US5319705A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for multimedia access control enablement
Assignee: International Business Machines Corp
•
Filing: 1992-10-21
•
Granted: 1994-06-07
•
Expires: 2012-10-21
Abstract
Abstract A method and system are disclosed for securely distributing a plurality of software files from a software distribution processor to a user processor, while selectively enabling the user processor to only use a subset of a lesser plurality of the software files. This is achieved by employing a customer key which includes a clear customer number and a derived portion derived from the customer number. The customer key is transformed into a second customer key which serves as a key expression for encrypting a file encryption key specifically intended for a respective one of the plurality of files. A plurality of software files can be stored together, for example on a CD-ROM, with each file encrypted under a corresponding file encryption key. The CD-ROM can be distributed to many user processors. When a specific user processor needs to run one of the software files, a request will be transmitted from the user processor to the software distribution processor. In response to that request, an encrypted file encryption key specific for the requested file, will be transmitted to the user processor. This will enable the user processor to decrypt only the requested file from the CD-ROM. All other files on the CD-ROM remain in their encrypted form and cannot be decrypted and used by the file encryption key received from the software distribution processor.
Inventors
- 👤 Bernard J. Halter
- 👤 Alphonse M. Bracco
- 👤 Donald B. Johnson
- 👤 An V. Le
- 👤 Stephen M. Matyas
- 👤 Rostislaw Prymak, deceased
- 👤 James D. Randall
- 👤 John D. Wilkins
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 17:27
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0894; G; G06; G06F; G06F21/00; G06F21/10; H04L9/06; H04L9/0618; H04L9/0637; H04L9/0816; H04L9/0819; H04L9/0822; H04L2209/00; H04L2209/56; H04L2209/60; H04L2209/605
Claims Analysis
Total Claims: 24
Claim 1
Independent Claim
315 words
A method for securely distributing a plurality of software files from a software distribution processor to a user processor, and selectively enabling the user processor to use a subset of a lesser plurality of said plurality of software files, comprising the steps of: storing in said software distribution processor a plurality of software files including an ith software file; storing in said software distribution processor a plurality of file encryption keys including an ith file encryption key; encrypting in said software distribution processor said plurality of said software files, using corresponding ones of said plurality of file encryption keys, including encrypting said ith file using said ith file encryption key, producing a plurality of encrypted files which includes an ith encrypted file which is said ith file encrypted under said ith file encryption key; transmitting from said software distribution processor to a user processor at least a portion of said plurality of encrypted files; storing in said software distribution processor, a first customer key which includes a clear customer number and a second portion; transforming in said software distribution center, said first customer key with a transformation function producing a second customer key; encrypting said ith file encryption key with said second customer key, producing an encrypted ith file encryption key; transmitting from said software distribution processor to a user processor, said first customer key; transmitting from said software distribution processor to said user processor, said encrypted ith file encryption key; transforming at said user processor said first customer key using said transformed function, producing said second customer key; decrypting said ith file encryption key received at said user processor using said second customer key, recovering said ith file encryption key; decrypting said ith encrypted file received at said user processor, using said recovered ith file encryption key, producing said ith software file; whereby the user processor is enabled to use said ith software file.
Claim 2
Independent Claim
315 words
A method for securely distributing a plurality of software files from a software distribution processor to a user processor, and selectively enabling the user processor to use a subset of a lesser plurality of said plurality of software files, comprising the steps of: storing in said software distribution processor a plurality of software files including an ith software file; storing in said software distribution processor a plurality of file encryption keys including an ith file encryption key; encrypting in said software distribution processor said plurality of said software files, using corresponding ones of said plurality of file encryption keys, including encrypting said ith file using said ith file encryption key, producing a plurality of encrypted files which includes an ith encrypted file which is said ith file encrypted under said ith file encryption key; transmitting from said software distribution processor to a user processor at least a portion of said plurality of encrypted files; storing in said software distribution processor, a first customer key which includes a clear customer number and a second portion; transforming in said software distribution center, said first customer key with a transformation function producing a second customer key; encrypting said ith file encryption key with said second customer key, producing an encrypted ith file encryption key; transmitting from said software distribution processor to a user processor, said first customer key; transmitting from said software distribution processor to said user processor, said encrypted ith file encryption key; transforming at said user processor said first customer key using said transformed function, producing said second customer key; decrypting said ith file encryption key received at said user processor using said second customer key, recovering said ith file encryption key; decrypting said ith encrypted file received at said user processor, using said recovered ith file encryption key, producing said ith software file; whereby the user processor is enabled to use said ith software file.
Claim 3
Dependent Claim
20 words
The method of claim 1 which further comprises said first customer key including a customer number and an authentication code.
