US6314409B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
System for controlling access and distribution of digital property
Assignee: Hanger Solutions LLC
•
Filing: 1998-10-26
•
Granted: 2001-11-06
•
Expires: 2018-10-26
Abstract
Abstract A method and device are provided for controlling access to data. Portions of the data are protected and rules concerning access rights to the data are determined. Access to the protected portions of the data is prevented, other than in a non-useable form; and users are provided access to the data only in accordance with the rules as enforced by a mechanism protected by tamper detection. A method is also provided for distributing data for subsequent controlled use of those data. The method includes protecting portions of the data; preventing access to the protected portions of the data other than in a non-useable form; determining rules concerning access rights to the data; protecting the rules; and providing a package including: the protected portions of the data and the protected rules. A user is provided controlled access to the distributed data only in accordance with the rules as enforced by a mechanism protected by tamper protection. A device is provided for controlling access to data having protected data portions and rules concerning access rights to the data. The device includes means for storing the rules; and means for accessing the protected data portions only in accordance with the rules, whereby user access to the protected data portions is permitted only if the rules indicate that the user is allowed to access the portions of the data.
Inventors
- 👤 Paul B. Schneck
- 👤 Marshall D. Abrams
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 01:06
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/10; G06F21/106; G06F21/1062; G06F21/1063; G06F21/109; G06F21/16; G06F21/30; G06F21/31; G06F21/32; G06F21/34; G06F21/50; G06F21/57; G06F21/577; G06F21/6209; G06F21/6218; G06F21/6245; G06F21/70; G06F21/71; G06F21/72; G06F21/86; G06Q; G06Q30/00; G06Q30/018; H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0822; G06F21/101; G06F21/1011; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2137; G06F2221/2141; G06F2221/2143; G06F2221/2145; G06F2221/2149; G11; G11B; G11B20/00; G11B20/00086; G11B20/00666; G11B20/00673; H04L2209/00; H04L2209/56; H04L2463/00; H04L2463/101
Claims Analysis
Total Claims: 57
Claim 1
Independent Claim
80 words
A method of distributing data, the method comprising: protecting portions of the data; and openly distributing the protected portions of the data, whereby each and every access to an unprotected form of the protected portions of the data is limited in accordance with rules defining access rights to the data as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected portions of the data.
Claim 2
Independent Claim
80 words
A method of distributing data, the method comprising: protecting portions of the data; and openly distributing the protected portions of the data, whereby each and every access to an unprotected form of the protected portions of the data is limited in accordance with rules defining access rights to the data as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected portions of the data.
Claim 3
Dependent Claim
39 words
A method as in claim 1 , wherein the protecting of portions of the data comprises encrypting the portions of the data, whereby unauthorized access to the protected data is not to the un-encrypted form of the protected data.
Claim 4
Dependent Claim
45 words
A method as in claim 2 , wherein the encrypting of portions of the data encrypts the portions of the data with a data encrypting key, the data encrypting key having a corresponding data decrypting key, the method further comprising: encrypting the data encrypting key.
Claim 5
Dependent Claim
19 words
A method as in claim 3 , further comprising: providing a decrypting key corresponding to the key encrypting key.
Claim 6
Dependent Claim
22 words
A method as in claim 1 , wherein the data represent at least one of software, text, numbers, graphics, audio, and video.
Claim 7
Dependent Claim
59 words
A method as in claim 1 , wherein the rules indicate which users are allowed to access the protected portions of the data, the method further comprising allowing the user access to the unprotected form of a protected portion of the data only if the rules indicate that the user is allowed to access that portion of the data.
Claim 8
Dependent Claim
41 words
A method as in claim 1 wherein the rules indicate distribution rights of the data, the method further comprising: allowing distribution of the unprotected form of the protected data portions only in accordance with the distribution rights indicated in the rules.
