Source: http://www.google.co.uk/patents/US8347078
Timestamp: 2017-11-25 11:35:24
Document Index: 778977901

Matched Legal Cases: ['Application No. 2005131911', 'Application No. 200680030846', 'Application No. 05110697', 'Application No. 05110697', 'Application No. 05109616', 'Application No. 05110697', 'Application No. 05109616', 'Application No. 05110697', 'Application No. 05855148', 'Application No. 05820177', 'Application No. 05820090', 'Application No. 2006220489', 'Application No. 2005222507', 'Application No. 05854752', 'Application No. 05820177', 'Application No. 05819896', 'Application No. 05821183', 'Application No. 05851550', 'Application No. 2000', 'Application No. 2007', 'art 3', 'Application No. 2006220489', 'Application No. 2005222507', 'Application No. 200580038773', 'Application No. 10', 'Application No. 2007', 'Application No. 2007', 'Application No. 2007', 'Application No. 2007', 'Application No. 2007', 'Application No. 2007', 'Application No. 2007', 'Application No. 2007', 'Application No. 2005', 'Application No. 2007', 'Application No. 2005', 'Application No. 2007', 'Application No. 200580044294', 'Application No. 200510113398', 'Application No. 200510113398', 'Application No. 200680006199', 'Application No. 200580040764', 'Application No. 200580038812', 'Application No. 200510113398', 'Application No. 200680030846', 'Application No. 200510127170', 'Application No. 200680033207', 'Application No. 200580038745', 'Application No. 2008', 'Application No. 2007', 'Application No. 2000', 'Application No. 2005', 'Application No. 05819896', 'Application No. 200580038771', 'Application No. 05109616', 'Application No. 05821183', 'Application No. 10', 'Application No. 05820090', 'Application No. 200810189718', 'Application No. 200810189719', 'Application No. 200580038812', 'Application No. 200680006199', 'Application No. 200680006199', 'Application No. 200580043102', 'Application No. 200680006199', 'Application No. 200680006199', 'Application No. 200510113398', 'Application No. 200680006199', 'Application No. 200580038812']

Patent US8347078 - Device certificate individualization - Google Patents
A method of generating a device certificate. A method of generating a device certificate comprising, constructing a device certificate challenge at a device, sending information to a device certificate individualization server in response to the device certificate challenge, validating the device certificate...http://www.google.co.uk/patents/US8347078?utm_source=gb-gplus-sharePatent US8347078 - Device certificate individualization
Publication number US8347078 B2
Application number US 11/018,095
Also published as US9336359, US20060085634, US20120137127
Publication number 018095, 11018095, US 8347078 B2, US 8347078B2, US-B2-8347078, US8347078 B2, US8347078B2
Inventors Amit Jain, Clifford Paul Storm, Benjamin Brooks Cutter, Jr., Brian Patrick Evans
Patent Citations (757), Non-Patent Citations (265), Referenced by (3), Classifications (12), Legal Events (3)
US 8347078 B2
A method of generating a device certificate. A method of generating a device certificate comprising, constructing a device certificate challenge at a device, sending information to a device certificate individualization server in response to the device certificate challenge, validating the device certificate challenge by the device certificate individualization server, and validating the device certificate response by the device.
1. A method of generating a device certificate, the method comprising:
initiating a trigger originating at a device without connecting the device to a second device;
constructing, in response to the trigger, a device certificate challenge at the device based at least in part on device specific information and a device certificate template disposed on the device at a time of manufacture;
sending the device certificate challenge to a device certificate individualization server in response to the construction of the device certificate challenge;
receiving a device certificate response at the device from the device certificate individualization server, the device certificate response indicative of a validation of the device certificate challenge by the device certificate individualization server; and
validating the device certificate response by the device.
2. The method of claim 1, the device certificate challenge comprising the device certificate template.
3. The method of claim 2, the device certificate template comprised in the device certificate challenge being signed and the device certificate template comprising an authorization certificate.
4. The method of claim 1, the device certificate challenge comprising the device specific information.
5. The method of claim 1, the device certificate challenge comprising a URL of the device certificate individualization server.
6. The method of claim 1, validating the device certificate response comprising imparting the device certificate on the device, the device certificate configured to allow an encrypted file to be accessed by the device.
7. A system for generating a device certificate, the system comprising:
memory comprising instructions that when executed via at least some of the one or more processors perform actions, comprising:
8. The system of claim 7, wherein the device certificate template includes information that is common to a product line of devices that includes the device and one or more other devices, and the device certificate response received from the device certificate individualization server is unique to the device.
9. The system of claim 7, wherein the device certificate template includes information that is common to a product line of devices that includes the device and one or more other devices.
10. The system of claim 7, the device certificate response comprising the device certificate.
11. The system of claim 7, validating the device certificate response comprising an action of imparting the device certificate on the device.
12. A computer readable storage device comprising computer executable instructions that when executed via a processor perform a method for generating a device certificate, the method comprising:
13. The computer readable storage device of claim 12, wherein the device certificate template includes information that is common to a product line of devices that includes the device and one or more other devices, and the device certificate response received from the device certificate individualization server is unique to the device.
14. The computer readable storage device of claim 12, wherein the device certificate template includes information that is common to a product line of devices that includes the device and one or more other devices.
15. The computer readable storage device of claim 12, the device certificate response comprising the device certificate.
16. The computer readable storage device of claim 12, device specific portions of the device certificate template being completed based upon the device certificate response, yielding the device certificate unique to the device.
17. The computer readable storage device of claim 12, no device certificate comprised on the device at the time of manufacture.
18. The computer readable storage device of claim 12, the device certificate configured to allow an encrypted file to be accessed by the device.
19. The computer readable storage device of claim 18, the encrypted file comprising at least one of a music file that is played after access by the device and a video file that is viewed after access by the device.
20. The computer readable storage device of claim 12, the device certificate operating under a DRM system to cause playback of an encrypted file.
This application is a continuation-in-part of application Ser. No. 10/968,462 filed Oct. 18, 2004, now U.S. Pat. No. 7,441,121, and entitled “Device Certificate Self-Individualization”.
This application relates generally to the use of consumer electronic devices and more specifically to the creation of device certificates for verifying access rights.
Electronics may be designed to play or process content that is regulated. Such content may be controlled or owned by a third party that allows access to the content on a limited basis. Examples are allowing information to be accessed a predetermined number of times, or for a given time period. A common way of controlling access to content is through controlling access to a content key, and hence the content. Usage of the content must be consistent with a policy specified in the license in order for the DRM to access the license's key and enable access to the content. Control of access is typically provided at manufacture by security features that can prevent unauthorized access to the information at a later time.
The present invention provides a method of creating a device certificate through an individualization process. The device certificate may be used for verifying access rights to consumer electronic devices through the use of device certificates. By building a consumer electronics devices with a template a unique device certificate can be generated at a later time and used to verify access rights. The device certificate is unique to the consumer electronics device and typically allows a person using the consumer electronics device to access protected content desired to be played on the device.
FIG. 4 is a block diagram of the device certificate individualization or initialization process that transforms the device certificate template into a unique device certificate prior to allowing access to DRM applications.
FIG. 5 illustrates the sections that make up a first exemplary device certificate template.
FIG. 7 is a block diagram showing the process of device certificate individualization to create an exemplary device certificate.
FIG. 8 illustrates the sections that make up an exemplary device certificate challenge used in the process of device certificate individualization.
FIG. 9 is an exemplary XML device certificate challenge.
FIG. 10 is an exemplary XML device certificate response.
FIG. 11 illustrates an exemplary computing environment in which the systems and methods described in this application, may be implemented.
FIG. 12 is an illustration of a chain of trust structure present in an embodiment of a device certificate template.
FIG. 1 is a diagram of a digital rights management system 100. Digital rights management (DRM) provides a system for defining, incorporating, and enforcing rights to digital media 110. A DRM system 100 provides secure distribution of multimedia content 110 from a service provider 107 over insecure channels such as the Internet 105. The system 100 can enforce usage rules and protect the multimedia content 110 from being used illegally. Usage rules can include expiration dates, the number of times a user can play an audio or video file, and the number of times a user can copy an audio or video file and the like. An example of a Digital Rights Management system is provided in U.S. patent application Ser. No. 09/290,363, filed Apr. 12, 1999, U.S. patent application Ser. Nos. 10/185,527, 10/185,278, and 10/185,511, each filed on Jun. 28, 2002 which are hereby incorporated by reference in its entirety.
The exemplary device certificate 111 may be an XML object that gathers together device identification, device capabilities claims, vital info, public key info, and the like and present the information in a single digitally signed device certificate. A device certificate typically utilizes as a minimum the public key and a signature, other information included in the device certificate is optional The device certificate 111 may be signed by an OEM signing certificate (not shown), which may be a certification by the OEM that the device certificate 111 is an accurate reflection of the device 101 accompanying it, and by a third party content regulator certificate (not shown) which certifies that the OEM is authorized to create and certify DRM systems.
