International Business Machines Corporation

Marco M Hurtado

Kenneth Louis Milsted

George Gregory Gruse

Kha D Nguyen

Richard L Spagna

Edgar S Downs

Jeffrey Bruce Lotspiech

Jose L Rivero

John J Cazzolla

Richard S Crouse

Luke L Chang

Jose J Ruiz

Louis Salcedo

James Christopher Mahlbacher

Paul R Rettig

Christopher T Lehman

Ting Zhao

Jonathan Paul Munson

Giovanni Pacifici

Stefan Nusser

David Medina

Glenn E Brew

Craig N Kindell

Glen E Hamblin

Cesar Medina

Alaa S You{grave Over (s)}sef

A method of managing keys is provided. According to one exemplary method, digital content data encrypted with a first encrypting key is decrypted using a first decrypting key, and re-encrypted using a second encrypting key. A second decrypting key is encrypted using a third encrypting key to produce an encrypted second decrypting key. In some embodiments, an encrypted first decrypting key that was encrypted using a fourth encrypting key is received, and the encrypted first decrypting key is decrypted using a fourth decrypting key to reproduce the first decrypting key. An application for use on a computer system is also provided.

Watermarking system that executes received watermarking instructions to embed a watermark

A system for providing persistent access control of protected content is disclosed. The method on a client system includes sending a first request for authentication of the client to a server system. Subsequently, the client is authenticated by the server. Next, a user on the client attempts to access a file comprising a trailer and content encrypted with an encrypting key. Then, a second request for access to the content is sent to the server by the client, wherein an identifier from the trailer is included in the second request. The identifier identifies the content or an access control policy of the content. The server determines that the second request is in accordance with an access control policy associated with the content, and grants access to the content. Lastly, the client accesses the content in accordance with the access control policy.

Persistent access control of protected content

Super distribution of protected digital content is disclosed. According to one embodiment of the invention previously purchased encrypted digital content is received from a purchaser of the digital content. The purchaser of the previously purchased encrypted digital content is different from the recipient of the encrypted digital content. A secure transmission is established with an authorization authority for decrypting the content. A first decryption key for decrypting at least part of the previously purchased encrypted content as permitted by the authorization authority is received from the authorization authority. The at least part of the previously purchased encrypted content is decrypted as permitted by the authorization authority.

Super-distribution of protected digital content

A method on an end user system for creating additional copies onto at least one computer readable medium such as CDs, DVDs, ZipDisks&#x2122;, tape, Flash memory, and RAM. The method comprising the steps of: receiving encrypted content with associated usage conditions and a first hash value; receiving a selection from an end user to create at least one copy of the encrypted content onto at least one computer readable medium; sending a request to an online electronic store of the encrypted content selected to be copied; receiving from the electronic store a description of the content selected to be copied along with a second hash value; and determining if the first hash value received is identical to the second hash value and if the first hash and the second hash value is identical authorizing the creating additional copies onto at least one computer readable medium.

Updating usage conditions in lieu of download digital rights management protected content

Briefly according to the present invention, a system, computer readable medium and method to deliver encrypted digital content to from a first system for playing the content to a second system for playing the content. The method on the first user system comprising the steps of: reading from a computer readable medium metadata which has previously been associated with the content; selecting from the metadata associated content to decrypt; establishing a secure connection with an authorization authority, such as a clearinghouse, for decrypting the key used to encrypt the content; receiving a secure container containing the decrypting key for decrypting at least part of the previously encrypted content as permitted; decrypting the content and then encrypting the content with a new encryption key that is generated locally on the end user system.

The present invention provides a system, computer program product and a method for overlapping boundary data of an audio information track which includes ending data from a previous track and starting data from a succeeding track. By doing this, the ending data from a previous track and the beginning data from a succeeding track are available for the compression process. The compression program then manipulates the additional appended data in order to generate the compressed audio. Later, by severing the overlapping appended additional information before recombining the tracks, the resulting No-Pause CD audio stream is free from distortion and mismatch.

Split and joint compressed audio with minimum mismatching and distortion

A method to delivery encrypted digital content to a end user system for playing the content comprising the steps of: reading from a computer readable medium metadata which has previously associated with the content. A user selects from the metadata associated content to decrypt and the end user system establishes a secure connection with an authorization authority for decrypting the content. The end user system receives a secure container containing the decrypting key for decrypting at least part of the previously encrypted content as permitted. The system creates a secure container using the encrypting key from a clearing house, wherein the secure container has an encrypting key therein from the end user system; transferring the secure container to the clearing house for authentication of permission to decrypt the content. The system receives from the clearing house, a secure container encrypted using the encrypting key of the end user system containing the decrypting key for decrypting at least part of the previously encrypted content stored on the computer readable medium as permitted; and playing at least part of the previously encrypted content by decrypting the secure container using the encrypting key of the end user system to access the decrypting key for decrypting at least part of the encrypted content.

Secure electronic content distribution on CDS and DVDs

A method of managing content data and associated metadata. According to the method, the content data and the associated metadata are generated. The content data is transferred to a content host, and the metadata and usage condition data for the associated content are transferred to an electronic store. The metadata and/or the usage condition data are altered in order to form promotional data, and the promotional data is transferred from the electronic store to a customer's system. In one preferred method, the content data is encrypted with a first encrypting key before being transferred to the content host. The first encrypting key is encrypted with a second encrypting key, and the encrypted first encrypting key is transferred along with the metadata and usage condition data to the electronic store. Additionally, the encrypted first encrypting key is transferred along with the promotional data to the customer's system.

