Source: http://patents.com/us-8131648.html
Timestamp: 2018-04-26 21:06:30
Document Index: 363974316

Matched Legal Cases: ['Application No. 03710648', 'Application No. 03710648', 'Application No. 03802034', 'Application No. 03802034', 'Application No. 200580039507', 'Application No. 200580039507', 'Application No. 03802034', 'Application No. 03802034', 'Application No. 2003', 'application No. 2003', 'application No. 03802034', 'application No. 03802034', 'application No. 03710648']

US Patent # 8,131,648. Electronic content distribution and exchange system - Patents.com
United States Patent 8,131,648
Barton March 6, 2012
Electronic content distribution and exchange system
An electronic content distribution and exchange system provides authenticated, reliable content downloads and tracking capabilities. Content is distributed to users through the invention's architecture. A user registers for the purchase of content through an interface on a client system or via a Web site. The purchase is for a license to the content, not for the content itself. A list of available content is displayed to the user through the client system or the Web site. The invention's central servers log the purchase of the content into a license database. The electronic copy of the song may be already resident on the client system in a hidden area, carouseled in a protected broadcast channel, in the central database ready to be sent out in slices, or resident on a secure server on the Internet. The user accesses content through the client system's user interface where the user plays the content and controls its playback. The invention's service provides an exchange capability similar to stock trading whereby owners offer licenses to various electronic for sale. A seller places his license for a particular content up for sale on the central server where a buyer that is interested in the license places a bid. When a price is agreed to, the invention's central server transfers license ownership in the license database to the new owner.
Inventors: Barton; James M. (Alviso, CA)
Appl. No.: 10/339,698
09422139 Oct., 1999 6728713
60347181 Jan., 2002
60434767 Dec., 2002
Current U.S. Class: 705/59 ; 705/37
Field of Search: 705/1,54,51,59,37
5578068 November 1996 Laske et al.
5671412 September 1997 Christiano
5758068 May 1998 Brandt et al.
5790664 August 1998 Coley et al.
5940504 August 1999 Griswold
6009525 December 1999 Horstmann
6169976 January 2001 Colosso
6226624 May 2001 Watson et al.
6564996 May 2003 Hoffman et al.
7421729 September 2008 Zenoni
7457511 November 2008 Putterman et al.
7487529 February 2009 Orlick
7752642 July 2010 Lemmons
2001/0049648 December 2001 Naylor et al.
2002/0002523 January 2002 Kossovsky et al.
2002/0032906 March 2002 Grossman
2002/0082973 June 2002 Marbach et al.
2003/0110503 June 2003 Perkes
2003/0192060 October 2003 Levy
2004/0123129 June 2004 Ginter et al.
2004/0215469 October 2004 Fukushima et al.
2004/0250291 December 2004 Rao et al.
2005/0028208 February 2005 Ellis et al.
2005/0076359 April 2005 Pierson et al.
2005/0177853 August 2005 Williams et al.
2006/0095472 May 2006 Krikorian et al.
2011/0047601 February 2011 Barton
2011/0135271 June 2011 Van Hoff et al.
2001-160003 Jun., 2001 JP
WO 98/58306 Dec., 1998 WO
European Patent Office, "Communication pursuant to Article 94(3) EPC", Application No. 03710648.1, received May 30, 2008, 8 pages. cited by other .
Claims, Application No. 03710648.1, 7 pages. cited by other .
State Intellectual Property Office of P.R.C., "Notification of the First Office Action", Application No. 03802034.3, dated Dec. 5, 2008, 10 pages. cited by other .
Claims, Application No. 03802034.3, 9 pages. cited by other .
State Intellectual Property Office of P.R.C., "Notification of the First Office Action", Application No. 200580039507.7, mailed Mar. 27, 2009. cited by other .
Claims, Application No. 200580039507.7, 5 pages. cited by other .
State Intellectual Property Office of P.R.C., "Notification of the Second Office Action", Application No. 03802034.3, mailed Jun. 5, 2009, 9 pages. cited by other .
Current Claims, Application No. 03802034.3, 6 pages. cited by other .
English translation of Japanese Office Action dated Jan. 27, 2010 for Japanese Patent Application No. 2003-558776, 3 pages. cited by other .
Current Claims for Japanese patent application No. 2003-558776, 7 pages. cited by other .
State Intellectual Property of the People's Republic of China, English translation of the "Notification of Decision of Rejection" dated Jan. 8, 2010 for Chinese patent application No. 03802034.3, 9 pages. cited by other .
Current Claims for Chinese patent application No. 03802034.3, 5 pages. cited by other .
EPO Supplemental International Search Report, European patent application No. 03710648.1 dated May 10, 2007 (5 pgs). cited by other .
Computer Society, Proceedings of the First International Conference on WEB Delivery of Music entitled "Content Protection and Usage Control for Digital Music", by Changshen Xu et al., dated Nov. 21, 2001, IEEE .COPYRGT. 2001 (8 pgs). cited by other .
Computer Society Proceedings of the 36.sup.th Hawaii International Conference on System Sciences entitled "A Contract and Rights Management Framework Design for Interacting Brokers", by Susanne Guth, et al., dated Jan. 6, 2003, IEEE .COPYRGT. 2002 (10 pgs). cited by other.
Assistant Examiner: Winter; John M
This application is a Continuation-in-part of U.S. patent application Ser. No. 09/422,139, filed on Oct. 20, 1999 now U.S. Pat. No. 6,728,713; and claims benefit of U.S. Provisional Patent Application Ser. No. 60/347,181, filed on Jan. 8, 2002 and U.S. Provisional Patent Application Ser. No. 60/434,767, filed on Dec. 18, 2002.
1. A method for protecting and distributing licensed electronic content, comprising the steps of: registering a user as an owner of a license for an electronic content in a license database, the electronic content comprising one or more of: a digital media file or software; offering the license for sale, by a server comprising a processor, based on instructions from the user; receiving a bid from a buyer, by the server, for purchase of the license; determining, by the server, that the user has accepted the bid from the buyer for the purchase of the license based, at least, on the instructions from the user; responsive to determining that the user has accepted the bid: the server transferring ownership of the license for the electronic content in the license database from the user to the buyer; the server instructing the user's client system to delete the electronic content; and the server delivering the electronic content to the buyer's client system.
2. The method of claim 1, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase is transacted via a user interface on the user's client system, and wherein a list of available licensable electronic content is displayed to the user through the user's client system.
3. The method of claim 1, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase is transacted via a Web site, and wherein a list of available licensable electronic content is displayed to the user through the Web site.
4. The method of claim 1, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase occurs over an Internet connection.
5. The method of claim 1, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase is transmitted to the server through a log that is backhauled when the user's client system contacts the server through a telephony server.
6. The method of claim 1, wherein said delivering step carousels the electronic content in a protected broadcast channel received by the buyer's client system, and wherein the buyer's client system extracts the electronic content from said protected broadcast channel.
7. The method of claim 1, wherein said delivering step gathers the electronic content to be delivered to the buyer's client system into distribution packages called "slices", and wherein said delivering step transmits slices to the buyer's client system via communication mediums such as broadcast mechanisms, modems, networks, or the Internet.
8. The method of claim 1, wherein said delivering step is performed by a secure server on the Internet, and wherein said delivering step delivers the electronic content the buyer's client system via the Internet.
9. The method of claim 1, wherein the electronic content is accessed by the user through the user's client system's user interface, and wherein the user plays the electronic content and controls how the electronic content is played back via said user interface.
10. The method of claim 1, further comprising validating that the electronic content is licensed to the buyer in the license database for enabling the buyer to retrieve new copies of the electronic content onto a new client system or enabling the buyer's client system to verify that proper electronic content is resident on the buyer's client system.
11. The method of claim 1, further comprising offering licenses for sale for new material to client systems based on instructions from a content originator.
12. The method of claim 1, further comprising registering the buyer as an owner of a device, and in response to the buyer requesting a copy of the electronic content be downloaded to the device, checking that the device is registered to the buyer and that the buyer has a license to the electronic content; and making the electronic content available to the device.
13. The method of claim 1, further comprising registering the buyer as an owner of at least two client systems, and providing each client system of the at least client systems with authentication information for other client systems owned by the buyer.
14. The method of claim 13, wherein the buyer initiates copying of electronic content from a first client system of the at least client systems to another client system, wherein the first client system and the another client system authenticate each other using the authentication information before copying the electronic content.