The embodiments of the invention tend to solve manufacturing problems associated with generating unique and verifiable device certificates 111 for each consumer electronics device 101 in an OEMs product line. The embodiments tend to allow the manufacturer to ship an entire product line using a device certificate template 112 which is typically identical for all devices in the product line. Using the template 112, a device 101 may automatically and securely self-individualize after manufacturing. In other words, the device creates a unique device certificate 111 based on the templates 12 built into the device. The device 101 may then access the encrypted content 109, when the proper license 108 is present.
FIG. 3 illustrates a method of manufacturing consumer electronics devices 101, 302, 303 with common device templates 112 that will enable the later generation of complete device certificates 304, 305, 306 at a later time. In the example shown any number of consumer electronics devices may be built in a production run or lot of devices produced, with typically the same device certificate template 112. Loading each device with the same template may aid the manufacturing process by allowing the device certificate to be created at a later time by filling in the template so that the device certificate is generated from the template. As an example an entire production run of devices having ROMs may be built using the same ROM, flash, hard drive or equivalent image on each device. There tends not to be individualized programming for each device built because of the use of a device certificate template.
FIG. 5 illustrates the sections that make up the device certificate template 112. A template as described would typically be stored in a memory of the consumer electronic device. Equivalently the template may be stored on other types of memories such as flash RAM ASICS, one or more floppy disks, optical disks, hard disks and the like. The sections of the device certificate template work together to establish a route of trust so that the content provider has a reasonable expectation that the data being transmitted over the insecure channels will reach an authorized user. For backwards compatibility, or other purposes more than one route of trust may be provided in the device certificate template.
FIG. 7 is a block diagram showing the process of device certificate individualization to create an exemplary device certificate. The process utilizes a challenge and response exchange between the device and the service provider. During this exchange security tends to be maintained by providing an exchange of keys having an intermediate security level. The keys having the intermediate security level are used to initiate the process, and “bootstrap” the verification process up to a higher security level.
In order to provide the unique device certificate or “Unique Dev-cert”, to each device, a device certificate individualization process is followed to create a unique device certificate 404 (of FIG. 4). At block 703 the device constructs a device certificate challenge to initiate the process by gathering device specific info at block 702 and a signed device certificate template at block 701. The device certificate template 112 provided to this block may be as previously described and include an authorization certificate from the service provider, device information (manufacturer, model, version and the like), template field confirming a template is provided, a URL to which the device certificate challenge should be sent, a public key used to encrypt device private data in the device certificate challenge, and a digital signature for the data portion of the template. The device specific information may in general include information that is unique to the device that is seeking to have its device certificate formed. Specifically device specific information includes an identification string based on device serial number.
At block 704 this unique information from the challenge is sent to a server (or “Dev-cert indiv server”) that may be ran by the OEM of the device. The data sent to the server is typically private and protected. The server validates the incoming challenge and creates the unique device certificate “Unique Dev-cert” at block 705 based on the challenge. A response including the device certificate that has been created is returned to the device (“Dev-cert response”) at block 706. At block 707 the device validates the received response. At block 708 the device stores the device certificate that has been created.
FIG. 8 illustrates the sections that make up an exemplary device certificate challenge used in the process of device certificate individualization. The arrangement of sections in the device certificate may be varied, and the language or protocol used to encode the information in the various sections may vary as well. The Data section includes URL (804), DEVCERT_TEMPLATE (805), BOOTSTRAPID (806) and DEVINFO (807). The DEVINFO may contain DEVICE_UNIQUEID (808), DEVICE_PUBKEY (809), DEVICE_PRIVKEY (810) and DEVCERT_OLD (811).
The DATA section is shown at 802. This data section or tag contains the data presented by the device certificate challenge. This tag is typically mandatory. Typically this data may include URL (804), DEVCERT_TEMPLATE (805), BOOTSTRAPID (806) and DEVINFO (807). The DEVINFO may contain DEVICE_UNIQUEID (808), DEVICE_PUBKEY (809), DEVICE_PRIVKEY (810) and DEVCERT_OLD (811).
The SIGNATURE section is shown at 803. Typically the contents of the DATA section, including the strings <DATA> and </DATA> of dev-cert challenge are digitally signed by a BOOTSTRAP private key which is provided by OEM. This section also contains a digital signature that is typically mandatory.
The URL section is shown at 804. In this section the URL that the device certificate challenge is sent to is recorded. It is in clear (it is non encrypted). This URL may be taken from the device certificate template, so that the application does not need to separately parse the device certificate template to get the URL. This tag may be mandatory. In an alternative embodiment the URL may be parsed from the device certificate template.
The DEVCERT_TEMPLATE section of the device certificate challenge is shown at 805. A valid device certificate template provided in this section is typically signed by the OEM private key. This node may also be in clear. This tag is typically mandatory.
The BOOTSTRAPID section of the device certificate challenge is shown at 806. The Bootstrap ID is also provided by OEM. The bootstrap ID is typically provided to help the server to find the right key for verifying the dev-cert challenge signature. This node is in clear. This tag may be mandatory.
The DEVINFO section of the device certificate challenge is shown at 807. This section contains device specific private info which must be protected. The contents under this tag are encrypted using Indiv server public key which is present in dev-cert template. This information is then Base64 encoded. This tag is typically mandatory. This node may contain DEVICE_UNIQUEID (808), DEVICE_PUBKEY (809), DEVICE_PRIVKEY (810) and DEVCERT_OLD (811).
The DEVICE_UNIQUEID section of the device certificate challenge is shown at 808. This section contains the unique device id. This unique device id is typically inserted in actual device unique device certificate by the server. This tag is typically mandatory.
The DEVICE_PUBKEY section of the device certificate challenge is shown at 809. In the process of constructing the challenge, the device generates a public private key pair, and hides the private key in the device as previously described. This section typically contains a Base 64 encoded device public key. Those skilled in the art will realize that other equivalent encodings may be provided. The public key is inserted, by the server, into the actual device unique device certificate. This public key may also be used by the server to encrypt the response returned to the device. This tag is typically mandatory.
The DEVICE_PRIVKEY section of the device certificate challenge is shown at 810. This section may contain a base 64 encoded device private key. The device private key may be used by the server to encrypt an escrow key generated by the server. An escrow key typically encrypts any old keys present from the client. This tag is typically mandatory.
The DEVCERT_OLD section of the device certificate challenge is shown at 811. This section contains an old “device unique dev-cert”. This section is typically an optional tag. It may be included in case of re-individualization of the device so that the server can extract the old key pairs from this device certificate and include them in a new device certificate.
FIG. 9 illustrates an exemplary XML device certificate challenge previously constructed at block 703 (of FIG. 7). In the example shown the device certificate shown in XML (or its equivalent) may be base 64 encoded. Alternatively other types of encoding may be performed to facilitate transmission of the device certificate challenge to the server. In further alternative embodiments encoding is not performed.
When server receives the challenge 901, the server, identified by the supplied URL 904, verifies the authenticity of the challenge by verifying the device challenge's digital signature 902. The BOOTSTRAP ID 903 allows the server to find the proper key for signature verification. The server also verifies the signature of the device certificate template 905 that is included in the challenge. The server then decodes and decrypts the DEVINFO section 906 to get the device specific information.
After gathering the information, the device certificate challenge creates the actual device unique device certificate and includes this device certificate in the response 907. To protect privacy, the device certificate response may be encrypted by the device public key. This encryption ensures that the response can only be decrypted by the device, from which device certificate challenge was received.
FIG. 10 is an exemplary XML device certificate response. The device response is shown in HTML format. However, any suitable format may be used for the device certificate response.
The device certificate response may include the following fields. The error field (“ERROR”) 1001 may be an optional field. Presence of the error field indicates that the challenge sent to the server had some errors in it that have been indicated by an error code.
The field DEVCERT_NEW 1002 contains the actual device unique device certificate produced by the exchanges made between the device and the service coupled to the device. As previously described a PC may be present between the device and the service provider.
When a device receives the device certificate response, it decodes and decrypts it. If an error field 1001 is present, the device returns the error code to the application. If the error tag is not present, it extracts the device certificate, verifies its signature, service provider authorization certificate, device unique id, device public key and all other sections of the device certificate. Then the device certificate is stored in the device.
FIG. 11 illustrates an exemplary computing environment 1100 in which the systems and methods described in this application, may be implemented. Exemplary computing environment 1100 is only one example of a computing system and is not intended to limit the examples described in this application to this particular computing environment.
The computing environment 1100 can be implemented with numerous other general purpose or special purpose computing system configurations. Examples of well known computing systems, may include, but are not limited to, personal computers, hand-held or laptop devices, microprocessor-based systems, multiprocessor systems, set top boxes, programmable consumer electronics, gaming consoles, Consumer electronics, cellular telephones, PDAs, and the like.
The computer 1100 includes a general-purpose computing system in the form of a computing device 1101. The components of computing device 1101 can include one or more processors (including CPUs, GPUs, microprocessors and the like) 1107, a system memory 1109, and a system bus 1108 that couples the various system components. Processor 1107 processes various computer executable instructions to control the operation of computing device 1101 and to communicate with other electronic and computing devices (not shown). The system bus 1108 represents any number of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, and a processor or local bus using any of a variety of bus architectures.
