US20080148069A1 - Transferring electronic content - Google Patents

Abstract

A method and apparatus for transferring electronic content. The method and apparatus include providing electronic content to a first user, providing the first user with a key packet, the key packet including a decryption key and content rights information, transferring the electronic content and the key packet from the first user to a second user and rendering rights of the first user to the electronic content unusable upon transfer of the electronic content and the key packet from the first user to the second user.

Description

RELATED APPLICATION INFORMATION
• The present application is continuation of U.S. patent application Ser. No. 10/399,747, which is a filing under 35 USC §371 of PCT/IL01/00631, filed on 10 Jul. 2001, which claims priority from Israel Patent Application No. 139251, filed 24 Oct. 2000, and from U.S. Provisional Patent Application Ser. No. 60/274,998, filed 12 Mar. 2001.
FIELD OF THE INVENTION
• The present invention relates generally to methods for transferring electronic content received from an electronic delivery source, from one user to another user or back to the source.
BACKGROUND OF THE INVENTION
• Many kinds of electronic content are delivered over the Internet, such as articles, catalog pages, electronic books, music, etc. For example, VERSAWARE.COM provides consumers with electronic library capability, wherein the consumer can store data culled from reference books, encyclopedias, almanacs and the like. Many systems require the consumer to purchase the content or at least pay for use of the content. In such cases, downloading of the content is usually secured by an encrypted link.
• When a consumer buys a tangible item, for example, a book or souvenir from a store, the consumer can transfer the item to another consumer, such as by selling, lending or renting the item. However, when a consumer purchases or pays for the use of electronic content, many kinds of electronic delivery systems prevent the consumer from transferring the content to another.
• The following example is a classic case in point. A university student typically purchases text books at the beginning of a semester, and resells the books, either back to the store or to another student, usually at a lower price. If the student drops out of the course for some reason, is perhaps dissatisfied with the particular book, or has never even read the book, he/she can usually return the book to the store. However, the situation is different in the event that a student downloads an electronic book from the web. First, as mentioned above, the electronic delivery system generally prevents the student from transferring the content to another person. Second, even if the student did not read or use the electronic content, it is not generally possible to return the content to the provider and receive one's money back.
• Systems are known in the prior art for protecting against unauthorized distribution of documents that were received by a consumer from an electronic content provider. European Patent EP 999488, assigned to XEROX Corporation, describes a system for creating a self-protected document, and which prevents users from obtaining a useful form of an electronically distributed document during the decryption and rendering processes. The system has a polarization key which is used by a polarizer to transform the document to a version having polarized contents. The polarization key represents a combination of data elements taken from the user system's internal state, such as the date and time of day, elapsed time since the last keystroke, the processor's speed and serial number, and any other information that can be repeatably derived from the user system. Time-derived information may also be included in the polarization key so that interception and seizure of the polarized contents is rendered useless.
• Published PCT patent application WO 00/08909, assigned to IBM Corporation, describes a secure digital content distribution system that decrypts a decryption key from an encrypted decrypting key. The decrypted decrypting key is transferred to another system. The secure digital content distribution system is capable of communicating with another system which is capable of receiving data encrypted with the encryption key and the encrypted encryption key. The system enables making digital content available to a wide range of users and businesses while ensuring protection and metering of digital assets. The system includes rights management to allow secure delivery, licensing, authorization, and control of the usage of digital assets. The system provides retailers of electronic content a way to differentiate themselves from each other and the content owners when selling music through electronic distribution.
• In the WO 00/08909 system, a clearinghouse is maintained by the system for the management of the electronic content (see pages 52-53 of WO 00/08909, entitled “A. Overview”). Content rights may be transferred by electronic digital content stores, content providers or by authorized end-user devices. However, every transfer of rights, even from one authorized end-user device to another, must always be authorized by and transacted through the clearinghouse. It is not possible for an authorized end-user device to transfer content rights independently of the clearinghouse.
SUMMARY OF THE INVENTION
• The present invention seeks to provide novel methods for transferring electronic content received from an electronic delivery source, from one user to another user or back to the source, without having to enact the transaction via a clearinghouse or other central authority. The present invention uniquely enables electronic content transfer from one user by means of “chaining”.
