# US 8,752,193 B2 · Content binding at first access

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,752,193 B2
- Document ID: US8752193B2
- Status: Granted
- Kind: B2
- Application number: 12/619,112
- Filed: 2009-11-16
- Published: 2011-05-19
- Granted: 2014-06-10
- Earliest claimed: 2009-11-16
- Assignees: SanDisk Technologies LLC
- Applicants: Oktay Rasizade; Haluk Kent Tanik; Fabrice Jogand-Coulomb
- Inventors: Oktay Rasizade; Haluk Kent Tanik; Fabrice Jogand-Coulomb
- Web page: https://patentgrep.com/patent/US8752193B2

## CPC

- G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method and system of binding content at first access is disclosed. A non-volatile storage device may provide a content access script and a content binding script in order to access protected content. An accessing application may attempt to access the protected content by executing a content access script. The accessing application must have permission to access and execute the content access script. If the accessing application cannot access or execute the content access script, the accessing application may access and execute the content binding script. The content binding script contains instructions that enable the accessing application to successfully execute the content access script. The content binding script, when executed, may disable itself from being executed again by moving critical information associated with the access to protected data. Thus, the content binding script may be executed once to enable an accessing application to successfully execute the content access script.

## Claims

### Claim 1

A method of accessing content stored in a non-volatile storage device, the method comprising:
in an accessing device coupled with the non-volatile storage device, the non-volatile storage device comprising a removable non-volatile storage device, the accessing device having a processor and an accessing application executable by the processor, wherein the non-volatile storage device has (i) content, (ii) a content access script associated with the content and including primary instructions to access the content, and (iii) a second script associated with the content and including second instructions to access the content, with the processor of the accessing device, performing:
receiving a request to access the content stored in the non-volatile storage device;
reading the content access script from the non-volatile storage device;
attempting to execute the content access script;
if the content access script successfully executes, accessing the content with the content access script; and
if the content access script fails to execute:
reading the second script from the non-volatile storage device; and
executing the second script, wherein the second script, when executed, permits the processor to set a binding and access the content using the content access script, and results in binding the content to a configuration of the accessing application, without communicating with a remote authorization entity, wherein the remote authorization entity is located remotely from the accessing device.

### Claim 2 (depends on 1)

The method of claim 1, wherein the configuration of the accessing application comprises a value indicative of an identity of a network in communication with the processor.

### Claim 3 (depends on 1)

The method of claim 1, wherein the configuration of the accessing application comprises a value indicative of an identity of a user of the processor.

### Claim 4 (depends on 1)

The method of claim 1, wherein the configuration of the accessing application comprises an identification value of an accessing device comprising the processor.

### Claim 5 (depends on 1)

The method of claim 1, wherein the configuration of the accessing application comprises a value indicative of an identity of a Subscriber Identity Module card in communication with the processor.

### Claim 6 (depends on 1)

The method of claim 1, wherein the content comprises a file, and wherein the content is associated with a set of files stored in the non-volatile storage device.

### Claim 7 (depends on 1)

The method of claim 1, wherein binding the content to the configuration of the accessing application comprises binding a set of files to the configuration of the accessing application.

### Claim 8 (depends on 1)

The method of claim 1, wherein the second script, when executed, prevents an ability to re-execute successfully the second script.

### Claim 9 (depends on 8)

The method of claim 8, wherein the second script prevents the ability to re-execute successfully the second script by moving or deleting data required for successful re-execution of the second script.

### Claim 10 (depends on 8)

The method of claim 8, further comprising restoring the ability to re-execute successfully the second script after preventing the ability to re-execute.

### Claim 11 (depends on 10)

The method of claim 10, wherein the content comprises an application, wherein the second script, when executed, installs the application, and wherein the restoring the ability to re-execute successfully the second script comprises uninstalling the application.

### Claim 12 (depends on 10)

The method of claim 10, wherein the restoring the ability to re-execute successfully the second script comprises:
establishing a connection with a server;
receiving an authorization from the server; and
providing the authorization to the non-volatile storage device.

### Claim 13 (depends on 1)

The method of claim 1, wherein the second script, when executed, updates a binding count value in the non-volatile storage device indicative of a number of times the second script has been executed, wherein executing the second script prevents an ability to re-execute the second script if the binding count value is equal to a predetermined value.

### Claim 14 (depends on 1)

The method of claim 1, wherein the second script comprises a protected script.