15. An apparatus for protecting and distributing licensed electronic content, comprising: a license database; comprising a processor, and a memory; a plurality of client systems wherein each client system comprises a processor, and a memory; a server comprising a processor, a memory and licensing subsystem for registering a user as an owner of a license for an electronic content in the license database, the electronic content comprising one or more of a digital media file or software; the server memory comprising instructions stored therein that when executed by the server processor causes the server process to perform the steps of: offering the license for sale based on instructions from the user; receiving a bid from a buyer for purchase of the license; determining that the user has accepted the bid from the buyer for the purchase of the license based, at least, on the instructions from the user; and responsive to determining that the user has accepted the bid: transferring ownership of the license for the electronic content in the license database from the user to the buyer; and instructing the user's client system of the plurality of client systems to delete the electronic content; and delivery subsystem configured for delivering the electronic content to the buyer's client system of the plurality of client systems, responsive to determining that the user has accepted the bid.
16. The apparatus of claim 15, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase is transacted via a user interface on the user's client system, and wherein a list of available licensable electronic content is displayed to the user through the user's client system.
17. The apparatus of claim 15, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase is transacted via a Web site, and wherein a list of available licensable electronic content is displayed to the user through the Web site.
18. The apparatus of claim 15, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase occurs over an Internet connection to said licensing subsystem.
19. The apparatus of claim 15, further comprising: a telephony server; wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein said user's purchase is transmitted to the licensing subsystem through a log that is backhauled when the user's client system contacts the licensing subsystem through the telephony server.
20. The apparatus of claim 15, wherein the delivery subsystem carousels the electronic content in a protected broadcast channel received by the buyer's client system, and wherein the buyer's client system extracts the electronic content from the protected broadcast channel.
21. The apparatus of claim 15, wherein said delivery subsystem gathers the electronic content to be delivered to the buyer's client system into distribution packages called "slices", and wherein said delivery subsystem transmits slices to the buyer's client device via communication mediums such as broadcast mechanisms, modems, networks, or the Internet.
22. The apparatus of claim 15, wherein said content delivery subsystem resides on a secure server on the Internet, and wherein said content delivery subsystem delivers the electronic content to the buyer's client system via the Internet.
23. The apparatus of claim 15, wherein the electronic content is accessed by the user through the user's client system's user interface, and wherein the user plays the electronic content and controls how the electronic content is played back via said user interface.
24. The apparatus of claim 15, wherein the licensing subsystem validates that the electronic content is licensed to the buyer in the license database enabling the buyer to retrieve new copies of the electronic content onto a new client system or enabling the buyer's client system to verify that proper content is resident on the buyer's client system.
25. The apparatus of claim 15, further comprising a content originator configured for publishing an offering of licenses for new material to client systems.
26. The apparatus of claim 15, wherein the licensing subsystem registers the buyer as an owner of a device, and in response to the buyer requesting a copy of the electronic content be downloaded to the device, the licensing subsystem checks that the device is registered to the buyer and that the buyer has a license to the electronic content before making the electronic content available to the device via the buyer's client system.
27. The apparatus of claim 15, wherein the licensing subsystem registers the buyer as an owner of at least two client systems, and wherein the licensing subsystem provides each client system of the at least two client systems with authentication information for other client systems owned by the buyer.
28. The apparatus of claim 27, wherein the buyer initiates transfer of the electronic content from a first client system of the at least two client systems to another client system, wherein the first client system and the another client system authenticate each other using the authentication information before copying the electronic content.
29. A program storage medium readable by a computer, tangibly embodying a program of instructions, which when executed by a processor, perform method steps for protecting and distributing licensed electronic content, comprising the steps of: registering a user as an owner of a license for an electronic content in a license database the electronic content comprising one or more of: a digital media file or software; offering the license for sale, by the server, based on instructions from the user; receiving a bid from a buyer, by the server, for purchase of the license; determining, by the server, that the user has accepted the bid from the buyer for the purchase of the license based, at least, on the instructions from the user; responsive to determining, by the server, that the user has accepted the bid: transferring ownership, by the server, of the license for the electronic content in the license database from the user to the buyer; instructing, by the server, the user's client system to delete the electronic content; and delivering, by the server, the electronic content to the buyer's client system.
30. The program storage medium of claim 29, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase is transacted via a user interface on the user's client system, and wherein a list of available licensable electronic content is displayed to the user through the user's client system.
31. The program storage medium of claim 29, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase is transacted via a Web site, and wherein a list of available licensable electronic content is displayed to the user through the Web site.
32. The program storage medium of claim 29, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase occurs over an Internet connection.
33. The program storage medium of claim 29, wherein registering the user as the owner of the license is responsive to the user's purchase of the license; and wherein the user's purchase is transmitted to the server through a log that is backhauled when the user's client system contacts the server through a telephony server.
34. The program storage medium of claim 29, wherein said delivering step carousels the electronic content in a protected broadcast channel received by the buyer's client system, and wherein the buyer's client system extracts the electronic content from said protected broadcast channel.
35. The program storage medium of claim 29, wherein said delivering step gathers the electronic content to be delivered to the buyer's client system into distribution packages called "slices", and wherein said delivering step transmits slices to the buyer's client system via communication mediums such as broadcast mechanisms, modems, networks, or the Internet.
36. The program storage medium of claim 29, wherein said delivering step is performed by a secure server on the Internet, and wherein said delivering step delivers the electronic content the buyer's client system via the Internet.
37. The program storage medium of claim 29, wherein the electronic content is accessed by the user through the user's client system's user interface, and wherein the user plays the electronic content and controls how the electronic content is played back via said user interface.
38. The program storage medium of claim 29, wherein the steps further comprising validating that the electronic content is licensed to the buyer in said license database for enabling the buyer to retrieve new copies of the electronic content onto a new client system or enabling the buyer's client system to verify that proper electronic content is resident on the buyer's client system.
39. The program storage medium of claim 29, wherein the steps further comprising offering licenses for sale for new material to client systems based on instructions from a content originator.
40. The program storage medium of claim 29, wherein the steps further comprising registering the buyer as an owner of a device, and in response to the buyer requesting a copy of the electronic content be downloaded to the device, checking that the device is registered to the buyer and that the buyer has a license to the electronic content; and making the electronic content available to the device.
41. The program storage medium of claim 29, wherein the steps further comprising registering the buyer as an owner of at least two client systems, and providing each client system of the at least client systems with authentication information for other client systems owned by the buyer.
42. The program storage medium of claim 41, wherein the buyer initiates copying of electronic content from a first client system of the at least client systems to another client system, wherein the first client system and the another client system authenticate each other using the authentication information before copying of the electronic content.
43. The process of claim 1, further comprising receiving verification from the user's client system that the electronic has been deleted prior to delivering the electronic content to the buyer's client system.
44. The apparatus of claim 15, wherein the server is configured to receive verification from the user's client system that the electronic content has been deleted prior to the delivery subsystem delivering the electronic content to the buyer's client system.
45. The program storage medium of claim 29, wherein the steps further comprising receiving verification from the user's client system that the electronic content has been deleted prior to delivering the electronic content to the buyer's client system.
46. A process for protecting and distributing licensed electronic content, comprising the steps of: registering a user, in a license database, as an owner of a license for an electronic content and as an owner of at least two client systems with the electronic content; wherein the license database contains client system identifications of a plurality of client systems and a list of licensed content associated with each client system, the electronic content comprising one or more of: a digital media file or software; offering the license for sale, by a server comprising a processor, based on instructions from the user; receiving a bid from a buyer, by the server, for purchase of the license; determining, by the server, that the user has accepted the bid from the buyer for the purchase of the license based, at least, on the instructions from the user; responsive to determining that the user has accepted the bid: the server transferring ownership of the license for the electronic content in the license database from the user to the buyer; the server instructing the at least two client systems of the user to delete the electronic content; and the server delivering the electronic content to the buyer's client system.
47. The process of claim 46, wherein said delivering step carousels the electronic content in a protected broadcast channel received by the buyer's client system, and wherein the buyer's client system extracts the electronic content from said protected broadcast channel.
48. The process of claim 46, further comprising validating that the electronic content is licensed to the buyer in the license database for enabling the buyer to retrieve new copies of the electronic content onto a new client system or enabling the buyer's client system to verify that proper electronic content is resident on the buyer's client system.
49. The process of claim 46, further comprising receiving verification from each client system of the at least two client systems that the electronic has been deleted prior to delivering the electronic content to the buyer's client system.
50. A program storage medium readable by a computer, tangibly embodying a program of instructions, which when executed by a processor, perform method steps for protecting and distributing licensed electronic content, comprising the steps of: registering a user, in a license database, as an owner of a license for an electronic content and as an owner of at least two client systems with the electronic content; wherein the license database contains client system identifications of a plurality of client systems and a list of licensed content associated with each client system, the electronic content comprising one or more of: a digital media file or software; offering the license for sale, by the server, based on instructions from the user; receiving a bid from a buyer, by the server, for purchase of the license; determining, by the server, that the user has accepted the bid from the buyer for the purchase of the license based, at least, on the instructions from the user; responsive to determining that the user has accepted the bid: transferring ownership of the license for the electronic content in the license database from the user to the buyer; instructing the at least two client systems of the user to delete the electronic content; and delivering the electronic content to the buyer's client system.
