CONTROLLING ACCESS TO ELECTRONIC CONTENT

Abstract: A computer-implemented method of controlling access to electronic content (108, 110) includes receiving electronic content (108, 110) and producing a file (102) that includes the electronic content (108, 110) and instructions (104) for collecting and transmitting payment information. The method further includes receiving a reply (126) to the transmitted message (124) and selectively providing access to the electronic content (108, 110) based on the reply (126).

Description: CONTROLLING ACCESS TO ELECTRONIC CONTENT Technical Field This invention relates to controlling access to electronic content. Background Networks such as the Internet offer organizations a powerful tool for distributing information. For example, many merchant Web-sites offer on-line catalogs that use multimedia presentations to sell goods and services. Unfortunately, as the convenience of Internet shopping and research attracts greater numbers of users, a corresponding increase in Internet traffic has lengthened download times. As users sometimes pay for network access by the hour, lengthy download times can be costly as well as time consuming. While some users suffer from delays, some Web-site owners can have difficulty attracting visitors to their site. For example, a typical search engine such as Yahoo!™ can generate a lengthy list of Web-sites for almost any user search request. Few users bother to explore each listed site. Summary In general, in one aspect, the invention features a computer-implemented method of controlling access to electronic content includes receiving electronic content and producing a file that includes the electronic content and instructions for collecting and transmitting payment information. The method further includes receiving a reply to the transmitted message and selectively providing access to the electronic content based on the reply. Advantages can include one or more of the following. The envelope creation instructions enable virtually any content developer connected to the Internet to publish and receive payment for electronic content. Additionally, as the envelope instructions remain with the envelope throughout its life, the envelope author continues to receive payment from users accessing the envelope contents regardless of how the users obtained the envelope. The envelope provides a simple to use and intuitive user interface that guides recipients through the process of paying for content. The presentation of the electronic content in an envelope can be tailored by the envelope creator, for example, by designating content that will be presented automatically when the content is opened. This enables envelope creators to craft the envelopes for different purposes. The storage of creator-defined data in the server database permits collection of different information for each envelope such as envelope-specific questionnaires. The collected information can be used to target distribution of subsequent envelopes to potentially interested recipients. By distributing the envelope via e-mail, recipients need not experience the sometimes lengthy delays associated with downloading web-pages from the Internet. Other advantages of the invention will become apparent in view of the following description, including the figures, and the claims. Description of the Drawings FIG. 1 is a diagram an electronic content distribution system. FIG. 2 is a flowchart of a process for creating an envelope. FIGS. 3-8 are screenshots of a user interface for creating envelopes. FIGS. 9-13 are screenshots of another user interface for creating envelopes. FIGS. 14-16 are screenshots of a user interface provided by an envelope. FIG. 17 is a flowchart of envelope instructions. FIGS. 18-19 are flow diagrams illustrating establishment of secure communication between a client and a server. FIG. 20 is a diagram of a server database that tracks envelopes. FIG. 21 is a flowchart of server access request processing instructions. FIG. 22 is a flow diagram of a snake that "flattens" a collection of linked pages. Detailed Description Referring to FIG. 1, an envelope file 102 (envelope) stores electronic content 108, 110 such as audio, graphics, text, video, and/or computer program instructions. The envelope 102 also stores envelope instructions 104 that can extract and present the stored electronic content 108, 110 to a user requesting access to the content 108, 110. The envelope instructions 104 may form part of a system that enables an envelope creator to collect payment from each user attempting to access the content 108, 110. As shown in FIG. 1, a user at a client 100 has received an envelope 102, for example, via e-mail or by downloading the file from a networked computer (e.g., an Internet web-server). When the user attempts to access the electronic content 108, 110 included in the envelope 102, the envelope instructions 104 transmit an access request 124 to a server 112 via a network 132 (e.g., the Internet). The access request 124 can include an envelope identifier 106 that uniquely identifies the envelop 106 to the server 112; payment information such as a credit card number, payment amount, and expiration date; and/or demographic information such as a user's address, phone number, and e-mail address. The server 112 can store information included in the access request 124 in an envelope database 116, for example, for subsequent marketing analysis. The server 112 can also send a payment authorization request 128 to a payment service 1 18 such as Maverick™. The payment service 118 acts as a clearinghouse for different credit card bureaus such as Visa 120 or MasterCard 122. The credit card bureaus can process payment authorization requests by deducting the payment amount from a first account (e.g., a user submitting the access request 124) and by crediting a second account (e.g., an account of the envelope creator). After receiving a payment authorization code 130 from the payment service 118, the server 112 can transmit an access request response 126 back to the client 