US7120800B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Systems and methods for secure transaction management and electronic rights protection
Assignee: Intertrust Technologies Corp
•
Filing: 2001-06-01
•
Granted: 2006-10-10
•
Expires: 2021-06-01
Abstract
Abstract The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node. These techniques may be used to support an all-electronic information distribution, for example, utilizing the “electronic highway.”
Inventors
- 👤 Karl L. Ginter
- 👤 Victor H. Shear
- 👤 Francis J. Spahn
- 👤 David M. Van Wie
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 11:56
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/04; G06F; G06F21/00; G06F21/10; G06F21/109; G06F21/16; G06F21/30; G06F21/31; G06F21/33; G06F21/70; G06F21/86; G06Q20/02; G06Q20/023; G06Q20/08; G06Q20/12; G06Q20/123; G06Q20/1235; G06Q20/22; G06Q20/24; G06T; G06T1/00; G06T1/0021; G07; G07F; G07F9/00; G07F9/02; G07F9/026; H; H04; H04L; H04L63/00; H04L63/20; H04N; H04N21/00; H04N21/20; H04N21/23; H04N21/234; H04N21/2347; H04N21/23476; H04N21/235; H04N21/236; H04N21/2362; H04N21/25; H04N21/254; H04N21/2541; H04N21/2543; H04N21/2547; H04N21/258; H04N21/25866; H04N21/25875; H04N21/40; H04N21/41; H04N21/414; H04N21/4143; H04N21/43; H04N21/434; H04N21/4345; H04N21/435; H04N21/44; H04N21/4405; H04N21/442; H04N21/44204; H04N21/443; H04N21/45; H04N21/462; H04N21/4627; H04N21/47; H04N21/475; H04N21/4753; H04N21/60; H04N21/65; H04N21/658; H04N21/6581; H04N21/80; H04N21/81; H04N21/8166; H04N21/83; H04N21/835; H04N21/8355; H04N21/83555; H04N21/8358; H04N7/00; H04N7/16; H04N7/162; H04N7/173; H04N7/17309; G06F12/00; G06F12/14; G06F12/1408; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2101; G06F2221/2115; G06F2221/2135; G06F2221/2151; H04L2463/00; H04L2463/101; H04L2463/102; H04L2463/103
Claims Analysis
Total Claims: 44
Claim 1
Independent Claim
123 words
A load module embodied on a computer-readable medium, the load module comprising: a load module header including a public portion and a private portion; said public portion including identification information and information describing at least one aspect of a hardware or software platform on which said load module is designed to execute; said private portion including at least one correlation tag including information used to determine whether a method has authorization to call or load the load module; and a load module body, including: executable programming specifying that information relating to a use of the load module be communicated to a remote site; and a reference to data, at least some of said data being associated with or used by said executable programming.
Claim 2
Dependent Claim
123 words
A load module embodied on a computer-readable medium, the load module comprising: a load module header including a public portion and a private portion; said public portion including identification information and information describing at least one aspect of a hardware or software platform on which said load module is designed to execute; said private portion including at least one correlation tag including information used to determine whether a method has authorization to call or load the load module; and a load module body, including: executable programming specifying that information relating to a use of the load module be communicated to a remote site; and a reference to data, at least some of said data being associated with or used by said executable programming.
Claim 3
Dependent Claim
27 words
The load module of claim 1 , in which said at least one aspect includes the level or degree of security present or available on such platform.
Claim 4
Dependent Claim
19 words
The load module of claim 1 , in which said at least one aspect includes a type of computer.
Claim 5
Dependent Claim
23 words
The load module of claim 1 , in which said at least one aspect includes a type of software running on such platform.
Claim 6
Dependent Claim
24 words
The load module of claim 1 , in which said at least one aspect includes one or more computer languages recognized by said platform.
Claim 7
Dependent Claim
115 words
An operating system embodied on a computer-readable medium, comprising: component assembling programming which assembles a plurality of elements into a component, said component assembling programming including; (a) validation programming used to validate said elements, said validation programming including: (1) tag checking programming used to check the identity, validity or integrity of elements by comparing tags incorporated in said elements to expected values; and (2) element identification and referencing programming; and (b) communications programming used to communicate at least one result of said tag comparison to a remote site; and an object switch which controls and communicates objects, said object switch including: one or more stream interfaces; and a container manager used to manage secure containers.