The system memory 1109 includes computer-readable media in the form of volatile memory, such as random access memory (RAM), and/or non-volatile memory, such as read only memory (ROM). A basic input/output system (BIOS) is stored in ROM. RAM typically contains data and/or program modules that are immediately accessible to and/or presently operated on by one or more of the processors 1107.
Mass storage devices 1104 may be coupled to the computing device 1101 or incorporated into the computing device by coupling to the buss. Such mass storage devices 1104 may include a magnetic disk drive which reads from and writes to a removable, non volatile magnetic disk (e.g., a “floppy disk”) 1105, or an optical disk drive that reads from and/or writes to a removable, non-volatile optical disk such as a CD ROM or the like 1106. Computer readable media 1105, 1106 typically embody computer readable instructions, data structures, program modules and the like supplied on floppy disks, CDs, portable memory sticks and the like.
Any number of program modules can be stored on the hard disk 1110, Mass storage device 1104, ROM and/or RAM 1109, including by way of example, an operating system, one or more application programs, other program modules, and program data. Each of such operating system, application programs, other program modules and program data (or some combination thereof) may include an embodiment of the systems and methods described herein.
A display device 1102 can be connected to the system bus 1108 via an interface, such as a video adapter 1111. A user can interface with computing device 702 via any number of different input devices 1103 such as a keyboard, pointing device, joystick, game pad, serial port, and/or the like. These and other input devices are connected to the processors 1107 via input/output interfaces 1112 that are coupled to the system bus 1108, but may be connected by other interface and bus structures, such as a parallel port, game port, and/or a universal serial bus (USB).
Computing device 1100 can operate in a networked environment using connections to one or more remote computers through one or more local area networks (LANs), wide area networks (WANs) and the like. The computing device 1101 is connected to a network 1114 via a network adapter 1113 or alternatively by a modem, DSL, ISDN interface or the like.
FIG. 12 is an illustration of a chain of trust structure 1200 present in an embodiment of a device certificate template. In the chain of trust structure an authorization root certificate 1201 generates numerous Authorization certificates or DACs 1202, 1203, 1204 for individual OEMs. The DACS also may include a security level. Each horizontal level may be thought of as a link in the chain of trust as a path is traversed from top to bottom. Each link typically has a certificate associated with it to establish the validity of the link, and couple it to the previous and following link. For example blocks 1201, 1202, 1205, and 1208 may be thought of as links going from the authorization root link 1201 to the device certificate 1208. A device certificate template is typically formed by incorporating each link in the chain of trust in a section of fields that form the template.
From each DAC given to an OEM, that OEM can generate multiple group certificates 1205, 1206, 1207 for each model of device produced by the OEM. Device certificates 1208, 1209, 1210 are generated each device built and are based upon the group certificates. It is possible to change the levels of security by adding or removing levels of group certificates. For example a level of device certificates can be added to differentiate production runs of a particular model of consumer electronics device.
US5444780 22 Jul 1993 22 Aug 1995 International Business Machines Corporation Client/server based secure timekeeping system
US5754657 10 Mar 1997 19 May 1998 Trimble Navigation Limited Authentication of a message source
US5872846 7 Nov 1996 16 Feb 1999 Mci Communications Corporation System and method for providing security in data communication systems
US5883958 26 Mar 1997 16 Mar 1999 Sony Corporation Method and device for data decryption, a method and device for device identification, a recording medium, a method of disk production, and a method and apparatus for disk recording
US5905799 15 Oct 1996 18 May 1999 Bell Atlantic Network Services, Inc. Programmed computer for identity verification, forming joint signatures and session key agreement in an RSA public cryptosystem
US6058188 24 Jul 1997 2 May 2000 International Business Machines Corporation Method and apparatus for interoperable validation of key recovery information in a cryptographic system
US6072874 30 Dec 1996 6 Jun 2000 Fuji Xerox Co., Ltd. Signing method and apparatus using the same
US6122741 19 Sep 1997 19 Sep 2000 Patterson; David M. Distributed method of and system for maintaining application program security
US6151676 24 Dec 1997 21 Nov 2000 Philips Electronics North America Corporation Administration and utilization of secret fresh random numbers in a networked environment
US6175825 29 Jun 1998 16 Jan 2001 Francotyp-Postalia Ag & Co. Method for debiting shipping services
US6243470 4 Feb 1998 5 Jun 2001 International Business Machines Corporation Method and apparatus for advanced symmetric key block cipher with variable length key and block
US6343280 15 Dec 1998 29 Jan 2002 Jonathan Clark Distributed execution software license server
US6374357 16 Apr 1998 16 Apr 2002 Microsoft Corporation System and method for regulating a network service provider's ability to host distributed applications in a distributed processing environment
US6389535 13 Oct 1998 14 May 2002 Microsoft Corporation Cryptographic protection of core data secrets
US6502079 8 Dec 1997 31 Dec 2002 Aprisma Management Technologies, Inc. Method and system for enforcing floating licenses
US6549626 20 Oct 1997 15 Apr 2003 Sun Microsystems, Inc. Method and apparatus for encoding keys
US6574611 6 Apr 2000 3 Jun 2003 Sony Corporation Information processing apparatus and method, information management apparatus and method, and information providing medium
US6581331 25 May 1999 24 Jun 2003 Joseph Michael Kral Window and door closing mechanism
US6665303 31 Dec 1998 16 Dec 2003 Kabushiki Kaisha Toshiba Scheme for realizing communications through external network from contents processing device connected to local network in home environment
US6671737 24 Sep 1999 30 Dec 2003 Xerox Corporation Decentralized network system
US6684198 3 Sep 1997 27 Jan 2004 Sega Enterprises, Ltd. Program data distribution via open network
US6859790 18 Oct 2000 22 Feb 2005 Sony Corporation Data distribution system and method thereof, data processing device, data control device, and machine-readable recording medium recording distribution data
US6934840 21 Dec 2000 23 Aug 2005 International Business Machines Corporation Composite keystore facility apparatus and method therefor
US6959291 19 May 1999 25 Oct 2005 International Business Machines Corporation Management of a concurrent use license in a logically-partitioned computer
US6976162 * 28 Jun 2000 13 Dec 2005 Intel Corporation Platform and method for establishing provable identities while maintaining privacy
US7028180 16 Oct 2000 11 Apr 2006 Northrop Grumman Corporation System and method for usage of a role certificate in encryption and as a seal, digital stamp, and signature
US7055169 21 Apr 2003 30 May 2006 Opentv, Inc. Supporting common interactive television functionality through presentation engine syntax
US7058819 24 Jul 2001 6 Jun 2006 Sony Corporation Data processing system, data processing method, and program providing medium
US7116969 12 Feb 2004 3 Oct 2006 Sharp Laboratories Of America, Inc. Wireless device having a secure clock authentication method and apparatus
US7146504 13 Jun 2002 5 Dec 2006 Microsoft Corporation Secure clock on computing device such as may be required in connection with a trust-based system
US7162645 * 5 Feb 2002 9 Jan 2007 Renesas Technology Corp. Storage device including a non-volatile memory
US7174457 * 10 Mar 1999 6 Feb 2007 Microsoft Corporation System and method for authenticating an operating system to a central processing unit, providing the CPU/OS with secure storage, and authenticating the CPU/OS to a third party
US7216368 27 Mar 2002 8 May 2007 Sony Corporation Information processing apparatus for watermarking digital content
US7224805 28 Dec 2001 29 May 2007 Nokia Corporation Consumption of content
US7260721 8 Feb 2002 21 Aug 2007 Sony Corporation Information processing method, information processing apparatus and recording medium
US7266714 15 Jun 2004 4 Sep 2007 Dolby Laboratories Licensing Corporation Method an apparatus for adjusting the time of a clock if it is determined that the degree of adjustment is within a limit based on the clocks initial time
US7299358 * 14 Jul 2003 20 Nov 2007 Texas Instruments Incorporated Indirect data protection using random key encryption
US7310732 30 Aug 2001 18 Dec 2007 Sony Corporation Content distribution system authenticating a user based on an identification certificate identified in a secure container
US7315941 14 Dec 2005 1 Jan 2008 Ntt Docomo Inc. Multi-certificate revocation using encrypted proof data for proving certificate's validity or invalidity
US7336791 27 Mar 2002 26 Feb 2008 Sony Corporation Information processing apparatus
US7382883 14 Dec 2006 3 Jun 2008 Microsoft Corporation Deriving a symmetric key from an asymmetric key for file encryption or decryption
