US20070201702A1 - Electronic book security and copyright protection system - Google Patents

Electronic book security and copyright protection system Download PDF

Info

Publication number
US20070201702A1
US20070201702A1 US11/785,959 US78595907A US2007201702A1 US 20070201702 A1 US20070201702 A1 US 20070201702A1 US 78595907 A US78595907 A US 78595907A US 2007201702 A1 US2007201702 A1 US 2007201702A1
Authority
US
United States
Prior art keywords
viewer
key
electronic book
operations center
symmetric key
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US11/785,959
Inventor
John Hendricks
Michael Asmussen
John Mccoskey
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Adrea LLC
Original Assignee
Discovery Communications Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Family has litigation
First worldwide family litigation filed litigation Critical https://patents.darts-ip.com/?family=38444036&utm_source=google_patent&utm_medium=platform_link&utm_campaign=public_patent_search&patent=US20070201702(A1) "Global patent litigation dataset” by Darts-ip is licensed under a Creative Commons Attribution 4.0 International License.
Priority claimed from US08/160,194 external-priority patent/US5990927A/en
Priority claimed from US08/336,247 external-priority patent/US5986690A/en
Priority claimed from US08/906,469 external-priority patent/US6408437B1/en
Application filed by Discovery Communications Inc filed Critical Discovery Communications Inc
Priority to US11/785,959 priority Critical patent/US20070201702A1/en
Publication of US20070201702A1 publication Critical patent/US20070201702A1/en
Assigned to Adrea, LLC reassignment Adrea, LLC CHANGE OF NAME (SEE DOCUMENT FOR DETAILS). Assignors: DISCOVERY PATENT HOLDINGS, LLC
Priority to US14/845,106 priority patent/US20160070889A1/en
Abandoned legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]

Definitions

  • the electronic book selection and delivery system is a new way to distribute books to bookstores, public libraries, schools and consumers.
  • the technological breakthroughs of this invention provide a secure electronic system for both delivering selected books and receiving payments.
  • the system has an unusual combination of features that provides the consumer with a daily use household appliance that has a high tech aura while being very practical, portable, and easy to use.
  • An advantage of the system is that it eliminates the distribution of any physical object such as a paper book or computer memory device from any book or text distribution system.
  • the purchase of a book becomes a PAY-PER-READ event avoiding the overhead, middle-men, printing costs, and time delay associated with the current book distribution system.
  • Published material and text such as the President's speech, a new law, a court decision on abortion, or O.J. Simpson's testimony can be made immediately available to the consumer at a nominal fee.
  • books may be made available free to the end use consumer, subsidized by advertisers who sponsor books or embed advertising within the books.
  • the system is a novel combination of new technology involving the television, cable, telephone, and computer industries. It utilizes high bandwidth data transmissions, strong security measures, sophisticated digital switching, high resolution visual displays, novel controls, and user friendly interface software.
  • the primary components of the text delivery system are the subsystem for preparing the text for secure delivery and the subsystem for receiving and selecting text that was delivered.
  • An embodiment of the system includes additional components and optional features that enhance the system.
  • the system may be configured for use by bookstores, public libraries, schools and consumers.
  • the system for consumer use is made up of four subsystems, namely: (1) an operations center, (2) a distribution system, (3) a home subsystem including reception, selection, viewing, transacting and transmission capabilities, and (4) a billing and collection system.
  • Alternative configurations of the system are defined to allow for a variety of traditional and non-traditional delivery methods.
  • the operations center performs several primary functions: manipulating text data (including receiving, formatting and storing of text data), security encoding of text, cataloging of books, providing a messaging center capability, and performing uplink and secure delivery functions.
  • the system delivers the text from the operations center to consumer homes by inserting text data within analog video signals.
  • the insertion of text is generally performed with an encoder at an uplink site that is within or near the operations center.
  • the system can use several lines of the Vertical Blanking Interval (VBI), all the lines of the analog video signal, a digital video signal or unused portions of bandwidth to transmit text data.
  • VBI Vertical Blanking Interval
  • the top ten or twenty book titles may be transmitted with video during normal programming utilizing existing cable or broadcast transmission capability without disruption to the subscriber's video reception.
  • any analog or digital video or data distribution system may be used to deliver the text data.
  • the text data may also be transmitted over other low and high speed signal paths including a telephone network (e.g., a public switched telephone network) having a high speed connection such as an asynchronous digital subscriber line (ADSL) connection and the Internet, for example.
  • the text data is delivered in a secure fashion over the distribution systems.
  • the home subsystem performs at least four functions: connecting to the distribution system, selecting text, storing text, and transacting through a communicating mechanism.
  • the components of the home subsystem may be configured in a variety of hardware configurations. Each function may be performed by a separate component, the components may be integrated, or the capability of existing cable set top converter boxes, computers, and televisions may be utilized.
  • a connector, library unit and viewer unit may be used.
  • the connector portion of the home subsystem receives an analog video signal and strips or extracts the text from the video.
  • the home library stores the text signal, provides a user friendly software interface to the system and processes the transactions at the consumer home. The viewer provides a screen for viewing text or menus and novel user friendly controls.
  • Alternative embodiments are presented that support the secure delivery and storage of text using a variety of communication and security mechanisms.
  • the viewing device may be a portable book shaped viewer which securely stores one or more books for viewing and provides a screen for interacting with the home library unit.
  • a high resolution LCD display is used to both read the books and to interact with the home library software.
  • an optional phone connector or return-path cable connection initiates the telephone calls and, with the aid of the library, transmits the necessary data to complete the ordering and billing portion of the consumer transaction.
  • Alternative embodiments are presented in the referenced related applications that support ordering and billing using a variety of communication mechanisms.
  • the user-friendly controls include a bookmark, current book and page turn button.
  • the billing and collection system performs transaction management, authorizations, collections and publisher payments automatically.
  • a system similar to the system for consumer use may be used in bookstores, schools and public libraries.
  • the electronic books are delivered from an operations center or other remote location to an end-user location such as a home system using security mechanisms that prevent unauthorized access to the electronic books.
  • An asymmetric public key encryption technique may be used by the operations center, serving as a sending party.
  • the operations center encrypts the electronic book using a symmetric key and a symmetric key encryption algorithm.
  • the symmetric key may be randomly generated, or the symmetric key may be previously defined and retrieved from storage.
  • the operations center then encrypts the symmetric key.
  • the encrypted electronic book and the encrypted symmetric key are delivered to the home system.
  • the home system decrypts the encrypted symmetric key and uses the symmetric key to decrypt the encrypted electronic book.
  • a third party trusted source may provide a symmetric key to both the party sending the electronic book and the party receiving the electronic book.
  • the trusted source encrypts the symmetric key using a symmetric key of the sending party and delivers the encrypted symmetric key to the sending party.
  • the sending party decrypts the symmetric key and uses the decrypted symmetric key to encrypt the electronic book.
  • the receiving party which also receives the symmetric key from the trusted source in an encrypted format, decrypts the symmetric key using the receiving party's symmetric key.
  • the receiving party then uses the decrypted symmetric key from the trusted source to decrypt the electronic book.
  • the sending party and the receiving party negotiate a shared key for use in the delivery of the electronic book.
  • the parties exchange key negotiation information and use the same key generation algorithm to generate the same key.
  • a seed key generation algorithm is used to generate a sequence of encryption keys.
  • the encrypted electronic book is broadcast to home systems.
  • the encrypted electronic book is provided on demand.
  • the encrypted electronic book is provided on a physical storage medium such as a smart card.
  • the system for providing secure electronic book delivery may also include integrity checking algorithms to ensure the electronic book was not altered in route.
  • the system may also include mechanisms that identify the sending party and the receiving party.
  • Secure delivery of electronic books may be provided between a content provider such as a publisher and a distribution center such as an operations center. Secure delivery may also be provided between the operations center and a home system, between the home system library and the home system viewer, between a lending facility such as a public library and a home system, and between multiple viewers.
