Secure content distribution system
AssigneeAdobe Systems Incorporated
InventorsDavid L. Blankenbeckler, William Almon, Jr.
Life of this patent
Estimating the term…
Abstract
A user selection of one or more of a plurality of content is received. The selected content is encrypted by a first encryption key that is remote and unknown to the distribution server. Payment information associated with the user selection is also received and verified. The selected content from is retrieved from a remote database. The first encryption key corresponding to the selected content to decrypt the encrypted content corresponding to the user selection is obtained. Decryption is performed by a hardware-based engine of the distribution server that is isolated from a host processor of the distribution server. The content corresponding to the user selection is encrypted according to a second encryption key that is known to the distribution server.
Claims19
A computer-implemented method for distributing content of a content provider by a distribution server, comprising the steps of:
- receiving a user selection of one or more of a plurality of content, wherein the selected content is encrypted by a first encryption key that is unknown to the distribution server;
- receiving and verifying payment information associated with the user selection;
- retrieving the selected content from a remote database;
- obtaining the first encryption key corresponding to the selected content to decrypt the encrypted content corresponding to the user selection, wherein decryption is performed by a hardware-based engine of the distribution server that is isolated from a host processor of the distribution server;
- and
- encrypting the content corresponding to the user selection according to a second encryption key that is known to the distribution server;
- wherein the first encryption key is configured in accordance with a first protocol and the second encryption key is configured in accordance with a second protocol that is distinct from the first protocol.
A distribution server to distribute content of a content provider, the distribution server comprising:
- a first component to receive a user selection of one or more of a plurality of content, wherein the selected content is encrypted by a first encryption key that is unknown to the distribution server;
- a second component to receive and verify payment information associated with the user selection;
- a third component to retrieve the selected content from a remote database;
- a fourth component to obtain the first encryption key corresponding to the selected content to decrypt the encrypted content corresponding to the user selection, wherein decryption is performed by a hardware-based engine of the distribution server that is isolated from a host processor of the distribution server;
- and
- a fifth component to encrypt the content corresponding to the user selection according to a second encryption key that is known to the distribution server;
- wherein the first encryption key is configured in accordance with a first protocol and the second encryption key is configured in accordance with a second protocol that is distinct from the first protocol.
A non-transitory computer readable medium storing instructions that, when executed by a processor, perform a computer-implemented method for distributing content of a content provider by a distribution server, the method comprising:
- receiving a user selection of one or more of a plurality of content, wherein the selected content is encrypted by a first encryption key that is unknown to the distribution server;
- receiving and verifying payment information associated with the user selection;
- retrieving the selected content from a remote database;
- obtaining the first encryption key corresponding to the selected content to decrypt the encrypted content corresponding to the user selection, wherein decryption is performed by a hardware-based engine of the distribution server that is isolated from a host processor of the distribution server;
- and
- encrypting the content corresponding to the user selection according to a second encryption key that is known to the distribution server;
- wherein the first encryption key is configured in accordance with a first protocol and the second encryption key is configured in accordance with a second protocol that is distinct from the first protocol.
Dependencies are inferred from the claim text.