Claim 4
Dependent Claim
22 words
The method of claim 2 wherein said second portion of said first customer key includes an encrypted expression of said customer number.
Claim 5
Dependent Claim
22 words
The method of claim 1 wherein said second portion of said first customer key includes an encrypted expression of said customer number.
Claim 6
Dependent Claim
32 words
The method of claim 1 wherein said second portion of said first customer key includes an encrypted expression of said customer number, encrypted under a key encrypting key and a counter value.
Claim 7
Dependent Claim
32 words
The method of claim 5 wherein said encrypted expression is a 64-bit DES key, and every eighth parity bit has substituted for it a corresponding authorization bit derived from said customer number.
Claim 8
Dependent Claim
31 words
The method of claim 1 wherein said plurality of encrypted files are stored on a CD ROM storage device which is transported from said software distribution processor to said user processor.
Claim 9
Dependent Claim
34 words
The method of claim 1 wherein said plurality of encrypted files are stored in a bulk storage at said software distribution processor and are distributed to said user processor over a data communications network.
Claim 10
Dependent Claim
41 words
Said method of claim 1 wherein said second portion of said first customer key is an encrypted expression derived from said customer number and a counter value encrypted under a key encrypting key; said counter value representing a sublicensed customer number.
Claim 11
Dependent Claim
45 words
The method of claim 1 wherein a request is transmitted from said user processor to said software distribution processor for said ith file, and in response thereto said ith file encryption key is encrypted and transmitted from said software distribution processor to said user processor.
Claim 12
Independent Claim
336 words
A system for securely distributing a plurality of software files from a software distribution processor to a user processor, and selectively enabling the user processor to use a subset of a lesser plurality of said plurality of software files, comprising: means for storing in said software distribution processor a plurality of software files including an ith software file; means for storing in said software distribution processor a plurality of file encryption keys including an ith file encryption key; means for encrypting in said software distribution processor said plurality of said software files, using corresponding ones of said plurality of file encryption keys, including encrypting said ith file using said ith file encryption key, producing a plurality of encrypted files which includes an ith encrypted file which is said ith file encrypted under said ith file encryption key; means for transmitting from said software distribution processor to a user processor at least a portion of said plurality of encrypted files; means for storing in said software distribution processor, a first customer key which includes a clear customer number and a second portion; means for transforming in said software distribution center, said first customer key with a transformation function producing a second customer key; means for encrypting said ith file encryption key with said second customer key, producing an encrypted ith file encryption key; means for transmitting from said software distribution processor to a user processor, said first customer key; means for transmitting from said software distribution processor to said user processor, said encrypted ith file encryption key; means for transforming at said user processor said first customer key using said transformed function, producing said second customer key; means for decrypting said ith file encryption key received at said user processor using said second customer key, recovering said ith file encryption key; means for decrypting said ith encrypted file received at said user processor, using said recovered ith file encryption key, producing said ith software file; whereby the user processor is enabled to use said ith software file.
Claim 13
Independent Claim
336 words
A system for securely distributing a plurality of software files from a software distribution processor to a user processor, and selectively enabling the user processor to use a subset of a lesser plurality of said plurality of software files, comprising: means for storing in said software distribution processor a plurality of software files including an ith software file; means for storing in said software distribution processor a plurality of file encryption keys including an ith file encryption key; means for encrypting in said software distribution processor said plurality of said software files, using corresponding ones of said plurality of file encryption keys, including encrypting said ith file using said ith file encryption key, producing a plurality of encrypted files which includes an ith encrypted file which is said ith file encrypted under said ith file encryption key; means for transmitting from said software distribution processor to a user processor at least a portion of said plurality of encrypted files; means for storing in said software distribution processor, a first customer key which includes a clear customer number and a second portion; means for transforming in said software distribution center, said first customer key with a transformation function producing a second customer key; means for encrypting said ith file encryption key with said second customer key, producing an encrypted ith file encryption key; means for transmitting from said software distribution processor to a user processor, said first customer key; means for transmitting from said software distribution processor to said user processor, said encrypted ith file encryption key; means for transforming at said user processor said first customer key using said transformed function, producing said second customer key; means for decrypting said ith file encryption key received at said user processor using said second customer key, recovering said ith file encryption key; means for decrypting said ith encrypted file received at said user processor, using said recovered ith file encryption key, producing said ith software file; whereby the user processor is enabled to use said ith software file.
Claim 14
Dependent Claim
20 words
The system of claim 11 which further comprises said first customer key including a customer number and an authentication code.
Claim 15
Dependent Claim
22 words
The system of claim 12 wherein said second portion of said first customer key includes an encrypted expression of said customer number.
Claim 16
Dependent Claim
22 words
The system of claim 11 wherein said second portion of said first customer key includes an encrypted expression of said customer number.