• The term “chaining”, as used in the present specification and claims, refers to transferring the electronic content plus a packet of information, herein referred to as a key packet, from a first user entity to a second user entity. The key packet includes, for example and inter alia, one or more encrypted keys, preferably comprising one or more decryption keys encrypted according to at least one appropriate key encryption key, and content rights information. The key packet is preferably transferred from a first user entity to a second user entity, wherein the first user entity's rights to the content and key packet information are rendered unusable upon creation of a new key packet and its transfer to the second user entity.
• As is well known in the art of encryption and decryption, keys which are used primarily to encrypt other keys are known as “key encryption keys”. Throughout the present specification and claims, keys which are used primarily to encrypt other keys, even if used also for other purposes, will be referred to as “key encryption keys”.
• In a preferred embodiment of the present invention, the first user entity can repeatedly send the key packet or packets, so that in a case of communication failure, the second user entity can request the key packets again. In general, after transfer of the newly encrypted content and key packet, the first user entity deletes its now unusable key packet or content. In one preferred embodiment of the present invention, the method does not require irrevocable proof that the second user entity has received the content, nor does it require subsequent deletion of the content or key packets; in other preferred embodiments, irrevocable proof and/or subsequent deletion may be required.
• The communication line from the first user entity to the second user entity does not need to be secure. Instead, the present invention preferably uses a security device, most preferably a smart card, to secure the transfer of the content and key packet from the first user entity to the second user entity. The communication between the two users is secured by using a key derived for that communication session from a secure protocol to encrypt the data such that it can neither be forged nor intercepted by a third party.
• There is thus provided in accordance with a preferred embodiment of the present invention a method for transferring electronic content, including providing electronic content to a first user, providing the first user with a key packet, the key packet including a decryption key and content rights information, transferring the electronic content and the key packet from the first user to a second user, and rendering rights of the first user to the electronic content unusable upon transfer of the electronic content and the key packet from the first user to the second user. The electronic content may be provided to the first user from a content provider or from a previous user.
• In accordance with a preferred embodiment of the present invention the method further includes rendering rights of the first user to the key packet unusable upon transfer of the electronic content and the key packet from the first user to the second user.
• Further in accordance with a preferred embodiment of the present invention the electronic content and the key packet are stored in a first content reader and the step of transferring includes transferring the electronic content and the key packet from the first content reader to a second content reader.
• Still further in accordance with a preferred embodiment of the present invention a security device is used to secure communication between the first and second content readers.
• In accordance with a preferred embodiment of the present invention the security device includes a first smart card associated with the first content reader which communicates with a second smart card associated with the second content reader.
• Further in accordance with a preferred embodiment of the present invention the step of rendering includes using the first smart card to mark the electronic content and key packet as being unfit for use by the first content reader.
• Still further in accordance with a preferred embodiment of the present invention the first and second smart cards carry out a mutual authentication process so as to establish a secure session between the first and second content readers.
• Additionally in accordance with a preferred embodiment of the present invention the mutual authentication process includes a mutual zero-knowledge interaction authentication process.
• In accordance with a preferred embodiment of the present invention the method further includes sending a key encryption key from the second user to the first user, and creating a new key packet for the second user, the new key packet including a content decryption key at least partially encrypted with the key encryption key, and wherein the step of transferring includes transferring the new key packet to the second user.
• In a preferred embodiment of the present invention, the content is sent without re-encryption: the same content decryption key is used by the second user as was used by the first user; the same content decryption key has been delivered to the second user encrypted with that second user's key encryption key.
• Further in accordance with a preferred embodiment of the present invention the method includes re-encrypting the content using the second user's content encryption key. The second user's content encryption key may or may not be the same as the first user's content encryption key. The encryption may take place either within the smart card or within the first content reader.
