023399/0001;SIGNING DATES FROM 20031209 TO 20040724
Owner name: AMERICA ONLINE, INC.,VIRGINIA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:VEROSUB, ELLIS;TENNETI, SANJEEV;ACHARYA, KAMAL;AND OTHERS;SIGNING DATES FROM 20031209 TO 20040724;REEL/FRAME:023399/0001
Owner name: AOL LLC,VIRGINIA
Free format text: CONVERSION TO LIMITED LIABILITY COMPANY;ASSIGNOR:AMERICA ONLINE, INC.;REEL/FRAME:023399/0060
Effective date: 20060403