Decoupling rights in a digital content unit from download
Systems and methods for enabling a user to obtain rights in a legitimate copy of a digital content unit without downloading the copy from a digital content store are provided. The systems and methods provide an encrypted copy of a digital content unit to a first user and transcript the encrypted copy to generate the legitimate copy to a second user. The encrypted copy is encrypted with a first encrypt key that may be associated with the first user and the legitimate copy is encrypted with a second encrypt key that may be associated with the second user.
1. A method for authorizing a copy of a digital content unit to a first user's device without downloading the copy from a digital content store, the method comprising:
obtaining, by the digital content store, information related to an encrypted copy of the digital content unit associated with a second user, the encrypted copy of the digital content unit encrypted with a first encrypt key associated with the second user and having a first set of permissions permitting access to a first portion of the digital content unit;
storing, by the digital content store, the first encrypt key;
providing, from the digital content store, a right to obtain a legitimate copy of the digital content unit and a second set of permissions permitting access to a second portion of the digital content unit, wherein the first set of permissions and the second set of permissions differ; and
generating, by the digital content store, the legitimate copy of the digital content unit from the encrypted copy of the digital content unit, wherein generating the legitimate copy of the digital content unit comprises:
decrypting by the digital content store the encrypted copy of the digital content unit using the first encrypt key to generate a decrypted copy of the digital content unit; and
encrypting by the digital content store the decrypted copy of the digital content unit with a second encrypt key associated with the first user; and
storing, by the digital content store, the second encrypt key
providing a first decrypt key associated with the second user to a first user's device for generating the decrypted copy of the digital content unit; wherein
the first decrypt key comprises a cryptographic hash of a header of the digital content unit and the first decrypt key associated with the second user's device.
2. The method of claim 1 , wherein obtaining information related to an encrypted copy of the digital content unit comprises receiving a request to authorize the encrypted copy of the digital content unit.
3. The method of claim 2 , further comprising providing access to the encrypted copy of the digital content unit to the first user's device.
4. The method of claim 3 , wherein providing access to the encrypted copy of the digital content unit to the first user's device comprises attaching an at least partially-encrypted header to the encrypted copy of the digital content unit.
5. The method of claim 4 , wherein the at least partially-encrypted header contains a key unique to the copy of the digital content unit.
6. The method of claim 5 , wherein the first encrypt key comprises a cryptographic hash of the header and the first decrypt key associated with the second user.
7. The method of claim 1 , wherein providing the first decrypt key to the first user's device for decrypting the encrypted copy of the digital content unit comprises retrieving the first decrypt key associated with the second user from the digital content store.
8. The method of claim 1 , wherein a second encrypt key is associated with the first user's device.
9. The method of claim 1 , wherein the first set of access permissions remains unchanged after generating the legitimate copy of the digital content unit.