US7451202 18 Dec 2003 11 Nov 2008 Panasonic Corporation Information management system having a common management server for establishing secure communication among groups formed out of a plurality of terminals
US7502945 5 Mar 2004 10 Mar 2009 Microsoft Corporation Using a flexible rights template to obtain a signed rights label (SRL) for digital content in a rights management system
US8060923 23 Apr 2004 15 Nov 2011 Microsoft Corporation Trusted license removal in a content protection system or the like
US8074287 28 Jul 2005 6 Dec 2011 Microsoft Corporation Renewable and individualizable elements of a protected environment
US20010010076 7 Dec 2000 26 Jul 2001 Hewlett-Packard Company Security protocol
US20010049667 23 Dec 1998 6 Dec 2001 Hidemi Moribatake Electronic cash implementing method and equipment using user signature and recording medium recorded thereon a program for the method
US20010053223 12 Mar 2001 20 Dec 2001 Yoshihito Ishibashi Content transaction system and method, and program providing medium therefor
US20020026574 30 Aug 2001 28 Feb 2002 Sony Corporation Person authentication system, person authentication method , information processing apparatus, and program providing medium
US20020063933 5 Aug 1998 30 May 2002 Yasuaki Maeda Data transmitting apparatus
US20020065781 27 Apr 2001 30 May 2002 Hillegass James C. Licensed digital material distribution system and method
US20020073068 1 Oct 2001 13 Jun 2002 Guha Ramanathan V. System and method for rapidly identifying the existence and location of an item in a file
US20020169974 1 Mar 2001 14 Nov 2002 Microsoft Corporation Detecting and responding to a clock rollback in a digital rights management system on a computing device
US20020198846 6 Jun 2002 26 Dec 2002 Guillermo Lao Method and system for subscription digital rights management
US20030021416 26 Jul 2001 30 Jan 2003 International Business Machines Corporation Encrypting a messaging session with a symmetric key
US20030078853 29 Jul 2002 24 Apr 2003 Marcus Peinado Enforcement architecture and method for digital rights management
US20030194094 7 May 2003 16 Oct 2003 Lampson Butler W. System and method for secure storage data using a key
US20030198350 18 Apr 2002 23 Oct 2003 International Business Machines Corporation Method, system and program product for managing a size of a key management block during content distribution
US20030233553 13 Jun 2002 18 Dec 2003 Microsoft Corporation Secure clock on computing device such as may be required in connection with a trust-based system
US20040001594 28 Jun 2002 1 Jan 2004 Microsoft Corporation Systems and methods for providing secure server key operations
US20040054678 6 Dec 2001 18 Mar 2004 Ryuichi Okamoto Distribution device, terminal device, and program and method for use therein
US20040111615 14 Aug 2003 10 Jun 2004 Dae Hun Nyang Authentication method using symmetric authenticated key exchange and asymmetric authenticated key exchange
US20040139312 14 Jan 2003 15 Jul 2004 General Instrument Corporation Categorization of host security levels based on functionality implemented inside secure hardware
US20040146015 27 Jan 2003 29 Jul 2004 Cross David B. Deriving a symmetric key from an asymmetric key for file encryption or decryption
US20040205510 29 Mar 2002 14 Oct 2004 Sony Corporation & Sony Electronics Inc. Method and system for embedding MPEG-7 header data to improve digital content queries
US20050138338 18 Dec 2003 23 Jun 2005 Intel Corporation Register alias table cache
US20050226170 23 Feb 2005 13 Oct 2005 Sandeep Relan System, method, and apparatus for secure sharing of multimedia content across several electronic devices
US20050268174 19 Apr 2005 1 Dec 2005 Tomonori Kumagai Semiconductor device, electronic apparatus, and access control method of the semiconductor device
US20050283601 3 Sep 2004 22 Dec 2005 Sun Microsystems, Inc. Systems and methods for securing a computer boot
US20060010076 23 Apr 2004 12 Jan 2006 Microsoft Corporation Metering accessing of content and the like in a content protection system or the like
US20060015732 15 Jul 2004 19 Jan 2006 Sony Corporation Processing system using internal digital signatures
US20060020784 * 17 Sep 2003 26 Jan 2006 Willem Jonker Certificate based authorized domains
US20060020821 24 Jul 2004 26 Jan 2006 International Business Machines Corp. System and method for data processing system planar authentication
US20060053112 13 Oct 2004 9 Mar 2006 Sybase, Inc. Database System Providing SQL Extensions for Automated Encryption and Decryption of Column Data
US20060167814 24 Mar 2006 27 Jul 2006 Microsoft Corporation Enforcement architecture and method for digital rights management
US20060167815 24 Mar 2006 27 Jul 2006 Microsoft Corporation Digital license and method for obtaining/providing a digital license
US20060174110 31 Jan 2005 3 Aug 2006 Microsoft Corporation Symmetric key optimizations
US20060212363 13 Feb 2006 21 Sep 2006 Microsoft Corporation Rendering digital content in an encrypted rights-protected form
US20060212945 15 Mar 2005 21 Sep 2006 Donlin Patrick J Computer system with dual operating modes
US20060229990 26 Nov 2004 12 Oct 2006 Tatsuya Shimoji Content distribution system and content license management method
US20060235798 15 Apr 2005 19 Oct 2006 Microsoft Corporation Output protection levels
US20060235799 14 Apr 2005 19 Oct 2006 Microsoft Corporation Playlist burning in rights-management context
US20060235801 14 Apr 2005 19 Oct 2006 Microsoft Corporation Licensing content for use on portable device
US20060248596 27 Apr 2005 2 Nov 2006 Microsoft Corporation Secure clock with grace periods
US20060265758 20 May 2005 23 Nov 2006 Microsoft Corporation Extensible media rights
US20090132815 29 Oct 2007 21 May 2009 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
US20090158036 23 Feb 2009 18 Jun 2009 Microsoft Corporation protected computing environment
US20120137127 6 Feb 2012 31 May 2012 Microsoft Corporation Device certificate individualization
EP0665486A2 18 Jan 1995 2 Aug 1995 AT&amp;T Corp. Method of protecting electronically published materials using cryptographic protocols
EP0874300B1 20 Apr 1998 1 Mar 2006 Sony Corporation Information transmission, reception and recording
EP1223722A2 9 Jan 2002 17 Jul 2002 Microsoft Corporation Method and system to access software pertinent to a peripheral device
EP1233337A2 30 Jan 2002 21 Aug 2002 Hewlett-Packard Company Peripheral devices which manage application upload to computing devices
EP1287636A2 25 Feb 2000 5 Mar 2003 Microsoft Corporation Enforcement architecture and method for digital rights management
EP1292065A1 27 Mar 2002 12 Mar 2003 Sony Corporation Information processing apparatus
EP1363424B1 9 Apr 2003 2 Jul 2008 Microsoft Corporation Authentication method and system encrypting a ticket with an symmetric key, said symmetric key being encrypted with an asymmetric key
EP1378811A2 13 Jun 2003 7 Jan 2004 Microsoft Corporation Systems and methods for issuing usage licenses for digital content and services
JP2291043A Title not available
JP9006880A Title not available
JP2001175605A Title not available
JPH086729B2 Title not available
JPH0535461B2 Title not available
JPH0635718B2 Title not available
WO2006065012A1 14 Jul 2005 22 Jun 2006 Electronics And Telecommunications Research Institute System for issuing licenses to protect multi-level distributed digital contents and method thereof
2 "Aladdin acquires the assets of Micro Macro Technologies", From http://www.findarticles.com, Business Wire, (Mar. 3, 1999).
3 "Aladdin Knowledge Systems Partners with Rights Exchange, Inc. to Develop a Comprehensive Solution for Electronic Software Distribution", (Aug. 3, 1988), 5 pages.
4 "Bankard set to into virtual shopping in Philippines", Newsbytes News Network, (from DialogClassicWeb(™) file 9, acc. No. 01235815., (Apr. 16, 1997).
5 "Bankard set to into virtual shopping in Philippines", Newsbytes News Network, (from DialogClassicWeb(™) file 9, acc. No. 012358151)., (Apr. 16, 1997).
6 "Black box crypton defies the hackers", Electronics Weekly, n1257, p. 26, (from DialogClassic Web(™) File 275, acc. No. 011163771)., (Mar. 6, 1983).
7 "Black box crypton defies the hackers", Electronics Weekly, n1257, p26, (from DialogClassic Web(™) File 275, acc. No. 011163771)., (Mar. 6, 1983).
8 "BreakerTech joins copyright management market", From http://www.findarticles.com, Computer International, (Aug. 5, 1999).
9 "Content Protection System Architecture A Comprehensive Framework for Content Protection", Content Protection Architecture; XP02259679; http://www.4centity.com/data/tech/cpsa/cpsa081.pdf, (Feb. 17, 2000).
10 "Cylink: Public-Key Security Technology Granted to the Public", Cylink Announces the Reowned Diffie-Hellman Public-Key Technology Has Entered the Public Domain, (Nov. 16, 1997).
11 "Cyotec-CyoLicence", printed from www.cyotec.com/products/cyoicence on Sep. 7, 2005, (Copyright 2003-2005).
12 "Cyotec—CyoLicence", printed from www.cyotec.com/products/cyoicence on Sep. 7, 2005, (Copyright 2003-2005).
13 "Decision on Grant of a Patent for Invention mailed Apr. 29, 2010", Russian Application No. 2005131911, 31 pages.
14 "Decision on Rejection mailed Sep. 13, 2010", CN Application No. 200680030846.3, 5 pages.
15 "Decision to Refuse a European Application mailed Feb. 15, 2008", Application No. 05110697.9, 45 pages.
16 "DMOD WorkSpace OEM Unique Features", http://www.dmod.com/oem—features, downloaded Jan. 12, 2005.