Claim 9
Dependent Claim
46 words
A method as in claim 1 , wherein the rules indicate access control rights of the user, the method further comprising: allowing the user to access the unprotected form of the protected data portions only in accordance with the access control rights indicated in the rules.
Claim 10
Dependent Claim
31 words
A method as in claim 8 , wherein the access control rights include at least one of: local display rights, printing rights, copying rights, execution rights, transmission rights, and modification rights.
Claim 11
Dependent Claim
41 words
A method as in claim 1 , wherein the rules indicate access control quantities, the method further comprising: allowing access to the unprotected form of the protected data portions only in accordance with the access control quantities indicated in the rules.
Claim 12
Dependent Claim
63 words
A method as in claim 10 , wherein the access control quantities include at least one of: a number of allowed read-accesses to the data; an allowable size of a read-access to the data; an expiration date of the data; an intensity of accesses to the data; an allowed level of accuracy and fidelity; and an allowed resolution of access to the data.
Claim 13
Dependent Claim
39 words
A method as in claim 1 , wherein the rules indicate payment requirements, the method further comprising: allowing access to the unprotected form of the protected data portions only if the payment requirements indicated in the rules are satisfied.
Claim 14
Dependent Claim
26 words
A method as in claim 1 , wherein the rules relate to at least one of: characteristics of users; characteristics of protected data; and environmental characteristics.
Claim 15
Dependent Claim
23 words
A method as in claim 1 wherein the rules defining access rights include at least one internal rule built in the access mechanism.
Claim 16
Dependent Claim
22 words
A method as in claim 14 wherein the at least one internal rule cannot be made less restrictive by any other rules.
Claim 17
Dependent Claim
16 words
A method as in claim 14 wherein the access mechanism is contained in a stand-alone device.
Claim 18
Dependent Claim
37 words
A method as in claim 16 wherein the stand-alone device is selected from the group consisting of: a facsimile machine, a television, a VCR, a laser printer, a telephone, a laser disk player, and a computer system.
Claim 19
Dependent Claim
75 words
A method as in claim 1 , wherein the access mechanism is contained in a stand-alone device selected from the group comprising: a facsimile machine, a television, a VCR, a laser printer, a telephone, a laser disk player, and a computer system; and wherein the rules defining access rights include at least one internal rule built-in to the access mechanism; and wherein the at least one internal rule comprises access control rights to the data.
Claim 20
Dependent Claim
35 words
A method as in claim 1 , further comprising: providing a distribution rule, wherein the rules defining access rights comprise the distribution rule and at least one internal rule built in to the access mechanism.
Claim 21
Dependent Claim
42 words
A method as in claim 19 wherein the protecting of portions of the data comprises encrypting the portions of the data using a data encrypting key having a corresponding data decrypting key, and wherein the distribution rule comprises a data decrypting key.
Claim 22
Independent Claim
96 words
A method of distributing data for subsequent controlled use of the data by a user, the method comprising: protecting portions of the data; protecting rules defining access rights to the data; and openly distributing the protected portions of the data and the protected rules, whereby controlled access to an unprotected form of the protected portions of the data is provided only in accordance with the rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected portions of the data.
Claim 23
Independent Claim
96 words
A method of distributing data for subsequent controlled use of the data by a user, the method comprising: protecting portions of the data; protecting rules defining access rights to the data; and openly distributing the protected portions of the data and the protected rules, whereby controlled access to an unprotected form of the protected portions of the data is provided only in accordance with the rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected portions of the data.
Claim 24
Independent Claim
132 words
A method of distributing data for subsequent controlled use of the data by a user, some of the data having access rules already associated therewith, the access rules defining access rights to the data, the method comprising: protecting portions of the data; providing rules defining access rights to the data; combining the provided rules with rules previously associated with the data; protecting the combined rules; and openly distributing the protected portions of the data and the protected combined rules, whereby controlled access to the unprotected form of the protected portions of the data is provided only in accordance with the combined rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected portions of the data.
