Electrical computers and digital processing systems: support – Data processing protection using cryptography – By stored data protection
Reexamination Certificate
1999-07-20
2004-12-14
Sheikh, Ayaz (Department: 2131)
Electrical computers and digital processing systems: support
Data processing protection using cryptography
By stored data protection
C713S194000, C380S228000, C380S229000, C380S230000, C380S234000, C380S239000, C380S241000, C705S057000, C705S058000, C705S059000
Reexamination Certificate
active
06832319
ABSTRACT:
BACKGROUND OF THE INVENTION
1. Field of the Invention
The present invention relates generally to broadcast data encryption, and more particularly to the encryption of recordable media to permit the media to be copied once only.
2. Description of the Related Art
The advantages of digitized video and music are numerous, but one significant drawback is that being digitized, the content is relatively easy to copy perfectly, without authorization of the copyright owner. Copies can be made of digital audio and video content that is broadcast to in-home receivers over a network such as, for example, Home Box Office (HBO), or that is provided to in-home users on media such as digital video disks (DVDs). Indeed, widespread copying by pirates costs content owners billions of dollars per year. Thus, the present invention understands that it is desirable to limit the unauthorized copying of digital audio and video.
The problem, however, is complicated by the desire of governmental bodies and consumer protection lobbies to permit a buyer of digitized content to make a single copy for archive purposes or other legitimate reasons. Accordingly, the problem addressed by the present invention is how to enable a buyer to copy a broadcast program, but once only. It is to be understood that while today the requirement is to make only one copy, in the future the requirement might be to allow two or more copies. It is to be further understood that any solution solving the “copy once” requirement could be trivially extended to any specified number of copies; the invariant feature of any solution is to make sure that a copy cannot be further copied. For convenience and clarity, the present disclosure assumes that only one copy is to be made, it being understood that limiting the number of permissible copies to any finite number is within the scope of the present invention.
To better understand the problem, if every recorder in the world were an authorized, properly programmed recorder, a broadcast program could simply contain an unencrypted signal indicating “copy once”, and each recorder used for copying would duly copy the content and append an unencrypted message to the copy indicating “copy no more”. Any player could play the copy, but any recorder sought to be used to recopy the content would obey the “copy no more” message, protecting the rights of the content owner.
Of course, pirate recorders can be constructed that do not obey such procedural messages. Consequently, a cryptographic approach must be used to prevent unauthorized usable copies from being made. One approach recognized herein is to provide each authorized recorder with its own secret key, which the recorder would use to encrypt the content. Unfortunately, the media so recorded could be played back only on the player that is associated with the recorder that made the copy, so this approach is unacceptable in the consumer market.
Alternatively, the present invention understands that a single secret key could be provided to all recorders, which would then use the key to encrypt the content as it is recorded. In this way, any authorized recorder that includes a player could play back the recording, regardless of where the recording was made, and authorized recorders could be programmed to copy any broadcast program only once. Current DVD encryption methods use this approach. The drawback with this method is that it is cryptographically fragile—once the system secret is discovered by an unauthorized person, it can be disseminated to unauthorized pirate recorders that could use the key to copy the content thousands of times, unencumbered by what amounts to a promise to copy a broadcast program only once, and thereby defeat the system.
As recognized herein, a one-way key management scheme can be used which has a good key management method to address the above-noted problem of unauthorized recorders being provided with a stolen system key. One-way key management is a cryptographic protocol in which two parties can agree upon a key without having two-way communication. Good one-way key management protocols also have the feature that illegal clones that have some of the secrets in the protocol nonetheless can be excluded from interoperating from the legitimate devices. One such system is disclosed in IBM's co-pending U.S. patent application Ser. No. 09/065,938, filed Apr. 24, 1998 for an invention entitled “System for Encrypting Broadcast Programs in the Presence of Compromised Receiver Devices”, incorporated herein by reference. However, such a system, in and of itself, is not sufficient to address the current problem. This is because a pirate, although unable to discover the key and decrypt the data in the broadcast program or on the DVD, can simply make a bit-for-bit copy of the encrypted data. The pirate recorder itself could not decrypt and play the data, but any legitimate recorder-player would be capable of decrypting and playing the unauthorized copy, thus making the copy salable.
The present invention has carefully considered the above considerations and has addressed the noted problem.
SUMMARY OF THE INVENTION
A system is disclosed for once-only copying of data representative of video and/or audio to one of a plurality of data storage media. Each data storage medium includes a respective media identification written to an ID location on the medium, and each medium also includes a common one-way key management media key block. In accordance with the present invention, the system includes a program of instructions that include structure for undertaking method acts including, for each medium, determining a media key from the common one-way key management media key block. Also, the present method acts include combining the media key with the media identification to render a content key, and then encrypting the data using the content key for copying of the encrypted data onto a data storage medium.
Preferably, a player-recorder establishes a player and a recorder, and the player-recorder undertakes method acts including sending encrypted data from the data storage medium to the player. The media identification and media key block on the data storage medium are read by the player. Then, the media key is determined using the media key block, and the content key determined using the media key and the media identification. With the content key, the player decrypts the data to facilitate the player playing video and/or audio represented by the data.
As envisioned by the present invention, to facilitate copying the data storage medium one time only, the method acts can further include establishing an exchange key between the recorder and a sender selected from the group of senders including: the player, and a broadcast program receiver. The exchange key is then modified with one or more special numbers to render a modified exchange key, with the special numbers representing the group of control commands including: copy once, and copy no more. Moreover, the method acts include encrypting the modified exchange key using the content key to render an encrypted modified exchange key, and using the encrypted modified exchange key or a derivative thereof to encrypt the data for copying thereof to the data storage medium. In a particularly preferred embodiment, the encrypted modified exchange key is hashed with a nonce to render a bus content key, with the bus content key then being used to encrypt the data for copying thereof to the data storage medium.
The preferred one-way key management scheme can include accessing plural computer-usable device keys selected from a set of device keys. The media key block is generated by encrypting plural media numbers with the set of device keys, with at least one of the media numbers being a dummy number when it is determined that at least one recorder is a compromised recorder defining compromised device keys. Under these circumstances, the dummy number is encrypted by at least one compromised device key. The recorder determines the media key based on the media key block and the respective device keys, s
Bell Alan Edward
Lotspiech Jeffrey Bruce
Traw Chandler Brendan Stanton
Moorthy Aravind
Rogitz John L.
Sheikh Ayaz
LandOfFree
Content guard system for copy protection of recordable media does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Content guard system for copy protection of recordable media, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Content guard system for copy protection of recordable media will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3322459