51. The program storage medium of claim 50, wherein said delivering step carousels the electronic content in a protected broadcast channel received by the buyer's client system, and wherein the buyer's client system extracts the electronic content from said protected broadcast channel.
52. The program storage medium of claim 50, wherein the steps further comprising validating that the electronic content is licensed to the buyer in the license database for enabling the buyer to retrieve new copies of the electronic content onto a new client system or enabling the buyer's client system to verify that proper electronic content is resident on the buyer's client system.
53. The program storage medium of claim 50, wherein the steps further comprising receiving verification from each client system of the at least two client systems that the electronic has been deleted prior to delivering the electronic content to the buyer's client system.
54. An apparatus for protecting and distributing licensed electronic content, comprising: a license database; a plurality of client systems; a server comprising a processor and licensing subsystem for registering a user, in the license database, as an owner of a license for an electronic content and as an owner of at least two client systems, with the electronic content, of the plurality of client systems; wherein the license database contains client system identifications of a plurality of client systems and a list of licensed content associated with each client system the electronic content comprising one or more of: a digital media file or software; the server configured for: offering the license for sale based on instructions from the user; receiving a bid from a buyer for purchase of the license; determining that the user has accepted the bid from the buyer for the purchase of the license based, at least, on the instructions from the user; responsive to determining that the user has accepted the bid: transferring ownership of the license for the electronic content in the license database from the user to the buyer; and instructing the at least two client systems of the user to delete the electronic content; and delivery subsystem configured for delivering the electronic content to the buyer's client system of the plurality of client systems, responsive to determining that the user has accepted the bid.
55. The apparatus of claim 54, wherein said delivery subsystem carousels the electronic content in a protected broadcast channel received by the buyer's client system, and wherein the buyer's client system extracts the electronic content from said protected broadcast channel.
56. The apparatus of claim 54, wherein the licensing subsystem validates that the electronic content is licensed to the buyer in the license database enabling the buyer to retrieve new copies of the electronic content onto a new client system or enabling the buyer's client system to verify that proper content is resident on the buyer's client system.
57. The apparatus of claim 54, wherein the server is configured to receive verification from each client system of the at least two client systems that the electronic content has been deleted prior to the delivery subsystem delivering the electronic content to the buyer's client system.
58. The process of claim 1, further comprising the user's client system deleting the electronic content.
59. The apparatus of claim 15, wherein the user's client system is configured for deleting the electronic content.
60. The program storage medium of claim 29, wherein the steps further comprising the user's client system deleting the electronic content.
The invention relates to the distribution and exchange of electronic data packages in a computer environment. More particularly, the invention relates to establishing ownership of electronic content and the distribution and exchange of said electronic content in a computer environment.
Currently, there is growing interest in the electronic distribution of various kinds of content. Electronic distribution covers the copying of content from one digital storage repository to another using a network such as the Internet as the transport vehicle.
The file-sharing system of Napster, Inc. of Redwood City, Calif. and the Gnutella peer-to-peer file sharing system (originally developed by Nullsoft, Inc., of San Francisco, Calif.) are examples of primitive electronic distribution systems. Napster client systems must connect with a server to reach other clients systems. Gnutella, on the other hand, is a non-centralized peer-to-peer network approach where each client is directly connected to another client, thereby chaining all clients together to form a network. These types of distribution systems suffer from a number of weaknesses: They are not automated, thereby requiring direct interaction to introduce content to the system or to retrieve content from the system. They are not reliable, i.e., long downloads may fail, no data integrity is established, etc. They are not secure--no authentication methods or data security methods are typically involved. It is difficult to enforce copyright restrictions for protected content in the systems. There are no payment or transaction systems to support the sales and exchange of protected content.
It would be advantageous to provide an electronic content distribution and exchange system that provides reliable content downloads with tracking capabilities. It would further be advantageous to provide an electronic content distribution and exchange system that provides an authenticated, secure content distribution management system.
The invention provides an electronic content distribution and exchange system. The system provides reliable electronic content downloads to client systems with tracking capabilities. In addition, the invention provides a system that ensures authenticated, secure content distribution between a server and client.
A client device, typified in U.S. Pat. No. 6,233,389, owned by the Applicant, provides functionality typically associated with central video servers, such as storage of a large amount of video content, ability to choose and play this content on demand, and full "VCR-like" control of the delivery of the content, as typified in U.S. Pat. No. 6,327,418, owned by the applicant.
The invention provides authenticated, reliable content downloads and tracking capabilities. Content is distributed to users through the invention's architecture. A user registers for the purchase of content through an interface on a client system or via a Web site. The transacted purchase is for a license to the content, not for the content itself. A list of available content is displayed to the user through the client system or the Web site.
The invention's central servers log the purchase of the content into a license database. The purchase can happen directly over an Internet connection to the telephony servers, or through a log that is backhauled (i.e., when viewing objects are collected from client systems) when the client system contacts the service through the telephony servers. The purchase transaction is transmitted from the invention's central servers to a backend transaction service which provides clearing-house capabilities.
The electronic copy of the content may be already resident on the client system in a hidden area, carouseled in a protected broadcast channel, in the central database ready to be sent out in slices, or resident on a secure server on the Internet.
The invention provides a central database resident on a server that contains database objects. Objects to be replicated are gathered together into distribution packages called slices. A slice is a subset of the central database which is relevant to clients within a specific domain, such as a geographic region, or under the footprint of a satellite transmitter. Objects contain, among other types of data, items of digital content and/or network locations where items of digital content may be downloaded.
Using standard, currently existing techniques, ranging from private data channels in digital television signals, through modulation of data onto the Vertical Blanking Interval (VBI) of an analog television signal, via direct connection with the server using a modem, to an Internet connection with the server, slices are transmitted to the client devices, which choose portions of the information to save locally.
If a protected broadcast channel is used, the slice(s) of the content is/are copied onto equipment co-resident with the station television transmitter from whence it is modulated onto the broadcast signal. In these and similar broadcast-oriented cases, the slice is "carouseled", i.e., the data describing the slice is repeated continually until a new slice is provided for transmission.
The user accesses items of digital content through the client system's user interface. The user is free to play licensed content from his client system as desired and to control how it is played back (e.g., pause, fast forward, reverse, etc.).
Because all licenses are tracked, if the client system should fail, the invention's service can validate which content are licensed from the license database, such that the user can retrieve new copies of his licensed content onto his new client system. The process is performed either manually or as an automatic feature of the invention's service. Client systems can also verify that the proper content is resident on the client systems in the same manner, deleting or adding content as needed.
The invention's service provides an exchange capability similar to stock trading whereby owners offer licenses to various items of digital content for sale.
A seller can put his license(s) for particular items of digital content up for sale on the central server. Users can see a list of licenses that are for sale via their client systems or a Web site. A buyer that is interested in a seller's license for a particular content bids on the license. The bidding can take place through the seller's and buyer's respective client systems or through a Web site. When a price is agreed to, the invention's central server transfers license ownership in the license database to the new owner. The central server instructs the seller's client system to delete the content. The buyer's client system receives a copy of the content.
The invention allows content originators to make an offering on the market to client systems of new material, much like a public stock offering. Users purchase the new material through their client systems or through a Web site.
The invention's client system acts as a home base for the owner's content assets. If the owner wishes to get a copy of a particular content on his portable device, he needs to register ownership of the portable device with the invention's service. The owner requests a copy of a particular item of digital content for the portable device and the invention's service checks that the device is registered to the owner and that he has a license to the content. Once the information is validated, the invention's service makes the content available to the portable device, optionally through a download from the owner's client system.
An owner may own more than one client system. The owner registers his client systems with the invention's service which provides each client system with authentication information for the other client systems owned by the owner. This allows the client systems to authenticate each other without the need of the service.
When an owner wants to transfer content from one client system to another client system, he merely initiates the transfer at one of the client systems. The client systems authenticate each other using the authentication information given by the service and then initiate the copying of content between themselves.
FIG. 11 is a block schematic diagram of a preferred embodiment of the invention managing transactions for content licenses and distributing content according to the invention;
FIG. 12 is a diagram of a screenshot of a song playlist user interface on a client system according to the invention;
FIG. 13 is a block schematic diagram of a preferred embodiment of the invention performing a license transfer between a seller and a buyer according to the invention;
FIG. 14 is a block schematic diagram of a preferred embodiment of the invention allowing a publisher to place licenses on the market for users to purchase according to the invention; and
FIG. 15 is a block schematic diagram of a preferred embodiment of the invention where a user device is registered to receive a copy of a license content according to the invention.