Claim 25
Independent Claim
132 words
A method of distributing data for subsequent controlled use of the data by a user, some of the data having access rules already associated therewith, the access rules defining access rights to the data, the method comprising: protecting portions of the data; providing rules defining access rights to the data; combining the provided rules with rules previously associated with the data; protecting the combined rules; and openly distributing the protected portions of the data and the protected combined rules, whereby controlled access to the unprotected form of the protected portions of the data is provided only in accordance with the combined rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected portions of the data.
Claim 26
Independent Claim
98 words
A method of controlling secondary distribution of data, the method comprising: protecting portions of the data; protecting rules defining access rights to the data; openly providing the protected portions of the data and the protected rules to a device having an access mechanism; and limiting transmission of the protected portions of the data from the device (a) only as protected data or (b) in accordance with the rules as enforced by the access mechanism, so that unauthorized access to the protected portions of the data is not to an unprotected form of the protected portions of the data.
Claim 27
Independent Claim
98 words
A method of controlling secondary distribution of data, the method comprising: protecting portions of the data; protecting rules defining access rights to the data; openly providing the protected portions of the data and the protected rules to a device having an access mechanism; and limiting transmission of the protected portions of the data from the device (a) only as protected data or (b) in accordance with the rules as enforced by the access mechanism, so that unauthorized access to the protected portions of the data is not to an unprotected form of the protected portions of the data.
Claim 28
Independent Claim
76 words
A method of accessing openly distributed data, the method comprising: obtaining openly distributed data having protected data portions and rules defining access rights to the protected data portions; and limiting each and every access to an unprotected form of the protected data portions in accordance with the rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected data portions.
Claim 29
Independent Claim
76 words
A method of accessing openly distributed data, the method comprising: obtaining openly distributed data having protected data portions and rules defining access rights to the protected data portions; and limiting each and every access to an unprotected form of the protected data portions in accordance with the rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected data portions.
Claim 30
Independent Claim
96 words
A device for displaying images represented by data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; an access mechanism for accessing the data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data, the access being enforced by the access mechanism; and means for displaying the images represented by the accessed data.
Claim 31
Independent Claim
96 words
A device for displaying images represented by data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; an access mechanism for accessing the data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data, the access being enforced by the access mechanism; and means for displaying the images represented by the accessed data.
Claim 32
Dependent Claim
23 words
A device as in claim 25 wherein the rules defining access rights include at least one internal rule built in the access mechanism.
Claim 33
Dependent Claim
19 words
A device as in claim 26 wherein the internal rules cannot be made less restrictive by any other rules.
Claim 34
Dependent Claim
19 words
A device as in claim 26 wherein the internal rules limit the device only to being an output device.
Claim 35
Dependent Claim
26 words
A device as in claim 26 wherein the device is selected from the group consisting of: a VCR, a laser disk player, and a computer system.
Claim 36
Independent Claim
96 words
A device for outputting images represented by data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; an access mechanism for accessing the data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data, the access being enforced by the access mechanism; and means for outputting the images represented by the accessed data.
Claim 37
Independent Claim
96 words
A device for outputting images represented by data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; an access mechanism for accessing the data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data, the access being enforced by the access mechanism; and means for outputting the images represented by the accessed data.
Claim 38
Independent Claim
99 words
A device for outputting an audio signal represented by data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; an access mechanism for accessing the data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data, the access being enforced by the access mechanism; and means for outputting the audio signal represented by the accessed data.
Claim 39
Independent Claim
99 words
A device for outputting an audio signal represented by data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; an access mechanism for accessing the data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data, the access being enforced by the access mechanism; and means for outputting the audio signal represented by the accessed data.
Claim 40
Independent Claim
99 words
A device for outputting an output signal based on data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; an access mechanism for accessing the data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data, the access being enforced by the access mechanism; and means for outputting the output signal represented by the accessed data.
Claim 41
Independent Claim
99 words
A device for outputting an output signal based on data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; an access mechanism for accessing the data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data, the access being enforced by the access mechanism; and means for outputting the output signal represented by the accessed data.
