US5991399A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for securely distributing a conditional use private key to a trusted entity on a remote system
Assignee: Honeyman Cipher Solutions LLC
•
Filing: 1997-12-18
•
Granted: 1999-11-23
•
Expires: 2017-12-18
Abstract
Abstract Secure distribution of a private key to a user's application program (also called a "trusted player" such as a DVD player or CD-ROM player) with conditional access based on verification of the trusted player's integrity and authenticity is provided. Once validated, the trusted player uses the private key to decrypt encrypted digital content. The private key is dynamically generated, associated with specific digital content, and communicated in real-time from a server to the trusted player in a secure manner, thereby controlling access to encrypted digital content. The key is wrapped into an executable tamper resistant key module in which the key can only be used by the right trusted player as determined by the server based on user requests and payment. The key module plugs in to the trusted player and executes to validate the player and decrypt the content. The integrity of the trusted player is correlated to its ability to perform a cryptographic operation using an asymmetric key pair in a manner that is tamper resistant, thereby preventing an unencrypted copy of digital content to be made.
Inventors
- 👤 Gary L. Graunke
- 👤 John Carbajal
- 👤 Richard L. Maliszewski
- 👤 Carlos V. Rozas
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 02:03
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; G06F21/10; G06Q; G06Q20/00; G06Q20/38; G06Q20/382; G06Q20/3829; G11; G11B; G11B20/00; G11B20/00086; G11B20/0021; G06F2211/00; G06F2211/007; G06F2211/008
Claims Analysis
Total Claims: 48
Claim 1
Independent Claim
57 words
A method of securely distributing data comprising: generating an asymmetric key pair having a public key and a private key; encrypting predetermined data with the generated public key; and building an executable tamper resistant key module identified for a selected program, the executable tamper resistant key module including the generated private key and the encrypted predetermined data.
Claim 2
Independent Claim
57 words
A method of securely distributing data comprising: generating an asymmetric key pair having a public key and a private key; encrypting predetermined data with the generated public key; and building an executable tamper resistant key module identified for a selected program, the executable tamper resistant key module including the generated private key and the encrypted predetermined data.
Claim 3
Dependent Claim
27 words
The method of claim 1, wherein the program is on a remote system and further comprising sending the executable tamper resistant key module to the remote system.
Claim 4
Dependent Claim
36 words
The method of claim 2, further comprising executing the executable tamper resistant key module on the remote system to check the integrity and authenticity of the process and the integrity of the tamper resistant key module.
Claim 5
Dependent Claim
43 words
The method of claim 3, further comprising decrypting the encrypted predetermined data with the generated private key for the tamper resistant key module when the program is authentic and the program's integrity is validated and the tamper resistant key module's integrity is validated.
Claim 6
Dependent Claim
21 words
The method of claim 4, further comprising decrypting encrypted digital content resident on the remote system using the decrypted predetermined data.
Claim 7
Dependent Claim
28 words
The method of claim 5, wherein the program comprises a trusted player and the trusted player plays the decrypted digital content for a user of the remote system.
Claim 8
Dependent Claim
25 words
The method of claim 2, wherein the predetermined data comprises at least one key used to decrypt selected encrypted digital content on the remote system.
Claim 9
Dependent Claim
26 words
The method of claim 7, wherein the at least one key is specifically associated with the selected encrypted digital content but not other encrypted digital content.
Claim 10
Dependent Claim
19 words
The method of claim 1, wherein building the executable tamper resistant code module comprises generating an integrity verification kernel.
Claim 11
Dependent Claim
78 words
The method of claim 9, wherein generating an integrity verification kernel comprises accessing an asymmetric public key of a predetermined asymmetric key pair associated with a manifest of the program signed by an asymmetric private key of the predetermined asymmetric key pair, producing integrity verification kernel code with the asymmetric public key for verifying the signed manifest of the program and combining manifest parser generator code and the integrity verification kernel code to produce the integrity verification kernel.
Claim 12
Dependent Claim
50 words
The method of claim 10, wherein the program comprises a trusted player and the method further comprises building a manifest for the trusted player, signing the manifest with the asymmetric private key of the predetermined asymmetric key pair, and storing the asymmetric public key of the predetermined asymmetric key pair.
Claim 13
Dependent Claim
30 words
The method of claim 10, wherein building the executable tamper resistant key module further comprises building a decrypt engine with the generated private key for decrypting the encrypted predetermined data.
Claim 14
Dependent Claim
29 words
The method of claim 12, wherein building the executable tamper resistant key module further comprises combining the integrity verification kernel and the decrypt engine to produce a key module.