The invention is embodied in an electronic content distribution and exchange system. A system according to the invention provides reliable electronic content downloads to client systems with tracking capabilities. In addition, the invention provides a system that that ensures authenticated, secure content distribution between a server and client.
FIG. 1 gives a schematic overview of the invention. Central to the invention is a method and apparatus for maintaining a distributed database of television viewing information among computer systems at a central site 100 and an extremely large number of client computing systems 101. The process of extracting suitable subsets of the central copy of the database is called "slicing" 102, delivering the resulting "slices" to clients is called "transmission" 103, delivering information collected about or on behalf of the viewer to the central site is called "collection" 104, and processing the collected information to generate new television viewing objects or reports is called "analysis" 107; in all cases, the act of recreating an object from one database within another is called "replication" 105. Data items to be transmitted or collected are termed "objects" 106, and the central database and each replicated subset of the central database contained within a client device is an "object-based" database. The objects within this database are often termed "television viewing objects", "viewing objects", or simply "objects", emphasizing their intended use. However, one skilled in the art will readily appreciate that objects can be any type of data.
Referring to FIG. 2, television viewing objects are structured as a collection of "attributes" 200. Each attribute has a type 201, e.g., integer, string or boolean, and a value 202. All attribute types are drawn from a fixed pool of basic types supported by the database.
The attributes of an object fall into two groups: "basic" attributes, which are supplied by the creator or maintainer of the viewing object; and "derived" attributes, which are automatically created and maintained by mechanisms within the database. Basic attributes describe properties of the object itself; derived attributes describe the relationships between objects. Basic attributes are replicated between databases, whereas derived attributes are not.
With respect to FIG. 3, there is a small set of fundamental object types defined by the invention; each object type is represented as a specific set of related attributes 300, herein called a "schema". The schema defines a template for each attribute type 301, which includes the type 302 and name of the attribute 303. Actual television viewing objects are created by allocating resources for the object and assigning values to the attributes defined by the schema. For example, a "program" schema might include attributes such as the producer, director or actors in the program, an on-screen icon, a multi-line description of the program contents, an editorial rating of the program, etc. A physical program object is created by allocating storage for it, and filling in the attributes with relevant data.
There is one special object type predefined for all databases called the schema type. Each schema supported by the database is represented by a schema object. This allows an application to perform "introspection" on the database, i.e., to dynamically discover what object types are supported and their schema. This greatly simplifies application software and avoids the need to change application software when schemas are changed, added or deleted. Schema objects are handled the same as all other viewing objects under the methods of this invention.
Referring again to FIG. 2, each object in a database is assigned an "object ID" 203 which must be unique within the database. This object ID may take many forms, as long as each object ID is unique. The preferred embodiment uses a 32-bit integer for the object ID, as it provides a useful tradeoff between processing speed and number of unique objects allowed. Each object also includes a "reference count" 204, which is an integer giving the number of other objects in the database which refer to the current object. An object with a reference count of zero will not persist in the database (see below).
One specific type of viewing object is the "directory" object. A directory object maintains a list of object IDs and an associated simple name for the object. Directory objects may include other directory objects as part of the list, and there is a single distinguished object called the "root" directory. The sequence of directory objects traversed starting at the root directory and continuing until the object of interest is found is called a "path" to the object; the path thus indicates a particular location within the hierarchical namespace created among all directory objects present in the database. An object may be referred to by multiple paths, meaning that one object may have many names. The reference count on a viewing object is incremented by one for each directory which refers to it.
Even more serious, there can be no guarantee of a stable operational environment while the database is in use or being updated. For example, electrical power to the device may cease. This invention treats all database updates as "transactions", meaning that the entire transaction will be completed, or none of it will be completed. The specific technique chosen is called "two-phase commit", wherein all elements of the transaction are examined and logged, followed by performing the actual update. One familiar in the art will appreciate that a standard journaling technique, where the transaction is staged to a separate log, combined with a roll-forward technique which uses the log to repeat partial updates that were in progress when the failure occurred, is sufficient for this purpose.
One required derived attribute of every object is the "version", which changes with each change to the object; the version attribute may be represented as a monotonically increasing integer or other representation that creates a monotonic ordering of versions. The schema for each object that may be replicated includes an attribute called "source version" which indicates the version of the object from which this one was replicated.
Two approaches are combined to resolve this problem. First, most objects will have a basic attribute called "expiration". This is a date and time past which the object is no longer valid, and should be discarded. When a new object is received, the expiration time is checked, and the object discarded if it has expired. Expiration handles objects whose transmission is delayed in some fashion, but it does not handle multiple receptions of the same unexpired object.
It is assumed that a much greater number of viewing objects are transmitted than are of interest to any particular client system. For example, a "channel" viewing object which describes the channels on a particular cable system is of no interest to clients attached to other cable systems. Because of the overhead of capturing and adding new objects to the database, it would be advantageous for received objects to be filtered on other attributes in addition to those described above. The invention accomplishes this by using a filtering process based on object type and attribute values. In one implementation, this filtering process is based on running executable code of some kind, perhaps as a sequence of commands, which has been written with specific knowledge of various object types and how they should be filtered.
In a preferred embodiment of the invention, a "filter" object is defined for each object type which indicates what attributes are required, should not be present, or ranges of values for attributes that make it acceptable for addition to the database. One skilled in the art will readily appreciate that this filter object may contain executable code in some form, perhaps as a sequence of executable commands. These commands would examine and compare attributes and attribute values of object being filtered, resulting in an indication of whether the object should be the subject of further processing.
Viewing objects are rarely independent of other objects. For example, a "showing" object (describing a specific time on a specific channel) is dependent on a "program" object (describing a specific TV program). One important aspect of maintaining consistency is to insure that all dependent objects either already exist in the database or are to be added as part of a single transaction before attempting to add a new viewing object. This is accomplished using a basic attribute of the new viewing object called the "dependency" attribute, which simply lists the object IDs and source versions of objects that the new object is dependent on. Clearly, new versions of an object must be compatible, in the sense that the schema defining new versions be the same or have a strict superset of the attributes of the original schema.
When a new viewing object is received, the database is first checked to see if all dependencies of that object are present; if so, the object is added to the database. Otherwise, the new object is "staged", saving it in a holding area until all dependent objects are also staged. Clearly, in order for a new set of viewing objects to be added to the database, the dependency graph must be closed between objects in the staging area and objects already existing in the database, based on both object ID and source version. Once closure is achieved, meaning all dependent objects are present, the new object(s) are added to the database in a single atomic transaction.
Directory objects have been described previously. Referring to FIG. 4, the collection of directory objects, and the directed graph formed by starting at the root path 400 and enumerating all possible paths to viewing objects is called a "namespace". In order for an object to be found without knowing a specific object ID, one or more paths within this namespace must refer to it. For instance, application software has little interest in object IDs, instead the software would like to refer to objects by paths, for instance "/tvschedule/today". In this example, the actual object referred to may change every day, without requiring changes in any other part of the system.
One way in which a path to an object may be established is by specifying a "pathname" basic attribute on the object. The object is added to the database, and directory objects describing the components of the path are created or updated to add the object. Such naming is typically used only for debugging the replication mechanisms. Setting explicit paths is discouraged, since the portions of the central database replicated on each client system will be different, leading to great difficulty in managing pathnames among all replicas of the database.
A preferred method for adding an object to the database namespace is called "indexing". In a preferred embodiment of the invention, an "indexer" object is defined for each object type which indicates what attributes are to be used when indexing it into the database namespace. One skilled in the art will readily appreciate that this indexer object may contain executable code in some form, perhaps as a sequence of executable commands. These commands would examine and compare attributes and attribute values of object being indexed, resulting in an indication of where the object should be located in the namespace.
Based on the object type, the indexer examines a specific set of attributes attached to the object. When such attributes are discovered the indexer automatically adds a name for the object, based on the value of the attribute, within the hierarchical namespace represented by the graph of directories in the database. Referring again to FIG. 4, a program object may have both an "actor" attribute with value "John Wayne" and a "director" attribute with value "John Ford" 401. The root directory might indicate two sub-directories, "byactor" 402 and "bydirector" 403. The indexer would then add the paths "/byactor/John Wayne" and "/bydirector/John Ford" to the database, both of which refer to the same object 401.
A derived attribute is maintained for each object listing the directory objects which refer to this object 404. As the indexer adds paths to the namespace for this object, it adds the final directory ID in the path to this list. This insures closure of the object graph--once the object has been found, all references to that object within the database are also found, whether they are paths or dependencies.
There is also an automatic process which deletes objects from the database called the "reaper". Periodically, the reaper examines all objects in the database, and depending on the object type, further examines various attributes and attribute values to decide if the object should be retained in the database. For example, the expiration attribute may indicate that the object is no longer valid, and the reaper will delete the object.