Claim 17
Dependent Claim
32 words
The system of claim 11 wherein said second portion of said first customer key includes an encrypted expression of said customer number, encrypted under a key encrypting key and a counter value.
Claim 18
Dependent Claim
32 words
The system of claim 15 wherein said encrypted expression is a 64-bit DES key, and every eighth parity bit has substituted for it a corresponding authorization bit derived from said customer number.
Claim 19
Dependent Claim
31 words
The system of claim 11 wherein said plurality of encrypted files are stored on a CD ROM storage device which is transported from said software distribution processor to said user processor.
Claim 20
Dependent Claim
34 words
The system of claim 11 wherein said plurality of encrypted files are stored in a bulk storage at said software distribution processor and are distributed to said user processor over a data communications network.
Claim 21
Dependent Claim
41 words
Said system of claim 11 wherein said second portion of said first customer key is an encrypted expression derived from said customer number and a counter value encrypted under a key encrypting key; said counter value representing a sublicensed customer number.
Claim 22
Dependent Claim
45 words
The system of claim 11 wherein a request is transmitted from said user processor to said software distribution processor for said ith file, and in response thereto said ith file encryption key is encrypted and transmitted from said software distribution processor to said user processor.
Claim 23
Independent Claim
315 words
A method for securely distributing a plurality of multimedia files from a multimedia distribution processor to a user processor, and selectively enabling the user processor to use a subset of a lesser plurality of said plurality of multimedia files, comprising the steps of: storing in said multimedia distribution processor a plurality of multimedia files including an ith multimedia file; storing in said multimedia distribution processor a plurality of file encryption keys including an ith file encryption key; encrypting in said multimedia distribution processor said plurality of said multimedia files, using corresponding ones of said plurality of file encryption keys, including encrypting said ith file using said ith file encryption key, producing a plurality of encrypted files which includes an ith encrypted file which is said ith file encrypted under said ith file encryption key; transmitting from said multimedia distribution processor to a user processor at least a portion of said plurality of encrypted files; storing in said multimedia distribution processor, a first customer key which includes a clear customer number and a second portion; transforming in said multimedia distribution center, said first customer key with a transformation function producing a second customer key; encrypting said ith file encryption key with said second customer key, producing an encrypted ith file encryption key; transmitting from said multimedia distribution processor to a user processor, said first customer key; transmitting from said multimedia distribution processor to said user processor, said encrypted ith file encryption key; transforming at said user processor said first customer key using said transformed function, producing said second customer key; decrypting said ith file encryption key received at said user processor using said second customer key, recovering said ith file encryption key; decrypting said ith encrypted file received at said user processor, using said recovered ith file encryption key, producing said ith multimedia file; whereby the user processor is enabled to use said ith multimedia file.
Claim 24
Independent Claim
315 words
A method for securely distributing a plurality of multimedia files from a multimedia distribution processor to a user processor, and selectively enabling the user processor to use a subset of a lesser plurality of said plurality of multimedia files, comprising the steps of: storing in said multimedia distribution processor a plurality of multimedia files including an ith multimedia file; storing in said multimedia distribution processor a plurality of file encryption keys including an ith file encryption key; encrypting in said multimedia distribution processor said plurality of said multimedia files, using corresponding ones of said plurality of file encryption keys, including encrypting said ith file using said ith file encryption key, producing a plurality of encrypted files which includes an ith encrypted file which is said ith file encrypted under said ith file encryption key; transmitting from said multimedia distribution processor to a user processor at least a portion of said plurality of encrypted files; storing in said multimedia distribution processor, a first customer key which includes a clear customer number and a second portion; transforming in said multimedia distribution center, said first customer key with a transformation function producing a second customer key; encrypting said ith file encryption key with said second customer key, producing an encrypted ith file encryption key; transmitting from said multimedia distribution processor to a user processor, said first customer key; transmitting from said multimedia distribution processor to said user processor, said encrypted ith file encryption key; transforming at said user processor said first customer key using said transformed function, producing said second customer key; decrypting said ith file encryption key received at said user processor using said second customer key, recovering said ith file encryption key; decrypting said ith encrypted file received at said user processor, using said recovered ith file encryption key, producing said ith multimedia file; whereby the user processor is enabled to use said ith multimedia file.
References Cited (Backward Citations)
US4168396A
Cited
US4278837A
Cited
US4446519A
Cited
US4433207A
Cited
US4658093A
Cited
US4757534A
Cited
US4999806A
Cited
US4937863A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-06-06 | 1997-12-06 | 1998-06-07 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-06-06 | 2001-12-06 | 2002-06-07 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-06-06 | 2005-12-06 | 2006-06-07 | $7700.00 | Window Closed / Lapsed |