Claim 15
Dependent Claim
31 words
The method of claim 13, wherein building the executable tamper resistant key module further comprises compiling the key module with a tamper resistant compiler to generate the tamper resistant key module.
Claim 16
Dependent Claim
22 words
The method of claim 1, wherein the predetermined data comprises a plurality of symmetric keys used to decrypt selected encrypted digital content.
Claim 17
Dependent Claim
34 words
The method of claim 15, further comprising creating digital content, encrypting the digital content with the plurality of symmetric keys, and storing the plurality of symmetric keys for subsequent access during the decrypting step.
Claim 18
Dependent Claim
34 words
The method of claim 16, further comprising obtaining the encrypted digital content and requesting, by the remote system, the plurality of symmetric keys from a server performing the generating, encrypting, building and sending steps.
Claim 19
Dependent Claim
36 words
The method of claim 17, wherein the requesting step comprises providing an identifier of the selected encrypted digital content, an identifier of the remote system, and payment information for usage of the selected encrypted digital content.
Claim 20
Independent Claim
136 words
A method of distributing a conditional use private key to a program on a remote system comprising: generating an asymmetric key pair having a public key and a private key; encrypting predetermined data with the generated public key; building an executable tamper resistant key module identified for the program, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; sending the executable tamper resistant key module to the remote system; executing the executable tamper resistant key module on the remote system to check the integrity and authenticity of the program, and the integrity of the tamper resistant key module; and decrypting the encrypted predetermined data with the generated private key when the program is authentic and the program's integrity is validated and the tamper resistant key module's integrity is validated.
Claim 21
Independent Claim
136 words
A method of distributing a conditional use private key to a program on a remote system comprising: generating an asymmetric key pair having a public key and a private key; encrypting predetermined data with the generated public key; building an executable tamper resistant key module identified for the program, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; sending the executable tamper resistant key module to the remote system; executing the executable tamper resistant key module on the remote system to check the integrity and authenticity of the program, and the integrity of the tamper resistant key module; and decrypting the encrypted predetermined data with the generated private key when the program is authentic and the program's integrity is validated and the tamper resistant key module's integrity is validated.
Claim 22
Independent Claim
178 words
A method of distributing a conditional use private key from a server system to a trusted player on a client system for providing authorized access to selected encrypted digital content comprising: receiving a request from the trusted player for access to selected encrypted digital content on the client system; generating an asymmetric key pair having a public key and a private key; encrypting predetermined data with the generated public key; building an executable tamper resistant key module identified for the trusted player, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; sending the executable tamper resistant key module to the client system; executing the executable tamper resistant key module on the client system as part of the trusted player to check the integrity and authenticity of the trusted player, and the integrity of the tamper resistant key module; and decrypting the encrypted predetermined data with the generated private key when the trusted player is authentic and the trusted player's integrity is validated and the tamper resistant key module's integrity is validated.
Claim 23
Independent Claim
178 words
A method of distributing a conditional use private key from a server system to a trusted player on a client system for providing authorized access to selected encrypted digital content comprising: receiving a request from the trusted player for access to selected encrypted digital content on the client system; generating an asymmetric key pair having a public key and a private key; encrypting predetermined data with the generated public key; building an executable tamper resistant key module identified for the trusted player, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; sending the executable tamper resistant key module to the client system; executing the executable tamper resistant key module on the client system as part of the trusted player to check the integrity and authenticity of the trusted player, and the integrity of the tamper resistant key module; and decrypting the encrypted predetermined data with the generated private key when the trusted player is authentic and the trusted player's integrity is validated and the tamper resistant key module's integrity is validated.
Claim 24
Dependent Claim
26 words
The method of claim 20, wherein the predetermined data comprises at least one key used to decrypt the selected encrypted digital content on the client system.
Claim 25
Dependent Claim
26 words
The method of claim 21, wherein the at least one key is specifically associated with the selected encrypted digital content but not other encrypted digital content.
Claim 26
Dependent Claim
23 words
The method of claim 20, wherein the predetermined data comprises a plurality of symmetric keys used to decrypt the selected encrypted digital content.
Claim 27
Dependent Claim
34 words
The method of claim 23, further comprising creating digital content, encrypting the digital content with the plurality of symmetric keys, and storing the plurality of symmetric keys for subsequent access during the decrypting step.
Claim 28
Dependent Claim
21 words
The method of claim 20, further comprising decrypting encrypted digital content resident on the client system using the decrypted predetermined data.
Claim 29
Dependent Claim
21 words
The method of claim 25, wherein the trusted player plays the decrypted digital content for a user of the client system.