  • a content provider such as a publisher
  • a distribution center such as an operations center. Secure delivery may also be provided between the operations center and a home system, between the home system library and the home system viewer, between a lending facility such as a public library and a home system, and between multiple viewers.
  • the system may also incorporate copyright protection mechanisms including application of visible copyright notices to the delivered electronic books.
  • Other copyright information may be embedded within the electronic book using a visible watermark, for example.
  • FIG. 1 a is a block diagram of the primary components of an electronic book selection and delivery system.
  • FIG. 1 b is a block diagram of an electronic book selection and delivery system that uses a composite video signal.
  • FIG. 2 is a schematic showing an overview of the electronic book selection and delivery system.
  • FIG. 3 is a schematic of a delivery plan for the electronic book selection and delivery system.
  • FIG. 4 is a block diagram of the operations center.
  • FIG. 5 a is a flow diagram of processing at the operations center and uplink.
  • FIG. 5 b is a block diagram of a hardware configuration for an uplink site.
  • FIG. 6 a is a block diagram of a hardware configuration for a four component home subsystem.
  • FIG. 6 b is a schematic of a two unit home subsystem.
  • FIG. 7 is a flow diagram of processes performed by a video connector.
  • FIG. 8 is a block diagram for an example of a library unit.
  • FIG. 9 is a flow diagram of processes performed by a library unit on the received data stream.
  • FIG. 10 is a flow diagram of processes performed by a library unit on information requests from a viewer.
  • FIG. 11 is a block diagram showing the components for an example of a viewer.
  • FIG. 12 is a flow diagram of processes performed by a viewer on an information request from a subscriber.
  • FIG. 13 is a chart depicting a menu structure and sequencing of menus in a menu system.
  • FIG. 14 a is a schematic of an introductory menu.
  • FIG. 14 b is a schematic showing an example of a main menu.
  • FIGS. 14 c , 14 d , 14 e , 14 f , 14 g , 14 h , 14 i and 14 j are schematics showing examples of submenus.
  • FIG. 15 is a schematic diagram of an electronic book system for a bookstore or public library.
  • FIG. 16 a and FIG. 16 b are schematics of hardware modifications or upgrades to a set top converter.
  • FIG. 17 is a schematic showing a set top terminal that includes a data receiver and data transmitter.
  • FIG. 18 a is a schematic of a book-on-demand system.
  • FIG. 18 b is a schematic of an operations center supporting a book-on-demand system.
  • FIG. 19 a is a diagram of symmetric key encryption.
  • FIG. 19 b is a diagram depicting asymmetric encryption using a private key.
  • FIG. 19 c is a diagram depicting asymmetric encryption using a public key.
  • FIG. 20 is a depiction of public key encryption for electronic book distribution.
  • FIG. 21 is a depiction of symmetric key encryption for electronic book distribution where a certificate authority provides the encryption key.
  • FIG. 22 is a depiction of symmetric key encryption for electronic book distribution where a certificate authority is provided the encryption key.
  • FIG. 23 a is a diagram depicting asymmetric encryption using a private key for an entire transaction stream.
  • FIG. 23 b is a diagram depicting asymmetric encryption using a public key for an entire transaction stream.
  • FIG. 23 c is a diagram of symmetric key encryption for an entire transaction stream.
  • FIG. 24 a depicts transaction key negotiation process.
  • FIG. 24 b depicts seed key negotiation process.
  • FIG. 25 a depicts a secure method for broadcast distribution.
  • FIG. 25 b depicts a secure method for group distribution.
  • FIG. 26 depicts a hashing function process.
  • FIG. 27 depicts a sender initiated, sender identification process.
  • FIG. 28 depicts a recipient initiated, sender identification process.
  • FIG. 29 depicts a recipient authentication sequence.
  • FIG. 30 depicts a secure delivery process.
  • FIG. 31 depicts a recipient initiated, secure socket layer exchange.
  • FIG. 32 depicts a sender initiated, secure socket layer exchange.
  • FIG. 33 depicts a reception verification sequence.
  • FIG. 34 depicts driver level secure storage.
  • FIG. 35 depicts file level secure storage.
  • FIG. 36 depicts an operations center to home system delivery process.
  • FIG. 1 a shows an electronic book distribution system 100 that may be used for secure distribution of an electronic book.
  • a content provider 110 may publish hard copy versions of books or other printed media including newspapers, magazines, and product catalogs, for example.
  • the content provider 110 may convert printed materials to an electronic format, apply security mechanisms, and provide the electronic formatted materials to a distribution center 120 , over uplink path 115 .
  • the uplink path 115 may be a wired or a wireless path.
  • the uplink path 115 may be a telecommunications network, for example.
  • the uplink path 115 may be a satellite relay path or a wireless telephone path.
  • the uplink path 115 may involve providing electronic books to the distribution center on a fixed media, such as a CD-ROM, for example.
  • the content provider 110 and the distribution center 120 are shown as separate components of the electronic book distribution system 100 . However, the content provider 110 and the distribution center 120 may be co-located.
  • the distribution center 120 may convert printed matter into an electronic format. Alternately, the distribution center 120 may receive electronic files from an outside source, such as the content provider 110 .
  • the distribution center 120 may process and store electronic books using secure techniques as presented in Section VII.
  • the distribution center 120 distributes electronic books.
  • the distribution may be, for example, over distribution path 125 , distribution network 130 , and distribution path 135 to an electronic book subsystem or terminal 140 , which may include an electronic book viewer (not shown).
  • the terminal may also be a television, a set top terminal, a personal computer, or similar device.
  • An apparatus and method for the secure distribution of electronic books is disclosed in greater detail later.
  • the distribution network 130 may be an electronic book store, an Internet web site, a wired or wireless telecommunications network, an intranet, a radio program delivery system, a television program delivery system, including cable television, satellite television broadcast, and over-the-air broadcast, for example.
  • the electronic book distribution network 130 could include direct delivery through a mail delivery system of electronic books on a fixed media, such as a CD-ROM, for example.
  • FIG. 1 b shows components of an electronic book distribution system 170 using a television program delivery system to distribute electronic books.
  • the components of the electronic book selection and delivery system 170 are an encoder 174 , a video distribution system 178 , a connector 182 , and a text selector 186 .
  • the encoder 174 places textual data on a video signal to form a composite video signal. Although the composite signal may contain only textual data, it usually carries both video and textual data. A variety of equipment and methods may be used to encode text data onto a video signal.
  • the video distribution system 178 distributes the composite video signal from the single point of the encoder 174 to multiple locations, which have connectors 182 .
  • the connector 182 receives the digital or analog video signal from the video distribution system 178 and separates, strips or extracts the text data from the composite video signal. If necessary, the extracted text data is converted into a digital bit stream.
  • the text selector 186 works in connection with the connector 182 to select text.
  • Text selector 186 uses the connector 182 and text selector 186 combination to various methods of selecting and retrieving desired text from a composite or video signal. Text may be preselected, selected as received or selected after being received and stored. One method is for the connector 182 to strip or extract all the text from the video signal and have the text selector 186 screen all the text as received from the connector 182 . The text selector 186 only stores text in long term or permanent memory if the text passes a screening process described below.
  • FIG. 2 shows another embodiment of an electronic book selection and delivery system 200 .
  • the delivery system 200 includes: an operations center 250 including an uplink site 254 , a video distribution system 208 , a home system 258 including a video connector 212 , a library 262 , a viewer 266 , and a phone connector 270 , telephone system 274 , an Internet web site 279 and a billing and collection system 278 .
  • the home system 258 may include connections to a television 259 and a personal computer 261 may be used to display menu screens, electronic books, electronic files, or any other information associated with the electronic book delivery system 200 .
  • the television 259 and the personal computer 261 may provide control functions that replicate and supplement those of the viewer 266 .
  • the operations center 250 receives textual material from outside sources 282 such as publishers, newspapers, and on-line services. Alternately, the outside sources may maintain electronic books at the Internet web site 279 .
  • the outside sources 282 may convert textual and graphical material to digital format and apply security mechanisms, or may contract with another vendor to provide this service.
