# US 10,313,725 B2 · Method and apparatus for on demand video and other content rental > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,725 B2 - Document ID: US10313725B2 - Status: Granted - Kind: B2 - Application number: 15/159,772 - Filed: 2016-05-19 - Published: 2016-09-15 - Granted: 2019-06-04 - Earliest claimed: 2008-01-11 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: Augustin J. Farrugia; Jeffrey Robbin; Hiro Mitsuji; Mihailo Despotovic; Colin Meldrum - Web page: https://patentgrep.com/patent/US10313725B2 ## CPC - H04N 21/26613: {for generating or managing keys in general (key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04)} - G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} - H04N 7/165: {Centralised control of user terminal (subsequent to an upstream request signal H04N7/17345); Registering at central (by two-way working H04N7/17309)} - H04N 7/17318: {Direct or substantially direct transmission and handling of requests} - H04N 21/2541: {Rights Management (protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08)} - H04N 21/437: Interfacing the upstream path of the transmission network, e.g. for transmitting client requests to a VOD server {(flow control in data networks H04L47/10; streaming protocols, e.g. RTP or RTCP, H04L65/65; scheduling or organising the servicing of application requests in data packet switching networks H04L67/60)} - H04N 21/4405: involving video stream decryption - H04N 21/4408: involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network - H04N 21/47202: {for requesting content on demand, e.g. video on demand} - H04N 21/6125: {involving transmission via Internet (transmission by internet of broadcast information H04H60/82)} - H04N 21/6175: {involving transmission via Internet (broadcast-related systems characterised by the transmission system being the Internet H04H60/82)} - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A video on demand system in the context of the Internet, for video rentals. A user accesses an on-line store to rent a video program or movie. The rental is for a limited time (such as 30 days) and within that thirty days, the video program or movie can only be viewed for a 24 hour time window. The time limits are enforced by the on-line store which maintains a database of each rental transaction and allows supply of the needed keys for decrypting the (encrypted) video or movie only if within the time limits. ## Claims ### Claim 1 For a content distribution server, a method comprising: receiving, over a network, a request from a client device for content; transmitting, over the network, at least a portion of the content to the client device in an encrypted form; transmitting, over the network, a rental key to the client device that is valid for a first period of time during which the client device may begin play back of the content, the first period of time corresponding to a rental period for the content; upon receiving, over the network, a request from the client device to play back the content within the first period of time, transmitting, over the network and to the client device, a decryption key that enables the client device to play back the content over a second period of time; and streaming, based at least in part on the first period of time associated with the rental key and the second period of time associated with the decryption key, at least another portion of the content to the client device in encrypted form during the second period of time. ### Claim 2 (depends on 1) The method of claim 1, wherein the first period of time is thirty days and the second period of time is twenty-four hours. ### Claim 3 (depends on 1) The method of claim 1, wherein the decryption key is transmitted in a key bag data structure. ### Claim 4 (depends on 3) The method of claim 3, wherein the key bag data structure stores a plurality of decryption keys for decrypting a plurality of portions of the content in the encrypted form. ### Claim 5 (depends on 1) The method of claim 1, wherein the decryption key is not transmitted to the client device when a request is received from the client device to play back the content after the first period of time has expired. ### Claim 6 (depends on 1) The method of claim 1, further comprising transmitting a security policy along with the decryption key, wherein the security policy specifies a maximum number of times the decryption key may be used to decrypt the content in the encrypted form over the second period of time and a maximum number of client devices on which the decryption key may be used to decrypt the content in the encrypted form. ### Claim 7 (depends on 1) The method of claim 1, wherein the content comprises video content. ### Claim 8 (depends on 1) The method of claim 1, wherein the second period of time is different than the first period of time. ### Claim 9 (depends on 1) The method of claim 1, wherein, during the second period of time, the decryption key enables the client device to play back the content even if the client device is not in communication with the content distribution server over the network. ### Claim 10 (depends on 1) The method of claim 1, wherein, during the second period of time, the decryption key enables the client device to play back the content only if the client device is in communication with the content distribution server over the network as the client device plays back the content. ### Claim 11 A non-transitory machine readable medium storing a program which when executed by at least one processing unit of a content distribution server causes the at least one processing unit to perform operations comprising: receiving, over a network, a request from a client device for content; transmitting, over the network, at least a portion of the content to the client device in an encrypted form; transmitting, over the network, a rental key to the client device that is valid for a first period of time during which the client device may begin play back of the content; upon receiving, over the network, a request from the client device to play back the content within the first period of time, transmitting, over the network, to the client device a decryption key that enables the client device to play back the content over a second period of time that is different than the first period of time; and streaming, based at least in part on the first period of time associated with the rental key and the second period of time associated with the decryption key, at least another portion of the content to the client device in encrypted form during the second period of time. ### Claim 12 (depends on 11) The non-transitory machine readable medium of claim 11, wherein the first period of time is thirty days and the second period of time is twenty-four hours. ### Claim 13 (depends on 11) The non-transitory machine readable medium of claim 11, wherein the decryption key is transmitted in a key bag data structure. ### Claim 14 (depends on 13) The non-transitory machine readable medium of claim 13, wherein the key bag data structure stores a plurality of decryption keys for decrypting a plurality of portions of the content in the encrypted form. ### Claim 15 (depends on 11) The non-transitory machine readable medium of claim 11, wherein the decryption key is not transmitted to the client device when a request is received from the client device to play back the content after the first period of time has expired. ### Claim 16 (depends on 11) The non-transitory machine readable medium of claim 11, wherein the operations further comprise transmitting a security policy along with the decryption key, wherein the security policy specifies a maximum number of times the decryption key may be used to decrypt the content in the encrypted form over the second period of time and a maximum number of client devices on which the decryption key may be used to decrypt the content in the encrypted form. ### Claim 17 (depends on 11) The non-transitory machine readable medium of claim 11, wherein the content comprises video content. ### Claim 18 (depends on 11) The non-transitory machine readable medium of claim 11, wherein the second period of time is shorter than the first period of time. ### Claim 19 (depends on 11) The non-transitory machine readable medium of claim 11, wherein, during the second period of time, the decryption key enables the client device to play back the content even if the client device is not in communication with the content distribution server over the network. ### Claim 20 (depends on 11) The non-transitory machine readable medium of claim 11, wherein, during the second period of time, the decryption key enables the client device to play back the content only if the client device is in communication with the content distribution server over the network as the client device plays back the content. ### Claim 21 A device comprising: a memory; and at least one processor configured to: receive, over a network, a request from a client device for content; transmit, over the network, at least a portion of the content to the client device in an encrypted form; transmit, over the network, a rental key to the client device that is valid for a first period of time during which the client device may begin play back of the content; upon receipt, over the network, of a request from the client device to play back the content within the first period of time, transmit, over the network, to the client device a decryption key that enables the client device to play back the content over a second period of time that is different than the first period of time; and stream, based at least in part on digital rights associated with the rental key and the decryption key, at least another portion of the content to the client device in encrypted form during the second period of time. ### Claim 22 A system comprising: a content distribution server comprising a memory and at least one processor, the at least one processor configured to: receive, over a network, a request from a client device for content; transmit, over the network, at least a portion of the content to the client device in an encrypted form; transmit, over the network, a rental key to the client device that is valid for a first period of time during which the client device may begin play back of the content; upon receipt, over the network, of a request from the client device to play back the content within the first period of time, transmit, over the network, to the client device a decryption key that enables the client device to play back the content over a second period of time that is different than the first period of time; and stream, based at least in part on digital rights associated with the rental key and the decryption key, at least another portion of the content to the client device in encrypted form during the second period of time.