Copy protection of data

US 7,079,649 B1
Filed: 03/18/1998
Issued: 07/18/2006
Est. Priority Date: 03/27/1997
Status: Expired due to Term

- Alert
- Pin

First Claim

Patent Images

1. A method of protecting data sent from a server to a client, said method comprising:

running a program portion at the client, the program portion generating and uploading to the server a request for access to data;

cryptographically protecting the data;

sending the cryptographically protected data to the client; and

after the running of the program portion has begun and under control of the program portion at the client, converting the cryptographically protected data to an unprotected form and selectively controlling access to copy or save functions at the client in respect of the data in its unprotected form.

View all claims

4 Assignments

Timeline View

Assignment View

Litigations

1 Petition

Accused Products

Abstract

A copyright protection scheme downloads data from a server, typically over the World Wide Web to a client for presentation to a user. The downloaded data is cryptographically protected, by encryption and hashing. When displayed by the client, storing and copying functions are selectively disabled in respect of the data, in order to prevent unauthorized copying.

74 Citations

View as Search Results

26 Claims

1. A method of protecting data sent from a server to a client, said method comprising:
- running a program portion at the client, the program portion generating and uploading to the server a request for access to data;
  
  cryptographically protecting the data;
  
  sending the cryptographically protected data to the client; and
  
  after the running of the program portion has begun and under control of the program portion at the client, converting the cryptographically protected data to an unprotected form and selectively controlling access to copy or save functions at the client in respect of the data in its unprotected form.
- View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 12, 14, 15, 16, 17, 18, 21)
- - 2. A method as in claim 1 wherein cryptographically protecting the data comprises protecting the data by encryption.
  - 3. A method as in claim 1 wherein cryptographically protecting the data comprises protecting the integrity of the data cryptographically.
  - 4. A method as in claim 3 wherein the integrity of the data is achieved by hashing.
  - 5. A method as in claim 1 including authenticating that the client is permitted to receive the data.
  - 6. A method as in claim 1 including identifying the client to the server before the data are sent to the client.
  - 7. A method as in claim 1 including:
    - generating the program portion at a server,downloading the program portion to the client, andrunning the program portion on the client such that a request is uploaded to the server for a file containing the cryptographically protected data.
  - 8. A method as in claim 7 wherein the program portion is generated in response to, and corresponds with, an earlier received request for access to the data.
  - 12. A method as in claim 1 wherein the data are sent to the client from the server through a network.
  - 14. A method as in claim 7 wherein the program portion includes data concerning a cryptographic key, and the method including using the key to render the downloaded cryptographically protected data into an unprotected form.
  - 15. A method as in claim 1 wherein the server and the client each hold data corresponding to a cryptographic key and a machine identifier for uniquely identifying the client, the method including:
    - sending a challenge to the client, such that it generates a signed response as a cryptographic function of the key and the machine identifier held therein,generating from the cryptographic key and machine identifier held associated with the server, a corresponding signed response as a cryptographic function of the key and the machine identifier,comparing the signed responses from the client and the server, and if they correspond, performing the cryptographic protection of the data with the key, andconverting the cryptographically protected data into an unprotected form at the client with the key.
  - 16. A method as in claim 1 wherein the data is steganographically marked.
  - 17. A method as in claim 1 including registering the client with the server.
  - 18. A method as in claim 1 including:
    - determining a machine identifier of the client by analysing its hardware and/or its software configuration,transmitting the machine identifier to the server,combining the transmitted machine identifier with a cryptographic key to form a unique determinator for the client,transmitting the unique determinator to the client, to be stored therein for use subsequently in identifying the client to the server, to permit encypted data to be downloaded thereto from the server.
  - 21. A data storage medium storing copy protected data on the client received by a method according to claim 1.

9. A method of controlling access to data downloaded from a server computer to a client computer, said method comprising:
- downloading a protected copy of requested data from a server to a client; and
  
  before using said protected copy, running a program at the client so that after running the program at the client has begun at the client, the program serves to both;
  
  (a) unprotect the downloaded data thereby to provide access to an unprotected copy of the requested data, and (b) suppress client computer copy or save functions with respect to the unprotected copy of the requested data.

10. A method of controlling access to data sent from a server to a client, said method comprising:
- running a program portion at the client, the program portion generating and uploading to the server a request for access to data;
  
  cryptographically protecting the data;
  
  sending the cryptographically protected data to the client; and
  
  after access to the program portion is permitted and under control of the program portion, converting the cryptographically protected data to an unprotected form and restricting or preventing access to copy or save functions at the client in respect of the data in its unprotected form.

11. A method of controlling access to data downloaded from a server computer to a client computer, said method comprising:
- downloading a protected copy of requested data from a server to a client; and
  
  running a program at the client after access to the program is permitted to both;
  
  (a) unprotect the downloaded data thereby to provide access to an unprotected copy of the requested data, and (b) restrict or prevent client computer copy or save functions with respect to the unprotected copy of the requested data.