  • the operations center 250 may receive the textual and graphical material in various digital formats and may convert the textual material to a standard compressed format for storage. In so doing, the operations center 250 may create a pool of textual material that is available to be delivered to the home system 258 .
  • the textual material may be grouped by books or titles for easy access.
  • book means textual or graphical information such as contained in any novels, encyclopedias, articles, magazines, newspapers, catalogues, periodicals, or manuals.
  • title may represent the actual title assigned by an author to a book, or any other designation indicating a particular group, portion, or category of textual information.
  • the title may refer to a series of related textual information, a grouping of textual information, or a portion of textual data.
  • “Latest Harlequin Romance”, “Four Child Reading Books (Ages 10-12),” “Encyclopedia ‘BRITANNICA’TM,” “President's Speech,” “Instruction Manual,” “Schedule of 4th of July Events,” “Pet Handbooks,” “Roe v. Wade,” and “The Joy of Cooking,” are suitable titles. Also, the title may be a graphical symbol or icon.
  • a picture of a wrench may be a title for a repair book, a picture of a computer a title for a computer book, a graphical symbol of a telephone a title for a telephone book, a drawing of a dagger a title for a mystery book, a picture of a bat and ball a title for a sports book, and a picture of tickertape a title for a business book.
  • the operations center 250 includes the uplink site 254 for placing the text onto a telecommunications signal in a secure fashion and sending the telecommunications signal into a distribution system.
  • the uplink site 254 would generally include an encoder 204 (not shown in FIG. 2 ) to encode the text onto the telecommunications signal.
  • Electronic book delivery system 200 may be used with many analog and digital video distribution systems, such as cable television distribution systems, broadcast television distribution systems, video distributed over telephone systems, direct satellite broadcast distribution systems, and other wire and wireless video distribution systems. Nearly any distribution system which can deliver a telecommunications signal, including a video signal, will work with the electronic book delivery system 200 . It is also possible to distribute the electronic book without using a telecommunications signal as described in the embodiments presented in the referenced related applications. Methods used for securing the distribution of materials over the electronic book delivery system 200 are presented in Section VII.
  • the home system 258 performs five functions: (1) connecting with a video distribution system; (2) selecting data; (3) storing data; (4) displaying data; and (5) handling transactions.
  • An important optional function of the home system 258 is communicating using, in one embodiment, a telephone communication system 274 .
  • the home system 258 may be made up of four parts: a video connector 212 or similar type of connector for connecting with the distribution system 208 , a library 262 for storing and processing, a viewer 266 for viewing menus and text and a telephone connector 270 for connecting with a telephone communications system 274 . Additional embodiments are presented in the referenced related applications that address alternative communication mechanisms.
  • the billing and collection system 278 may be co-located with the operations center 250 or located remote from the operations center 250 .
  • the billing and collection system 278 may be in communication with the home system 258 using telephone-type communication systems (for example 274 ). Any of a number of communication systems as presented in the referenced related applications, such as a cellular system or the Internet, will operate with the billing and collection system 278 .
  • the billing and collection system 278 records the electronic books or portions of text that are selected or ordered by the subscriber.
  • the collection system will charge a subscriber's credit account or bill the subscriber.
  • the billing and collection system 278 may monitor that amount due to publishers or other outside sources 282 who have provided textual data or other services such as air time to enable the text delivery system 200 to operate.
  • the intranet 279 ′ may be used as a part of a private distribution network for distributing and circulating electronic books.
  • a university library may use the intranet 279 ′ to circulate electronic books to university students and professors.
  • FIG. 3 is an expanded overview of a delivery plan 301 for the electronic book delivery system 200 . It is a comprehensive delivery plan 301 to support various types of users and various billing systems.
  • FIG. 3 shows that, publishers 282 may provide text transfer 302 to the operations center 250 ′ and receive payments 306 from the billing and collection system 278 ′.
  • a separate channel uplink site 254 ′ is shown in this configuration receiving data 310 from the operations center 250 ′.
  • the operations center 250 ′ has three separate sections ( 318 , 322 , 326 ) one for text receiving, formatting and re-entry 318 , a second for security encoding and processing 322 and a third section for catalog and messaging center functions 326 .
  • the collection and billing system 278 ′ shown has two sections ( 330 , 334 ) one for transaction management, authorizations and publisher payments 330 , and the other for customer service 334 .
  • the customer service section 334 provides for data entry and access to customer account information.
  • Transaction accounting information 338 is supplied to credit card companies 342 by the transaction management section 330 of the billing and collection system 278 ′.
  • the credit card companies 342 provide billing 346 to customers either electronically or by mail.
  • Methods for communicating between the subscriber base 348 and the billing and collection system 278 ′ include: by telephone switching 350 alone, cellular switching 354 and telephone switching 350 combined, and by use of the cable system 358 and the telephone switching 350 .
  • the system shown supports both one-way 362 and two-way cable communication 366 with subscribers. Additional communication methods are presented in the referenced related applications. Public libraries and schools 370 as well as bookstores 374 may use the delivery system 301 . Methods used for securing these communications are presented in Section VII.
  • Public libraries and schools 370 could have a modified system to allow the viewer to be checked-out or borrowed while bookstores 374 would rent or sell the viewer and sell electronic book data.
  • the bookstores 374 as well as the public libraries and schools 370 may be serviced by cable 378 .
  • Optional direct broadcast systems (DBS) 382 can also be used with the system 200 as detailed in the referenced related applications.
  • FIG. 4 is a schematic of the operations center 250 , which includes the uplink 254 .
  • the operations center 250 may gather text or books by receiving, decrypting, formatting, storing, and encoding.
  • a data stream 302 containing text may be received at the operations center 250 by a data receiver 402 .
  • the data receiver 402 is under the control of a processor 404 .
  • the data stream is decrypted using digital logic for decrypting 403 which is under the control of the processor 404 .
  • the data stream is then formatted using digital logic for formatting 406 which is also under the control of the processor 404 .
  • text generator hardware 410 which may include a data receiver and a keyboard (not shown).
  • the additional text can be added to the text received by the combining hardware 414 that includes digital logic circuitry (not shown).
  • the processing at the operations center 250 is controlled by a processor 404 , which uses an instruction memory 416 .
  • the processor 404 and instruction memory 416 may be supplied by a personal computer or mini-computer, for example.
  • the operations center 250 uses a catalog and message memory 420 and the text generator 410 if necessary.
  • the data stream of text, catalog and messages may be encoded by security module encoding 424 prior to being sent to the uplink module 254 .
  • Various encoding techniques may be used by the security encoding module 424 such as the commercial derivative of NSA's encryption algorithm (Data Encryption System (DES)) and General Instrument's DigiCipher II. Additional embodiments are presented n Section VII.
  • the encoded text may be stored in text memory 428 prior to being sent to the uplink 254 .
  • a first-in-first-out text memory arrangement may be used under the control of the processor 404 .
  • Various types of memory may be used for the text memory 428 including RAM.
  • the operations center 250 may use file server technology for the text memory 428 to catalog and spool books for transmission as is described below.
  • the operations center 250 may also store the electronic book as secure compressed data files using the secure storage techniques presented in Section VI.
  • the distribution system 208 may use high bandwidth transmission techniques such as those defined by the North American Broadcast Teletext Standard (NABTS) and the World System Teletext (WST) standard.
  • WST World System Teletext
  • a four hundred page book may be transmitted during regular television programming using four lines of the Vertical Blanking Interval at a rate of approximately one book every 1.6 minutes (63,840 bits per second).
  • books may be transmitted over a dedicated channel, which interrupts programming so that 246 lines of video can be used to transmit approximately 2,250 books every hour (3.9 Mbits per second).
  • a teletext type format is the simplest but possibly the slowest text format to use with the electronic book delivery system 200 .
  • an encoder 204 may be used at an uplink site 254 to insert textual data into the analog video signal.
  • the delivery of the textual information may be completed using an existing cable television plant and equipment.
  • Alternative transmit formats and delivery systems are presented in the referenced related applications.
