초록 ▼

A digital content distribution system uses a Digital Rights Management Controller that performs a set of arbitrary tests against the transfer request from one user to another such as user A to user B. Assuming these tests are successful, the DRM sends an encryption key to transferring user A. This e

A digital content distribution system uses a Digital Rights Management Controller that performs a set of arbitrary tests against the transfer request from one user to another such as user A to user B. Assuming these tests are successful, the DRM sends an encryption key to transferring user A. This encryption key E is taken from a table of encryption key/hash pairs which have been provided to the DRM Controller by an external authority such as the content rights holder. User A encrypts the content using they key provided by the DRM controller and then optionally calculates a hash over the encrypted form of the content E(X) and returns this value to the DRM Controller. On checking the returned hash against the hash from the table the DRM controller knows that user A does indeed have the digital content X in good condition. The DRM Controller then instructs both users A and B that the transfer may proceed. The encrypted form of the content E(X) is transferred from A to B. Once the content transfer has completed B ensures that the received content has been physically written to non-volatile storage (to account for crashes etc. during the next step). B then calculates a hash over the received content and returns this value to the DRM Controller. If this value matches the value previously given then the transfer has been successful and the DRM Controller updates whatever central records are appropriate, while also returning a decrypt key to B to allow it to decrypt the content.

대표청구항 ▼

1. A method comprising: receiving at a controller computing device a request to transfer digital content from a first computing device to a second computing device;receiving at the controller computing device a key/hash pair from a third computing source;sending from the controller computing device

1. A method comprising: receiving at a controller computing device a request to transfer digital content from a first computing device to a second computing device;receiving at the controller computing device a key/hash pair from a third computing source;sending from the controller computing device an encryption key based on the key/hash pair to the first computing device for encrypting the digital content;the controller computing device authorizing the transfer of the digital content from the first computing device to the second computing device;receiving at the controller computing device from the second computing device a result of a hash function performed on the digital content at the second computing device;the controller computing device comparing the key/hash pair provided by the third computing device to the result of the hash function received at the controller computing device;sending to the second computing device, in response to comparing that the result of the hash function corresponds to the key/hash pair from the controller, a decryption key for decrypting the digital content at the second computing device. 2. The method of claim 1 wherein the authorizing further comprises: receiving at the controller computing device a result of a hash function performed at the first computing device;comparing at the controller computing device the result of the hash function received from the first computing device with the key/hash pair provided by the third computing device; andauthorizing at the controller computing device transfer of the digital content from the first computing device to the second computing device in response to the result of the hash function sent by the first computing device corresponding to the key/hash pair provided by the third computing device. 3. The method of claim 1 wherein the authorizing further comprises authorizing at the controller computing device transfer of the digital content from the first computing device to the second computing device after performing one or more tests regarding existence of authorized conditions for authorization of transfer of the digital content. 4. The method of claim 3 wherein the performing one or more tests comprises determining whether the first computing device possesses a legitimate copy of the digital content. 5. The method of claim 3 wherein the performing one or more tests comprises determining whether the second computing device has an account with sufficient funds to compensate the owner of the digital content. 6. The method of claim 1 wherein the authorizing further includes authorizing at the controller computing device transfer of the digital content from the first computing device to the second computing device wherein the sending the key/hash pair comprises sending the key/hash pair only for transferring the digital content. 7. The method of claim 1 further comprising receiving the request to transfer the digital content to the second computing device from the first computing device or the second computing device. 8. The method of claim 3 wherein the authorizing further comprises sending an acknowledgement from the controller to at least one of the first computing device or the second computing device that the transfer is authorized. 9. The method of claim 1 further comprising storing at the controller computing device a record of the transfer of the digital content from the first computing device to the second computing device without storing a copy of the digital content at the controller. 10. The method of claim 9 wherein the storing further comprises storing at the controller computing device a record using an accounting web server. 11. An apparatus comprising: a controller computing device configured to be in communication with a first computing device and a second computing device to receive a request to transfer digital content from the first computing device to the second computing device;wherein the controller computing device is configured to be in communication with a third computing source to receive a key/hash pair;wherein the controller computing device comprises a tangible computer readable medium storing instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising: authorizing an exchange of digital content between the first computing device and the second computing device;sending to the first computing device an encryption key based on the key/hash pair configured to encrypt the digital content at the first computing device; andsending to the second computing device a decryption key configured to decrypt the digital content at the second computing device. 12. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising storing encryption keys and hash function results associated with the digital content. 13. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising receiving requests from the first computing device or the second computing device to authorize the transfer of the digital content from the first computing device to the second computing device. 14. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising determining whether the transfer is authorized based on one or more tests regarding existence of authorized conditions for authorization of transfer of the digital content. 15. The apparatus of claim 14 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising determining whether the first computing device possesses a legitimate copy of the digital content. 16. The apparatus of claim 15 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising storing a hash function performed by the first computing device on the digital content and to store function results associated with the digital content, and using the result of the hash function performed at the first computing device and the function results associated with the digital content to determine whether the first computing device possesses a legitimate copy of the digital content. 17. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising determining whether funds in an account associated with the second computing device are sufficient to authorize the transfer of the digital content to the second computing device. 18. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising authorizing incrementing an account associated with the first computing device in response to transfer of the digital content from the first computing device to the second computing device. 19. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising authorizing decrementing an account associated with the second computing device in response to transfer of the digital content from the first computing device to the second computing device. 20. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising authorizing incrementing an account associated with the third computing device having an associated ownership with the digital content in response to transfer of the digital content from the first computing device to the second computing device. 21. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising sending an encryption key to the first computing device to enable the encryption of the digital content prior to transfer to the second computing device. 22. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising sending a decryption key to the second computing device after the digital content has been transferred from the first computing device to the second computing device. 23. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising receiving a hash function result from the second computing device and using the hash function result sent by the second computing source to determine whether the digital content has been transferred from the first computing device to the second computing device. 24. The apparatus of claim 11 wherein the controller computing device is a digital rights management controller. 25. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising sending information pertaining to the transfer of the digital content from the first computing device to the second computing device to a website associated with the controller computing device. 26. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising sending information to an accounting web server configured to track payment associated with the transfer of the digital content. 27. The apparatus of claim 11 wherein the computer readable medium stores further instructions that in response to execution by the controller computing device cause the controller computing device to perform operations comprising authorizing a service control device to increment or decrement an account in response to the transfer of the digital content.