13. A server for providing access to data sets in a protected form, the server comprising:
- an input for receiving a request for access to a data set;
  
  protecting means for cryptographically protecting the requested data set; and
  
  generating means for generating a program portion for sending to the source of the access request,wherein said program portion is operable and after the program portion is permitted to run at the source of the access request, in use;
  
  to generate a request for access to the cryptographically protected data set;
  
  on receipt of the cryptographically protected data set, to convert it into an unprotected form; and
  
  to selectively control access to copy or save functions in respect of the data set when in said unprotected form.

19. A method of protecting data downloaded from a server computer to a client computer, said method comprising:
- downloading a protected copy of requested data from a server to a client; and
  
  running a program at the client after access to the program is permitted to both;
  
  (a) unprotect the downloaded data thereby to provide access to an unprotected copy of the requested data, and (b) restrict or prevent client computer copy and save functions with respect to the unprotected copy of the requested data.
- View Dependent Claims (20)
- - 20. A method as in claim 19, wherein the program running at the client generates and uploads a request for data from the client to the server, and the protected copy of requested data is downloaded from the server to the client in response to the request.

22. A computer program carrier medium containing a computer program which are executable by a computer to perform method steps for implementing a server, the method steps comprising:
- receiving a request for access to a data set;
  
  cryptographically protecting the requested data set; and
  
  generating a program portion for sending to the source of the access request,wherein said program portion is operable and after the program portion is permitted to run at the source of the access request, in use;
  
  generating a request for access to the cryptographically protected data set;
  
  on receipt of the cryptographically protected data set, converting it into an unprotected form; and
  
  selectively controlling access to copy or save functions in respect of the data set when in said unprotected form.

23. A method of protecting data downloaded from a server computer to a client computer, said method comprising:
- downloading a protected copy of requested data from a server to a client; and
  
  running a program at the client so that after running the program at the client has begun at the client, the program serves to both;
  
  (a) unprotect the downloaded data thereby to provide access to an unprotected copy of the requested data, and (b) suppress client computer copy and save functions with respect to the unprotected copy of the requested data.
- View Dependent Claims (24)
- - 24. A method as in claim 23, wherein the program running at the client generates and uploads a request for data from the client to the server, and the protected copy of requested data is downloaded from the server to the client in response to the request.

25. A method of protecting data sent from a server to a client, said method comprising:
- running a program portion at the client, the program portion generating and uploading to the server a request for access to data;
  
  cryptographically protecting the data;
  
  sending the cryptographically protected data to the client; and
  
  after access to the program portion is permitted and under control of the program portion, converting the cryptographically protected data to an unprotected form and restricting or preventing access to copy or save functions at the client in respect of the data in its unprotected form.

26. A server for providing access to data sets in a protected form, the server comprising:
- an input for receiving a request for access to a data set;
  
  protecting means for cryptographically protecting the requested data set; and
  
  generating means for generating a program portion for sending to the source of the access request,wherein after access to the program portion is permitted and said program portion is operable, in use;
  
  to generate a request for access to the cryptographically protected data set;
  
  on receipt of the cryptographically protected data set, to convert it into an unprotected form; and
  
  to restrict or prevent access to copy or save functions in respect of the data set when in said unprotected form.

Specification

Resources

Litigation Campaign Assessment

Litigation Data

Current Assignee
Copy Protection LLC (Quarterhill Inc. (f/k/a Wi-LAN Inc.))
Original Assignee
British Telecommunications PLC (BT Group PLC)
Inventors
Bramhill, Ian Duncan, Sims, Matthew Robert Charles
Primary Examiner(s)
NGUYEN, CUONG H

Application Number

US09/091,735
Time in Patent Office

3,044 Days
Field of Search

713/156, 713/158, 713/164, 713/200, 713/201, 713/160, 705 55- 59, 340/825.31, 380227-228, 380/239, 380/278, 707 9- 10
US Class Current

713/156
CPC Class Codes

G06F 21/10   Protecting distributed prog...

G06F 21/16   Program or content traceabi...

G06F 2211/007   Encryption, En-/decode, En-...

G06Q 30/0283   Price estimation or determi...

H04L 2209/60   Digital content management,...

H04L 2209/605   Copy protection

H04L 2463/101   applying security measures ...

H04L 2463/103   applying security measure f...

H04L 63/0428   wherein the data content is...

H04L 63/08   for authentication of entit...

H04L 63/0876   based on the identity of th...

H04L 63/104   Grouping of entities

H04L 63/123   received data contents, e.g...

H04L 63/168   above the transport layer

H04L 67/01   Protocols

H04L 67/08   specially adapted for termi...

H04L 67/34   involving the movement of s...

H04L 9/3236   using cryptographic hash fu...

H04L 9/3271   using challenge-response

Copy protection of data

First Claim

4 Assignments

Litigations

1 Petition

Accused Products

Abstract

74 Citations

26 Claims

Specification

Use Cases

Quick Links

Others

Copy protection of data

First Claim

4 Assignments

Subscription Required

Subscription Required

Litigations

1 Petition

Subscription Required

Accused Products

Subscription Required

Abstract

74 Citations

26 Claims

Specification

Subscription Required

Use Cases

Quick Links

Others