  • FIG. 5 a is a flowchart of steps involved in processing text from the publisher or provider 282 that may occur at the operations center 250 .
  • the publisher 282 processes data files of text for books, compresses, encrypts and sends the data files to the operations center 250 or uplink 254 .
  • Text files for books may be sent one book at a time.
  • the uplink 254 or operations center 250 receives and processes the data stream from the publisher 282 .
  • part of this processing includes encryption and error correction. Specific embodiments used for encryption are presented in Section VII. Text files may be delivered for receipt by multiple home subsystems simultaneously, or to a specific individual home subsystem.
  • the electronic books are distributed to consumers using a video distribution system such as a cable television system.
  • the electronic books may also be packaged as data packets and distributed over other telecommunications networks such as a digital wireless telephone network, for example.
  • files are broken into smaller packets of information. Header information is added to the packets.
  • the bit stream is converted from a serial digital bit stream to an analog bit stream that is compatible with an NTSC video signal.
  • Block 512 shows the switching of analog data into the video lines of a video signal.
  • the analog data may be placed either in the VBI or the active video lines. In some instances, unused portions of bandwidth (such as 5-40 MHZ, 70-75 MHZ, 100-109 MHZ or other guard bands) may be used instead of the video lines. Alternate transmission methods are presented in the referenced related applications.
  • FIG. 5 b is an example of a hardware configuration to perform some of the functions for blocks 508 and 512 .
  • a video feed 516 is received and processed through a sync stripper 520 .
  • the stripped sync signal 532 is used by the digital logic control 524 .
  • the digital logic control 524 receives the sync signal 532 and a serial digital bit stream 528 for processing.
  • the digital logic control 524 passes the serial digital bit stream to the Digital to Analog converter 536 and outputs a control signal 540 for the video switch 544 .
  • the video switch 544 integrates the video feed 516 and analog data stream 548 into a video feed with analog data signal inserted 552 .
  • the public telephone system may be used to transmit books to the subscribers. An average book would take about 7 minutes to transmit over the public telephone system. Using the telephone system, it is not necessary to combine video and text into a composite signal. In most other respects, the operations center would remain similar whether text delivery was by telephone or cable.
  • File server technology such as that described in U.S. Pat. No. 5,262,875, entitled AUDIO/VIDEO FILE SERVER INCLUDING DECOM-PRESSION/PLAYBACK MEANS, issued to Mincer, et al., and, U.S. Pat. No.
  • the public telephone system may be used to provide access to the Internet, where the Internet web site 279 may be accessed.
  • Electronic books may be ordered, paid for, and delivered directly from the Internet web site 279 over the telephone system.
  • the electronic book viewer 266 may be used for wireless voice and data communications using the Internet.
  • the home system 258 may receive data using any one or more standard protocols including time division multiple access (TDMA), code division multiple access (CDMA), Global Systems for Mobile Communications (GSM) and Advanced Mobile Telephone System (AMPS) protocols.
  • TDMA time division multiple access
  • CDMA code division multiple access
  • GSM Global Systems for Mobile Communications
  • AMPS Advanced Mobile Telephone System
  • individual subscribers may increase the electronic book deliver rate by incorporating high speed modems or other communications devices such as an Integrated Services Digital Network (ISDN) connector, or by use of a Digital Subscriber Line (DSL).
  • ISDN Integrated Services Digital Network
  • DSL Digital Subscriber Line
  • FIG. 6 a The hardware configuration for a four component home system 258 is shown in FIG. 6 a .
  • FIG. 6 b shows a hardware configuration for a two component home subsystem.
  • the home system 258 performs several functions, such as receiving data and video transmissions, stripping (or extracting) the data from the video signal, decrypting the data, screening and storing the data, providing user friendly interface controls and software, displaying menus and text, processing transactions, initiating telephone calls and transmitting billing data.
  • Various hardware configurations may be utilized to achieve the desired functions of the home system 258 .
  • the home system 258 can be configured to utilize the reception and channel tuning capability of the current installed subscriber base of cable converter boxes and televisions 601 and networked computers.
  • the home system 258 can also be designed as an advanced set top terminal converter box with menu generation capability, electronic memory and a telephone modem as described in section V below. Alternatively, the home system 258 can be configured to support alternate delivery and ordering methods as described in the referenced related applications.
  • the electronic components which make up the home system 258 can be arranged in a variety of ways.
  • the viewer 266 and library 262 are wired together while the remaining components communicate through RF transceivers 604 .
  • FIG. 6 b shows a two unit home system 258 with certain optional features.
  • the viewer 266 is generally equipped with a high resolution viewing area 602 , digital logic (including a key 605 , security 606 , and a microprocessor 621 ), video graphics control and memory 607 , power supply circuitry 602 (not shown), an optional battery 603 and an optional RF transceiver 604 .
  • the library 262 contains the connector function to the electronic book distribution system 208 , connector function to a public telephone communications system, and memory 600 (which may be removable and portable 600 ′).
  • the library 262 would include data stripping functions 617 , digital logic 609 , memory storage 600 , power circuitry 610 , optional connections 611 (including cellular or PCN 611 ′), optional battery (not shown), optional tuner module 613 and an optional RF transceiver 604 .
  • the connector 212 and the public telephone system connection 270 , as well as the removable portable memory unit 600 of the library 262 may be broken out into separate components.
  • FIG. 6 b shows a removable portable hard disk memory 600 ′ with removable cartridges 614 .
  • the home system 258 may include an attached keyboard 267 or a wireless keyboard 268 . Both the attached keyboard 267 and the wireless keyboard 268 may be used to communicate with the viewer 266 (not shown) or the library unit 262 .
  • the wireless keyboard 268 may communicate using radio frequency (RF) signaling, for example.
  • RF radio frequency
  • all functions of the home system 258 may be incorporated into a single unit.
  • the functions of the library 262 may be carried out by a card or chipset in the viewer 266 .
  • All the communications devices needed to couple the home system 258 to various telecommunications networks may also be incorporated into the viewer.
  • All interfaces between the home system 258 and the subscriber may be included with the viewer 266 .
  • the viewer 266 may include a communication device for receiving inputs from a separate keyboard.
  • the viewer 266 may also include a built-in video camera 608 ′′ that may be used to transmit images of the subscriber. Using the transceiver 608 , the camera 608 ′′ and the speaker/microphone 608 ′, the subscriber may use the viewer 266 for video conferencing, for example.
  • the home system 258 may have as many as five separate components, which communicate with each other.
  • the two, three, four or five separate components which make up the home subsystem can communicate with each other in a variety of ways, including hardwired connection 615 , RF transceiver 604 and other wireless methods.
  • RF communications may be used in the home, allowing separate components to be located throughout the home without restriction.
  • the data communicated between the units may be secure data using security techniques presented in Section VII.
  • the library 262 may provide power to the viewer 266 through the hard wire communication link 615 .
  • a device such as a cable interface device or cable connector 212 is used.
  • the cable connector device includes a tuner 613 , while the cable interface device makes use of existing tuning equipment in the home.
  • data is stripped from the video signal and stored at the subscribers location in the library 262 .
  • the phone connector 270 , optional connector 611 , and modular connector 701 initiate communications and transmit ordering and billing information to the operations center 250 or billing and collection system 278 .
  • a digital connector 619 is provided to communicate digital information with the set top 601 .
  • the library 262 is the intelligent component of the home subsystem, incorporating the hardware and software necessary to store the text data, generate menus and effect the purchase transactions.
  • the home library 262 also includes the necessary jacks and connections to allow the system to be connected to the viewer 266 . As shown in FIG. 6 b , the library 262 communicates the text data to the viewer 266 in a secure format, which requires a key 605 for decryption. The text may be decrypted page by page just before viewing. Alternative security embodiments for library 262 to viewer 266 communications are presented in Section VII.
  • FIG. 7 shows the flow of the processes performed by the video connector 212 .
  • the video connector 212 receives the video signal 608 , tunes to the channel containing the text data 612 , strips the text data from the video signal 616 , and communicates the text data stream to logic components in the library 622 .