100. The envelope instructions 104 executing on the client 100 can permit or deny access to the electronic content based on the received access request response 126. Other embodiments eliminate system elements shown in FIG. 1. For example, in some embodiments the envelope instructions interact directly with the payment service 118 or credit bureau 120, 122 instead of communicating with these entities via the server 112. The envelope instructions 104 ensure that each user has authorized access to the electronic content 108, 110. Thus, the envelope 102 enables a content distributor to make an envelope 102 freely available with lessened concern over electronic content piracy. For example, an envelope distributor can post an envelope 102 for downloading on an Internet web-page or at an FTP (File Transfer Protocol) site. Additionally, a distributor can e-mail envelopes 102 to recipients who have previously requested access to envelopes in the past. The ability to target envelopes 102 to interested consumers makes the envelope 102 a valuable marketing tool. Additionally, e-mailing the envelope to selected recipients eliminates the time a user would have to wait for the electronic content to download from a web-site. Referring to FIG. 2, envelope creation instructions 132 enable quick construction of an envelope for distribution. After identifying 134 electronic content for inclusion in the envelope (e.g., by providing file names or URLs (Universal Resource Locators)), a user can configure the envelope to have different characteristics. For example, a user can designate 136 electronic content for automatic opening after the server grants access to envelope contents. By selecting electronic content for automatic opening, the envelope creator can control the initial presentation of envelope contents rather than leaving users to explore content 108, 110 included in the envelope 102 on their own. In one embodiment, the user can designate electronic content for automatic opening by naming the file "Startup" (e.g., startup.html). Launching the electronic content can cause an the operating system to open the file using an application corresponding to the file extension (e.g., ".HTML" corresponds to Microsoft™ Explorer™ and ".DOC" corresponds to Microsoft™ Word97™). The creation software 132 also enables a user to define data collected 138 by the envelope instructions 104 prior to requesting access. For example, a user can use HTML instructions to define a data collection form having text, graphics, and data fields. The envelope instructions 104 interpret the HTML and present the form to a user requesting access. By defining fields a user can collect a wide variety of information such as responses to a questionnaire, demographic information, etc. The collected information is transmitted to the server 112 for storage and analysis. The use of HTML to specify a data collection form enables creators to take advantage of their existing HTML coding skills. Alternatively, the user can specify data collection instructions that collect information from the client 100 Windows™ Registry™ instead of interactive collection from a user. The envelope creator may specify 140 a price for the electronic content 108, 110. The price can be included in each access request sent by the envelope instructions 104 to the server 112. Alternatively, an envelope creator can establish the price by calling a server representative or by e-mailing the price to a server daemon. Similar techniques may be used to supply the server with an account number that is to be credited when an envelope recipient pays for access to an envelope. The envelope creator may also specify 142 password protection, encryption (e.g., Blowfish encryption), and/or compression of the electronic content. These options can enhance the security of the electronic content 108, 110 as it travels over a public network, reduce the size of the envelope, and prevent users from access the electronic content without requesting access from the server 112. As described above, each envelope 102 stores 144 an envelope identifier 106 (e.g., a character string) that uniquely identifies the envelope 102 to the server 112. The identifier 106 can be determined in a number of different ways. For example, the envelope creation program 132 can append a system clock time to a computer's IP (Internet Protocol) address. Alternatively, the creation software 132 can request a unique envelope identifier from the server 112 during the envelope creation process. After configuration, the creation software 132 builds the envelope 102 from the identified electronic content 108, 110, the envelope identifier 106, and the envelope instructions 104. The creation software 132 arranges envelope 102 components such that execution of the envelope file (e.g., "C: run envelope.exe") causes execution of the envelope instructions. The envelope creation instructions 132 can employ a variety of different user interfaces and can use a number of different architectures. For example, referring to FIGS. 3 to 8, the envelope creation software 132 may reside on a web server. A user visiting the web server can build an envelope by filling in a series of forms that collect envelope configuration information from a creator. As shown in FIG 3, a user visiting a web server that offers envelope creation can enter an e-mail address. The envelope creation instructions 132 can e- mail the completed envelope to the specified address. As shown in FIG. 4, the user can select from different default data collection forms instead of defining their own. The user can also specify password protection and/or certification (see co-pending application 09/119,150, entitled "Tracking Electronic Content"). As shown in FIGS. 5 and 6, the user can select or designate graphics for an envelope cover (see FIG. 14) and graphics for display when a user opens the envelope (see FIG. 16). As shown in FIG. 7, the user can specify one or more files for inclusion as electronic content in the envelope. As shown in FIG. 8, the envelope creator receives the