• Further in accordance with a preferred embodiment of the present invention the method includes using the second smart card to send an encryption key from the second user to the first user, and using the first smart card to create a new key packet for the second user, the new key packet including the electronic content and previous key packet at least partially encrypted with the encryption key, and wherein the step of transferring includes transferring the new key packet to the second user.
• Still further in accordance with a preferred embodiment of the present invention the second smart card delivers a transfer request message to the first smart card prior to transferring the new key packet.
• Additionally in accordance with a preferred embodiment of the present invention the step of sending an encryption key is performed during a mutual authentication process between the first and second smart cards.
• In accordance with a preferred embodiment of the present invention the method further includes sending a unique user ID during a mutual authentication process between the first and second smart cards.
• Further in accordance with a preferred embodiment of the present invention the encryption key is sent with the transfer request message.
• Still further in accordance with a preferred embodiment of the present invention the transfer request message includes a unique identification of the electronic content.
• Additionally in accordance with a preferred embodiment of the present invention the transfer request message includes an e-cash transfer in a mutually-agreed-upon amount.
• In accordance with a preferred embodiment of the present invention the transfer request message includes a unique user ID.
• Further in accordance with a preferred embodiment of the present invention if the second content reader sends a confirmation of receipt to the first content reader, the first content reader deletes the now-unusable key packet.
• Still further in accordance with a preferred embodiment of the present invention if the second content reader sends a confirmation of receipt to the first content reader, the first content reader deletes the electronic content.
• In accordance with a preferred embodiment of the present invention if the second content reader sends a confirmation of receipt to the first content reader, the first content reader deletes the new electronic content, encrypted according to the second user's content encryption key, and/or and the new key packet. Alternatively, it is appreciated that the first content reader need not store the new electronic content, but may merely re-encrypt “on-the-fly” during transmission to the second content reader. Further alternatively, as also described herein, it is appreciated that re-encryption of the electronic content may be optional.
• Further in accordance with a preferred embodiment of the present invention if a predetermined period of time has elapsed, the first content reader deletes the new electronic content and the new key packet.
• Additionally in accordance with a preferred embodiment of the present invention if the second content reader requests the new key packet again from the first content reader, the first content reader resends the new key packet.
• In accordance with a preferred embodiment of the present invention the second user is the content provider. Alternatively, the first user is the content provider.
• Further in accordance with a preferred embodiment of the present invention the key packet is divided into a main packet and at least one dependent packet.
• Still further in accordance with a preferred embodiment of the present invention information is stored as to whether the at least one dependent packet was accessed by the first user. A refund may be provided if the at least one dependent packet was not accessed by the first user.
BRIEF DESCRIPTION OF THE DRAWINGS
• The present invention will be understood and appreciated more fully from the following detailed description, taken in conjunction with the drawings in which:
• FIG. 1 is a simplified block diagram of a method for transferring electronic content, in accordance with a preferred embodiment of the present invention; and
• FIG. 2 is a simplified flow chart of the method for transferring electronic content, in accordance with a preferred embodiment of the present invention.
DETAILED DESCRIPTION OF A PREFERRED EMBODIMENT
• Reference is now made toFIG. 1 which illustrates a method for transferring electronic content, in accordance with a preferred embodiment of the present invention.
• Asource5 ofelectronic content10, also referred to as acontent provider5, preferably deliverselectronic content10 plus a “key packet”12 to afirst content reader14 of a first user. It is appreciated that thesource5 may, in an alternative preferred embodiment of the present invention, be associated with the first user and further may be comprised in or operatively associated with thefirst content reader14; in the alternative preferred embodiment, the first user is thus identified with thecontent provider5.
• Theelectronic content10 may be any material transferred as digital data, such as MP3 music, digitally recorded video, electronic book files, electronic files of unpublished patent applications, and the like. Thekey packet12 is defined as a personal packet for the purpose of delivering one ormore decryption keys16 related to theelectronic content10, to one and only one user. Eachdecryption key16 is preferably encrypted using a subscriber'skey encryption key18, such as a public key which has been issued by akey authority20 to the first user. It is appreciated that, in order to produce thekey packet12 in a case where at least one of thedecryption keys16 is encrypted with the subscriber'skey encryption key18, thekey authority20 must also supply thekey encryption key18 to thecontent provider5 or to another source (not shown) of thekey packet12; alternatively, it is well known in the art for public keys to be available such as, for example, from a public key server or directly from the owner of the public key. Appropriate key handling protocols for carrying out such transfers of thekey encryption key18 are well known in the art.