  • the connection to the video distribution system may be a cable connector to a cable television delivery system, as shown in FIG. 6 b .
  • the cable connector includes a data stripper circuit 617 , which accepts video input from either a set top converter, TV or VCR 601 , or an optional tuner block 613 that receives the CATV signal through the cable connector 212 ′.
  • the data stripper circuit 617 strips data out of the video, and outputs a digital bit stream to the digital logic portion 609 of the library unit 262 .
  • the data is embedded in the video signal either in the vertical blanking interval or the active video portion in an encrypted and compressed format.
  • the data stripper circuit 617 can be placed inside the set top converter box 601 , TV, or in the library 262 .
  • the data stripper circuit 617 outputs the digital bit stream to be used by the library digital logic 609 .
  • the video connector 212 may also contain a channel tuner module 613 that can tune to the video channel and provide access to the video that contains the data to be stripped.
  • a set top converter, VCR, or TV tuner is not needed in the home system 258 .
  • the optional tuner module 613 would instead receive the CATV signal directly through the cable connector 212 .
  • Additional connector options, which allow for the receipt of text files using alternative delivery methods, are presented in the referenced related applications. This ubiquitous access is provided using the modular connector 700 as depicted in FIG. 6 b.
  • FIG. 6 b and FIG. 8 An embodiment of the library 262 for a two unit home subsystem is shown in both FIG. 6 b and FIG. 8 .
  • the embodiment shown includes the following optional parts: the video connector 212 , phone connector 270 , RF transceiver 604 , and battery pack 624 in addition to a removal portable memory 600 ′, microprocessor 628 , instruction memory unit 632 , digital logic 636 , and power unit 640 .
  • the library 262 contains a digital logic section 609 (not shown in FIG. 8 ) which includes the microprocessor 628 , the digital logic 636 and the instruction memory unit 632 .
  • the microprocessor 628 may be a secure microprocessor such as the Mot SC21 device sold by Motorola.
  • the digital logic section 609 will receive the serial digital bit stream from the data stripper circuit 617 and process the data. Error correction and security processing will also be performed by the digital logic section 609 and the data will be checked for proper address. If the address of the data is correct and the library 262 is authorized to receive the data, the data will be decrypted and transferred to the memory storage unit 600 , 600 ′. Authorization to receive the data may be provided by the cable headend or another distribution point.
  • An authorization code may be sent in the serial digital bit stream.
  • the digital logic section 609 will send appropriate text and graphical data to the memory storage unit 600 , 600 ′. It may decrypt then re-encrypt the data or transfer this data in a compressed and encrypted format and the data remains stored in a compressed and encrypted format.
  • the memory storage unit of the library may be a removable portable memory unit 600 ′ (as shown in FIGS. 6 a , 6 b and 8 ).
  • a hard disk drive such as an 80 megabyte, a 200 megabyte, a hard disk with removable platters, and CD ROM.
  • a hard disk drive unit 600 ′ which contains removable platters, may also be used. This would provide virtually unlimited library storage capacity.
  • Data may be stored in the memory storage unit in a compressed and encrypted format. As is also shown in FIG. 6 b , the data may also contain a key or unique ID number that matches the ID or key of the viewer 266 .
  • the library 262 will accept power from AC wall power 610 , DC power 640 , or optional battery power 624 .
  • the power circuitry 610 , 640 may provide all the voltage necessary from either the battery 624 or AC unit for the various circuitry in the library.
  • the power circuitry 610 , 640 may also provide power to the viewer through a single data cable when connected to the viewer.
  • the power circuitry 610 , 640 will recharge the battery using AC power when in operation.
  • the library 262 With the optional battery unit 624 installed, the library 262 becomes a portable unit and can still provide power to the viewer 266 . In order to extend battery life, power conservation measures may be utilized, such as shutting down the memory system when not in use. When the viewer unit 266 is being utilized and the library circuitry is not being utilized, virtually all power may be shut down to the library 262 .
  • connection to the telephone system may be provided by a connector device 611 , which consists of a modem. Various available modems may be used to perform this function. As shown in FIG. 6 b , cellular phone or PCN phone connections 611 ′ may also be provided.
  • the modem may be used to transfer the name and credit card information of the consumer to the billing and collection system 278 .
  • the telephone connection 270 may be utilized each time an electronic book is purchased by a consumer to complete and record the transaction. The telephone connection 270 may also be used to receive the text data from the operations center 250 , by-passing the video distribution system 208 .
  • the phone connection 270 may be a separate unit as shown in FIG. 6 b .
  • the modular connector 701 (shown in FIGS. 6 b and 8 ) provides access to each communication network to provide a path from the home system 258 to the billing and collection system 278 or the operations center 250 .
  • FIG. 9 shows for one embodiment, an example of processing performed by the digital logic section 609 of the library 262 on the data stream 651 received from the video connector 212 or stripper circuit 617 .
  • digital logic section 609 checks the data stream 651 for error correction. If an error is detected, in step S 654 digital logic section 609 de-interleaves the data and in step S 658 runs a FEC (Forward Error Correcting) algorithm.
  • FEC Forward Error Correcting
  • step S 666 the process moves to step S 666 and the digital logic section 609 checks whether the address of the packet matches the library box ID number.
  • the library box ID number is a unique number associated with the library 262 .
  • the library box ID is used to ensure security of the data.
  • the process then moves to Step S 668 , and the digital logic section 609 performs the decryption processing, as presented in Section VII.
  • the process then moves to step S 670 and the digital logic section 609 determines whether an electronic file has already been opened into which the data packet can be saved. If no data file has been opened, the digital logic section 609 opens a new data file for that packet.
  • step S 678 If an electronic file has been opened, the process moves to step S 678 and the digital logic section 609 saves the packet in the electronic file on disk.
  • the process moves to step 682 and the digital logic section 609 checks to see if this is the last packet for a particular book for a particular textual data block being received. If it is the last packet of information, the process moves to step 686 and the digital logic section 609 closes the electronic file and updates the directory of available electronic files. Following either step S 682 or S 686 , the process returns to receive another data packet from the data stream received from the data stripper block.
  • step S 690 the digital logic section 609 determines the type of message that is being sent.
  • the message may be an index of book titles, menu (and menu graphics) information, announcements, special offerings, discounts, promotions, and previews, for example.
  • step S 694 the digital logic section 609 stores the message in an appropriate electronic message file.
  • the process then returns to step S 650 to receive another data packet and perform another error check.
  • the library 262 is able to receive, store and update directories related to the textual data and graphical data (that can be used to depict pictures in a given book or to generate menus). Variations of the processes are possible depending on the format of the data and operating system of the library 262 .
  • FIG. 10 shows an example of the processing of information requests from the viewer 266 at the library 262 . Information requests from the viewer 266 are received either through the cable connecting the viewer 266 to the library 262 or through wireless transmissions such as RF. It is possible in some embodiments for subscribers' requests to come from a set top converter box 602 (see Section V).
  • Information requests received from the viewer 266 generally fall into three categories: (1) directory data of books stored in the library 262 , (2) index of all available books on the system, and (3) requests for a specific book (step S 700 ).
  • step S 704 the digital logic section 609 answers a request from the viewer 266 for a directory of data showing the books stored at the viewer 266 .
  • the directory of data is sent to the viewer 266 so that it may be displayed to the subscriber.
  • the digital logic section 609 handles requests from the viewer 266 for an index of all available books on the system.
  • the library 262 will obtain an index of all the available books on the system and transmit that index, in step S 712 , with menu information to the viewer 266 .
  • step S 716 the digital logic section 609 replies to a request from the viewer 266 for a specific book.
  • step S 720 the digital logic section 609 opens an electronic file for the specific book requested by the viewer 266 and transmits the record or transmits the information on a packet-by-packet basis to the viewer 266 . This process of transmitting the specific book, record, or packets to the viewer 266 continues until the last record or packet has been sent in step S 724 .