Claim 30
Dependent Claim
117 words
A machine readable medium having stored therein a plurality of machine readable instructions for execution by a processing unit, the machine readable instructions for generating an asymmetric key pair having a public key and a private key; for encrypting predetermined data with the generated public key; for building an executable tamper resistant key module identified for a selected program on a remote system, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; and for sending the executable tamper resistant key module to the remote system to verify the authenticity and integrity of the program operating on the remote system and decrypt the encrypted predetermined data when the program is validated.
Claim 31
Dependent Claim
117 words
A machine readable medium having stored therein a plurality of machine readable instructions for execution by a processing unit, the machine readable instructions for generating an asymmetric key pair having a public key and a private key; for encrypting predetermined data with the generated public key; for building an executable tamper resistant key module identified for a selected program on a remote system, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; and for sending the executable tamper resistant key module to the remote system to verify the authenticity and integrity of the program operating on the remote system and decrypt the encrypted predetermined data when the program is validated.
Claim 32
Dependent Claim
156 words
A machine readable medium having stored therein a plurality of machine readable instructions for execution by a plurality of processing units, the machine readable instructions for generating an asymmetric key pair having a public key and a private key; for encrypting predetermined data with the generated public key; for building an executable tamper resistant key module identified for a program on a remote system, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; for sending the executable tamper resistant key module to a remote system, for executing the executable tamper resistant key module by a processing unit on the remote system to check the integrity and authenticity of the program, and the integrity of the tamper resistant key module; and for decrypting the encrypted predetermined data with the generated private key when the program is authentic, the program's integrity is validated and the tamper resistant key module is validated.
Claim 33
Dependent Claim
156 words
A machine readable medium having stored therein a plurality of machine readable instructions for execution by a plurality of processing units, the machine readable instructions for generating an asymmetric key pair having a public key and a private key; for encrypting predetermined data with the generated public key; for building an executable tamper resistant key module identified for a program on a remote system, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; for sending the executable tamper resistant key module to a remote system, for executing the executable tamper resistant key module by a processing unit on the remote system to check the integrity and authenticity of the program, and the integrity of the tamper resistant key module; and for decrypting the encrypted predetermined data with the generated private key when the program is authentic, the program's integrity is validated and the tamper resistant key module is validated.
Claim 34
Independent Claim
83 words
An apparatus for secure distribution of data comprising: a processor for executing programming instructions; and a storage medium having stored thereon a plurality of programming instructions for execution by the processor, the programming instructions generating an asymmetric key pair having a public key and a private key, encrypting predetermined data with the generated public key, and building an executable tamper resistant key module identified for a program, the executable tamper resistant key module including the generated private key and the encrypted predetermined data.
Claim 35
Independent Claim
83 words
An apparatus for secure distribution of data comprising: a processor for executing programming instructions; and a storage medium having stored thereon a plurality of programming instructions for execution by the processor, the programming instructions generating an asymmetric key pair having a public key and a private key, encrypting predetermined data with the generated public key, and building an executable tamper resistant key module identified for a program, the executable tamper resistant key module including the generated private key and the encrypted predetermined data.
Claim 36
Dependent Claim
23 words
The apparatus of claim 29, wherein the storage medium comprises instructions for sending the executable tamper resistant key module to the remote system.
Claim 37
Independent Claim
217 words
A system for secure distribution of data comprising: a first system comprising a first processor for executing a first set of programming instructions, and a first storage medium having stored thereon the first set of programming instructions for execution by the first processor, the first set of programming instructions generating an asymmetric key pair having a public key and a private key, encrypting predetermined data with the generated public key, and building an executable tamper resistant key module, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; and a second system comprising a second processor for executing a second set of programming instructions, and a second storage medium having stored thereon the second set of programming instructions for execution by the second processor, the second set of programming instructions for operating as a trusted player of digital content, for receiving the executable tamper resistant key module from the first system, for executing the executable tamper resistant key module to check the integrity and authenticity of the trusted player, and the integrity of the tamper resistant key module; and for decrypting the encrypted predetermined data with the generated private key when the trusted player is authentic and the trusted player's integrity is validated and the tamper resistant key module is validated.
Claim 38
Independent Claim
217 words
A system for secure distribution of data comprising: a first system comprising a first processor for executing a first set of programming instructions, and a first storage medium having stored thereon the first set of programming instructions for execution by the first processor, the first set of programming instructions generating an asymmetric key pair having a public key and a private key, encrypting predetermined data with the generated public key, and building an executable tamper resistant key module, the executable tamper resistant key module including the generated private key and the encrypted predetermined data; and a second system comprising a second processor for executing a second set of programming instructions, and a second storage medium having stored thereon the second set of programming instructions for execution by the second processor, the second set of programming instructions for operating as a trusted player of digital content, for receiving the executable tamper resistant key module from the first system, for executing the executable tamper resistant key module to check the integrity and authenticity of the trusted player, and the integrity of the tamper resistant key module; and for decrypting the encrypted predetermined data with the generated private key when the trusted player is authentic and the trusted player's integrity is validated and the tamper resistant key module is validated.