Secure electronic content management system

A system for tracking usage of digital content on user devices. Electronic stores coupled to a network sell licenses to play digital content data to users. Content players, which receive from the network the licensed content data, are used to play the licensed content data. Additionally, a logging site that is coupled to the network tracks the playing of the content data. In particular, the logging site receives play information from the network, and the play information includes the number of times that the content data has been played by the associated content player. Also provided is a method for tracking usage of digital content on user devices. According to the method, a license to play digital content data is sold to a user, and the licensed content data is transmitted to a content player for the user. Further, information is transmitted to a logging site whenever the content data is played by the content player or copied from the content player to an external medium so that usage of the licensed content data can be tracked.

Multimedia player for an electronic content delivery system

A method of managing keys used by a digital content player on a computer system. According to the method, digital content data encrypted with a first encrypting key is decrypted using a first decrypting key, and re-encrypted using a second encrypting key. A second decrypting key is encrypted using a third encrypting key to produce an encrypted second decrypting key. In one preferred method, an encrypted first decrypting key that was encrypted using a fourth encrypting key is received, and the encrypted first decrypting key is decrypted using a fourth decrypting key to reproduce the first decrypting key. A digital content player for use on a computer system is also provided. The content player includes a decrypter that decrypts digital content data, which was encrypted with a first encrypting key, using a first decrypting key so as to produce the content data. An encrypter re-encrypts the content data using a second encrypting key and encrypts a second decrypting key using a third encrypting key. In one preferred content player, a receiver receives an encrypted first decrypting key that was encrypted using a fourth encrypting key, and the decrypter decrypts the encrypted first decrypting key using a fourth decrypting key to reproduce the first decrypting key.

Key management system for digital content player

Disclosed is a method and apparatus of securely providing data to a user's system. The data is encrypted so as to only be decryptable by a data decrypting key, the data decrypting key being encrypted using a first public key, and the encrypted data being accessible to the user's system, the method comprising the steps of: transferring the encrypted data decrypting key to a clearing house that possesses a first private key, which corresponds to the first public key; decrypting the data decrypting key using the first private key; re-encrypting the data decrypting key using a second public key; transferring the re-encrypted data decrypting key to the user's system, the user's system possessing a second private key, which corresponds to the second public key; and decrypting the re-encrypted data decrypting key using the second private key.

Electronic content delivery system

In a data communication network wherein broadcasted transmissions include a portion uniquely identifying the content of the following transmission and wherein transmissions are repeated at predetermined intervals, a communication unit for operating within the system includes a receiver, a processor, and memory for storing data and instructions for the processor. The receiver receives transmissions over the communication network. The communication unit receives a record command from a user that causes it to record the audio/video content being broadcasted during a subsequent transmission thereof. The memory includes space for storing the program that causes the communication unit to automatically record the transmission at the time the transmission is re-broadcasted.

Method and system for recording in-progress broadcast programs

A system and method is provided for dequeuing connection requests in a data communications system comprising a calling subsystem and a called subsystem connected by a serial simplex switch. The connection requests are made by the calling subsystem to the called subsystem by sending a connect request message to the switch and queuing the connect request message in a buffer therein. The switch establishes a connection between the calling subsystem and the called subsystem by thereafter queuing the connect request message in a buffer in the called subsystem. Concurrently, the switch sends a connect request acknowledge message to the calling subsystem while the calling subsystem sends a connect request dequeue message to the switch. To prevent loss of synchronization between the calling subsystem and the switch, the connect request dequeue message received by the switch is interpreted as a disconnect request message and the connect request acknowledge message received by the calling subsystem is interpreted as a connect request dequeue acknowledge message. The connect request dequeue message and the disconnect request message are identically serially encoded, as are the connect request acknowledge message and the connect request dequeue acknowledge message, to enable such interpretation.

Method and system for dequeuing connection requests in a simplex switch

A sequencing scheme is provided for prioritizing bus operations occurring in simplex switches which interconnect subsystems in a data communications system, thereby yielding improved aggregate system data throughput. The sequencing scheme provides procedures which simultaneously accommodate (i) concurrently pending requests to a first control bus which processes only circuit switched operations and (ii) concurrently pending requests to a second control bus which processes only packet switched operations, in an order which optimizes link level control message throughput of the simplex switch. The control messages which are coordinated by the sequencing scheme include connect and disconnect requests, connect and disconnect request acknowledgments, and data acknowledgments. All connect request and disconnect requests are managed by a connection processing (CP) bus, which operates as a circuit switching bus, and all data acknowledgments and connect request acknowledgments from subsystems attached to a cascaded switch are made over an out-of-band (OB) bus, which operates as a packet switching bus. Because connect and disconnect operations over the CP bus can proceed independently of acknowledgment operations over the OB bus, the sequencing procedures for each of the control buses are permitted to operate independently and simultaneously.

Growing community of inventors

Boca Raton, FL, United States of America

Marco M Hurtado