For efficiency, objects to be replicated are gathered together into distribution packages, herein called "slices". A slice is a subset of the television viewing object database which is relevant to clients within a specific domain, such as a geographic region, or under the footprint of a satellite transmitter.
Security of these slices is quite important. Slices are used to add objects to the database which are used to provide valuable services to users of the database, as well as to store information that may be considered private or secret. Because of the broadcast-oriented nature of slice transmission, slices may be easily copied by third parties as they are transmitted. A practical solution to these problems is to encrypt the slice during transmission. An ideal reference text on the techniques employed in the invention is "Applied Cryptography: Protocols, Algorithms, and Source Code in C" by Bruce Schneier, John Wiley and Sons, 1995.
Successful security requires that sender and receiver agree beforehand on the asymmetric key pair to be used for encryption. Such key distribution is the weakest link in any cryptographic system for protecting electronic data. U.S. Pat. No. 6,385,739, entitled "Self-Test Electronic Assembly and Test System," filed Jul. 19, 1999, also owned by the Applicant, describes a mechanism whereby the client device generates the asymmetric key pair automatically as the final step in the manufacturing process. The private key thus generated is stored within a secure microprocessor embedded within the client device, such that the key is never presented to external devices. The public key thus generated is transmitted to a local manufacturing system, which records the key along with the client serial number in a secure database. This database is later securely transmitted to the central distribution system, where it is used to perform secure communications with the client.
Referring again to FIG. 1, in a preferred embodiment of the invention the following steps constitute "transmission" of television viewing objects from the central database using slices: 1. There may be many mechanisms for transmitting slices to the universe of client viewing devices. For instance, the slices may be directly downloaded over a telephone modem or cable modem 109, they may be modulated into lines of the Vertical Blanking Interval (VBI) of a standard television broadcast 108, or added to a digital television multiplex signal as a private data channel. One skilled in the art will readily appreciate that any mechanism which can transmit digital information may be used to transmit slices of the television viewing object database. The first step in preparing television viewing objects for transmission is recognizing the transmission mechanism to be used for this particular instance, and creating a slice of a subset of the database that is customized for that mechanism. For example, the database may contain television viewing objects relating to all programs in the country. However, if television viewing objects are to be sent using VBI modulation on a local television signal, only those television viewing objects relating to programs viewable within the footprint of the television broadcast being used to carry them should be contained within the relevant slice. Alternatively, if some of the television viewing objects contain promotional material related to a particular geographic region, those objects should not be transmitted to other geographic regions. In a preferred embodiment of the invention, the speed and periodicity of traversing the database and generating slices for transmission is adjustable in an arbitrary fashion to allow useful cost/performance tradeoffs to be made. For instance, it may only be necessary to create slices for certain transmission methods every other day, or every hour. The final step in preparing each slice is to encrypt the slice using a short-lived symmetric key. Only client devices which have been authenticated using secure protocols will have a copy of this symmetric key, making them able to decrypt the slice and access the television viewing objects within it. 2. Once a slice is complete, it is copied to the point at which the transmission mechanism can take and send the data 110. For telephone connections, the slice is placed on a telephony server 111 which provides the data to each client as it calls in. If television broadcast is used, the slice is copied onto equipment co-resident with the station television transmitter, from whence it is modulated onto the signal. In these and similar broadcast-oriented cases, the slice is "carouseled", i.e., the data describing the slice is repeated continually until a new slice is provided for transmission. This repetitive broadcast of slices is required because there can be no assurance that the signal carrying the data arrives reliably at each client. The client device may be powered off, or there may be interference with reception of the signal. In order to achieve a high degree of probability that the transmitted slices are properly received at all client devices, they are continually rebroadcast until updated slices are available for transmission. A preferred embodiment of the invention uses broadcast mechanisms such as a television signal to transmit the slice. However, it is desirable to provide for download over a connection-based mechanism, such as a modem or Internet connection. Using a connection-based mechanism usually results in time-based usage fees, making it desirable to minimize the time spent transmitting the slice. This is accomplished using a two-step process. When the connection is established, the client system sends an inventory of previously received slices to telephony servers 111. The server compares this inventory with the list of slices that should have been processed by that client. Slices which were not processed are transmitted to the client system. 3. The slice is transmitted by breaking the encrypted slice into a succession of short numbered data packets. These packets are captured by client systems and held in a staging area until all packets in the sequence are present. The packets are reassembled into the slice, which is then decrypted. The television viewing objects within the slice are then filtered for applicability, possibly being added to the local television viewing object database. This process replicates a portion of the central database of television viewing objects reliably into the client. The invention keeps track of the time at which data packets are received. Data packets which are older than a selected time period are purged from the staging area on a periodic basis; this avoids consuming space for an indefinite period while waiting for all parts of a slice to be transmitted. Especially when transmitting the objects over a broadcast medium, errors of various kinds may occur in the transmitted data. Each data packet is stamped with an error detecting code (a parity field or CRC code, for example). When an error is detected the data packet is simply discarded. The broadcast carousel will eventually retransmit the data packet, which is likely to be received properly. Slices of any size may thus be sent reliably; this is achieved at the cost of staging received portions of the object on the client until all portions are properly received. 4. There may be one or more "special" slices transmitted which communicate service related data to the client system, particularly service authorization information. It is important that the service provider be able to control the client system's access to premium services if the viewer has failed to pay his bill or for other operational reasons. One particular type of special slice contains an "authorization" object. Authorization objects are generally encrypted using asymmetric key encryption based on the public/private key pair associated with a specific client. If the slice can be successfully decrypted by the security microprocessor using the embedded private key, the slice will contain an object indicating the allowable time delay before another authorization object is received, as well as one or more symmetric keys valid for a short time period. The delay value is used to reset a timestamp in the database indicating when the client system will stop providing services. The symmetric keys are stored in the local television viewing object database, to be used in decrypting new slices which may be received. If the client has not received a proper authentication object by the time set in the database, it will commence denial of most services to the viewer (as specified by the service provider). Also contained within an authentication object are one or more limited-lifetime download keys which are needed to decrypt the slices that are transmitted. Clearly, if a client system is unable to authenticate itself, it will not be able to decrypt any objects. Each authorization slice is individually generated and transmitted. If broadcast transmission is used for the slices, all relevant authorizations are treated identically to all other slices and carouseled along with all other data. If direct transmission is used, such as via a phone connection, only the authentication slice for that client is transmitted. 5. Once the client device has received a complete database slice, it uses the methods described earlier to add the new object contained within it to the database. Collecting Information from the Client Systems
Referring again to FIG. 1, in a preferred embodiment of the invention the following steps constitute "collection" of television viewing objects from each client database: 1. As the viewer navigates the television channels available to him, the client system records interesting information, such as channel tuned to, time of tuning, duration of stay, VCR-like actions (e.g., pause, rewind), and other interesting information. This data is stored in a local television viewing object. Additionally, the viewer may indicate interest in offers or promotions that are made available, or he may indicate a desire to purchase an item. This information is also recorded into a local television viewing object. Additionally, operation of the client device may result in important data that should be recorded into a television viewing object. For example, errors may occur when reading from the hard disk drive in the client, or the internal temperature of the device may exceed operational parameters. Other similar types of information might be failure to properly download an object, running out of space for various disk-based operations, or rapid power cycling. 2. At a certain time, which may be immediate or on a periodic basis, the client system contacts the central site via a direct connection 104 (normally via phone and/or an Internet connection). The client device sends a byte sequence identifying itself which is encrypted with its secret key. The server fetches the matching television viewing object for the client device from the database, and uses the key stored there to decrypt the byte sequence. At the same time, the server sends a byte sequence to the client, encrypted in its secret key, giving the client a new one-time encryption key for the session. Both sides must successfully decrypt their authentication message in order to communicate. This two-way handshake is important, since it assures both client and server that the other is valid. Such authentication is necessary to avoid various attacks that may occur on the client system. For example, if communications were not authenticated in such a fashion, a malicious party might create an "alias" central site with a corrupt television viewing object database and provide bad information to a client system, causing improper operation. All further communication is encrypted using the one-time session key. Encrypted communication is necessary because the information may pass across a network, such as the Internet, where data traffic is open to inspection by all equipment it passes through. Viewing objects being collected may contain information that is considered private, so this information must be fully protected at all times. Assuming that the authentication phase is successful, the two parties treat the full-duplex phone line as two one-way broadcast channels. New slices are delivered to the client, and viewing data to be collected is sent back. The connection is ended when all data is delivered. One skilled in the art will readily appreciate that this connection may take place over a network, such as the Internet running standard TCP/IP protocols, transparently to all other software in the system. 3. Uploaded information is handled similarly by the server; it is assumed to represent television viewing objects to be replicated into the central database. However, there may be many uploaded viewing objects, as there may be many clients of the service. Uploaded objects are therefore assigned a navigable attribute containing information about their source; the object is then indexed uniquely into the database namespace when it is added. Uploaded viewing objects are not immediately added to the central database; instead they are queued for later insertion into the database. This step allows the processing of the queue to be independent of the connection pattern of client devices. For instance, many devices may connect at once, generating a large number of objects. If these objects were immediately added to the central database, the performance of all connections would suffer, and the connection time would increase. Phone calls are charged by duration, thus any system in which connection time increases as a function of load is not acceptable. Another advantage of this separation is that machine or network failures are easily tolerated. In addition, the speed at which viewing objects are processed and added to the central database may be controlled by the service provider by varying the computer systems and their configurations to meet cost or performance goals. Yet another advantage of this separation is that it provides a mechanism for separating data collected to improve service operations and data which might identify an individual viewer. It is important that such identifying data be kept private, both for legal reasons and to increase the trust individuals have in the service. For instance, the navigable attribute assigned to a viewing object containing the record of a viewer's viewing choices may contain only the viewer's zip code, meaning that further processing of those objects can construct no path back to the individual identity. Periodic tasks are invoked on the server to cull these objects from the database and dispose of them as appropriate. For example, objects indicating viewer behavior are aggregated into an overall viewer behavior model, and information that might identify an individual viewer is discarded. Objects containing operational information are forwarded to an analysis task, which may cause customer service personnel to be alerted to potential problems. Objects containing transactional information are forwarded to transaction or commerce systems for fulfillment. Any of these activities may result in new television viewing objects being added to the central database, or in existing objects being updated. These objects will eventually be transmitted to client devices. Thus, the television viewing management system is closed loop, creating a self-maintaining replicated database system 105 which can support any number of client systems. Processing of Television Viewing Objects by Client Systems
This program guide information is updated on a regular basis by a service provider. This is handled by the provider acquiring program guide information in some manner, for instance, from a commercial supplier of such information or other sources of broadcast schedule information. This data is then processed using well-understood software techniques to reduce the information to a collection of interrelated viewing objects.