17 "EP Office Action mailed Apr. 5, 2007", Application No. 05110697.9, 5 pages.
18 "EP Office Action mailed Mar. 8, 2012", EP Application No. 05109616.2, 6 pages.
19 "EP Office Action Mailed Nov. 17, 2006", Application No. 05110697.9, 6 pages.
20 "EP Search Report mailed Jan. 2, 2008", EP Application No. 05109616.2, 7 pages.
21 "EP Summons to Attend Oral Proceedings mailed Sep. 27, 2007", Application No. 05110697.9, 7 pages.
22 "Equifax Business Solutions—Manage Your Customers", Retrieved from the Internet from http://www.equifax.com/sitePages/biz/smallBiz/?sitePage=manage Customers on Oct. 14, 2005, 3 pages.
23 "European Search Report mailed Aug. 31, 2011", EP Application No. 05855148.2, 6 pages.
24 "European Search Report mailed Dec. 6, 2010", Application No. 05820177.3, 8 pages.
25 "Examination Report mailed Mar. 5, 2008", EP Application No. 05820090.8, 1 page.
26 "Examiner's First Report mailed Sep. 15, 2009", AU Application No. 2006220489, 2 pages.
27 "Examiner's First Report on Application mailed Jun. 4, 2010", AU Application No. 2005222507, 2 pages.
28 "Extended European Search Report mailed Dec. 21, 2011", EP Application No. 05854752.2, 7 pages.
29 "Extended European Search Report mailed Dec. 6, 2010", EP Application No. 05820177.3, 8 pages.
30 "Extended European Search Report mailed Jan. 21, 2010", EP Application No. 05819896.1, 8 pages.
31 "Extended European Search Report mailed Jan. 7, 2011", EP Application No. 05821183.0, 9 pages.
32 "Extended European Search Report mailed Jul. 5, 2012", EP Application No. 05851550.3, 6 pages.
33 "Final Office Action mailed Nov. 7, 2005", U.S. Appl. No. 09/290,363.
34 "Final Office Action mailed Oct. 22, 2009", JP Application No. 2000-608539.
35 "Final Rejection mailed Jan. 17, 2012", Japan Application No. 2007-552142, 8 pages.
36 "Finland—Data fellows secures ICSA Certification", Newsbytes (from DialogClassic Web(™), file 9, acc. No. 014510581)., (Jan. 7, 1998), 2 pages.
39 "First Special Feature, Security Oriented Web Application Development, Part 3, Method for Realizing Secure Session Management", N+1 Network Guide (vol. 4, No. 1, Serial No. 32) Softbank Publishing Inc., (Jan. 2004), pp. 47-59.
40 "Flonix: USB Desktop OS Solutions Provider, http://www.flonix.com", Retrieved from the Internet Jun. 1, 2005, (Copyright 2004),2 pages.
41 "Free On-Line Dictonary of Computing Concatenate", (Dec. 22, 1995).
42 "How to Prevent Copying DB Application to Other Machines", Discussion From Microsoft.Public.Access.Security, (Dec. 22, 1998).
43 "IBM Spearheading Intellectual Property Protection Technology for Information on the Internet", (May 1996), 3 pages.
44 "International Search Report and Written Opinion mailed Apr. 22, 2008", Application No. PCT/US2007/087960, 7 pages.
45 "International Search Report and Written Opinion mailed Jan. 16, 2006", Application No. PCT/US2006/034622, 6 pages.
46 "International Search Report and Written Opinion mailed Jul. 9, 2008", Application No. PCT/US05/46539, 11 pages.
47 "International Search Report and Written Opinion mailed Jun. 19, 2007", PCT Application No. PCT/US05/46091, 11 pages.
48 "International Search Report and Written Opinion mailed Mar. 21, 2007", Application No. PCT/US05/46223, 10 pages.
49 "International Search Report and Written Opinion mailed Nov. 15, 2004", Application No. PCT/US05/40966, 9 pages.
50 "International Search Report and Written Opinion mailed Nov. 30, 2006", Application No. PCT/US05/40950, 8 pages.
51 "International Search Report and Written Opinion mailed Nov. 8, 2007", Application No. PCT/US05/40967, 5 pages.
52 "International Search Report and Written Opinion mailed Sep. 25, 2006", Application No. PCT/US05/40949, 7 pages.
53 "International Search Report and Written Opinion mailed Sep. 25, 2007", Application No. PCT/US06/12811, 10 pages.
54 "International Search Report and Written Opinion mailed Sep. 8, 2006", Application No. PCT/US05/040942, 20 pages.
55 "International Search Report and Written Opinion", Application Serial No. PCT/US05/40940, 18 pages.
56 "International Search Report mailed Jan. 5, 2007", Application No. PCT/US2006/032708, 3 pages.
57 "International Search Report mailed Jul. 22, 2002", PCT Application No. PCT/US00/04949.
58 "International Search Report mailed Jul. 24, 2002", PCT Application No. PCT/US00/04946.
59 "International Search Report mailed Jul. 24, 2002", PCT Application No. PCT/US00/04948.
60 "International Search Report mailed Jul. 26, 2002", PCT Application No. PCT/US00/05091.
61 "International Search Report mailed Jul. 30, 2002", PCT Application No. PCT/US00/04983.
62 "INTERNET DYNAMICS: Internet Dynamics First to Ship Integrated Security Solution for Enterprise Intranets and Extranets", Conclave Accelerates Enterprise Deployment of Secure, High-Value Intranets and Extranets; Business Wire. (Sep. 15, 1997).
63 "Licenslt: Kinder, Gentler Copyright? Copyright Management System Links Content Authorship Information", Seybold Report on desktop Publishing, 10(11), (1996), 2 pages.
64 "Magic Desktop Automation Suite for the Small and Mid-Sized Buisness", printed from www.remedy.com/soultions/magic-it-suite.htm on Sep. 7, 2005, (Copyright 2005),4pages.
65 "Magic Desktop Automation Suite for the Small and Mid-Sized Buisness", printed from www.remedy.com/soultions/magic—it—suite.htm on Sep. 7, 2005, (Copyright 2005),4pages.
66 "Managing Digital Rights in Online Publishing", How two Publishing Houses Maintain Control of Copyright, Information Management & Technology, 2001, 34(4), 168-169.
67 "Migo by PowerHouse Technologies Group, http://www.4migo.com", Retrieved from the Internet Jun. 1, 2005, (Copyright 2003),3 pages.
68 "Network-based authentication: the key to security", Network Computing, p. 98, (from DialogClassic Web(™) file 16, acc. No. 01702732., (Jun. 1991).
69 "Network-based authentication: the key to security", Network Computing, p. 98, (from DialogClassic Web(™) file 16, acc. No. 017027321)., (Jun. 1991).
70 "Next step is encryption: data security may be bundled with next's operating system", Electronic Engineering Times, p. 18, (from DialogClassic Web(™) file 16, acc. No. 021031901., (Feb. 3, 1992).
71 "Notice of Acceptance mailed Jan. 25, 2010", AU Application No. 2006220489, 2 pages.
72 "Notice of Acceptance mailed Oct. 14, 2010", AU Application No. 2005222507, 3 pages.
73 "Notice of Allowance mailed Dec. 25, 2009", Chinese Application No. 200580038773.8, 4 pages.
74 "Notice of Allowance mailed Feb. 18, 2010", Mexican Application No. MX/a/2007/005660, 2 pages.
75 "Notice of Allowance mailed Feb. 19, 2010", Mexican Application No. MX/a/2007/005662, 2 pages.
76 "Notice of Allowance mailed Jul. 2, 2010", Mexican Application No. MX/a/2007/005659, 2 pages.
77 "Notice of Allowance mailed Nov. 13, 2009", MX Application No. PA/a/2005/011088, 2 pages.
78 "Notice of Allowance mailed Sep. 12, 2011", U.S. Appl. No. 11/224,635.
79 "Notice of Preliminary Rejection mailed May 30, 2012", Korean Patent Application No. 10-2007-7011069, 1 page.
80 "Notice of Rejection mailed Aug. 5, 2011", Japanese Patent Application No. 2007-552142, 8 pages.
81 "Notice of Rejection mailed Jul. 12, 2011", JP Application No. 2007-541351, 4 pages.
82 "Notice of Rejection mailed Jul. 15, 2011", JP Application No. 2007-541356, 4 pages.
83 "Notice of Rejection mailed Jul. 22, 2011", JP Application No. 2007-541355, 4 pages.
84 "Notice of Rejection mailed Jul. 22, 2011", JP Application No. 2007-541362.
85 "Notice of Rejection mailed Jul. 26, 2011", JP Application No. 2007-541352, 5 pages.
86 "Notice of Rejection mailed Jul. 5, 2011", Japanese Application No. 2007-541363, 10 pages.
87 "Notice of Rejection mailed Jun. 13, 2011", JP Application No. 2007-551270, 4 pages.
88 "Notice of Rejection mailed Jun. 21, 2011", JP Application No. 2005-330496, 6 pages.
89 "Notice of Rejection mailed Jun. 7, 2011", Japanese Application No. 2007-541361, 3 pages.
90 "Notice of Rejection mailed Nov. 11, 2011", Japanese Application No. 2005-301957, 21 pages.