Claim 8
Dependent Claim
115 words
An operating system embodied on a computer-readable medium, comprising: component assembling programming which assembles a plurality of elements into a component, said component assembling programming including; (a) validation programming used to validate said elements, said validation programming including: (1) tag checking programming used to check the identity, validity or integrity of elements by comparing tags incorporated in said elements to expected values; and (2) element identification and referencing programming; and (b) communications programming used to communicate at least one result of said tag comparison to a remote site; and an object switch which controls and communicates objects, said object switch including: one or more stream interfaces; and a container manager used to manage secure containers.
Claim 9
Dependent Claim
33 words
The operating system of claim 6 , in which: said operating system is designed to operate correctly with applications programs written to run on one or more versions of a conventional operating system.
Claim 10
Dependent Claim
43 words
The operating system of claim 6 , in which: said operating system runs in a processing environment; and said operating system includes at least one added component delivered at some point after the initial installation of said operating system at said processing environment.
Claim 11
Dependent Claim
18 words
The operating system of claim 8 , in which: said added component provides scalability to said operating system.
Claim 12
Dependent Claim
23 words
The operating system of claim 8 , in which: said added component comprises a component assembly made up of a plurality of elements.
Claim 13
Dependent Claim
27 words
The operating system of claim 6 , said operating system further comprising: channel definition programming which sets up and initializes channels in which component assemblies are assembled.
Claim 14
Dependent Claim
53 words
The operating system of claim 6 , in which: said component assembling program includes programming which checks said components for information regarding the manner in which said components are designed to be assembled into a component assembly, said programming requiring that said components only be assembled in the manner specified by said information.
Claim 15
Dependent Claim
39 words
The operating system of claim 6 , in which: said tag checking programming includes comparison programming which compares the contents of a public tag associated with an element with the contents of a private tag associated with that element.
Claim 16
Dependent Claim
23 words
The operating system of claim 13 , in which: said comparison programming includes programming which decrypts said private tag prior to said comparison.
Claim 17
Dependent Claim
40 words
The operating system of claim 6 , in which: said tag checking programming includes comparison programming which compares the contents of a tag associated with an element with the contents of a tag associated with a process requesting said element.
Claim 18
Dependent Claim
26 words
The operating system of claim 15 , in which: said comparison programming includes programming which decrypts said tag associated with said element prior to said comparison.
Claim 19
Dependent Claim
68 words
The operating system of claim 6 , in which: said tag checking programming includes comparison programming which compares the contents of a tag associated with an element with the contents of a tag stored in a secure processing unit; said comparison designed to determine whether said tag associated with said element is the same as the tag most recently assigned to said element by said secure processing unit.
Claim 20
Dependent Claim
12 words
The operating system of claim 6 , further comprising: e-mail management programming.
Claim 21
Dependent Claim
25 words
The operating system of claim 18 , in which: said e-mail management programming includes programming which recognizes and controls secure e-mail or secure e-mail attachments.
Claim 22
Dependent Claim
28 words
The operating system of claim 19 , in which: said e-mail management programming includes programming which routes secure e-mail or secure e-mail attachments to a secure memory location.
Claim 23
Dependent Claim
13 words
The operating system of claim 6 , further comprising: an object repository manager.
Claim 24
Dependent Claim
22 words
The operating system of claim 21 , in which: said object repository manager provides services relating to access to an object repository.
Claim 25
Dependent Claim
23 words
The operating system of claim 6 , in which: said validation programming includes certificate programming which checks digital certificates associated with said elements.
Claim 26
Dependent Claim
31 words
The operating system of claim 23 , in which: said certificate programming includes programming which compares an expiration date on at least some of said digital certificates with the current date.
Claim 27
Dependent Claim
52 words
The operating system of claim 23 , in which: said certificate programming includes programming which extracts one or more keys from at least one of said digital certificates and uses said one or more keys to decrypt information associated with the digital certificate from which said one or more keys was extracted.
Claim 28
Dependent Claim
28 words
The operating system of claim 6 , in which: said object switch includes a stream router which includes programming which routes streams to and from said stream interfaces.
Claim 29
Dependent Claim
23 words
The operating system of claim 6 , in which: said one or more stream interfaces include at least one real time stream interface.
Claim 30
Dependent Claim
26 words
The operating system of claim 27 , in which: said real time stream interface includes programming designed to accept and route real time data stream information.