completed envelope via e-mail. In other embodiments, the completed envelope is stored at a web-site for subsequent downloading at the creator's convenience or can be stored on a removable computer- readable medium, such as a CD-ROM, and then be distributed to recipients, e.g., by conventional postal service. Referring to FIGS. 9-13, in a different embodiment, the envelope creation software 132 is a stand-alone application. As shown in FIG. 9, the application enables a user to create an envelope by dragging-and-dropping files into the envelope. The user can interact with a series of dialogs that enable a user to specify a data collection form (FIG. 10); to specify whether the envelope uses certification (FIG. 11); to specify the cover image (FIG. 12); and to specify whether to automatically open electronic content upon access (FIG. 13). Both of the embodiments above can use the same envelope creation instructions. For example, the envelope creation software can be coded as a component (e.g., a COM component) that provides a set of public methods such as envelope.Build, envelope.AddContent, and envelope.SetPassword. This component can be included in a stand-alone application or called by a program at the web-server. Referring to FIGS. 14-16, the finished envelope provides recipients with an intuitive user interface when executed. The interface uses a vault theme that users can quickly operate without guidance. As shown in FIG. 14, the interface depicts vault doors with handle GUI buttons. The vault doors include the envelope cover graphics selected or created by the user. Selecting (e.g., clicking using mouse- buttons) the handle GUI buttons causes the access envelope instructions to present the user-defined data collection form shown in FIG. 15. The data collection form dialog includes a "SEND" button that causes the instructions to transmit the access request to the server 112 including the collected data. After receiving the server's 112 grant of access to the electronic content, the envelope instructions can present the electronic content and/or store the electronic content on the user's machine. For example, the envelope instructions 104 can automatically play a .WAV sound file included in the envelope. If access is denied, the envelope typically will no present, decrypt, and/or decompress the stored electronic content. Referring to FIG. 17, upon execution of the envelope file 102, the envelope instructions 104 determine 150 if the user has previously received a message from the server granting access to the electronic content 108, 110. For example, the envelope instructions may store the envelope ID in the Windows™ Registry after receiving an access grant. By checking the Registry for the envelope ID, the instructions can avoid asking the same user to pay for electronic content more than once. If the user has previously received an access grant, the envelope instructions 104 can present 164 the electronic content by decompressing and/or decrypting the content. The instructions 104 may store the decompressed and/or decrypted content in a temporary directory (e.g., "C:/temp/"). The instructions 104 may also automatically launch any designated startup content. If the user has not previously received an access grant, the envelope instructions 104 collect 152 data specified during envelope creation and include the data in an access request 156 to the server 112. Prior to transmitting the request, the instructions 104 establish secure communication with the server 112. For example, the instructions 104 may initiate a secure socket layer (SSL) connection between the client 100 and server 112. Referring to FIG. 18, in another embodiment, the client 100 and server 112 establish secure communication through the use of a key shared 170 both by the client 100 and by server 112. In this embodiment, the client 100 encrypts 174 (e.g., using Blowfish encryption) a client generated key 172 (e.g., a random number) using the shared key 170. The client 100 transmits the encrypted client generated key to the server 112 for decryption 176 using the shared key. The client generated key, now known by both the client 100 and server 112 is used as an encryption key for subsequent communication from the client 100 to the server 112. Referring to FIG. 19, a similar process is used to generate a server 112 encryption key for communication from the server 112 to the client 100. Regardless of which encryption technique is used, establishing secure communication helps prevent network eavesdroppers from determining credit card numbers and other access request information traveling between the client 100 and server 112. Referring again to FIG. 17, after establishment of secure communication 154, the client transmits 156 the collected data to the server 112. The envelope instructions 104 use a variety of techniques to evade network firewalls. For example, the data and the names of the collected data fields can be included in the header of an HTTP message. For example, an HTTP header may include the string "Name&Robert;Phone&956-5908;CC#&l 1112222333;Exp&01/00" defining the field names and values for name, phone, and credit card information. In other embodiments, the string is included after a JPEG (Joint Pictures Experts Group) start code to fool a firewall into believing a picture is being transmitted. The instructions 104 attempt to transmit the access request via a communication port conventionally associated with browser communication (e.g., port 80). If such an attempt fails, the instructions 104 attempt to transmit the collected data via an SMTP (Simple Mail Transfer Protocol) port (e.g., port 25). The instructions may also examine the client 112 Windows™ Registry to determine whether the client connects to the network via a proxy. After transmitting 156 the data, the instructions 104 await 158 an access request response from the server 112. If an access request response indicates the server 112 has granted access, the instructions 104 decompress and/or decrypt 164 the electronic content and launch 166 startup content