91 "Notice of Rejection mailed Sep. 9, 2011", JP Application No. 2007-548385, 9 pages.
92 "Notice of the First Office Action mailed Dec. 29, 2010", CN Application No. 200580044294.7, 9 pages.
93 "Notice on Division of Application mailed Aug. 8, 2008", CN Application No. 200510113398.0, (Aug. 8, 2008),2 pages.
94 "Notice on First Office Action mailed Dec. 12, 2008", CN Application No. 200510113398.0.
95 "Notice on Grant of Patent mailed Oct. 20, 2010", CN Application No. 200680006199.2, 4 pages.
96 "Notice on Grant of Patent Right for Invention mailed Jan. 29, 2010", CN Application No. 200580040764.2, 4 pages.
97 "Notice on Grant of Patent Right for Invention mailed May 5, 2011", Chinese Application No. 200580038812.4, 4 pages.
98 "Notice on Proceeding with the Registration Formalities mailed Oct. 23, 2009", CN Application No. 200510113398.0, 4 pages.
99 "Notice on Second Office Action mailed Jun. 7, 2010", CN Application No. 200680030846.3, 6 pages.
100 "Notice on the First Office Action mailed Dec. 11, 2009", CN Application No. 200510127170.7, 16 pages.
101 "Notice on the First Office Action mailed Jul. 30, 2010", Chinese Application No. 200680033207.2, 7 pages.
102 "Notice on the First Office Action mailed Sep. 27, 2010", Chinese Application No. 200580038745.6, 6 pages.
103 "Office Action mailed Dec. 7, 2011", JP Application No. 2008-528054, 7 pages.
104 "Office Action mailed Feb. 10, 2010", Mexican Application No. MX/a/2007/005656, 5 pages.
105 "Office Action mailed Feb. 9, 2010", Mexican Application No. MX/a/2007/005855, 6 pages.
106 "Office Action mailed Jul. 1, 2009", MX Application No. 2007/a/2007/007441.
107 "Office Action mailed Jul. 26, 2009", Mexican Application No. MX/a/2007/005655, 5 pages.
108 "Office Action mailed Jul. 6, 2009", MX Application No. MX/a/2007/005661, 6 pages.
109 "Office Action mailed Jul. 7, 2009", Mexican Application No. MX/a/2007/005660, 8 pages.
110 "Office Action mailed Jul. 8, 2009", Mexican Application No. MX/a/2007/005662, 7 pages.
111 "Office Action mailed Jun. 29, 2009", Mexican Application No. MX/a/2007/005656, 6 pages.
112 "Office Action mailed Jun. 29, 2009", Mexican Application No. MX/a/2007/005657, 2 pages.
113 "Office Action mailed Jun. 30, 2010", JP Application No. 2000-608242.
114 "Office Action mailed Jun. 8, 2012", JP Application No. 2005-301957, 8 pages.
115 "Office Action mailed Mar. 19, 2010", EP Application No. 05819896.1, 1 page.
116 "Office Action mailed Mar. 8, 2011", MX Application No. MX/a/2007/005661, 8 pages.
117 "Office Action mailed May 22, 2009", Chinese Application No. 200580038771.9, 5 pages.
118 "Office Action mailed May 26, 2008", EP Application No. 05109616.2, 5 pages.
119 "Office Action mailed Nov. 30, 2009", Mexican Application No. MX/a/2007/005659, 6 pages.
120 "Office Action mailed Oct. 1, 2010", MX Application No. MX/a/2007/005661, 3 pages.
121 "Office Action mailed Oct. 18, 2010", Mexican Application No. MX/a/2007/005656, 3 pages.
122 "Office Action mailed Sep. 24, 2010", Mexican Application No. MX/a/2007/005655, 3 pages.
123 "Optimising license checkouts from a floating license server", Arm The Architecture for the Digital World, from http://www.arm.com/support/faqdev/1391.html.
124 "Overview of Security of Windows Media Rights Manager", Mircosoft; URL http://msdn.microsoft.com/ja-jp/library/dd148624.aspx, (Dec. 3, 2001).
125 "PACE Anti-Piracy Introduction", printed from www.paceap.com/psintro.html on Sep. 7, 2005, (Copyright 2002),4 pages.
126 "Partial Search Report mailed Jul. 23, 2010", EP Application No. 05821183.0.
127 "PCT International Search Report mailed Sep. 18, 2007", International Application No. PCT/US05/30490.
128 "Postal service announce plan to postmarks on electronic mail", San Jose Mercury News, (from DialogClassic Web file 9, acc. No. 00618375)., (Apr. 19, 1995).
129 "Postal service announce plan to postmarks on electronic mail", San Jose Mercury News, (from DialogClassic Web file 9, acc. No. 006183751), (Apr. 19, 1995).
130 "Preliminary Rejection mailed Jul. 4, 2012", Korean Application No. 10-2007-7012294, 2 pages.
131 "Prequalification Using Credit Reports", Retrieved from the Internet at http://www.credco.com/creditreports/prequalification.htm on Oct. 14, 2005, 2 pages.
132 "Rights Management in the Digital Age", Tradings in Bits, Not Atoms, 4, (Spring 1997), 3 pages.
133 "S-A unveil security system", Multichannel News, v 18, n. 3, p. 45+, (fromDialogClassicWeb(™) file 9, acc. No. 00864754)., (Jan. 15, 1996).
134 "Search Report Dated Jan. 11, 2008", EP Application No. 05820090.8, 7 pages.
135 "Second Office Action mailed Apr. 13, 2011", CN Patent Application No. 200810189718.4.
136 "Second Office Action mailed Apr. 2, 2011", CN Patent Application No. 200810189719.9.
137 "Second Office Action mailed Dec. 18, 2009", Chinese Application No. 200580038812.4, 24 pages.
138 "Solution for piracy", Which Computer, p29, (from DialogClassic Web(™) file 275 acc. No. 010142801)., (Nov. 1983).
139 "Sony develops copyright protection solutions for digital music content", From PR Newswire (copied from http://www.findarticles.com)., (Feb. 25, 1999).
140 "Sony develops copyright protection solutions for digital music content", From PR Newswire (copied from http://www.findarticles.com).., (Feb. 25, 1999).
141 "Suppliers cashing in on the Internet", CommunicationsWeek International, n134, p. 36+, (from DialogClassic Web file 9, acc. No. 00564878)., (Nov. 14, 1994).
142 "Suppliers cashing in on the Internet", CommunicationsWeek International, n134, p. 36+, (from DialogClassic Web file 9, acc. No. 005648781)., (Nov. 14, 1994).
143 "TCG Specification Architecture Overview", Revision 1.2, (Apr. 28, 2004),55 pages.
144 "Technological Solutions Rise to Complement Law's Small Stick Guarding Electronic Works", Information Law Alert, (Jun. 16, 1995).
145 "Technological Solutions Rise to Complement Law's Small Stick Guarding Electronic Works", Information Law Alert, 3-4 and 7, (Jun. 16, 1995).
146 "The Fifth Office Action mailed Jul. 14, 2010", CN Application No. 200680006199.2, 6 pages.
147 "The First Office Action mailed Aug. 22, 2008", CN Application No. 200680006199.2, 23 pages.
148 "The First Office Action mailed Oct. 9, 2009", CN Application No. 200580043102.0, 20 pages.
149 "The Fourth Office Action mailed Jan. 18, 2010", CN Application No. 200680006199.2, 10 pages.
150 "The key to keys", DATAQUEST (India), (from DialogClassic Web(™) file 619, acc. No. 05010091)., (Aug. 31, 1997).
151 "The key to keys", DATAQUEST (India), (from DialogClassic Web(™) file 619, acc. No. 050100911)., (Aug. 31, 1997).
152 "the new network: planning and protecting Internet electronic commerce", Information Week, n 608, p. 15SUN+, (from DialogClassic Web(™) file 13, acc. No. 00528101)., "document not readily available after extensive search", (Feb. 12, 1996).
153 "the new network: planning and protecting Internet electronic commerce", Information Week, n 608, p. 15SUN+, (from DialogClassic Web(™) file 13, acc. No. 005281011., (Feb. 12, 1996).
154 "The Second Office Action mailed Feb. 20, 2009", CN Application No. 200680006199.2, 9 pages.
155 "The Second Office Action mailed Jul. 3, 2009", CN Application No. 200510113398.0, 7 pages.
156 "The Third Office Action mailed Jun. 5, 2009", CN Application No. 200680006199.2, 7 pages.
157 "Third Office Action mailed Apr. 1, 2010", Chinese Application No. 200580038812.4, 9 pages.
158 "Using Windows Media Rights Manager to Protect and Distribute Digital Rights Media", Windows Media Technologies (Online); XP002307161; http://msdn.microsoft/msdnmag/issues/01/12/DRM/print.asp, (Dec. 1, 2001).
159 "WebServUSB, http://www.webservusb.com", Retrieved from the Internet Jun. 1, 2005 (Copyright 2004),16 pages.
160 Amdur, D. "InterTrust Challenges IBM Digital Content Metering", Report on Electronic Commerce, 3(15), 1-2 and 16-18, (Jul. 23, 1996).