Claim 31
Dependent Claim
26 words
The operating system of claim 11 , in which: said channels further serve to pass events to methods and load modules specified to process the events.
Claim 32
Dependent Claim
24 words
The operating system of claim 6 , in which: said component assembling programming includes programming which uses a blueprint in said component assembly process.
Claim 33
Dependent Claim
140 words
A component assembly embodied on a computer readable medium, comprising: a first load module and a second load module, each load module comprising: a load module header, made up of a public portion and a private portion; said public portion including identification information and information describing at least one aspect of a hardware or software platform on which said load module is designed to execute; said private portion including at least one correlation tag including information used to determine whether a method has authorization to call or load the load module; and a load module body, including: executable programming; and a reference to data, at least some of said data being associated with or used by said executable programming, said first load module executable programming including programming requiring the storage of audit information relating to use of the component assembly.
Claim 34
Dependent Claim
140 words
A component assembly embodied on a computer readable medium, comprising: a first load module and a second load module, each load module comprising: a load module header, made up of a public portion and a private portion; said public portion including identification information and information describing at least one aspect of a hardware or software platform on which said load module is designed to execute; said private portion including at least one correlation tag including information used to determine whether a method has authorization to call or load the load module; and a load module body, including: executable programming; and a reference to data, at least some of said data being associated with or used by said executable programming, said first load module executable programming including programming requiring the storage of audit information relating to use of the component assembly.
Claim 35
Dependent Claim
27 words
The component assembly of claim 31 , in which said at least one aspect includes the level or degree of security present or available on such platform.
Claim 36
Dependent Claim
19 words
The component assembly of claim 31 , in which said at least one aspect includes a type of computer.
Claim 37
Dependent Claim
23 words
The component assembly of claim 31 , in which said at least one aspect includes the type of software running on such platform.
Claim 38
Dependent Claim
24 words
The component assembly of claim 31 , in which said at least one aspect includes one or more computer languages recognized by said platform.
Claim 39
Dependent Claim
138 words
A component assembly embodied on a computer readable medium, comprising: a first load module and a second load module, each load module comprising: a load module header, made up of a public portion and a private portion; said public portion including identification information; said private portion including at least one correlation tag and information on the stack size used by or required by said load module, said correlation tag including information used to determine whether a method has authorization to call or load the load module; and a load module body, including: executable programming; and a reference to data, at least some of said data being associated with or used by said executable programming, said first load module executable programming including programming requiring the storage of information uniquely identifying a device at which said component assembly is stored.
Claim 40
Dependent Claim
138 words
A component assembly embodied on a computer readable medium, comprising: a first load module and a second load module, each load module comprising: a load module header, made up of a public portion and a private portion; said public portion including identification information; said private portion including at least one correlation tag and information on the stack size used by or required by said load module, said correlation tag including information used to determine whether a method has authorization to call or load the load module; and a load module body, including: executable programming; and a reference to data, at least some of said data being associated with or used by said executable programming, said first load module executable programming including programming requiring the storage of information uniquely identifying a device at which said component assembly is stored.
Claim 41
Dependent Claim
152 words
A component assembly embodied on a computer readable medium, comprising: a first load module and a second load module, each load module comprising: a load module header, made up of a public portion and a private portion; said public portion including identification information; said private portion including at least one correlation tag, and an access tag, said access tag being made up of at least two fields, each of which can be accessed and used separately and said correlation tag including information used to determine whether a method has authorization to call or load the load module; and a load module body, including: executable programming; and a reference to data, at least some of said data being associated with or used by said executable programming, said first load module executable programming including programming requiring communicating a unique identification for a device at which said component assembly is stored to a remote location.
Claim 42
Dependent Claim
152 words
A component assembly embodied on a computer readable medium, comprising: a first load module and a second load module, each load module comprising: a load module header, made up of a public portion and a private portion; said public portion including identification information; said private portion including at least one correlation tag, and an access tag, said access tag being made up of at least two fields, each of which can be accessed and used separately and said correlation tag including information used to determine whether a method has authorization to call or load the load module; and a load module body, including: executable programming; and a reference to data, at least some of said data being associated with or used by said executable programming, said first load module executable programming including programming requiring communicating a unique identification for a device at which said component assembly is stored to a remote location.
