Method and system for secure distribution of selected content to be protected on an appliance-specific basis with definable permitted associated usage rights for the selected content
The present invention relates to data rights management and more particularly to a secured system and methodology and production system and methodology related thereto and to apparatus and methodology for production side systems and are consumer side systems for securely utilizing protected electronic data files of content (protected content), and further relates to controlled distribution, and regulating usage of the respective content on a recipient device (computing system) to be limited strictly to defined permitted uses, in accordance with usage rights (associated with the respective content to control usage of that respective content), on specifically restricted to a specific one particular recipient device (for a plurality of specific particular recipient devices), or usage on some or any authorized recipient device without restriction to any one in specific, to control use of the respective content as an application software program, exporting, modifying, executing as an application program, viewing, and/or printing of electronic data files.
1. A hardware memory storing instructions, the instructions executable by a processor to perform operations comprising:
outputting encrypted content for decryption, at a recipient device, using a production key;
wherein the content comprises data representative of a still image, motion video or audio associated with usage rights defining permitted uses for the data, the usage rights enforced using the production key; and
wherein the production key is generated based at least in part on 1) hash values, a unique ID, or authorization information and 2) a feature of a hardware element of a recipient device or a feature of a software element of the recipient device;
a password provided as input to computing device key hash logic used to generate the hash values,
the unique ID generated from within the recipient device itself, or generated from a fixed computing device identification parameter of the recipient device,
the authorization information generated by a system remote from the recipient device following the recipient device identifying itself to the remote system.
2. The hardware memory of claim 1 , wherein the usage rights comprise basic usage rights, and wherein the operations further comprises:
encrypting a ticket or other file comprising enhanced usage rights that allow enhanced access to the content, the encrypting the ticket or other file using the production key; and
outputting the encrypted ticket or other file for use by the decryption engine.
3. The hardware memory of claim 1 , wherein the operations further comprise encrypting basic or enhanced encrypted usage rights for decryption using the production key.
4. The hardware memory of claim 3 , wherein the encrypted content comprises a first file and the encrypted basic or enhanced usage rights comprise:
a second file that is separate from the first file, or
the operations further comprise embedding the basic or enhanced usage rights in the content.
5. The hardware memory of claim 1 , wherein the operations further comprise:
generating the production key based at least in part on data collected from a biometric reader.
6. The hardware memory of claim 5 , wherein the data collected from the biometric reader comprises retinal data or fingerprint data.
7. The hardware memory of claim 1 , wherein the operations further comprise:
encrypting the usage rights using the production key; and
outputting the encrypted usage rights for use by the decryption engine.
8. The hardware memory of claim 7 , wherein the usage rights (1) regulate the number of times that at least a portion of the encrypted content can be viewed, and (2) store a count of the number of times that at least the portion of the encrypted content has already been viewed.
9. The hardware memory of claim 7 , wherein the encrypted content comprises a first file and the encrypted usage rights comprises a second file that is separate from the first file.
10. The hardware memory of claim 9 , wherein the second file comprises a ticket.
11. The hardware memory of claim 1 , wherein the fixed computing device identification parameter of the recipient device comprises a hardware serial number.
12. A method, comprising:
outputting encrypted content for decryption, at a recipient device, using a production key;
wherein the content comprises data representative of a still image, motion video or audio associated with usage rights defining permitted uses for the data, the usage rights enforced using the production key;
wherein the production key is generated based at least in part on 1) hash values, unique ID, or authorization information and 2) a feature of a hardware element of a recipient device or a feature of a software element of the recipient device:
a password provided as input to computing device key hash logic used to generate the hash values,
the unique ID generated from within the recipient device itself, a hardware serial number or other fixed computing device identification parameter of the recipient device,
the authorization information generated by a system remote from the recipient device following the recipient device identifying itself to the remote system.
13. The method of claim 12 , wherein the usage rights comprise basic usage rights, and wherein the operations further comprises:
encrypting a ticket or other file comprising enhanced usage rights that allow enhanced access to the content, the encrypting the ticket or other file using the production key; and
outputting the encrypted ticket or other file for use by the decryption engine.
14. The method of claim 12 , wherein the operations further comprise encrypting basic or enhanced encrypted usage rights for decryption using the production key.
15. The method of claim 14 , wherein the encrypted content comprises a first file and the encrypted basic or enhanced usage rights comprise:
a second file that is separate from the first file, or
the operations further comprise embedding the basic or enhanced usage rights in the content.
16. The method of claim 12 , wherein the operations further comprise:
generating the production key based at least in part on data collected from a biometric reader.
17. The method of claim 16 , wherein the data collected from the biometric reader comprises retinal data or fingerprint data.
18. The method of claim 12 , wherein the operations further comprise:
encrypting the usage rights using the production key; and
outputting the encrypted usage rights for use by the decryption engine.
19. The method of claim 18 , wherein the usage rights (1) regulate the number of times that at least a portion of the encrypted content can be viewed, and (2) store a count of the number of times that at least the portion of the encrypted content has already been viewed.
20. The method of claim 18 , wherein the encrypted content comprises a first file and the encrypted usage rights comprises a second file that is separate from the first file.
21. The method of claim 20 , wherein the second file comprises a ticket.