161 Amdur, D. "Meeting Online Copyright", (Jan 16, 1996), 2 pages.
162 Amdur, D. "Metering Online Copyright", (Jan. 16, 1996), 2 pages.
163 Arbaugh, "A secure and Reliable Bootstrap Architecture", IEEE Symposium on Security and Privacy, May 1997, pp. 65-71.
164 Armati, D. "Tools and Standards for Protection, Control and Presentation of Data", (Apr. 3, 1996), 17 pages.
165 * B. Lampson et al., "Authentication in Distributed Systems: Theory and Practice," ACM Transactions on Computer Systems v10, 265, 1992).
166 Backman, Dan "Smartcards: the intelligent way to securtiy", Network Computing, v 9, n9, p. 168-171, (from DialogClassic Web(™) file 13, acc. No. 005788641., (May 15, 1998).
167 Bajikar, S. "Trusted Platform Module (TPM) based Security on Notebook PCs—White Paper", Mobile Platforms Group Intel Corperation; XP002259678; http://www.intel.com/design/mobile/platform/downloads/Trusted—Platform—Module—White—Paper.pdf, (Jun. 20, 2002).
168 Benjamin, R. et al., "Electronic Markets and Virtual Value Chains on the Information Superhighway", Sloan Management Rev., 62-72, (Winter 1995).
169 Cassidy, "A Web Developers Guide to Content Encapsulation Technology", (Apr. 1997), 5 pages.
170 Cassidy, "A Web Developers Guide to Content Encapsulation Technology", http://www.ne-dev.com/netscapeworld/nw-04-1997/nw-04-copyright.html, (Apr. 1997), 7 pages.
171 Chin, Tyler L., "Reaching out to physicians", Health Data Management, v 6, n 9, p. 36, 38, 40 (from DialogClassicWeb(™), file 13, acc. No. 00588764)., (Sep. 1998).
172 Chin, Tyler L., "Reaching out to physicians", Health Data Management, v 6, n 9, p. 36, 38, 40, (from DialogClassic Web(™), file 13, acc. No. 00588764), (Sep. 1998).
173 Clark, T. "Software Sucures Digital Content on Web", Interactive Week, (Sep. 25, 1995), 1 page.
174 Cox, B. "Superdisribution", Idees Fortes, (Sep. 1994), 2 pages.
175 Cox, B. "What If There is a Silver Buller", J. Object Oriented Program, 8-9 and 76, (Jun. 1992).
176 Cox, B. "What If There is a Silver Bullet", J. Object Oriented Program, 8-9 and 76, (Jun. 1992).
177 Craig W., et al., "Digital Licensing", IEEE Internet Computing, (vol. 9 No. 4), (Jul./Aug. 2005).
178 Davida, George I., et al., "UNIX GUARDIANS: Active User Intervention in Data Protection", Aerospace Computer Security Applications Conference, Fourth Dec. 12-16, (1988), 6 pages.
179 Dawson, Fred "S-A unveil security system", Multichannel News, v 18, n 3, p. 45+, (fromDialogClassicWeb(™) file 9, acc. No. 008647541)., (Jan. 15, 1996), 2 pages.
180 Eren, H. et al., "Fringe-Effect Capacitive Proximity Sensors for Tamper Proof Enclosures", Proceedings of 2005 Sensors for Industry Conference, (Feb. 2005), pp. 22-25.
181 Evans, P. "DRM: Is the Road to Adoption Fraught with Potholes?", Seybold Reporting Analyzing Publishing Technologies, 2001, 1(14), 32.
182 Fowler, T.B. "Technology's Changing Role in Intellectual Property Rights", IT Professional (IEEE), 2002, 4(2), 39-44.
183 Gable, J. "The Digital Rights Conundrum", Transform Magazine, 2001, 10(11).
184 Gao, Jerry et al., "Online Advertising—Taxonomy and Engineering Perspectives", http://www.engr.sjsu.edu/gaojerry/report/OnlineAdvertising%20.pdf, (2002), 33 pages.
185 Goering, Richard "Web Venture Offers Metered Access to EDA Packages-Startup Winds Clocks by the Hour Tools (E*CAD Will Launch Web Site That Provides Pay-Per-Use and Pay-Per-Hour Access to Range of Chip Design Software)", Electronic Engineering Times, (Nov. 6, 2000), 3 pages.
186 Goering, Richard "Web Venture Offers Metered Access to EDA Packages—Startup Winds Clocks by the Hour Tools (E*CAD Will Launch Web Site That Provides Pay-Per-Use and Pay-Per-Hour Access to Range of Chip Design Software)", Electronic Engineering Times, (Nov. 6, 2000), 3 pages.
187 Griswold, G.N. "A Method for Protecting Copyright on Networks", IMA Intellectual Property Project Proceedings, vol. 1, Issue 1, pp. 111-120., (Jan. 1994).
188 Griswold, G.N. "A Method For Protecting Copyrights on Networks", IMA Intell. Property Project Proceedings, 1(1), 169-178, (Jan. 1994).
189 Gunter, C.A. et al., "Models and Languages for Digital Rights", Proceedings of the 34th Annual Hawaii International Conference on System Sciences, 2001, 5.
190 Hanai, Hiroyuki "Latest Information and Establishment of a Server-Setting Up Free BSD-UNIX USER", vol. 11, No. 3, pp. 93-100, Softbank Pub. Co, Japan, (Mar. 1, 2002).
191 Hauser, R.C. "Does Licensing Require New Access Control Techniques?", (Aug. 1993), 9 pages.
192 Hong, S. et al., "On the Construction of a Powerful Distributed Authentication Server Without Additional Key Management", Computer Communications, 2000, 23, 1638-1644.
193 Housley, R. et al., "Internet X. 509 Public Key Inforstructure Certificate and Certificate Renovation List Profile", Standards Track, Apr. 2, 1-91, XP-002279343.
194 Housley, R. et al., "Metering: A Pre-Pay Technique", Proceedings of the SPIE—The International Society for Optical Engineering, 1997, 3022, 527-531.
195 http://www.dmod.com/oem-features.
196 http://www.dmod.com/oem—features.
197 Hudfins-Bonafield, C. "Selling knowledge on the Net", Network Computing, 102-109, (Jun. 1, 1995).
198 Hwang, C et al., "Protection of Digital Contents on Distributed Multimedia Enviornment", Proceedings of the IASTED International Confrence and Multimedia Systems and Apps, Nov. 19-23, 200, Las Vegas, NV. 127-132.
199 Jacobsson, M. et al., "Propietary Certificates", Topics in Cryptology, 2002, 164-181.
200 Kahn, R.E. "Deposit, Registration, and Recordation in an Electronic Copyright Management System", IMA Intellectual Property Project Proceedings, (Jan. 1994).
201 Kaliski, "Privacy Enhancement for Internet Email—Part IV: Key Certification and Related Services", RFC 1424, pp. 1-8, (Feb. 1993).
202 Kaplan, M.A. "IBM Cryptolopes", Super-Distribution and Digital Rights Management, (Dec. 1996), 7 pages.
203 Kent, S.T. "Protecting Externally Supplied Software in Small Computers", 1-42 and 250-252, (Sep. 1980), 7 pages.
204 Kohl, U. et al., "Safeguarding Digital Library Contents and Users: Protecting Documents Rather Than Channels", D-Lib Magazine, (Sep. 1997), 9 pages.
205 Kopeikin, Roy "Secure trading on the Net", Telecommunications International Edition, v 30, n 10, p. 89-94, from DialogClassic Web(™) file 13, acc. No. 00517627)., (Oct. 1996).
206 Kopeikin, Roy "Secure trading on the Net", Telecommunications International Edition, v 30, n 10, p. 89-94, from DialogClassic Web(™) file 13, acc. No. 005176271., (Oct. 1996).
207 Kuan-Ting, Shen "A New Digital Watermarking Technique for Video", Proceedings VISUAL 2002, Hsin Chu, Taiwan, Mar. 11-13, 2002.
208 Kumik, P "Digital Rights Management", Computers and Law, 2000, 11(4), 14-15.
210 Linn, "Privacy Enhancement for Internet Email—Part I: Message Encryption and Authentication Procedures", RFC 1421, pp. 1-37, (Feb. 1993).
211 Linn, R.J "Copyright and Inform,ation Services in the Context of the National Research and Educational Network", IMA Intell. Property Project Proceedings, 1(1), 1 and 10-20, (Jan. 1994).
212 Lotspiech, "Broadcast Encryption's Bright Future", IEEE Computer, Aug. 2002.
213 M. Olson, et al., "Concurrent access licensing", pp. 67-72, UNIX Review, vol. 6 No. 9, (from DIALOG acc. No. 012549181), (Sep. 1988).
214 M. Olson, et al., "Concurrent access licensing", pp. 67-72, UNIX Review, vol. 6 No. 9, (from DIALOG acc. No. 012549181)., (Sep. 1988).
215 M. Olson, et al., "Concurrent access licensing", pp. 67-72, UNIX Review, vol. 6 No. 9, (from DIALOG acc. No. 012549181, (Sep. 1988).