Claim 43
Dependent Claim
179 words
A computer processing system comprising: a processing unit operable to execute computer programming, wherein the computer programming comprises: a component assembler which assembles a plurality of elements into a component assembly, said plurality of elements each including at least one tag, said component assembler including a validator that validates each of said plurality of elements, said validator including a tag checker that checks at least one of: (a) the identity, (b) the validity or (c) the integrity, of said plurality of elements by comparing said tags incorporated in said plurality of elements to expected values; and an object switch coupled to said component assembler, said object switch including: (a) a stream router that communicates component assemblies; (b) one or more stream interfaces coupled to said stream router; (c) a container manager that, in use, manages said component assemblies; and (d) an object switch interface that interfaces said object switch with said component assembler; and a communications module which communicates a unique identifier of the computer processing system or a user of the computer processing system to a remote location.
Claim 44
Dependent Claim
179 words
A computer processing system comprising: a processing unit operable to execute computer programming, wherein the computer programming comprises: a component assembler which assembles a plurality of elements into a component assembly, said plurality of elements each including at least one tag, said component assembler including a validator that validates each of said plurality of elements, said validator including a tag checker that checks at least one of: (a) the identity, (b) the validity or (c) the integrity, of said plurality of elements by comparing said tags incorporated in said plurality of elements to expected values; and an object switch coupled to said component assembler, said object switch including: (a) a stream router that communicates component assemblies; (b) one or more stream interfaces coupled to said stream router; (c) a container manager that, in use, manages said component assemblies; and (d) an object switch interface that interfaces said object switch with said component assembler; and a communications module which communicates a unique identifier of the computer processing system or a user of the computer processing system to a remote location.
References Cited (Backward Citations)
US3609697A
Cited
US3573747A
Cited
US3845391A
Cited
US3798360A
Cited
US3798605A
Cited
US3798359A
Cited
US3796830A
Cited
US3806882A
Cited
US3790700A
Cited
US3931504A
Cited
US3806874A
Cited
US3911397A
Cited
US3829833A
Cited
US4020326A
Cited
US3924065A
Cited
US3946220A
Cited
US3956615A
Cited
US3970992A
Cited
US3906448A
Cited
US4270182A
Cited
US3958081A
Cited
US3946200A
Cited
US4209787A
Cited
US4217588A
Cited
US4112421A
Cited
US4071911A
Cited
US3996449A
Cited
US4196310A
Cited
US4163280A
Cited
US4048619A
Cited
US4183085A
Cited
US4104721A
Cited
US4120030A
Cited
US4162483A
Cited
US4200913A
Cited
US4232193A
Cited
US4220991A
Cited
US4278837A
Cited
US4168396A
Cited
US4405829A
Cited
US4259720A
Cited
US4262329A
Cited
US4246638A
Cited
US4253157A
Cited
US4265371A
Cited
US4232317A
Cited
US4305131A
Cited
US4323921A
Cited
US4337483A
Cited
US4598288A
Cited
US4236217A
Cited
US4465901A
Cited
US4309569A
Cited
US4319079A
Cited
DE2943436A1
Cited
US4471216A
Cited
US4321672A
Cited
US4328544A
Cited
US4375579A
Cited
US4306289A
Cited
US4361877A
Cited
US4529870A
Cited
US4434464A
Cited
JPS57726A
Cited
US4528588A
Cited
US4595950A
Cited
US4442484A
Cited
US4513174A
Cited
US4446519A
Cited
US4578530A
Cited
US4433207A
Cited
US4471163A
Cited
US4593353A
Cited
US4670857A
Cited
US4442486A
Cited
US4454594A
Cited
US4553252A
Cited
US4622222A
Cited
US4458315A
Cited
US4589064A
Cited
US4683553A
Cited
US4593183A
Cited
US4484217A
Cited
US4494156A
Cited
US4525599A
Cited
US4462076A
Cited
US4523271A
Cited
US4590552A
Cited
US4462078A
Cited
US4558176A
Cited
US4807288A
Cited
US4562305A
Cited
US4609985A
Cited
US4528643A
Cited
US4588991A
Cited
US4680731A
Cited
US4593376A
Cited
US4597058A
Cited
EP0128672A1
Cited
US4658093A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2009-10-09 | 2010-04-10 | 2010-10-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2013-10-09 | 2014-04-10 | 2014-10-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2017-10-09 | 2018-04-10 | 2018-10-10 | $7700.00 | Window Closed / Lapsed |