• Thekey packet12 preferably includes the encrypted decryption key16,content rights information22 and otheroptional metadata24. Thekey packet12 may be divided into a main packet and one or moredependent packets26. For example, there may be one main packet for the title of theelectronic content10, plusdependent packets26 for each segment or chapter. Thedecryption key16 for the title is preferably used to decrypt the segment keys. Alternatively, the dependent packets may, for example, be encrypted with thekey encryption key18. It will be appreciated by persons skilled in the art that other alternatives are possible.
• Thefirst content reader14 preferably comprises any appropriate electronic device capable of reading the inputtedelectronic content10 andkey packet12, and providing a digital output to asecond content reader28. It is believed that, in a preferred embodiment of the present invention, the connection between thecontent readers14 and28 does not need to be secure. Rather, in a preferred embodiment of the present invention, security devices, most preferably a firstsmart card30 and a secondsmart card32, are used to secure the transfer of thecontent10 and thekey packet12 from thefirst content reader14 to thesecond content reader28. Accordingly,smart card readers15 and29 are provided which are in electrical communication with first andsecond content readers14 and28, and are preferably housed together with first andsecond content readers14 and28.
• As is well known in the art, the firstsmart card30 and the secondsmart card32 are preferably designed and programmed to carry out only operations which are authorized, such as, for example, operations which are authorized by a content owner. Thus, the firstsmart card30 and the secondsmart card32 are, at least to some extent, trusted devices which may be trusted to carry out their assigned operations and which may not usually be arbitrarily forced to carry out unauthorized operations by a user of the system ofFIG. 1.
• Reference is now made toFIG. 2 which illustrates in flow chart form a preferred method of the present invention. A first user acquires theelectronic content10 andkey packets12 from thesource5. Thecontent10 andkey packet12 are stored byfirst content reader14. The first user wishes to transfercontent10 to a second user for a price mutually agreed upon or upon any other appropriate terms. The second user can be another “end user”, such as in a transaction between fellow students at a university. Alternatively, the second user can be thecontent provider5 itself, such as in the case of returning unused or unread content back to the provider.First content reader14 is preferably in electrical communication (wired or wireless) withsecond content reader28 for the purpose of the transfer of information.
• Smart cards30 and32 are respectively inserted insmart card readers15 and29.Smart card30 preferably carries out a mutual authentication process withsmart card32, such as the so-called Fiat-Shamir mutual zero-knowledge interaction authentication methods taught in U.S. Pat. Nos. 4,748,668 to Shamir and Fiat, and 4,933,970 to Shamir, the disclosures of which are incorporated herein by reference.Smart cards30 and32 preferably establish a secure session between first andsecond content readers14 and28 using any standard or proprietary session protocol.
• Smart card32 preferably delivers a transfer request message tosmart card30. The message preferably includes unique identification of theelectronic content10 and an e-cash transfer in a mutually-agreed-upon amount. A unique user ID36 and a new key encryption key38 of the second user (such as a public key which has been issued by a key authority to the second user, for example) are preferably transferred as part of the authentication protocol or secure session establishment betweensmart card30 and32. Alternatively, the ID36 and key38 may be included in the transfer request message.
• It is noted that technology for transferring information from one smart card to another is well known and described, for example, in UK Patent 2311451, assigned to the present assignee/applicant, the disclosure of which is incorporated herein by reference. It is noted, however, that UK Patent 2311451 does not deal with chaining as defined hereinabove, rather with using one smart card to deactivate or activate another smart card.
• First content reader14 preferably creates a new key packet40 and optionally, but not necessarily, a new electronic content41 forsecond content reader28 based upon a new key encryption key38 of the second user. It is believed to be sufficient, in a preferred embodiment of the present invention, that the content key has now been re-encrypted with the new key encryption key38, in the new key packet40, such that the new electronic content41 would be preferably identical to theelectronic content10.
• The new key packet40 preferably includes the same information as thekey packet12, including encrypted key16 as noted above, comprising the original key16 re-encrypted for the second user with the second user's key encryption key, the new key encryption key38.
• In an alternative preferred embodiment, in which the content is to be re-encrypted, a different key may be used, either a single key for content-re-encryption and for key encryption, or different keys for content-re-encryption and for key encryption. Performing content re-encryption is believed to be more secure but may require more hardware to perform encryption of content. Alternatively, primary encryption using the original content provider's key and secondary local encryption of a simple type could be performed. In the alternative preferred embodiment of the present invention, where new electronic content41 is re-encrypted such as, for example, with the new key encryption key38 (here used not only to encrypt a key but also to encrypt content), such encryption preferably takes place “on the fly”, without storing the new electronic content41 in thefirst content reader14.
