Method and system for secure network-based distribution of content

Patent metadata

Field	Value
Publication number	US-10628557-B2
Application number	US-201715438646-A
Country	US
Kind code	B2
Filing date	Feb 21, 2017
Priority date	Apr 25, 2003
Publication date	Apr 21, 2020
Grant date	Apr 21, 2020

Abstract

A method and system for network-based distribution of content are disclosed. The distribution of content is not only secure but also controlled. The security restricts access to content within media files during downloads as well as while stored at a server or client. In one embodiment, each media file is encrypted with a different, randomly generated key. The control over the distribution of the media file can serve to limit the subsequent distribution of media files from clients to other clients. In another embodiment, the control can permit media files to be shared on a limited number of different clients affiliated with the same user. The clients can vary with application but generally are computing devices that have memory storage. Often, the clients are personal computers or other computing devices that are capable of storing and presenting content to their users.

First claim

The invention claimed is:

1. A system comprising:
a memory; and
a processing system, operatively coupled to the memory, to:
receive, from a client device, a selection of a media file from a plurality of media files;
identify a user key associated with a user of the client device;
generate a random content key;
encrypt the media file using the random content key;
encrypt the random content key using the identified user key;
modify the encrypted media file to include a reference to the identified user key and the encrypted random content key, wherein the reference to the identified user key comprises a location of the identified user key stored at a local data storage of the client device; and
transmit the modified encrypted media file comprising the reference to the identified user key and the encrypted random content key to the client device.

2. The system of claim 1 , wherein the processing system is further to:
determine whether the client device has purchased access to the media file, wherein the processing system is to identify the user key associated with the user of the client device in response to determining that the client device has purchased access to the media file.

3. The system of claim 1 , wherein to receive the selection of the media file from the plurality of media files, the processing system is further to:
provide, to the client device, a user interface comprising a listing of the plurality of media files; and
receive, via the user interface from the client device, the selection of the media file from the plurality of media files.

4. The system of claim 1 , wherein to identify the user key associated with the user of the client device, the processing system is further to:
retrieve a plurality of user keys associated with the user of the client device; and
receive, from the client device, a selection of the user key from the plurality of user keys.

5. The system of claim 1 , wherein to modify the encrypted media file, the processing system is further to:
modify the encrypted media file to include identification information associated with the user of the client device.

6. The system of claim 1 , wherein the random content key comprises at least one of a randomly generated key or a pseudo-randomly generated key.

7. The system of claim 1 , wherein the processing system is further to:
cause the client device to decrypt the encrypted random content key using the identified user key stored at the local data storage of the client device; and
cause the client device to decrypt the modified encrypted media file using the decrypted random content key.

8. The system of claim 1 , wherein to encrypt the media file using the random content key, the processing system is further to:
store the encrypted media file at a central media storage.

9. A method comprising:
receiving, from a client device, a selection of a media file from a plurality of media files;
identifying a user key associated with a user of the client device;
generating a random content key;
encrypting the media file using the random content key;
encrypting the random content key using the identified user key;
modifying, by a processing system, the encrypted media file to include a reference to the identified user key and the encrypted random content key, wherein the reference to the identified user key comprises a location of the identified user key stored at a local data storage of the client device; and
transmitting the modified encrypted media file comprising the reference to the identified user key and the encrypted random content key to the client device.

10. The method of claim 9 , further comprising:
determining whether the client device has purchased access to the media file, wherein the processing system is to identify the user key associated with the user of the client device in response to determining that the client device has purchased access to the media file.

11. The method of claim 9 , wherein receiving the selection of the media file from the plurality of media files further comprises:
providing, to the client device, a user interface comprising a listing of the plurality of media files; and
receiving, via the user interface from the client device, the selection of the media file from the plurality of media files.

12. The method of claim 9 , wherein identifying the user key associated with the user of the client device further comprises:
retrieving a plurality of user keys associated with the user of the client device; and
receive, from the client device, a selection of the user key from the plurality of user keys.

13. The method of claim 9 , wherein modifying the encrypted media file further comprises:
modifying the encrypted media file to include identification information associated with the user of the client device.

14. The method of claim 9 , wherein the random content key comprises at least one of a randomly generated key or a pseudo-randomly generated key.

15. The method of claim 9 , further comprising:
causing the client device to decrypt the encrypted random content key using the identified user key stored at the local data storage of the client device; and
causing the client device to decrypt the modified encrypted media file using the decrypted random content key.

16. The system of claim 1 , wherein encrypting the media file using the random content key further comprises:
storing the encrypted media file at a central media storage.

17. A non-transitory computer readable medium including one or more sequences of instructions which, when executed by a processing system of a computing device, cause the computing device to:
receive, from a client device, a selection of a media file from a plurality of media files;
identify a user key associated with a user of the client device;
generate a random content key;
encrypt the media file using the random content key;
encrypt the random content key using the identified user key;
modify the encrypted media file to include a reference to the identified user key and the encrypted random content key, wherein the reference to the identified user key comprises a location of the identified user key stored at a local data storage of the client device; and
transmit the modified encrypted media file comprising the reference to the identified user key and the encrypted random content key to the client device.

18. The non-transitory computer readable medium of claim 17 , wherein the computing device is further to:
determine whether the client device has purchased access to the media file, wherein the processing system is to identify the user key associated with the user of the client device in response to determining that the client device has purchased access to the media file.

19. The non-transitory computer readable medium of claim 17 , wherein to receive the selection of the media file from the plurality of media files, the computing device is further to:
provide, to the client device, a user interface comprising a listing of the plurality of media files; and
receive, via the user interface from the client device, the selection of the media file from the plurality of media files.

20. The non-transitory computer readable medium of claim 17 , wherein to identify the user key associated with the user of the client device, the computing device is further to:
retrieve a plurality of user keys associated with the user of the client device; and
receive, from the client device, a selection of the user key from the plura

Assignees

• Apple Inc

Inventors

• Dowdy Thomas
• Robbin Jeffrey L
• Tribble Guy L
• Heller David

Classifications

• G06F2221/0704

  Physics · mapped topic

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• G06F21/1011 Primary

  to devices · CPC title