Claim 42
Independent Claim
92 words
A device for generating an output signal corresponding to data comprising protected data portions and rules defining access rights to the digital data, the device comprising: means for storing the rules; an access mechanism for accessing the digital data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data; and means for generating the output signal from the accessed data.
Claim 43
Independent Claim
92 words
A device for generating an output signal corresponding to data comprising protected data portions and rules defining access rights to the digital data, the device comprising: means for storing the rules; an access mechanism for accessing the digital data only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data; and means for generating the output signal from the accessed data.
Claim 44
Independent Claim
94 words
A device for distributing data for subsequent controlled use of the data by a user, the device comprising: means for protecting portions of the data; means for protecting rules defining access rights to the data; and means providing the protected portions of the data and the protected rules; whereby a user is provided controlled access to the data only in accordance with the rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to an unprotected form of the protected portions of the data.
Claim 45
Independent Claim
94 words
A device for distributing data for subsequent controlled use of the data by a user, the device comprising: means for protecting portions of the data; means for protecting rules defining access rights to the data; and means providing the protected portions of the data and the protected rules; whereby a user is provided controlled access to the data only in accordance with the rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to an unprotected form of the protected portions of the data.
Claim 46
Independent Claim
143 words
A device for distributing data for subsequent controlled use of the data by a user, some of the data having access rules already associated therewith, the access rules defining access rights to the data, the device comprising: means for protecting portions of the data; means for providing rules concerning access rights to the data; means for combining the provided rules with rules previously associated with the data; means for protecting the combined rules; and means for providing the protected portions of the data and the protected combined rules; whereby the user is provided controlled access to an unprotected form of the protected portions of the data only in accordance with the combined rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected portions of the data.
Claim 47
Independent Claim
143 words
A device for distributing data for subsequent controlled use of the data by a user, some of the data having access rules already associated therewith, the access rules defining access rights to the data, the device comprising: means for protecting portions of the data; means for providing rules concerning access rights to the data; means for combining the provided rules with rules previously associated with the data; means for protecting the combined rules; and means for providing the protected portions of the data and the protected combined rules; whereby the user is provided controlled access to an unprotected form of the protected portions of the data only in accordance with the combined rules as enforced by an access mechanism, so that unauthorized access to the protected portions of the data is not to the unprotected form of the protected portions of the data.
Claim 48
Dependent Claim
81 words
A process control system comprising a device for controlling access to data, the data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; and an access mechanism for accessing the unprotected form of the protected data portions only in accordance with the rules, whereby output of an unprotected form of the protected data portions is permitted by the access mechanism only in such manner as is permitted by the rules.
Claim 49
Dependent Claim
81 words
A process control system comprising a device for controlling access to data, the data comprising protected data portions and rules defining access rights to the data, the device comprising: means for storing the rules; and an access mechanism for accessing the unprotected form of the protected data portions only in accordance with the rules, whereby output of an unprotected form of the protected data portions is permitted by the access mechanism only in such manner as is permitted by the rules.
Claim 50
Dependent Claim
25 words
A process control system as in claim 36 wherein the rules defining access rights include at least one internal rule built in the access mechanism.
Claim 51
Dependent Claim
92 words
A general purpose computer system comprising a device for controlling access to data, the data comprising protected data portions and rules defining access rights to the data, the device comprising: storage means for storing the rules; and an access mechanism for accessing the unprotected form of the protected data portions only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data.
Claim 52
Dependent Claim
92 words
A general purpose computer system comprising a device for controlling access to data, the data comprising protected data portions and rules defining access rights to the data, the device comprising: storage means for storing the rules; and an access mechanism for accessing the unprotected form of the protected data portions only in accordance with the rules, whereby user access to an unprotected form of the protected data portions is permitted by the access mechanism only if the rules indicate that the user is allowed to access the protected portions of the data.