• It is appreciated that various methods of re-encryption will occur to persons skilled in the art, and that any appropriate re-encryption method may be used.
• The new key packet also preferably includescontent rights information22 and otheroptional metadata24, now encrypted according to the new key encryption key38.
• It is noted that all of thekey packet12 may be encrypted according to the new key encryption key38, or alternatively, only a portion thereof, such as the decryption keys for some of thedependent packets26, may be so encrypted, while other decryption keys remain encrypted with key(s)16.Smart card30 also preferably markselectronic content10 andkey packet12 as being unfit for use, i.e., undecodable or inaccessible, byfirst content reader14.
• First content reader14 then transfers new key packet40 and newly encrypted electronic content41 tosecond content reader28. Ifsecond content reader28 sends a confirmation of receipt,first content reader14 preferably deletes the now-unusablekey packet12 and may optionally delete theelectronic content10. However, it is noted that the method does not require irrevocable proof thatsecond content reader28 has received thecontent10 and subsequent deletion ofcontent10 orkey packet12 byfirst content reader14.First content reader14 can repeatedly send new key packets and content to thesecond content reader28, so that in a case of communication failure,second content reader28 may request the key packets and content again.
• The electronic content41 and key packet40 can be transferred from the second user to a third user, ad infinitum, in the same manner as theelectronic content10 andkey packet12 were transferred from the first user to the second user, as described hereinabove. In such a case, it is preferable that thefirst content reader14 be incapable of repeatedly sending new key packets and content tosecond content reader28. Instead, ifsecond content reader28 sends a confirmation of receipt or if a predetermined period of time has elapsed,first content reader14 preferably deletes new key packet40 and electronic content41, thereby renderingfirst content reader14 incapable of sending new key packets and content to the second user without repeating the entire process of the sate, in the case where the first user is entitled according to the content rights to sell it more than once.
• As similarly described hereinabove, secondsmart card32 preferably deletes its key packets and electronic content after sending them to the third user. This provides important added security to the method of the invention, in the event that firstsmart card30 is “hacked” but secondsmart card32 remains secure.
• The term “hacked” in its various grammatical forms, as is well known in the art, refers to a case where an unscrupulous person causes a smart card or other secure device to behave in other than its intended manner, so that the hacked smart card can no longer be trusted to carry out its assigned operations and may now be arbitrarily forced to carry out unauthorized operations.
• The basic method of the present invention, as shown, for example, in the preferred method ofFIG. 2, can be varied to suit a particular user or application. For example, roll back of the transaction between thecontent readers14 and28 may be supported by repeating the transfer in the opposite direction. In another feature, the rights contained in the new key packet40 may limit the price at which thecontent10 may be transferred to less than the price paid by the first user. In yet another feature, thecontent10 may be transferred along with additional material created by the first user at a price higher than the original content. As described above, the first user may or may not be limited in having the right to sell it to more than one “second” user.
• The methods of the present invention thus enable transferring electronic content without having to enact the transaction via a clearinghouse or other central authority. It is clear from the foregoing description, that the second user does not need to be another “end user”, rather the second user can be thecontent provider5 itself In such a case, in contrast to the prior art, if the first user did not read or use theelectronic content10, the first user can indeed return thecontent10 to thecontent provider5 and receive his/her money back. (In the above described embodiment, this can be accomplished by storing insmart card30 information as to which of thedependent packets26 were accessed.) Alternatively, instead of paying back money, thecontent provider5 can transfer tokens to the first user (e.g., bookstore coupons). In a case where the second user is thecontent provider5 itself and the content is being “returned”, it is appreciated that theelectronic content10 itself need not actually be sent back to thecontent provider5, as long as theelectronic content10 has been marked as inaccessible and/or deleted as described above.
• It will be appreciated by persons skilled in the art that the present invention is not limited by what has been particularly shown and described hereinabove. Rather the scope of the present invention includes both combinations and subcombinations of the features described hereinabove as well as modifications and variations thereof which would occur to a person of skill in the art upon reading the foregoing description and which are not in the prior art.