216 McNab, L. "Super-Distribution Works Better in Practical Applications", (Mar. 2, 1998), 2 pages.
217 Memon, "Protecting Digital Media Content", Communications of the ACM, Jul. 2002.
218 Menezes, et al., "Handbook of Applied Cryptography", 1997, CRC Press, pp. 31-32.
219 Moeller, M. "IBM Takes Charge of E-Commerce", Plans Client, Servers Apps based on SET, (Apr. 1996), 4 pages.
220 Moeller, M. "NetTrust Lets Cyberspace Merchants Take Account", PC Week, 12(48), (Nov. 20, 1995), 1 page.
221 Morales, Tatiana "Understanding Your Credit Score", http://www.cbsnews.com/stories/2003/04/29/earlyshow/contributors/raymartin/main55152.shtml retrieved from the Intenet on Apr. 23, 2009, (Apr. 30, 2003), 3 pages.
222 Mufti, Dr. Muid et al., "Design and Implementation of a Secure Mobile IP Protocol", Networking and Communication, INCC 204, International Conference on Jun. 11-13, 2004, (2004), 5 pages.
223 Nakajima, S. "Do You Really Know It? Basics of Windows2000/XP Network, 4th Installment, What is Logon Like?", Nikkei Business Publications, Inc., (Jan. 2004), pp. 116-121.
224 Oda, Hiroharu "The Basics and Application of Security IC Cards Passport to an E-Business", 1st ed, pp. 143-44, C Media Co., Ltd., (Apr. 27, 2000).
225 Ogata, W. et al., "Provably Secure Metering Scheme", Advances in Cryptology ASIACRYPT, 6th International Conference on the Theory and Application of Cryptology and Information Security. Proceedings(Lecture notes in Computer Science 1976). 2000, 388-398.
226 Oh, Kyung-Seck "Acceleration Technique For Volume Rendering Using 2D Texture Based Ray Plane Casting on GPU", 2006 Intl. Conf. CIS, Nov. 3-6, 2006.
227 Oshiba, Takashi et al., "Personalized Advertisement—Duration Control for Streaming Delivery", ACM Multimedia, (2002), 8 pages.
228 Peinado, M. "Digital Rights Management in a Multimedia Enviornment", SMPTE Journal, 2002, 111(3), 159-163.
229 Pemberton, J. "An ONLINE Interview with Jeff Crigler at IBM InfoMarket", (Jul. 1996), 6 pages.
230 Pruneda, Andrea "Windows Media Technologies; Using Windows Media Rightrs Manager to Protect and Distrubute Digital Rights Media", MSDN Magazine Japanese Version; ASCII Corporation, Japan; No. 22; pp. 68-82, (Jan. 18, 2002).
231 Qiao, Daji et al., "MiSer: An Optimal Low-Energy Transmission Strategy for IEEE 802.11 a/h", obtained from ACM, (Sep. 2003), pp. 161-175.
232 Ramanujapuram, A. et al., "Digital Content & Intellectual Property Rights: A Specification Language and Tools for Rights Management", 20-23 and 26, (Dec. 1998).
233 Ripley, "Content Protection in the Digital Home", Intel Technology Journal, Nov 2002.
234 Rouvroy, G. et al., "Recon Figurable Hardware Solutions for the Digital Rights Managements of Digital Cinema", Proceedings of the 4th ACM Workshop on Digital Rights Management, Oct. 4, pp. 40-53.
235 Royan, B. "Content Creation and Rights Management; Expeirences of SCRAN", Program, 2000, 34(2), 131-142.
236 Schneier, B. "Applied Cryptography Passage", Applied Crytography, Protocols, Algorithms and Source Code in C, 1996, 183-187, XP-002954321.
237 Schneier, B. "Applied Cryptography Passage", Applied Crytography, Protocols, Algorithms and Source Code in C, 1996, 574-577, XP-002922914.
238 Schneier, B. "Applied Cryptography, Second Edition: Protocols, Algorithms, and Source Code in C (cloth)", (Jan. 1, 1996), 13 pages.
239 Seok Kim, S. et al., "A Secure and Efficient Metering Scheme for Internet Advertising", Journal of KISS: Computer Systems and Theory, 2002, 29(3-4) 153-160.
240 Shi, Changgui et al., "A Fast MPEG Vidoe Encryption Algorithm", 1998, Bristol, UK; pp. 81-88.
241 Sibert, O. et al., "Securing the Content, Not the Wire, for Information Commerce", 1-11 (Jul. 1995).
242 Sibert, O. et al., "Securing the Content, Not the Wire, for Information Commerce", 1-11, (Jul 1995).
243 Sibert, O. et al., "The DigiBox: A Self-Protecting Container for Information Commerce", First USENIX Workshop on Electronic Commerce, 171-183, (Jul. 11-12, 1995).
244 Sibert, O. et al., "The DigiBox: A Self-Protecting Container for Information Commerce", First USENIX Workshop on Electronic Commerce,, http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.30.4035&rep=rep1&type=pdf, (Jul. 11-12, 1995), pp. 171-183.
245 Slusallek, "Vision-An Architecture for Global Illumination Calculation", IEEE Transactions on Visualization and Computer Graphics, vol. 1, No. 1, Mar. 1995, pp. 77-96.
246 Smith, M.G. et al., "A New Set of Rules for Information Commerce", Electronic Commerce, 34-35, (Nov. 6, 1995).
247 Stallings, W. Ph.D. "Network and Internetwork Security Principles and Practice", 1995, Prentice-Hall, Inc., 3 pages.
248 Stefik, M. "Shifting the Possible: How Trusted Systems and Digital Property Rights Challenge Us to Rethink Digital Publishing", Technical Perspective, 137-159, (1997).
249 Stefik, M. "Trusted Systems", (Mar. 1997), 8 pages.
250 Steinebach, "Digital Watermaking Basics—Applications—Limits", NFD Information—Wissenschaft und Praxis, Jul. 2002.
251 Stevens, Micheal G., "How secure is your computer system?", Practical Accountant, v 31, n 1, p. 24-32, (from DialogClassic Web(™) file 13, acc. No. 005669761., (Jan. 1998).
252 Tarter, J. "The Superdistribution Model", Soft Trends, 3(6), 1-6, (Nov. 15, 1996).
253 Thompson, Craig W. et al., "Digital Licensing", IEEE Internet Computing, (vol. 9. No. 4), http://csce.uark.edu/˜cwt/DOCS/2005-07--PAPER--IEEE-Internet-Computing--Digital-Licensing.pdf, (Jul./Aug. 2005), pp. 85-88.
254 Torrubia, A et al., "Cryptography Regulations for E-Commerce and Digital Rights Management", Computers and Security, 2001, 20(8), 724-738.
255 Utagawa, Mari et al., "Creation of Card Application by IC Card OS ‘MULTOS’ Which Can Rewrite Application", Interface, vol. 29, No. 3, ISSN: 0387-9569, CQ Publishing Co. Ltd., (Mar. 1, 2003), pp. 46-55.
256 Valimaki, M. et al., "Digital Rights Management on Open and Semi-Open Networks", WIAPP, 2001, 154-155.
257 Weber, R. "Digital Right Management Technology", (Oct. 1995), 35 pages.
258 White, S.R. et al., "ABYSS: A Trusted Architecture for Software Protection", IEEE Symposium on Security and Privacy, 38-51, (Apr. 27-29, 1987), 2 pages.
259 White, S.R. et al., "ABYSS: An Architecture for Software Protection", IEEE Trans. On Software Engineering, 16(6), 619-629, (Jun. 1990).
260 Yu, H. "Digital Multimedia at Home and Content Rights Management", IEEE Proceedings 2002 IEEE 4th International workshop on Networked Appliances, 2002, 49-56.
261 Yue, Wei T., et al., "The Reward Based Online Shopping Community", Routledge, vol. 10, No. 4, (Oct. 1, 2000), 2 pages.
262 Zemao, Chen et al., "A Malicious Code Immune Model Based on Program Encryption", IEEE-Wireless Communication, Networking and Mobile Computing, WICOM '08, 4th International Conference on Oct. 12-14, 2008, (2008), 5 pages.
263 Zemao, Chen et al., "A Malicious Code Immune Model Based on Program Encryption", IEEE—Wireless Communication, Networking and Mobile Computing, WICOM '08, 4th International Conference on Oct. 12-14, 2008, (2008), 5 pages.
264 Zhao, Hua "A New Watermaking Scheme for CAD Engineering Drawings", 9th Intl. Conf. Computer-Aided Industral Design and Conceptual Design; CAID/CD 2008; Nov. 22-25, 2008.
265 Zwollo, K "Digital Document Delivery and Digital Rights Management", Information Services & Use, 2001, 9-11.
U.S. Classification 713/156, 726/20, 713/173, 713/159, 380/285
Cooperative Classification H04L9/3263, H04L9/3271, H04L2209/603, G06F21/10
European Classification G06F21/10, H04L9/32T
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:JAIN, AMIT;STORM, CLIFFORD PAUL;CUTTER, BENJAMIN BROOKS,JR;AND OTHERS;REEL/FRAME:023279/0982