Claim 53
Dependent Claim
24 words
A computer system as in claim 38 wherein the rules defining access rights include at least one internal rule built in the access mechanism.
Claim 54
Dependent Claim
53 words
A computer system as in claim 38 wherein the system is implemented at various levels, and wherein at least one low level effectively defines a virtual machine in which the access mechanism is implemented, and wherein mechanisms implemented at each level of system implementation can invoke the levels below their level of implementation.
Claim 55
Dependent Claim
63 words
A computer system as in claim 40 wherein the various levels of the computer system comprise: an application environment level; an operating system (OS) level which is at a lower level than the application environment level; and a Basic Input/Output System (BIOS) level which is lower than OS level, and wherein the access mechanism is preferably implemented at or below the BIOS level.
Claim 56
Dependent Claim
34 words
A computer system as in claim 40 wherein the implementation of the access mechanism prevents a user from by-passing the access mechanism and thereby prevents a user circumventing rule enforcement by the access mechanism.
Claim 57
Dependent Claim
29 words
A computer system as in claim 40 wherein a mechanism implemented at a particular level can invoke only its implementation level and the level immediately below its implementation level.
References Cited (Backward Citations)
US3504132A
Cited
US3648020A
Cited
US3798359A
Cited
US3764742A
Cited
US3878331A
Cited
US3906460A
Cited
US3911216A
Cited
US3944976A
Cited
US3958081A
Cited
US4004089A
Cited
US3996449A
Cited
US4028678A
Cited
US4074066A
Cited
US4037215A
Cited
US4087856A
Cited
US4183085A
Cited
US4120030A
Cited
US4168396A
Cited
US4278837A
Cited
US4238854A
Cited
US4193131A
Cited
US4206315A
Cited
US4281215A
Cited
US4246638A
Cited
US4323921A
Cited
US4465901A
Cited
US4264782A
Cited
US4319079A
Cited
US4306289A
Cited
US4529870A
Cited
US4446519A
Cited
US4433207A
Cited
US4471163A
Cited
US4454594A
Cited
US4458315A
Cited
US4558176A
Cited
US4658093A
Cited
US4646234A
Cited
US4757533A
Cited
US5339091A
Cited
US5014234A
Cited
US5010571A
Cited
US5410598A
Cited
US4977594A
Cited
US4827508A
Cited
US5050213A
Cited
US5047928A
Cited
US4796181A
Cited
EP0332707B1
Cited
US4937863A
Cited
US4924378A
Cited
US4961142A
Cited
US5247575A
Cited
US4932054A
Cited
US5023907A
Cited
US4953209A
Cited
US5159182A
Cited
US5113519A
Cited
US5345588A
Cited
GB2236604B
Cited
US5191193A
Cited
US5146499A
Cited
US5263157A
Cited
US5263158A
Cited
US5058164A
Cited
US5027396A
Cited
US5058162A
Cited
US5432849A
Cited
US5574648A
Cited
US5291596A
Cited
US5103476A
Cited
US5222134A
Cited
US5438508A
Cited
US5204897A
Cited
US5260999A
Cited
US5504814A
Cited
US5301231A
Cited
US5388156A
Cited
US5392351A
Cited
US5347578A
Cited
US5235642A
Cited
US5319705A
Cited
US5594936A
Cited
US5337357A
Cited
US5442541A
Cited
US5386469A
Cited
US5400403A
Cited
US5457746A
Cited
US5677953A
Cited
US5703951A
Cited
US5646992A
Cited
US5369702A
Cited
US5450489A
Cited
US5473687A
Cited
US5386471A
Cited
US5394469A
Cited
US5787172A
Cited
US5629980A
Cited
US5638443A
Cited
US5910987A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-11-05 | 2005-05-07 | 2005-11-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-11-05 | 2009-05-07 | 2009-11-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-11-05 | 2013-05-07 | 2013-11-06 | $7700.00 | Window Closed / Lapsed |