Referring again to FIG. 4, a typical relationship between program guide objects is shown. A television "network" object 407 is any entity which schedules and broadcasts television programming, whether that broadcast occurs over the air, cable, satellite, or other suitable medium. A television "program" object 401 is a description of any distinct segment of a television broadcast signal, such as a particular program, commercial advertisement, station promotion, opener, trailer, or any other bounded portion of a television signal. A "showing" object 406 is a portion of the broadcast schedule for a network on which a program is broadcast. A "channel map" object maps a network broadcast onto a particular broadcast channel for the medium being used; for instance, a channel map object for a satellite broadcast service would include information about the transponder and data stream containing the broadcast. Using the previously described methods, this program guide data is replicated from the central site to the client systems, where application software in the client systems use the data to manage television viewing.
The service provider may also provide aggregation viewing objects, which describe a set of program guide objects that are interrelated in some fashion. For instance, a "Star-Trek" collection might contain references to all program guide objects associated with this brand name. Clearly, any arbitrary set of programs may be aggregated in this fashion. Aggregation objects are similar to directories. For instance, the Star Trek collection might be found at "/showcases/Star Trek" in the hierarchical namespace. Aggregation objects are also program guide objects, and may be manipulated in a similar fashion, including aggregating aggregation objects, and so forth.
Program guide objects are used by the application software in five ways: 1. In the simplest case, the viewer may wish to browse these objects to discern current or soon-to-be-available programming. The application software will map the object relationships described by the database to some form of visual and audible interface that is convenient and useful for the viewer. The viewer may indicate that a particular program is of interest, resulting in some application-specific action, such as recording the program to local storage when it is broadcast. 2. Application software may also directly process program guide objects to choose programs that may be of interest to the viewer. This process is typically based on an analysis of previously watched programming combined with statistical models, resulting in a priority ordering of all programs available. The highest priority programs may be processed in an application specific manner, such as recording the program to local storage when it is broadcast. Portions of the priority ordering so developed may be presented to the viewer for additional selection as in case 1. One skilled in the art will readily appreciate that there is a great deal of prior art centered on methods for selecting programming for a viewer based on previous viewing history and explicit preferences, e.g., U.S. Pat. No. 5,758,257. The methods described in this application are unique and novel over these techniques as they suggest priorities for the capture of programming, not the broadcast or transmission of programming, and there is no time constraint on when the programming may be broadcast. Further details on these methods are given later in this description. In general, explicit viewer choices of programming have the highest priority for capture, followed by programming chosen using the preference techniques described herein. 3. A client system will have a small number of inputs capable of receiving television broadcasts or accessing Web pages across a network such as an intranet or the Internet. A scheduling method is used to choose how each input is tuned, and what is done with the resulting captured television signal or Web page. Referring to FIG. 6, generally, the programs of interest to the viewer may be broadcast at any time, on any channel, as described by the program guide objects. Additionally, the programs of interest may be Web page Universal Resource Locators (URL) across a network, such as an intranet or the Internet. The channel metaphor is used to also describe the location, or URL, of a particular Web site or page. A viewer, for example, can "tune" into a Web site by designating the Web site URL as a channel. Whenever that channel is selected, the Web site is displayed. A Web page may also be designated as a program of interest and a snapshot of the Web page will be taken and recorded at a predetermined time. The scheduler accepts as input a prioritized list of program viewing preferences 603, possibly generated as per the cases above. The scheduling method 601 then compares this list with the database of program guide objects 604, which indicate when programs of interest are actually broadcast. It then generates a schedule of time 607 versus available storage space 606 that is optimal for the viewer's explicit or derived preferred programs. Further details on these methods are given later in this description. 4. When a captured program is viewed, the matching program guide object is used to provide additional information about the program, overlaid on the display using any suitable technique, preferably an On Screen Display (OSD) of some form. Such information may include, but is not limited to: program name; time, channel or network of original broadcast; expiration time; running time or other information. 5. When live programming is viewed, the application uses the current time, channel, and channel map to find the matching program guide object. Information from this object is displayed using any suitable technique as described above. The information may be displayed automatically when the viewer changes channels, when a new program begins, on resumption of the program after a commercial break, on demand by the viewer, or based on other conditions. 6. Using techniques similar to those described in case 2, application software may also capture promotional material that may be of interest to the viewer. This information may be presented on viewer demand, or it may be automatically inserted into the output television signal at some convenient point. For example, an advertisement in the broadcast program might be replaced by a different advertisement which has a higher preference priority. Using the time-warping apparatus, such as that described in U.S. Pat. No. 6,233,389, entitled "Multimedia Time Warping System," filed Jul. 30, 1998, it is possible to insert any stored program into the output television signal at any point. The time-warping apparatus allows the overlaid program to be delayed while the stored program is inserted to make this work. Methods for Generating a List of Preferred Programs
Each individual attribute may result in the generation of a preference object. Such objects store the following information: 1. The type of the preference item, such as actor or director preference; 2. The weight of the preference given by the viewer, which might be indicated by multiple button presses or other means; 3. The statically assigned significance of the preference in relation to other preferences, for example, actor preference are more significant than director preferences; 4. The actual value of the preference item, for instance the name of the director.
With respect to FIG. 5, preference objects are stored in the database as a hierarchy similar to that described for program guide objects, however this hierarchy is built incrementally as preferences are expressed 500. The hierarchy thus constructed is based on "direct" preferences, e.g., those derived from viewer actions or inferred preferences.
A similar hierarchy is developed based on "indirect" preferences pointing to the same preference objects 501. In general, indirect preferences are generated when preferences for aggregate objects are generated, and are used to further weight the direct preferences implied by the collection of aggregated objects. The preference objects referenced through the indirect preference hierarchy are generated or updated by enumerating the available program objects which are part of the aggregate object 502, and generating or updating preference objects for each attribute thus found.
The list of preferred programs is generated as follows: 1. A table 504 is constructed which lists each possible program object attribute, and any preference objects for that attribute that are present are listed in that entry. 2. If the preference item is a string, such as an actor name, a 32-bit digital signature for that string is calculated using a 32-bit CRC algorithm and stored with the table item, rather than the string itself. This allows for much faster scanning of the table as string comparisons are avoided, at the slight risk of two different strings generating the same digital signature. 3. For each program object in the database, and for each attribute of that program, the attribute is looked up in the table. If present, the list of preference objects for that attribute is examined for a match with the attribute of the current program object. If a match occurs, the weight associated with that preference object is added to weighting associated with the program object to generate a single weight for the program. 4. Finally, the program objects are rank-ordered based on the overall weighting for each program, resulting in a list of most-preferred to least-preferred programs.
As has been described previously, recorded programs will in general have an expiration date, after which the recorded program is removed from client storage. The viewer may at any time indicate that a program should be saved longer, which delays expiration by a viewer-selected interval. The invention views the available storage for recording programs as a "cache"; unviewed programs are removed after a time, based on the assumption they will not be watched if not watched soon after recording. Viewed programs become immediate candidates for deletion, on the assumption they are no longer interesting.
