Entriq, Inc.

Irdeto Access B.v.

Irdeto Usa, Inc.

Mih Technology Holdings Bv

Robert W Fransdonk

A method and system to digitally sign a content license associated with content, and to distribute content via a network in a geographically controlled manner, commences when a content requester requests delivery of the encrypted content. A content delivery system performs a content to determine a geographic location associated with the content requester. The content requestor authorization process may also determine geographic access criteria associated with the content, and whether the geographic location complies with the geographic access criteria. The content delivery system will release the content for delivery to the content requestor if the content location complies with the geographic access criteria.

Method and system to digitally sign and deliver content in a geographically controlled manner via a network

A method includes generating a set of session keys and encrypting content utilizing the set of session keys to generate encrypted content. The set of session keys is transmitted. The encrypted content is transmitted to a content destination, so as to enable the content destination, utilizing the set of session keys, to decrypt the encrypted content.

Content distribution using set of session keys

A method comprising receiving a product key at a service provider, where the product key is (1) received from a first content provider, and (2) encrypting a first content controlled by the first content provider. The method encrypts the product key within a first secure device at the service provider using a storage key and stores the encrypted product key at the service provider.

Method and system to securely store and distribute content encryption keys

A method and system are disclosed to provide secure key selection using a secure device in a watercrypting environment. A license containing a product key of a watercrypted content and a client identifier is transmitted to a secure device for storage. An entitlement control message containing multiple content keys associated with the watercrypted content is further transmitted to the secure device, together with a request to provide a session content key from the multiple content keys, the session content key to be used to decrypt the watercrypted content. Finally, the session content key is received from the secure device in response to the request.

Method and system to provide secure key selection using a secure device in a watercrypting environment

A method includes associating a first authentication process with content, the first authentication process to protect the content from access by an unauthorized user. A second authentication process is also associated with the content, the second authentication process to protect the content from access by an unauthorized device. The first authentication process and the second authentication process are separate and distinct authentication processes. This enables an authorized user to access the content on an authorized device and prevents the authorized user from accessing the content on the unauthorized device.

Separate authentication processes to secure content

A method and system to digitally sign a content license associated with content, and to distribute content via a network in a geographically controlled manner, commences when a content provider generates a content license and signs the content license with a symmetric key. The symmetric key may be used to encrypt the content. In one embodiment consistent with the invention, the symmetric key may be used to encrypt a product key, which is in turn used to encrypt the content. A content requestor requests delivery of the encrypted content. A content delivery system performs a content to determine a geographic location associated with the content requestor. The content requestor authorization process may also determine geographic access criteria associated with the content, and whether the geographic location complies with the geographic access criteria. The content delivery system will release the content for delivery to the content requestor if the content location complies with the geographic access criteria.

A method and system to dynamically present a payment gateway to a content requestor commences when a content distributor receives a request for access to a content item provided by a content provider. The content distributor determines whether a first payment gateway of a first plurality of payment gateways is a preferred payment gateway. If the content distributor has recorded the first payment gateway as a first preferred payment gateway then the content distributor presents the first payment gateway to a content requestor as an actual preferred payment gateway. If the content distributor has not recorded the first payment gateway as the first preferred payment gateway, then it presents a second preferred payment gateway, recorded by the content provider of the content item, as the actual preferred payment gateway to the content requestor.

Method and system to dynamically present a payment gateway for content distributed via a network

A method and system to dynamically present a payment gateway to a content requester commences when a content distributor receives a request for access to a content item provided by a content provider. The content distributor determines whether a first payment gateway of a first plurality of payment gateways is a preferred payment gateway. If the content distributor has recorded the first payment gateway as a first preferred payment gateway then the content distributor presents the first payment gateway to a content requestor as an actual preferred payment gateway. If the content distributor has not recorded the first payment gateway as the first preferred payment gateway, then it presents a second preferred payment gateway, recorded by the content provider of the content item, as the actual preferred payment gateway to the content requester.

A method and system to distribute content via a network commences when content is received at a content distributor from a content provider. At the content distributor, an operation relating to the content is performed. The content provider provides authorization to the content distributor to perform the operation, and the authorization is specific to the content distributor. The operation may be performed within a secure environment implemented at the content distributor, and may comprise an association operation to associate the content with a content consumer. In an exemplary embodiment, the association operation comprises a watermarking operation to watermark the content as content distributed specifically to the content consumer. In a further exemplary embodiment, the association operation comprises an encryption operation to encrypt the content utilizing a key associated with, and communicated to, the content consumer.

Method and system to securely distribute content via a network

A method and system to store and distribute encryption keys commences when a service provider receives a product key from a content provider. The service provider encrypts content controlled by the content provider with a secure device public key of a secure device of the service provider. The secure device of the service provider decrypts the product key with the secure device public key and encrypts the product key with a storage key associated with the secure device. The product key is then stored at the service provider.

Method and system to store and distribute encryption keys

A method and system to distribute encrypted content via a network commences when a content provider generates a set of session keys and encrypts content with the set of session keys. The content provider communicates the set of session keys to a content distributor, which generates a set of encrypted session keys by encrypting the set of session keys with a user key. The content distributor transmits the encrypted content and the encrypted session keys to a content destination. The content distributor also transmits the user key to the content destination, allowing the content destination to decrypt the set of session keys with the user key, and thereby use the set of decrypted session keys to decrypt the content. In a further embodiment of the invention, the session keys are a time-varying sequence of session keys.

A method and system to secure content for distribution via a communications network commences when a user device authentication process is associated with content from a content provider. A copy-protected device authentication process is associated with the content. The user device authentication process and the copy-protected device authentication process are separate authentication processes to protect the content from unauthorized access.

Growing community of inventors

Vista, CA, United States of America

Robert W Fransdonk