# US 2013/0159701 A1 · Securing digital content system and method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2013/0159701 A1
- Document ID: US20130159701A1
- Status: Published application
- Kind: A1
- Application number: 13/762,113
- Filed: 2013-02-07
- Published: 2013-06-20
- Earliest claimed: 2004-10-20
- Assignees: Digital Reg of Texas, LLC
- Inventors: Eugene B. PHILLIPS, II; Seth ORNSTEIN
- Web page: https://patentgrep.com/patent/US20130159701A1

## CPC

- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- G06F 21/602: {Providing cryptographic facilities or services}
- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics}
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- H04L 9/3271: {using challenge-response}
- H04L 63/045: {wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption (cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14)}
- H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)}
- H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L 2209/603: Digital right managament [DRM]
- H04L 2463/101: applying security measures for digital rights management
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A system and method of encrypting digital content in a digital container and securely locking the encrypted content to a particular user and/or computer or other computing device is provided. The system uses a token-based authentication and authorization procedure and involves the use of an authentication/authorization server. This system provides a high level of encryption security equivalent to that provided by public key/asymmetric cryptography without the complexity and expense of the associated PKI infrastructure. The system enjoys the simplicity and ease of use of single key/symmetric cryptography without the risk inherent in passing unsecured hidden keys. The secured digital container when locked to a user or user's device may not open or permit access to the contents if the digital container is transferred to another user's device. The digital container provides a secure technique of distributing electronic content such as videos, text, data, photos, financial data, sales solicitations, or the like.

## Claims

### Claim at position 1

1-23. (canceled)

### Claim 24

A computer-implemented method for protecting electronic content, the method comprising the steps of:
storing in a registration database an asymmetric decryption key that is associated with a digital electronic container;
receiving client device footprint data from a client device;
combining the client device footprint data and the stored asymmetric decryption key to create a re-key value; and
sending the re-key value to the client device to re-key content data at the client device wherein a predetermined data block of the content data stores a symmetric decryption key and the predetermined data block and stored decryption key being previously encrypted using an asymmetric key technique, and wherein the digital container contains the content data arranged into data blocks including the predetermined data block, the digital electronic container being provided to the client device prior to the sending step.

### Claim 25 (depends on 24)

The computer-implemented method of claim 24, wherein all of the data blocks are encrypted using a systematic key technique.

### Claim 26 (depends on 24)

The computer-implemented method of claim 24, wherein the digital electronic container is configured with executable instructions that are configured to execute at the client device to combine the client device footprint data and the re-key value to create a fingerprint key, the fingerprint key for decrypting the predetermined data block thereby providing access to the symmetric decryption key.

### Claim 27 (depends on 24)

The computer-implemented method of claim 24, wherein the step of sending the re-key value to the client device includes sending the re-key value as part of a permission token.

### Claim 28 (depends on 27)

The computer-implemented method of claim 27, wherein the permission token includes a fingerprint key.

### Claim 29 (depends on 24)

The computer-implemented method of claim 24, wherein the step of receiving receives user input data and the step of combining produces a fingerprint key.

### Claim 30 (depends on 29)

The computer-implemented method of claim 29, wherein the user input data includes any one or more of: financial data, account data, credit data, a social security number and identifying data.

### Claim 31 (depends on 24)

The computer-implemented method of claim 24, wherein the step of combining uses a container identifier associated with the digital electronic container to produce a fingerprint key.

### Claim 32 (depends on 31)

The computer-implemented method of claim 31, wherein the sending step sends the re-key value and the fingerprint key as part of a permission token.

### Claim 33

A computer program product comprising computer executable instructions embodied on a computer readable storage medium that when read and executed by a computer processor executes the following steps:
storing in a registration database an asymmetric decryption key that is associated with a digital electronic container;
receiving client device footprint data from a client device;
combining the client device footprint data and the stored asymmetric decryption key to create a re-key value; and
sending the re-key value to the client device to re-key content data at the client device wherein a predetermined data block of the content data stores a symmetric decryption key and the predetermined data block and stored decryption key being previously encrypted using an asymmetric key technique, and wherein the digital container contains the content data arranged into data blocks including the predetermined data block, the digital electronic container being provided to the client device prior to the sending step.

### Claim 34 (depends on 33)

The A computer program product claim 33, wherein all of the data blocks are encrypted using a systematic key technique.

### Claim 35 (depends on 33)

The computer program product of claim 33, wherein the digital electronic container is configured with executable instructions that are configured to execute at the client device to combine the client device footprint data and the re-key value to create a fingerprint key, the fingerprint key for decrypting the predetermined data block thereby accessing the symmetric decryption key.

### Claim 36 (depends on 33)

The computer program product of claim 33, wherein the step of sending the re-key value to the client device includes sending the re-key value as part of a permission token.

### Claim 37 (depends on 36)

The computer program product of claim 36, wherein the permission token includes a fingerprint key.

### Claim 38 (depends on 33)

The computer program product of claim 33, wherein the step of receiving receives user input data and the step of combining produces a fingerprint key.

### Claim 39 (depends on 38)

The computer program product of claim 38, wherein the user input data includes any one or more of: financial data, account data, credit data, a social security number and identifying data.