With proper scheduling of recording and deletion of old programs, it is possible to make a smaller storage area appear to be much larger, as there is an ongoing flushing of old programs and addition of new programs. Additionally, if resources are available, recordings may be scheduled of programs based on inferred preferences of the viewer; these are called "fuzzy" recordings. This results in a system where the program storage area is always "full" of programming of interest to the viewer; no program is removed until another program is recorded in its place or the viewer explicitly deletes it.
Referring again to FIG. 6, the invention maintains two schedules, the Space Schedule 601 and the Input Schedule 602. The Space Schedule tracks all currently recorded programs and those which have been scheduled to be recorded in the future. The amount of space available at any given moment in time may be found by generating the sum of all occupied space (or space that will be occupied at that time) and subtracting that from the total capacity available to store programs. Programs scheduled for recording based on inferred preferences ("fuzzy" recordings) are not counted in this calculation; such programs automatically lose all conflict decisions.
The software environment of the device is instantiated as a sequence of steps that occur when power is first applied to the device, each step building up state information which supports proper application of the following step. The last step launches the applications which manage the device and interact with the viewer. These steps are: 1. A read-only or electrically programmable memory in the device holds an initial bootstrap sequence of instructions. These instructions initialize low-level parameters of the client device, initialize the disk storage system, and load a bootstrap loader from the disk into memory, to which execution is then passed. This initial bootstrap may be changed if it resides in an electrically programmable memory. 2. The second stage boot loader then locates the operating system on the disk drive, loads the operating system into memory, and passes execution to the operating system. This loader must exist at a specific location on the disk so as to be easily located by the initial loader.
Although the methods of this invention have referred to a disk drive, one skilled in the art will readily appreciate that the methods described here apply generally to any persistent storage system. A disk drive, and other persistent storage systems, are typically formatted into a sequence of fixed-size blocks, called sectors. "Partitions" are sequential, non-overlapping subsets of this sequence which break up the storage into logically independent areas.
With respect to FIG. 8, the invention maintains a sector of information at a fixed location on the disk drive 803 called the "boot sector" 804. The boot sector 804 contains sufficient information for the initial bootstrap 801 to understand the partitioning of the drive 803, and to locate the second stage boot loader 806.
The disk is partitioned into at least seven (7) partitions. There are two (2) small partitions dedicated to holding a copy of the second stage boot loader 806, two (2) partitions holding a copy of the operating system kernel 807, two (2) partitions containing a copy of the application software 808, and a partition to be used as scratch memory 809. For duplicated partitions, an indication is recorded in the boot sector 805 in which one of the partitions is marked "primary", and the second is marked "backup".
With respect to FIGS. 9a and 9b, on boot 901, the initial bootstrap code reads the boot sector 902, scans the partition table and locates the "primary" partition for the second stage boot loader. It then attempts to load this program into memory 903. If it fails 904, for instance, due to a failure of the disk drive, the boot loader attempts to load the program in the "backup" partition into memory 905. Whichever attempt succeeds, the boot loader then passes control to the newly loaded program, along with an indication of which partition the program was loaded from 906.
Similarly, the second stage boot loader reads the partition table and locates the "primary" operating system kernel 907. If the kernel can not be loaded 908, the "backup" kernel is loaded instead 909. In any case, control is passed to the operating system along with an indication of the source partition, along with the passed source partition from above 910.
Finally, the operating system locates the "primary" partition containing application software and attempts to load the initial application 911. If this fails 912, then the operating system locates the "backup" partition and loads the initial application from it 913. An indication of the source partition is passed to the initial application, along with the source partition information from the previous steps. At this point, application software takes over the client system and normal viewing management behavior begins 914.
An "installer" viewing object in the object database is used to record the status of software installation attempts. It records the state of the partitions for each of the three levels above, including an indication that an attempt to install new software is underway 915. This operation is reliable due to the transactional nature of the database.
The following operations status indicators are recorded for later collection along with a time stamp: 1. Viewer actions, primarily pressing buttons on a remote control device, are recorded. Each "button press" is recorded along with the current time, and any other contextual information, such as the current viewer context. Post-processing of this object at the central site results in a complete trace of viewer actions, including the context in which each action is taken. 2. Automatic actions, such as beginning or ending the recording of a program, or choosing a program to record based on viewer preferences, are recorded. In addition, deletion of captured programs is recorded. Post-processing of this object at the central site results in a complete trace of program capture actions taken by the client system, including the programs residing in the persistent store at any point in time. 3. Software installation actions, including reception, installation, and post-reboot results are recorded. 4. Hardware exceptions of various kinds, including but not limited to: power fail/restart, internal temperature profile of the device, persistent storage access errors, memory parity errors and primary partition failures.
A client system has a single source of television viewing objects: the central site. The central site object database has many sources of television viewing objects: 1. Program guide information obtained from outside sources is processed to produce a consistent set of program guide objects, indicating "programs", "showings", "channels", "networks" and other related objects. This set of objects will have dependencies ("channels" depend on "networks", "showings" depend on "programs") and other interrelationships. When a complete, consistent set of objects is ready, it is added to the database as an atomic operation. 2. New software, including new applications or revisions of existing software, are first packaged into "software" viewing objects. As above, the software may have interdependencies, such as an application depending on a dynamically loaded library, which must be reflected in the interrelationships of the software objects involved. In another example, there may be two types of client systems in use, each of which requires different software objects; these software objects must have attributes present indicating the type of system they are targeted at. Once a consistent set of objects is available, it is added to the database as an atomic operation. 3. Each client system has a unique, secret key embedded within it. The public key matching this secret key is loaded into a "client" management object, along with other interesting information about the client, such as client type, amount of storage in the system, etc. These objects are used to generate authentication objects as necessary. 4. Aggregation program guide objects are added in a similar fashion. In this case, however, the aggregation object must refer to primitive program guide objects already present in the database. Also attached to the aggregation object are other objects, such as a textual description, a screen-based icon, and other informational attributes. Once a consistent set of ancillary objects to the aggregation is available, it is added to the database as an atomic operation. 5. Data Collected from Client Systems.
There are a large number of possible operations on the central television viewing object database. The following examples are meant to show the type of processing that may be performed, however the potential operations are not limited to these examples: 1. Using various viewing objects, a number of interesting statistical analysis tasks may be performed: 1.1. By examining large numbers of uploaded operations status objects, it is possible to perform extensive analysis of hardware reliability trends and failure modes. For instance, it is possible to correlate internal temperature with expected MTBF (Mean Time Between Failures) of client devices. 1.2. By examining large numbers of uploaded viewing information, it is possible to derive demographic or psychographic information about various populations of client devices. For example, it is possible to correlate TV programs most watched within specific zip codes in which the client devices reside. 1.3. Similarly, by examining large numbers of viewing information objects, it is possible to generate "rating" and "share" values for particular programs with fully automated methods, unlike existing program rating methods. 1.4. There are many other examples of statistical analysis tasks that might be performed on the viewing object database; these examples are not meant to limit the applicability of the invention, but to illustrate by example the spectrum of operations that might be performed. 2. Specialty aggregation objects may be automatically generated based on one or more attributes of all available viewing objects. Such generation is typically performed by first extracting information of interest from each viewing object, such as program description, actor, director, etc., and constructing a simple table of programs and attributes. An aggregate viewing object is then generated by choosing one or more attributes, and adding to the aggregate those programs for which the chosen attributes match in some way. These objects are then included in the slices generated for transmission, possibly based on geographic or other information. Some example aggregates that might be created are: 2.1. Aggregates based on events, such as a major league football game in a large city. In this case, all programs viewable by client devices in or around that city are collected, and the program description searched for the names of the teams playing, coaches names, major player's names, the name of the ballpark, etc. Matching program objects are added to the aggregate, which is then sliced for transmission only to client devices in regions in and around the city. 2.2. Aggregates based on persons of common interest to a large number of viewers. For instance, an aggregate might be constructed of all "John Wayne" movies to be broadcast in the next week. 2.3. Aggregates based on viewing behavior can be produced. In this case, uploaded viewing objects are scanned for elements of common interest, such as types of programs viewed, actual programs viewed, etc. For example, a "top ten list" aggregate of programs viewed on all client devices in the last week might be generated containing the following week's showing of those programs. 2.4. Aggregates based on explicit selections by viewers. During viewing of a program, the viewer might be presented with an opportunity to "vote" on the current program, perhaps on the basis of four perceived attributes (storyline, acting, directing, cinematography), which generates viewing objects that are uploaded later. These votes are then scanned to determine an overall rating of the program, which is transmitted to those who voted for their perusal. 2.5. There are many other examples of how the basic facilities of this invention allow the service operator to provide pre-sorted and pre-selected groups of related programs to the user of the client device for perusal and selection. These examples are not meant to limit the applicability of the invention, but to illustrate by example the spectrum of operations that might be performed. 3. Manual methods may also be used to generate aggregate objects, a process sometimes called "authoring". In this case, the person creating the aggregate chooses programs for explicit addition to the aggregate. It is then transmitted in the same manner as above.