### Claim 15 (depends on 1)

The method of claim 1, wherein the request to access the content comprises a request to access the content using a content access account in the non-volatile storage device, wherein the content access account is not associated with a content binding account permission; and
wherein the second script comprises a content binding script that, when executed, associates the permission with the content access account and prevents an ability to re-execute successfully the content binding script.

### Claim 16 (depends on 15)

The method of claim 15, further comprising:
after executing the content binding script, reading the content access script from the non-volatile storage device; and
executing the content access script, wherein the content access script, when executed, accesses the content in accordance with the request if the accessing application is authenticated to the content access account and authorized to access the content according to the permission.

### Claim 17 (depends on 16)

The method of claim 16, wherein the accessing application comprises a configuration associated with the content access account.

### Claim 18 (depends on 17)

The method of claim 17, wherein the configuration associated with the content access account comprises a value indicative of an identity of a network in communication with the processor.

### Claim 19 (depends on 17)

The method of claim 17, wherein the configuration of the accessing application comprises a value indicative of an identity of a user of the processor.

### Claim 20 (depends on 17)

The method of claim 17, wherein the configuration of the accessing application comprises an identification value of the accessing device comprising the processor.

### Claim 21 (depends on 17)

The method of claim 17, wherein the configuration of the accessing application comprises a value indicative of an identity of a Subscriber Identity Module card in communication with the processor.

### Claim 22 (depends on 15)

The method of claim 15, wherein the permission comprises access to a content encryption key, and wherein the content stored on the non-volatile storage device comprises content encrypted with the content encryption key.

### Claim 23 (depends on 15)

The method of claim 15, wherein the content comprises an application, the permission comprises an execute permission, and the request comprises a request to execute the application.

### Claim 24 (depends on 15)

The method of claim 15, wherein the reading the second script from the non-volatile storage device comprises:
authenticating to a content binding account in the non-volatile storage device; and
if authorized by a content binding script permission associated with the content binding account, reading the content binding script from the non-volatile storage device using the content binding account.

### Claim 25 (depends on 24)

The method of claim 24, wherein the executing the second script comprises removing an association between the content binding script permission and the content binding account.

### Claim 26 (depends on 24)

The method of claim 24, wherein the content binding script permission comprises a content binding script encryption key.

### Claim 27 (depends on 26)

The method of claim 26, wherein the content binding script comprises instructions encrypted with the content binding script encryption key.

### Claim 28 (depends on 15)

The method of claim 15, further comprising restoring the ability to re-execute the content binding script after preventing the ability to re-execute successfully the content binding script.

### Claim 29 (depends on 15)

The method of claim 15, wherein the content binding script, when executed, updates a binding count value in the non-volatile storage device indicative of a number of times the content binding script has been executed,
wherein executing the content binding script prevents the ability to re-execute the content binding script if the binding count value is equal to a predetermined value.

### Claim 30 (depends on 29)

The method of claim 29, further comprising restoring the ability to re-execute the content binding script after preventing the ability to successfully re-execute the content binding script.

### Claim 31

An accessing device for accessing content stored in a non-volatile storage device, the accessing device comprising:
a processor;
a content accessing application executable by the processor; and
wherein the processor is configured to, when the accessing device is coupled with the non-volatile storage device:
receive a request to access the content stored in the non-volatile storage device;
read from the non-volatile storage device a content access script associated with the content, the content access script including primary instructions to access the content;
attempt to execute the content access script;
if the content access script successfully executes, access the content with the content access script;
if the content access script fails to execute:
read a second script from the non-volatile storage device, the second script associated with the content and including second instructions to set a binding and provide access to the content; and
execute the second script, wherein the second script, when executed, sets the binding and permits the processor to access the content using the content access script and results in binding the content to a configuration of the accessing application, without communicating with a remote authorization entity, wherein the remote authorization entity is located remotely from the accessing device; and
wherein the non-volatile storage device comprises a removable non-volatile storage device.

### Claim 32 (depends on 31)

The accessing device of claim 31, wherein the accessing device comprises a mobile telephone.

### Claim 33 (depends on 32)

The accessing device of claim 32, wherein the configuration of the accessing application comprises a value indicative of an identity of a network in communication with the processor.

### Claim 34 (depends on 33)

The accessing device of claim 33, wherein the configuration of the accessing application comprises a value indicative of an identity of a user of the processor.

### Claim 35 (depends on 32)

The accessing device of claim 32, wherein the configuration of the accessing application comprises an identification value associated with the processor of the accessing device.

### Claim 36 (depends on 32)

The accessing device of claim 32, wherein the configuration of the accessing application comprises a value indicative of an identity of a Subscriber Identity Module card in communication with the processor.