IP Library Granted Patent US 10,860,690
Granted Patent B2
US 10,860,690 · App. 16/241,835 · Granted Dec 8, 2020

Method and system for secure distribution of selected content to be protected

Inventors: David H. Sitrick (Pacific Palisades, CA); Russell T. Fling (Naperville, IL)
Assignee: OL Security Limited Liability Company
G06F21/10G06F21/602H04L9/0863H04L9/0866H04L63/0435H04L63/062H04L2209/60
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,860,690
App. No.
16/241,835
Granted
Dec 8, 2020
Kind
B2
Abstract

The present invention relates to data rights management and more particularly to a secured system and methodology and production system and methodology related thereto and to apparatus and methodology for production side systems and are consumer side systems for securely utilizing protected electronic data files of content (protected content), and further relates to controlled distribution, and regulating usage of the respective content on a recipient device (computing system) to be limited strictly to defined permitted uses, in accordance with usage rights (associated with the respective content to control usage of that respective content), on specifically restricted to a specific one particular recipient device (for a plurality of specific particular recipient devices), or usage on some or any authorized recipient device without restriction to any one in specific, to control use of the respective content as an application software program, exporting, modifying, executing as an application program, viewing, and/or printing of electronic data files.

Claims (63)

1. A method, performed by a computing system having a memory and a processor, for securely utilizing content, the method comprising:

receiving, by the computing system having the memory and the processor, from a recipient device:

a computer appliance identifier created from an identifier indicating at least one feature of the recipient device, and

a password provided as input to computer appliance key hash logic used to generate hash values;

encrypting, by the computing system having the memory and the processor, using the computer appliance identifier received from the recipient device, a production key, wherein a decryption engine used to decrypt the production key is created using at least a part of the identifier used to create the computer appliance identifier;

encrypting, by the computing system having the memory and the processor, content using the production key;

sending, by the computing system having the memory and the processor, to the recipient device, the encrypted production key for decryption using the computer appliance identifier; and

sending, by the computing system having the memory and the processor, to the recipient device, the encrypted content for decryption, at the recipient device, using the decrypted production key.

2. The method of claim 1 , further comprising:

generating a ticket associated with the encrypted content, the ticket comprising usage rights for regulating use of the encrypted content.

3. The method of claim 2 , further comprising:

encrypting the ticket using the production key.

4. The method of claim 2 , further comprising:

receiving, from the recipient device, an indication of at least one usage restriction added to the content by the recipient device.

5. The method of claim 1 , further comprising:

generating, by the computing system having the memory and the processor, the computer appliance identifier based at least in part on the identifier indicating at least one feature of the recipient device and data collected from a biometric reader.

6. The method of claim 1 , further comprising:

generating, by the computing system having the memory and the processor, the computer appliance identifier based at least in part on the identifier indicating at least one feature of the recipient device.

7. The method of claim 1 , wherein the content comprises at least one of:

game data;

business data; and/or

application program code.

8. The method of claim 1 , wherein the content comprises at least one of:

audio waveform data having a respective associated ticket for regulating usage rights defining permitted uses for respective audio waveform data; and/or

video data having a respective associated ticket for regulating usage rights defining permitted uses for respective video data.

9. A computing system comprising:

at least one memory;

at least one computer processor;

a component configured to receive, from a recipient device:

a computer appliance identifier created from an identifier indicating at least one feature of the recipient device, and

a password provided as input to computer appliance key hash logic used to generate hash values;

a component configured to encrypt, using the computer appliance identifier received from the recipient device, a production key, wherein a decryption engine used to decrypt the production key is created using at least a part of the identifier used to create the computer appliance identifier;

a component configured to encrypt content using the production key;

a component configured to send, to the recipient device, the encrypted production key for decryption using the computer appliance identifier; and

a component configured to send, to the recipient device, the encrypted content for decryption, at the recipient device, using the decrypted production key,

wherein each of the components comprises computer-executable instructions stored in the at least one memory for execution by the at least one computer processor.

10. The computing system of claim 9 , further comprising:

a component configured to combine the encrypted content and the encrypted production key as a combined encrypted output.

11. The computing system of claim 9 , further comprising:

a component configured to collected biometric data; and

a component configured to generate the computer appliance identifier based at least in part on the collected biometric data.

12. The computing system of claim 9 , wherein the content comprises a ticket for regulating usage rights defining permitted uses for an associated data file.

13. The computing system of claim 12 , further comprising:

a component configured to receive, from the recipient device, content that includes at least one usage restriction added by the recipient device.

14. The computing system of claim 9 , wherein the content comprises at least one of:

business data having a respective associated ticket for regulating usage rights defining permitted uses for respective business data;

application program code having a respective associated ticket for regulating usage rights defining permitted uses for respective application program code; and

game data having a respective associated ticket for regulating usage rights defining permitted uses for respective game data.

15. A computer-readable hardware device storing instructions that, when executed by a computing system having a memory and a processor, cause the computing system to perform a method for securely utilizing content, the method comprising:

receiving, from a recipient device, a computer appliance identifier created from an identifier indicating at least one feature of the recipient device;

encrypting, using the computer appliance identifier received from the recipient device, a production key, wherein a decryption engine used to decrypt the production key is created using at least a part of the identifier used to create the computer appliance identifier;

encrypting content using the production key;

sending, to the recipient device, the encrypted production key for decryption using the computer appliance identifier; and

sending, to the recipient device, the encrypted content for decryption, at the recipient device, using the decrypted production key.

16. The computer-readable hardware device of claim 15 , the method further comprising:

receiving, from the recipient device, a password provided as input to computer appliance key hash logic used to generate hash values.

17. The computer-readable hardware device of claim 15 , wherein the content comprises at least one of:

textual data having a respective associated ticket for regulating usage rights defining permitted uses for respective textual data; and

image data having a respective associated ticket for regulating usage rights defining permitted uses for respective image data.

18. The computer-readable hardware device of claim 15 , the method further comprising:

generating the computer appliance identifier based at least in part on the identifier indicating at least one feature of the recipient device and data collected from a biometric reader.

19. The computer-readable hardware device of claim 18 , wherein the data collected from the biometric reader comprises retinal data.

20. The computer-readable hardware device of claim 18 , wherein the data collected from the biometric reader comprises fingerprint data.

Assignments (1)
MERGER Recorded Aug 14, 2020
From: BASSILIC TECHNOLOGIES LLC
To: OL SECURITY LIMITED LIABILITY COMPANY
Reel/Frame 053505/0021 →
Continuity (4)
Continuation 15619369 · Jun 9, 2017
Continuation 15130905 · Apr 15, 2016
Continuation 11545889 · Oct 11, 2006
Related Publication 20190311088A1 · Oct 10, 2019