Electronic Content--Ownership, Commerce, and Protection
Copyright law is to a large extent oriented towards the physical distribution of objects on which the copyrighted material is printed or manifested in some way. The end user is licensed to use the material through the act of purchasing a copy of the material. It is often envisioned that electronic distribution of content will work in a similar fashion.
Unfortunately, there are serious problems with this notion. Electronic copies of content are essentially free to make and stopping such copying is very difficult. Copying to a closed system such as the invention's system is attractive because such copying can be controlled to a large extent. However, it raises the fundamental question of: What happens if the client system is destroyed in some way? The user is then denied fair use of the content for which he has paid. The user is also denied the opportunity to engage in secondary trading of such content, unlike a physical object which could be sold to another person.
The concept of fair use implies that such digital content should be usable by the purchaser in any personal device which can play or display the content. It seems important to provide a way for the user to do so.
The distributed television viewing management system described above is an end-to-end system architecture and secure distribution management system that addresses many weaknesses of prior electronic distribution systems; some of these weaknesses are: Prior electronic distribution systems are not automated, thereby requiring direct interaction to introduce content to the system or to retrieve content from the system. Prior electronic distribution systems are not reliable, i.e., long downloads may fail, no data integrity is established, etc. Prior electronic distribution systems are not secure--no authentication methods or data security methods are typically involved. It is difficult to enforce copyright restrictions for protected content in the systems. There are no payment or transaction systems to support the sales or exchange of protected content.
Referring again to FIG. 1, the invention provides authenticated, reliable content downloads and tracking capabilities. As noted above, transmission of viewing objects from the distribution servers 110 to the client systems 101 is accomplished over communications medium such as: typical broadcast transmission methods (satellite, cable, aerial) and connection-based transmission methods that connect directly or across the Internet or an intranet (telephone modem, ethernet, ISDN, DSL, cable, etc.).
The same system capabilities can be provided over a broadband network as through broadcast media when using network connections between the distribution servers 110 and the client systems 101. Client systems include settop boxes, computers, or portable devices that incorporate storage devices, e.g., Digital Video Recorders (DVR).
The invention's architecture provides a system for managing electronically distributed digital content. The invention satisfies both the needs of copyright owners to be fairly compensated for their work and the demands of fair use, while providing a new opportunity for revenue generation. The invention also facilitates a business method for managing commerce based on electronic distribution of digital content.
Television viewing objects can encompass a great many different types of data. For example, as described above, software viewing objects contain software that includes new applications or revisions of existing software. Other electronic content, such as that considered to be copyrighted material (e.g., pictures, video, music, ebooks, etc.), can also be contained in a television viewing object. A television viewing object may also contain "pointers" to digital content, such as a Web-oriented URL. These pointers would then be used by a client device to separately obtain the digital content.
With respect to FIG. 11, music, for example, can be distributed to users through the invention's architecture. A user registers for the purchase of a song through an interface on a client system 1104 or via a Web site 1105. A list of available songs is displayed to the user through the client system or the Web site. The invention's central servers 1102 log the purchase of the song into a license database 1106. The purchase can happen directly over an Internet connection to the telephony servers 1102, or through a log that is backhauled (i.e., when viewing objects are collected from client systems) when the client system 1104 contacts the service through the telephony servers 1102. The purchase transaction is transmitted from the invention's central servers 1102 to a backend transaction service 1101 which provides clearing-house capabilities.
The electronic copy of the song may be already resident on the client system 1104 in a hidden area, carouseled in a protected broadcast channel 1103, in the central database 1102 ready to be sent out in slices, or resident on a secure server 1107 on the Internet. If a protected broadcast channel 1103 is used, the slice(s) of the content is/are copied onto equipment co-resident with the station television transmitter from whence it is modulated onto the broadcast signal. In these and similar broadcast-oriented cases, the slice is "carouseled", i.e., the data describing the slice is repeated continually until a new slice is provided for transmission. This is necessary to provide the appearance of reliable download to the end user.
Referring to FIG. 12, the song is "delivered" to the user once it is resident on the client system 1104 and available, for example, in a special music playlist 1201. The user accesses content through the client system's user interface. The client systems make the invention easy to use through a simplified user interface via a remote control or keyboard. The user is free to play licensed content from his client system as desired and to control how it is played back (e.g., pause, fast forward, reverse, etc.).
This transacted purchase is for a license to the song, not for the song itself. The invention's operator may receive a small fraction of the purchase price as a fee for handling the transaction. Typically, the invention's operator does not bear the cost of distribution; the user bears the cost through a TV subscription or Internet access service.
Because all licenses are tracked, if the client system should fail, the invention's service can validate which songs are licensed from the license database, such that the user can retrieve new copies of his licensed songs onto his new client system.
The process is performed either manually or as an automatic feature of the invention's service. Client systems can also verify that the proper content is resident on the client systems in the same manner, deleting or adding content as needed.
The licenses now represent a valuable commodity. A "song market" is then created. The invention's service provides an exchange capability similar to stock trading whereby owners offer licenses to various songs for sale. This service might be provided for a small transaction fee, or some other remuneration.
With respect to FIG. 13, a seller 1303 can put his license for a song up for sale on the central server 1301. Users can see a list of licenses that are for sale via their client systems or a Web site. A buyer 1304 that is interested in a seller's 1303 license for a song bids on the license. The bidding can take place through the seller's and buyer's respective client systems or through a Web site. When a price is agreed to, the invention's central server 1301 transfers license ownership in the license database 1302 to the new owner and optionally informs a backend transaction server 1305 of the purchase. The central server 1301 instructs the seller's client system 1303 to delete the content. The delete instruction can happen either over an Internet connection, as a command during the client system's 1303 periodic callback to the invention's service, or as an event sent over a broadcast medium, such as a satellite. The buyer's client system 1304 receives a copy of the song as described above, possibly after confirmation that the seller's copy has been deleted, in order to avoid the potential for illegal copies to be created
Referring to FIG. 14, the invention allows song publishers 1401 (content originators) to make an offering on the market to client systems 1405 of new material, much like a public stock offering. Users purchase the new material through their client systems 1405 or through a Web site 1406, as described above. Central servers 1402 transmit the purchases to a backend transaction service 1407 which provides clearing-house capabilities. The purchases are logged into the license database 1403 by the central servers 1402.
Demand and greed would determine the number of copies offered to the market. One can imagine offering a limited number of copies of an artist's new song for early access at a high price. A publisher might increase the value of a song by simply buying up cheap copies, much as a corporation buys back its stock.
One skilled in the art will readily appreciate that, although songs are specifically mentioned throughout, any other electronic content, e.g., video, ebooks, pictures, etc., can be managed via the invention.
Supporting Fair Use
With respect to FIG. 15, imagine the invention's client system 1503 as a sort of "home base" for the owner's media assets. If the owner wishes to get a copy of a song on his portable MP3 player 1504, he has a number of methods. First, however, he needs to register ownership of the MP3 player 1504 with the invention's service 1501, much as he registers a client system 1503.
It is assumed that some form of secure authentication capability for each user device 1504 is used. It is then simple to envision how the invention works: the owner requests a copy of a song on the device 1504, the invention's service 1501 checks that the device 1504 is registered to the owner and that he has a license to the song using the license database 1502. Once the information is validated, the invention's service 1501 makes the song available from a secure server 1505 on the device 1504, most likely via download.
This checking might instead be handled locally within the owner's home, with authentication provided by software in the owner's client system 1503, and the owner's client system 1503 providing the download to the device 1504. In this type of system, the client system and the device would have to be informed of the authenticity of the other by the invention's service prior to any download.
An owner may own more than one client system 1503, 1506. The owner registers his client systems with the invention's service 1501. The service 1501 provides each client system 1503, 1506 with authentication information for the other client systems owned by the owner. This allows the client systems 1503, 1506 to authenticate each other without the need of the service 1501.
When an owner wants to transfer content from one client system 1503 to another client system 1506, he merely initiates the transfer at one of the client systems 1503, 1506. The client systems 1503, 1506 authenticate each other using the authentication information given by the service 1501 and then initiate the copying of content between themselves. Clearly, the owner can have a plurality of client systems registered with service 1501. The owner can transfer content between select client systems or all of his client systems. This approach allows the owner to play content in multiple rooms in a house or in different residences.
Previous Patent US 8,131,647 | Next Patent US 8,131,649