# US 8,788,423 B2 · Method and system for secure network-based distribution of content > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,788,423 B2 - Document ID: US8788423B2 - Status: Granted - Kind: B2 - Application number: 13/010,597 - Filed: 2011-01-20 - Published: 2011-05-26 - Granted: 2014-07-22 - Earliest claimed: 2003-04-25 - Assignees: Apple Inc. - Applicants: Thomas Dowdy; Jeffrey L. Robbin; Guy L. Tribble; David Heller - Inventors: Thomas Dowdy; Jeffrey L. Robbin; Guy L. Tribble; David Heller - Web page: https://patentgrep.com/patent/US8788423B2 ## CPC - G06F 21/1011: {to devices} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method and system for network-based distribution of content are disclosed. The distribution of content is not only secure but also controlled. The security restricts access to content within media files during downloads as well as while stored at a server or client. In one embodiment, each media file is encrypted with a different, randomly generated key. The control over the distribution of the media file can serve to limit the subsequent distribution of media files from clients to other clients. In another embodiment, the control can permit media files to be shared on a limited number of different clients affiliated with the same user. The clients can vary with application but generally are computing devices that have memory storage. Often, the clients are personal computers or other computing devices that are capable of storing and presenting content to their users. ## Claims ### Claim 1 A computer-implemented method for storing media files to a centralized media storage such that they are ready for download, the method comprising: (a) receiving media files in a media server from a centralized media storage comprising a plurality of different media servers, the media files pertaining to media items, and each of the media files having at least media content data and metadata describing characteristics of the associated media item; (b) generating, via a processor, a download key for each of the media files, the download keys being different for each of the media files; (b′) encrypting, via a processor, the metadata for each of the media files with a global key that is unique to the media server from the plurality of media servers which the media file is stored, and subsequently (c) encrypting, via a processor, each of the media files with the corresponding one of the download keys to produce encrypted media files; (d) storing the encrypted media files to the centralized media store; and delivering encrypted media files to a client. ### Claim 2 (depends on 1) A method as recited in claim 1, wherein each of the media files has at least the media content data and metadata, the metadata describing characteristics of the associated media item, and wherein the method further comprises: (e) encrypting, prior to the encrypting (c), the metadata for each of the media files with a common key. ### Claim 3 (depends on 1) A method as recited in claim 1, wherein the centralized media storage is within or coupled to a media server. ### Claim 4 (depends on 3) A method as recited in claim 3, wherein the encrypted media files can be downloaded to users' local machines via a data network. ### Claim 5 (depends on 4) A method as recited in claim 4, wherein at least one of the users' local machines is one of a portable computing device and a media player. ### Claim 6 A non-transitory computer readable medium including at least computer program code for storing media files to a centralized media storage such that they are ready for download, the computer readable medium comprising: computer program code for receiving media files in a media server from a centralized media storage comprising a plurality of different media servers, the media files pertaining to media items, and each of the media files having at least media content data and metadata describing characteristics of the associated media item; computer program code for obtaining a download key for each of the media files, the download keys being different for each of the media files; computer program code for encrypting the metadata for each of the media files with a global key that is unique to the media server from the plurality of media servers which the media file is stored, and subsequently; computer program code for encrypting each of the media files with the corresponding one of the download keys to produce encrypted media files; and computer program code for storing the encrypted media files to the centralized media store. ### Claim 7 (depends on 6) A non-transitory computer readable medium as recited in claim 6, wherein each of the media files has at least the media content data and metadata, the metadata describing characteristics of the associated media item, and wherein the computer readable medium comprises: computer program code for encrypting the metadata for each of the media files with a common key. ### Claim 8 (depends on 6) A non-transitory computer readable medium as recited in claim 6, wherein the centralized media storage is within or coupled to a media server. ### Claim 9 (depends on 8) A non-transitory computer readable medium as recited in claim 8, wherein the encrypted media files can be downloaded to users' local machines via a data network. ### Claim 10 (depends on 9) A method as recited in claim 9, wherein at least one of the users' local machines is one of a portable computing device and a media player. ### Claim 11 A media distribution system, comprising: a media storage device that stores a plurality of media files from a media server from among a plurality of media servers, each of the media files having at least media content data and metadata describing characteristics of the associated media item; and a media server operatively connected to the media storage device, the media server being configured to: receive media files pertaining to media items, each of the media files having at least media content data and metadata describing characteristics of the associated media item; generate a download key for each of the media files, the download keys being different for each of the media files; encrypt the metadata for each of the media files with a global key that is unique to the media server from the plurality of media servers which the media file is stored, and subsequently; encrypt each of the media files with the corresponding one of the download keys to produce encrypted media files; and store the encrypted media files to the media storage device. ### Claim 12 (depends on 11) A media distribution system as recited in claim 11, wherein the media server is further configured to: render the encrypted media files available for purchase from the media storage device. ### Claim 13 (depends on 12) A media distribution system as recited in claim 12, wherein the media server is further configured to: receive a request to purchase a particular media file to be purchased from those of the encrypted media files stored in the media storage device; initiate purchase of access to the identified media file; and configure download of the particular media file from the media storage device in its encrypted form.