Claims (15)

1-34. (canceled)

35: A method for transferring electronic content, comprising:

providing encrypted electronic content to a first user;

providing said first user with a key packet, said key packet comprising: a decryption key for decrypting said encrypted electronic content; and

content rights information;

re-encrypting said electronic content, thereby producing re-encrypted electronic content;

producing a second user key packet comprising: a second user decryption key for decrypting said re-encrypted electronic content; and second user content rights information;

transferring said re-encrypted electronic content and said second user key packet from said first user to a second user; and

rendering rights of said first user to said electronic content unusable upon transfer of said re-encrypted electronic content and said second user key packet from said first user to said second user.

36: The method according toclaim 35 and wherein said re-encrypting comprises:

decrypting said electronic content using said decryption key; and

encrypting said electronic content to produce said re-encrypted electronic content.

37: The method according toclaim 35 and wherein said re-encrypting comprises performing secondary encryption.

38: The method according toclaim 35 and wherein said re-encrypting comprises re-encrypting “on-the-fly”.

39: The method according toclaim 35 and wherein said second user key packet is decryptable using a key encryption key.

40: A method for transferring electronic content, comprising:

providing encrypted electronic content to a first user;

providing the first user with a key packet, said key packet comprising: a decryption key for decrypting said encrypted electronic content; and content rights information;

the first user adding additional material to said electronic content, thereby producing extended electronic content;

transferring said extended electronic content and a second user key packet from the first user to a second user; and

rendering rights of the first user to said electronic content unusable upon transfer of said electronic content and said second user key packet from the first user to the second user.

41: The method according toclaim 40 and also comprising:

re-encrypting said extended electronic content, thereby producing re-encrypted extended electronic content; and

producing the second user key packet, the second user key packet comprising: a second user decryption key; and second user content rights information.

42: The method according toclaim 41 and wherein said re-encrypting comprises:

decrypting said encrypted electronic content using said decryption key; and

encrypting said extended electronic content to produce said re-encrypted extended electronic content.

43: The method according toclaim 41 and wherein said re-encrypting comprises performing secondary encryption.

44: The method according toclaim 41 and wherein said re-encrypting comprises re-encrypting “on-the-fly”.

45: The method according toclaim 41 and wherein said second user key packet is decryptable using a key encryption key.

46: The method according toclaim 40 and wherein said electronic content is associated with a first price payable by said first user and said extended electronic content is associated with a second price payable by said second user.

47: The method according toclaim 46 and wherein said second price is higher than said first price.

48: The method according toclaim 40 and wherein said second user key packet is divided into a main packet and at least one dependent packet.

Images