designated by the user. The instructions 104 can also store 166 an indication that the user has received an access grant, for example, by storing the envelope ID or a server supplied key in the Registry. Alternatively, if the server 112 denied access (e.g., the payment service 5 denied payment authorization or communication with the server 112 failed), the instructions 104 can display a message to the user describing why the electronic content is not being presented. Referring to FIG. 20, the server 112 includes an envelope database 116 that tracks each envelope that has generated an access request. As shown the database 10 116 includes a master envelope table 200. Each row of the master envelope table 200 stores information for a different envelope. The master envelope table 200 lists each envelope's ID 202, the price of the envelope's contents 206, and can include a boolean "activated" field 204 that indicates whether or not the server is permitted to grant access. For example, a server 112 administrator may request a fee from an envelope 15 creator before setting the activated field 204 for an envelope to TRUE (e.g.. " 1 "). The table may also include an envelope creator's credit card account number (not shown) so that payments may be credited to the creator. The database 116 also includes a separate envelope description table 210 for each envelope. The columns in the envelope description table 210 include data 0 fields collected by the envelope. The server 112 dynamically creates the envelope description table 210 upon receiving the first access request for an envelope. The dynamic creation of an individualized table 210 for an envelope enables the server to store different creator-defined data for each envelope. Referring to FIG. 21, the server instructions 114 process a received access 5 request 230 by determining 232 whether the envelope ID included in the access request already is present in the master envelope table. If not, a row is added in the master envelope table 234 and an independent envelope description table is created 236 for the envelope. The collected data included in the access request is added 238 as a row in the envelope description table. 0 If the collected data does not include a "CC#" or "credit card number" data field 240, the server 112 can transmit an access request response to the client 100 granting access to the electronic content. If the collected data includes a credit card number field 240, the server 112 transmits 242 a payment authorization request to the payment server and awaits a5 response. The payment authorization request includes the credit card number and the credit card expiration date. The request may also include the envelope price. Alternatively, the price may be stored in the master envelope table. If the payment server authorizes payment of the price of the electronic content, the server 112 transmits an access request response to the client 244 indicating that the envelope instructions 114 should grant access. The server instructions 114 may track the success and failure of envelope access requests over time. Referring to FIG. 22, one possible use of the system described above is for distributing web-pages provided at a web-site via an envelope. As shown, a top-level web-page 250 includes URL links to other web-pages 252, 254. Although an envelope creator could include the top-level web-page 250 in an envelope without modification, when a user selected a link (e.g., link 1), the client would be forced to establish a network connection and download the corresponding URL (e.g., www.home.com/linkpagel .html). The use of a "snake" (e.g., Blue Squirrel Software's Grab-a-Site) copies and modifies links in a collection of pages to reference local files instead of URLs. For example, after use of a snake, the top-level web-page 256 links to local files linkpagel.html and linkpage2.html instead of their respective URLs. These pages can be included in an envelope 102 and permit a user to browse through the pages without waiting for the pages to download. A creator can designate the top- level page 256 for automatic launching. Thus, when a recipient is granted access, immediately the recipient is presented with a page that guides the recipient in navigating through the electronic content. This feature can be very useful in distributing marketing material such as electronic catalogs. The techniques described here are not limited to any particular hardware or software configuration; they may find applicability in any computing or processing environment. The techniques may be implemented in hardware or software, or a combination of the two. Preferably, the techniques are implemented in computer programs executing on programmable computers that each include a processor, a storage medium readable by the processor (including volatile and non-volatile memory and/or storage elements), at least one input device, and one or more output devices. Program code is applied to data entered using the input device to perform the functions described and to generate output information. The output information is applied to one or more output devices. Each program is preferably implemented in a high level procedural or object oriented programming language to communicate with a computer system. however, the programs can be implemented in assembly or machine language, if desired. In any case, the language may be a compiled or interpreted language. Each such computer program is preferable stored on a storage medium or device (e.g., CD-ROM, hard disk or magnetic diskette) that is readable by a general or special purpose programmable computer for configuring and operating the computer when the storage medium or device is read by the computer to perform the procedures described in this document. The system may also be considered to be implemented as a computer-readable storage medium, configured with a computer program, where the storage medium so configured causes a computer to operate in a specific and predefined manner. What is claimed is:

Claims: 1. A computer-implemented method of controlling access to electronic content, the method comprising: receiving electronic content; and producing a file, the file comprising: the electronic content; and instructions for: collecting payment information; transmitting a message including the payment information over a network; receiving a reply to the transmitted message; and selectively providing access to the electronic content based on the reply to the transmitted message. 2. The method of claim 1 wherein receiving electronic content comprises receiving electronic content over a network. 3. The method of claim 2 wherein receiving electronic content over a network comprises receiving electronic content at a web server. 4. The method of claim 1 wherein the received electronic content comprises at least one of the following: audio, video, graphics, text, and computer program instructions. 5. The method of claim 1 wherein producing the file comprises compressing the received electronic content; and providing access to the electronic content comprises decompressing the compressed electronic content. 6. The method of claim 1 wherein producing the file comprises encrypting the received electronic content; and providing access to the electronic content comprises decrypting the encrypted electronic content. 7. The method of claim 1 wherein the instructions comprise at least one of the following: executable instructions and interpretable instructions. 8. The method of claim 1 wherein collecting information comprises interactively collecting information from a user. 9. The method of claim 1 wherein collecting information comprises collecting information stored on a computer. 10. The method of claim 1 further comprising receiving a specification of at least one collection field from a user; and wherein collecting information comprises collecting information corresponding to the at least one collection field. 11. The method of claim 1 wherein collecting information comprises executing user supplied instructions. 12. The method of claim 11 wherein the user supplied instructions comprise HTML (HyperText Markup Language) instructions. 13. The method of claim 1 wherein the file comprises a file identifier; and transmitting a message including the payment information comprises transmitting a message including the file identifier and the payment information. 14. The method of claim 1 wherein the payment information comprises at least one of the following: at least part of a credit card number, an expiration date, and a payment amount. 15. The method of claim 1 wherein the payment information comprises a price specified by a creator of the file. 16. The method of claim 1 wherein the reply comprises an indication that the payment has been authorized. 17. The method of claim 1 further comprising receiving a message granting access and receiving a designation of electronic content to be automatic launched; and wherein the instructions comprise instructions for automatically launching the designated electronic content. 18. A computer-implemented method of controlling access to electronic content, the method comprising: receiving electronic content; receiving information describing data to be collected; and producing a file, the file comprising: the electronic content; and instructions for: collecting the described data; transmitting over a network a message including at least some of the collected data; and providing access to the electronic content. 19. The method of claim 18 wherein the information describing the data to be collected comprises information describing a data collection form. 20. The method of claim 19 wherein the information describing a data collection form comprises HTML (HyperText Markup Language) instructions. 21. The method of claim 18 wherein the information describing the data to be collected comprises information defining fields. 22. The method of claim 18 further comprising storing at least a portion of the collected data included in the transmitted message. 23. A computer-implemented method of tracking access to electronic content, the method comprising: receiving a message produced by an executable file, the file including electronic content and instructions for collecting data, the message including the collected data and an identifier corresponding to the file; and storing the collected data in a data repository. 24. The method of claim 23 wherein defining storage comprises creating at least one table column for storing the collected data. 25. The method of claim 23 wherein defining storage comprises creating a table for storing collected data included in messages having the received identifier. 26. A method of controlling access to electronic content, the method comprising: receiving electronic content from a client via a network; creating a file including the electronic content and instructions for providing the electronic content; and transmitting the file to the client. 27. The method of claim 26 wherein transmitting the file to the client comprises e-mailing the file. 28. The method of claim 26 wherein transmitting the file to the client comprises: posting the file at a network server; and transmitting the file in response to a request for the file. 29. A system for controlling access to electronic content, the system comprising: file creation instructions for: receiving electronic content; and producing a file, the file comprising: the electronic content; and instructions for: collecting payment information; transmitting a message including the payment information to a server over a network; and selectively providing access to the electronic content based on a reply to the transmitted message; and server instructions for: receiving the payment information; and transmitting a message controlling access to the electronic content based on the received payment information.

Inventors: PATTERSON PATRICK E, PATTERSON, PATRICK, E.
Applicants: DESKGATE TECHNOLOGIES INC, PATTERSON PATRICK E, DESKGATE TECHNOLOGIES, INC., PATTERSON, PATRICK, E.
Application year: 2000
Main classification: G06F1
IPC codes: G06F1, G06F21