Claim 39
Dependent Claim
31 words
The system of claim 31, where the second set of programming instructions further comprise instructions for decrypting encrypted digital content resident on the second storage medium using the decrypted predetermined data.
Claim 40
Dependent Claim
21 words
The system of claim 32, wherein the trusted player plays the decrypted digital content for a user of the second system.
Claim 41
Independent Claim
65 words
A method of securely distributing data encrypted by a public key of an asymmetric key pair comprising: building an executable tamper resistant key module identified for a selected program resident on a remote system, the executable tamper resistant key module including a private key of the asymmetric key pair and the encrypted data; and sending the executable tamper resistant key module to the remote system.
Claim 42
Independent Claim
65 words
A method of securely distributing data encrypted by a public key of an asymmetric key pair comprising: building an executable tamper resistant key module identified for a selected program resident on a remote system, the executable tamper resistant key module including a private key of the asymmetric key pair and the encrypted data; and sending the executable tamper resistant key module to the remote system.
Claim 43
Independent Claim
104 words
A method of receiving and accessing data encrypted by a public key of an asymmetric key pair comprising: receiving an executable tamper resistant key module identified for a selected program, the executable tamper resistant key module including a private key of the asymmetric key pair and the encrypted data; executing the executable tamper resistant key module to check the integrity and authenticity of the selected program and the integrity of the tamper resistant key module; and decrypting the encrypted data with the private key when the selected program is authentic, the program's integrity is validated, and the tamper resistant key module's integrity is validated.
Claim 44
Independent Claim
104 words
A method of receiving and accessing data encrypted by a public key of an asymmetric key pair comprising: receiving an executable tamper resistant key module identified for a selected program, the executable tamper resistant key module including a private key of the asymmetric key pair and the encrypted data; executing the executable tamper resistant key module to check the integrity and authenticity of the selected program and the integrity of the tamper resistant key module; and decrypting the encrypted data with the private key when the selected program is authentic, the program's integrity is validated, and the tamper resistant key module's integrity is validated.
Claim 45
Dependent Claim
84 words
An article comprising a machine readable medium having stored therein a plurality of machine readable instructions for execution by a processing unit, the machine readable instructions for building an executable tamper resistant key module identified for a selected program resident on a remote system, the executable tamper resistant key module including a private key of an asymmetric key pair and data encrypted by a public key of the asymmetric key pair, and for sending the executable tamper resistant key module to the remote system.
Claim 46
Dependent Claim
84 words
An article comprising a machine readable medium having stored therein a plurality of machine readable instructions for execution by a processing unit, the machine readable instructions for building an executable tamper resistant key module identified for a selected program resident on a remote system, the executable tamper resistant key module including a private key of an asymmetric key pair and data encrypted by a public key of the asymmetric key pair, and for sending the executable tamper resistant key module to the remote system.
Claim 47
Dependent Claim
125 words
An article comprising a machine readable medium having stored therein a plurality of machine readable instructions for execution by a processing unit, the machine readable instructions for receiving an executable tamper resistant key module identified for a selected program, the executable tamper resistant key module including a private key of an asymmetric key pair and data encrypted by a public key of the asymmetric key pair, for initiating execution of the executable tamper resistant key module to check the integrity and authenticity of the selected program and the integrity of the tamper resistant key module, and for decrypting the encrypted data with the private key when the selected program is authentic, the program's integrity is validated, and the tamper resistant key module's integrity is validated.
Claim 48
Dependent Claim
125 words
An article comprising a machine readable medium having stored therein a plurality of machine readable instructions for execution by a processing unit, the machine readable instructions for receiving an executable tamper resistant key module identified for a selected program, the executable tamper resistant key module including a private key of an asymmetric key pair and data encrypted by a public key of the asymmetric key pair, for initiating execution of the executable tamper resistant key module to check the integrity and authenticity of the selected program and the integrity of the tamper resistant key module, and for decrypting the encrypted data with the private key when the selected program is authentic, the program's integrity is validated, and the tamper resistant key module's integrity is validated.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-11-22 | 2003-05-24 | 2003-11-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-11-22 | 2007-05-24 | 2007-11-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-11-22 | 2011-05-24 | 2011-11-23 | $7700.00 | Window Closed / Lapsed |