  • the library 262 In addition to the processes shown on FIG. 10 in handling a request for a specific book, the library 262 also orders and receives specific books from the operations center 250 using the process as described in step S 716 . Following a request for a specific book which is not stored at the library 262 , the library 262 will proceed to determine the next available time the book will be on the video distribution system 208 or an alternative delivery system and ensure reception and storage of that book (process not shown). In performing this process the library 262 will transmit to the viewer information on when it will obtain the text data for the book so that the subscriber may view the book. In addition to timing information, price and other ordering information may also be passed by the library 262 to the subscriber.
  • FIG. 11 is a block diagram of a viewer 266 showing its internal components.
  • the viewer 266 of FIG. 11 is similar to the viewer 266 depicted in FIG. 6 b .
  • the viewer 266 is designed to physically resemble a bound book.
  • the viewer 266 is made up of five primary components and seven optional components: (1) LCD display 602 , (2) digital circuitry (not shown), (3) video graphics controller 607 N, (4) controls 740 , (5) book memory 728 , (6) optional power supply circuitry 736 , (7) optional battery 603 N, (8) optional RF transceiver 604 , and (9) optional cellular or mobile connector (such as 611 N) (10) optional keyboards 267 and 268 , and (11) an optional speaker/microphone 608 ′, (12) optional alternative communication interface devices.
  • a high resolution LCD screen 602 may be used by the viewer 266 to display text and graphic images.
  • the screen may be the size of one page of an electronic book.
  • a two page screen or two screens may also be used with the viewer 266 .
  • Digital circuitry that includes a secure microprocessor 621 , instruction memory 732 , and digital logic. Data is transferred to the viewer 266 in compressed and encrypted format.
  • the secure microprocessor 621 compares the ID number of the viewer 266 with the incoming data stream and only stores the text data if the ID number of the viewer 266 matches that within the incoming data stream.
  • the viewer 266 may be configured to not output text data or other data and that the data is decompressed and decrypted only at the moment of viewing and only for the current page being viewed. These measures provide additional security against unauthorized access to data. Additional embodiments are presented in Section VII.
  • a video graphics controller 607 ′ that is capable of assisting and displaying VGA quality text and graphic images is included in the viewer 266 .
  • the graphics controller 607 ′ is controlled by the digital circuitry described above. Text may be displayed in multiple font sizes.
  • the viewer 266 of FIG. 11 has touch panel controls 740 .
  • These unique and novel controls 740 allow the consumer to select stored electronic books and electronic books from catalogues, move a cursor, and turn pages in an electronic book.
  • the controls 740 include forward and reverse page buttons 742 , 741 , a ball 743 for cursor movement, one or more selection buttons 745 , a current book button 747 and a bookmark button 749 (see FIG. 14 a ).
  • the controls 740 should be easy to use and conveniently located. Referring to FIG. 14 a , the controls for the viewer 266 may be located below the screen 602 at the bottom portion of the viewer 266 .
  • the next page turn button 742 is the most used button 740 and is located towards the right edge of the page.
  • the subscriber is likely to use right hand thumb movements to work the controls particularly the page turn buttons 741 , 742 . Therefore, the buttons may be arranged in such a manner that the buttons are easily controlled by a subscriber's right thumb. Generally, this can be accommodated either on the lower portion of the viewer 266 (as shown) or along the right hand margin of the viewer 266 (not shown).
  • the current book button 747 and bookmark button 749 are usually the least used of the controls 740 . Therefore, in the example shown, those buttons 747 , 749 are located on the inside portion towards the binder of the viewer 266 .
  • Locating the ball 743 or other cursor movement device (such as four pointer arrows not shown) in the bottom center of the viewer 266 is both easier for the subscriber to use and easier in manufacturing the viewer 266 .
  • the selection buttons for the cursor 745 may be located below the middle diameter of the cursor ball 743 on the right and left sides of the ball as shown. If pointer arrows are used for cursor movement, a selection button 745 may be located in the center of the four arrow buttons (not shown). Again, the most used controls 740 should be located where a subscriber's right hand thumb would normally rest.
  • Book memory 728 for at least one electronic book or more of text is included in the viewer 266 .
  • the memory 728 stores text and any graphics, which represent pictures in a book.
  • the memory 728 can also store menu graphics data.
  • Two different memory 728 devices may be used in the viewer 266 , one for the instructions for the microprocessor 621 in the digital circuitry and a second type of memory may be used for the book memory 728 (and graphics).
  • Various memory devices available on the market may be used such as, ROM, RAM or a small hard disk. Since an electronic book requires approximately 0.6 megabytes of storage, a small hard disk providing approximately 60 MBytes of storage provides memory to store approximately 100 electronic books.
  • Text for electronic books may be displayed in various font sizes.
  • a variety of fonts are stored in instruction 732 or book memory 728 .
  • larger or smaller fonts may be recalled from memory 621 , 728 to create displays desired by the subscriber.
  • Power supply circuitry 736 in the viewer 266 will accept power from either an AC power source or from an optional battery 603 ′, or the library 262 .
  • the power supply circuitry 736 provides the necessary voltages to accommodate the various systems within the viewer 266 .
  • An optional battery 603 ′ is provided in one embodiment.
  • the battery 603 ′ is automatically recharged when AC power is available.
  • An optional RF transceiver 604 which provided two-way data link between the viewer 266 and other components of the home subsystem can also be included in the viewer 266 .
  • the viewer 266 may include a cellular transceiver (not shown) for mobile communications.
  • the optional wired (attached) keyboard 267 and wireless (e.g., RF) keyboard 268 may be used with the viewer 266 to provide communications between the subscriber and the viewer 266 .
  • the optional speaker and microphone 608 ′ allow the viewer 266 to provide audio signals to the subscriber, and allow the subscriber to provide an audio input.
  • the speaker and microphone 608 ′ may be used in conjunction with the cellular transceiver 608 or other telecommunications equipment to provide for reception and transmission of telephony and data.
  • the optional alternative communication interface devices allow the viewer 266 to make use of a variety of communication paths, including wireless Internet paths.
  • the viewer 266 of FIG. 11 has parts available for providing connections to: a library 744 , electronic card memory 748 , CD ROM units 752 , and a portable memory unit 756 (such as that shown in FIG. 6 b as 600 ′).
  • Various electronic memory cards such as PCMCIA can be used with the viewer 266 to supply and store electronic books.
  • the viewer 266 should be lightweight and portable.
  • the viewer 266 contains a software operating system that allows electronic books to be stored, read and erased and includes the capability to order electronic books and retain them in memory 728 for a predefined period of time determined by the system operator.
  • the software can be configured to allow the electronic book to be read during a period of time (i.e., two weeks) and then automatically erased, read once and erased, or held in memory permanently.
  • each viewer 266 may have a unique key 605 . All of the data storage may be encrypted with the key 605 for an individual viewer 266 to prevent more than one viewer 266 accessing the text file or electronic book file.
  • Alternative security embodiments are presented in Section VII.
  • FIG. 12 is a flow diagram of some of the processes executed by the microprocessor 621 in the viewer 266 .
  • the viewer 266 may receive inputs from the subscriber through touch panel controls 740 .
  • step S 800 the subscriber's information requests are then processed by the microprocessor 621 .
  • step S 804 if the subscriber requests a menu of available electronic books, the microprocessor 621 will select an electronic book menu.
  • step S 808 the microprocessor 621 will open the electronic files that list the electronic books which are available (related to the category of topic of the menu) and display the menu with the names of the available electronic books.
  • step S 812 the microprocessor 621 will process the selection and determine the electronic file that contains the specific electronic book.
  • step S 816 the microprocessor 621 will open the file for that specific electronic book and normally access the first page. (If a pointer has already been set in that books electronic file, the process may default to that page.)
  • step S 820 the microprocessor 621 will then determine which page needs to be displayed. That is, the microprocessor 621 will determine whether a next page, previous page or a bookmarked page needs to be displayed.
  • step S 828 the microprocessor 621 will move the pointer and obtain the previous page of data from the stored file. Otherwise, in step S 824 , the microprocessor 621 will normally obtain the next page of text from the stored electronic file.
