Method and system for secure distribution and utilization of data over a network

1 . A method for distributing data over a network comprising:

establishing a secure connection between a client and a server;

receiving a request from the client for data to be downloaded;

generating a message associated with the data being downloaded to the client and associated with at least part of a distinguishing number for a portable token of the client and used by the client, the portable token being a physical device removeably coupleable to a client computer, the step of message generating comprising:

including in the message a data identification number,

including in the message a period of time for which the data may be used by the client, and

including in the message a symmetrical key used to encrypt the data when distributing data from the server to the client over the network;

and

distributing the data and the associated message to the client.

2 . The method of claim 1 , wherein establishing a secure connection comprises establishing a secure connection using a security protocol.

3 . The method of claim 2 , wherein the security protocol is the secure socket layer protocol.

4 . The method of claim 1 , wherein establishing a secure connection comprises

requesting authentication information from the client; and

sending authentication information from the server.

5 . The method of claim 4 , wherein requesting authentication information from the client comprises

requesting a certificate from the client; and

requesting a digital signature from the client.

6 . The method of claim 4 , wherein sending authentication information from the server comprises:

sending a certificate from the server; and

sending a digital signature from the server.

7 . The method of claim 5 , wherein requesting a certificate comprises reading the certificate from the token used by the client.

8 . The method of claim 1 , wherein generating a message further comprises generating a message using a public key (asymmetric) cryptographic algorithm.

9 . The method of claim 1 , wherein the distinguishing number for the portable token is assigned to the token by a manufacturer.

10 . The method of claim 9 , wherein the distinguishing number for the token is permanently assigned to the token.

11 . The method of claim 1 , wherein the generating step further comprises linking the data being downloaded to the client with at least part of the distinguishing number for the portable token of the client and used by the client.