  • step S 832 the microprocessor 621 decrypts the text data using one of the embodiments presented in Section VII, decompresses the text data and sends the data to the video display.
  • the video display will generally have a video display memory associated with it.
  • step S 832 the microprocessor 621 will send the data directly to that video display memory. The circuitry for the display then completes the process of displaying the page of text.
  • step S 836 the microprocessor 621 initiates power off.
  • step S 840 the microprocessor 621 saves the pointer in memory to the page number in the book that the viewer 266 is currently reading.
  • step S 844 the microprocessor 621 closes all the electronic files and signals the power circuitry to shut down the power to the various circuits in the viewer 266 . With these examples of basic processes the viewer 266 is able to display book selections and display text from those electronic books.
  • the electronic book system 200 may have a menu system 851 for selecting features and books from the electronic book system 200 .
  • the operating software and memory required for the menu system 851 may be located at the viewer 266 (e.g., the instruction memory 732 and/or book memory 728 ). However, it can also be located at the library 262 (e.g., the instruction memory 632 ) or the library 262 and the viewer 266 can share the software and memory needed to operate the menu system 851 . Since the menus are usually displayed on the viewer, and since the viewer 266 may be capable of operating in the absence of the library 262 , the basic software and memory to create the menus is more conveniently located at the viewer 266 .
  • the menu system 851 allows sequencing between menus and provides menu graphics for graphical displays such as on the LCD display 602 of the viewer 266 .
  • these menus may also be displayed on a television screen.
  • these menus may also be displayed on the computer monitor.
  • the menus provide just basic text information from which the subscriber makes choices.
  • the menus provide visual displays with graphics and icons to assist the subscriber and allow for subscriber interaction and real-time ordering of electronic books or other content available to the subscriber.
  • FIG. 13 depicts the menu system 851 with sequencing.
  • the primary menus in the menu system 851 are an introductory menu 850 , a main menu 854 and various submenus 858 .
  • one or two submenus 858 is sufficient to easily direct the subscriber to the selection or information requested.
  • three or more submenus 858 make the user interface more friendly for the subscriber.
  • Each level of submenus 858 may consist of multiple possible menus for display. The particular menu displayed depends on the selection by the subscriber on the previous shown menu. An example of this tree sequence of one to many menus are the help submenus 887 , 888 . Depending upon the specific help requested, a different level two help menu is displayed to the subscriber.
  • FIG. 14 a An example of an introductory menu 850 is shown on FIG. 14 a .
  • the introductory menu 850 introduces the viewer 266 to the system and provides initial guidance, announcements and instruction.
  • the introductory menu 850 is followed by a main menu 854 , an example of which is shown in FIG. 14 b .
  • the main menu provides the viewer 266 with the basic selection or features available in the system.
  • FIG. 14 b is an example of a main menu 854 offering many additional features and submenus 858 to the subscriber. For example, FIG.
  • 14 b shows that the viewer 266 is able to choose by a point and click method, many options including: (1) free previews, (2) books you can order, (3) books in your library, (4) your current book, (5) help, (6) on-line services and (6) other system features. Following a selection on the main menu 854 , a corresponding submenu 858 is shown.
  • FIG. 13 shows fourteen available primary or first level submenus. They are (1) account set up 862 , (2) free previews 866 , (3) book suggestion entries 855 , (4) books in your library 872 , (5) books you can order 878 , (6) your current book 884 , (7) help 887 , (8) available features 890 , (9) messages 893 , (10) account information 896 , (11) outgoing message submenu 898 , (12) show links submenu 970 , (13) create links submenu 980 , and
  • FIG. 14 c is an example of a first level submenu for books in your library 872 .
  • This “Book In Your Library” example submenu 872 shows six available books by title and author and provides the subscriber with the ability to check a different shelf of books 874 or return to the main menu 854 .
  • FIGS. 14 d and 14 e show example submenus 858 for books that may be ordered using the “Books You Can Order” submenu 878 .
  • FIG. 14 f is an example of a confirmation menu which confirms a subscribers order.
  • the subscriber is required to enter a PIN number to complete the subscriber's order. Any alpha-numeric or similar password may be used to ensure the subscriber is an authorized subscriber.
  • the subscriber confirms an order with a PIN or password and then receives a final confirmation screen.
  • the final confirmation screen is primarily text and may state:
  • Examples of the “Account Set Up Menu” 862 and further submenus 858 related to account set up are shown in FIG. 14 g and FIG. 14 h .
  • These submenus 858 allow initialization of an account at the operations center 250 and orders to be charged to credit cards.
  • the submenus 858 include the ability to enter data related to your desired PIN number or password, credit cards, phone numbers, etc.
  • the account set up is performed using the telephone system.
  • a confirmation menu verifies that the account has been properly set up with the desired PIN or password and credit card.
  • additional set-up methods are presented in the referenced related applications.
  • Free previews for books 866 are also provided by submenus ( 868 , 870 ). Examples of the free preview menus are shown in FIG. 14 i and FIG. 14 j .
  • FIG. 14 i shows a menu depicting various books for which previews are available for viewing. Following a book selection, a screen submenu showing an excerpt of the selected book cover's description is provided along with an excerpt from a critic's review of the selected book. In one embodiment, this preview screen for a particular book also allows the subscriber to select a submenu, which provides information about the author.
  • the book preview submenu may also include a still video picture or graphics portraying a book cover or a scene from the book. An example of such a still video picture or graphics is shown in FIG.
  • the author's preview screen 870 shows a picture of the author, provides a short biography, and may allow the subscriber to order the author's books. The price for ordering the authors various books may also be shown on the menu.
  • the electronic book system 200 provides the subscriber with a book suggestion feature (see 855 ). This is accomplished using the menu system 851 and the processor with associated memory located at the viewer 266 , library 262 or at the distribution point ( 1020 or 250 ). When necessary, information for the book suggestion feature is sent in the text data of the signal to the home system 258 . With this feature, books or authors are suggested to a subscriber based upon historical data of the subscriber's previous orders, demographics or mood of the subscriber, other indicators, and/or by text word searches.
  • text word searches of preview information (such as book cover descriptions, critics reviews and biographies about the author) and/or text of books or other titles are performed by the library 262 using databases stored in the library memory 600 .
  • Personalized book or author suggestions are made to the subscriber by obtaining information from the subscriber indicative of general subscriber interests.
  • Subscriber entries may be solicited from the subscriber using the book suggestion entry submenu 855 . The system uses these subscriber entries either directly or indirectly to search for books or authors to suggest to the subscriber.
  • the electronic book suggestion methods may be categorized into two categories, either responsive methods (which respond to a series of subscriber menu entries), or intelligent methods (which analyze data to suggest a book).
  • responsive methods which respond to a series of subscriber menu entries
  • intelligent methods which analyze data to suggest a book.
  • the system 200 determines a list of suggested titles or authors and creates a second or third level submenu 856 , 857 to suggest the titles for subscriber selection.
  • Responsive methods of suggesting titles include, for example, the use of mood questions, searching for authors, and keyword searching.
  • a series of mood questions can be presented on menus to determine a subscribers interest at a particular time.
  • the home system's 250 processor 404 and instruction memory 416 assign each title mood indicators (and sub-indicators) from a group such as light, serious, violent, short, long, dull, exciting, complex, easy-read, young theme, old theme, adventure, romance, drama, fiction, science-fiction, etc. These indicators are sent to the home system 258 with the text data and are stored in library memory 600 .
  • the processor associates a set of indicators with the subscriber's request and a set of books with matching indicators are located for suggesting to the subscriber.
  • Responsive searches for authors or keywords are generally performed by the library processor 628 and instruction memory 632 on data stored in the library memory 600 .
  • a keyword given by the subscriber may be searched for a match in library memory 600 storing the book reviews, critics and previews databases.
  • the title “Hunt For Red October” may be located by the microprocessor 628 using instruction from a routine in instruction memory 632 .
  • Intelligent methods of suggesting programs include analyzing personal profile data on the subscriber and/or historical data about the subscriber such as past books ordered by the subscriber (or buy data). This method may be performed at the distribution point or operations center 250 by the on-site processor 404 using subscriber databases stored in memory 428 .
  • the home system 258 receives the text data including program suggestion information from the distribution point or operations center 250 and generates the program suggestion submenus 855 , 856 , 857 using the same text data receiving 212 and viewer menu generation hardware (e.g., 607 , 621 ) described above.
  • Software routines and algorithms stored in instruction memories e.g. 632 , 732 ) are used to analyze historical data and book ordered data to determine a line of books to suggest to the subscriber.
  • submenus 858 are shown on the “Books In Your Library” submenu 872 and may be broken into shelf numbers with submenus for each shelf 874 , 876 .
  • the submenus 858 for the “Books You Can Order” submenu 878 is similarly broken out into submenus by shelves 880 , 882 .
  • These shelves may each be a category or genre of books. Books may be grouped into categories such as best sellers, novels, fiction, romance, etc. See FIG. 14 d.
  • the submenu 858 for “Your Current Book” 884 allows a subscriber to select a current book 884 and then determine what page to view. This selection is confirmed with a level two submenu 885 .
  • the help submenu 887 provides the subscriber with additional help screens 888 .
  • the submenus 858 for available features 890 may be broken out into a sequence of separate submenus for each feature 891 , 892 .
  • messages can also be sent with the electronic book selection and delivery system 200 .
  • a level one message screen provides the subscriber with the ability to select from various messages the subscriber has pending 893 . Each message is then shown on a separate submenu screen 894 , 895 .
  • the message may contain text and graphics.
  • account information is shown on a level one submenu 896 and then follow-on submenus 858 show the recent orders and your account balance 897 .
  • level one submenu for outgoing messages 898 which has a follow-on submenu used as an input screen 899 .
  • the billing and collection system 278 (shown in FIGS. 2 and 3 ) utilizes the latest technology in electronic transaction and telephone switching to track orders, authorize deliveries, bill consumers, and credit publishers automatically.
  • the telephone calls initiated by the phone connector 270 are received by the billing and collection system 278 which responds immediately without human intervention by placing the order and charging the consumers credit card account. Data is compiled periodically and publishers 282 are credited for sales of their books or other text.
  • the billing and collection system 278 may also connect with subscribers through two-way cable connections, cellular, or other communication means. These additional methods are detailed in the referenced related applications.
  • the billing and collection system 278 communicates with the operations center to track changes in available books and to provide statistical data to the operations center 250 .
  • the electronic book system can be modified to be used at public libraries, schools, bookstores, newsstands, or stand-alone kiosks.
  • FIG. 15 shows one possible arrangement of components for the distribution location.
  • the main unit is the file server 900 .
  • the file server 900 is a large electronic memory unit that can store thousands of books, newspapers, or periodicals.
  • Various electronic storage means may be used in the file servers, such as hard disks, read-write CD ROMs and read-only CD ROMs.
  • the system comprises five components; the file server 900 , a converter or video connector 904 or connector capable of interfacing to one of the alternative delivery systems presented in the referenced related applications, a controller 908 , a viewer 912 , and a catalog printer 916 .
  • the software for controlling the system is primarily located in the controller 908 .
  • the converter or video connector 904 is similar to those described above.
  • the controller unit 908 monitors the data being transferred to the file server 900 by the converter 904 .
  • the controller 908 may be provided with a viewing screen and several control buttons. When it is necessary to have a larger screen to perform more sophisticated controlling of the system a viewer 266 may be connected to the controller 908 and the viewer screen and controls 740 may be used.
  • the controller 908 is only able to download books to public viewers 912 which are authorized to receive books from the particular file server 900 . Also for security reasons it is not desirable that the public viewer 912 have access to more than one file server 900 . In this way, security can be maintained over the text data for books.
  • the public viewer 912 may be limited to receiving one or two books at a time from the controller 908 . When the user of the public viewer 912 needs a new or additional book, the user returns the viewer 912 to the school or public library where the user receives a new book from the controller 908 . Additional security mechanisms associated with this kiosk-based distribution of electronic books are presented in Section VII.
  • the titles of the available books may be printed on a catalog printer 916 .
  • the catalog printer 916 is connected to the library controller 908 and the titles of the books are downloaded to the catalog printer 916 .
  • the coded text for any of the electronic books may not be authorized for printing using the controller 908 and catalog printer 916 .
  • none of the electronic book data may be allowed to be downloaded to the printer 916 .
  • the system shown may also be used at bookstores.
  • the bookstores can rent the public viewer 912 to customers with the text for one or two books loaded onto the public viewer 912 .
  • the public viewer 912 may be provided with an automatic timeout sequence.
  • the timeout sequence would erase the textual data for the books after a certain period of time, for example, two weeks. It is expected that after a period of time (perhaps within two weeks) the renter would return the public viewer 912 to the bookstore and receive additional books for viewing.
  • Various other configurations are possible for bookstores, schools and public libraries using the file server 900 and public viewer 912 can be described.
  • set top converter boxes such as those made by Scientific Atlanta or General Instruments are presently unequipped to handle the book selection system of the present invention.
  • set top converters may be built which include the library functions, hardware modifications are necessary in order to use the book selection system with existing set top converter technology.
  • FIGS. 16 a and 16 b are examples of hardware modifications or upgrades.
  • a port is used to attach hardware upgrades described below to a set top terminal.
  • Two upgrades are possible to set top converters 601 to assist in receiving and selecting electronic books, a menu generation card upgrade ( FIG. 16 a ) and an information download unit ( FIG. 16 b ).
  • Each of these upgrades may be connected to the set top terminal unit through an upgrade port.
  • a four wire cable, ribbon cable, FireWire (IEEE 1394B) interface connector, USB connector, or the like may be used to connect the upgrade to the set top converter 601 .
  • a card addition 950 to a set top converter 601 is depicted in FIG. 16 a .
  • the card 950 shown provides the additional functionality needed to utilize the book selection system with existing set top converter 601 technology.
  • the card 950 may be configured to slip inside the frame of a set top terminal and become part of the set top terminal, an advanced set top terminal.
  • the primary functions the card 950 adds to the set top converter 601 are the interpreting of data signals, generating of menus, sequencing of menus, and, ultimately, the ability of the subscriber to select a book using either the television or a viewer 266 .
  • the card 950 also provides a method for a remote location, such as the cable headend, to receive information on books ordered.
  • the books ordered information and control commands may be passed from the cable headend to the card 950 using telephone lines or alternative ordering methods as presented in the referenced related applications.
  • the primary components of the card 950 are a PC chip CPU 952 , a VGA graphic controller 954 , a video combiner 956 , logic circuitry 958 , NTSC encoder 960 , a receiver 962 , demodulator (not shown), and a connector 611 ′, which consists of a dialer.
  • the card 950 operates by receiving the data text signal from the cable headend through the coaxial cable.
  • the logic circuitry 958 of the card 950 receives data 964 , infrared commands 966 , and synchronization signals (not shown) from the set top converter 601 . Menu selections made by the viewer 266 on the remote control are received by the set top converter's 601 IR equipment and passed through to the card 950 .
  • the card 950 interprets the IR signal and determines the book (or menu) the subscriber has selected.
  • the card 950 modifies the IR command to send the information to the set top converter 601 .
  • the modified IR command contains the channel information needed by the set top converter 601 .
  • the card 950 is able to transmit electronic books ordered information to the cable headend. It is also possible to receive the electronic books over the telephone lines and other telecommunications networks, including wireless networks, and by-pass the video distribution system.
  • IR commands 966 are transferred from set top terminal 601 to hardware upgrade.
  • Hardware upgrades may include a microprocessor, interactive software, processing circuitry, bubble memory, and a long-term memory device. In addition to these basic components, the hardware upgrade may make use of an additional telephone modem or CD-ROM device.
  • An information download hardware upgrade 1001 shown in FIG. 16 b allows the subscriber to download large volumes of information from the operations center 250 or cable headend using a set top terminal 610 .
  • the hardware upgrade 1001 will enable subscribers to download data, such as electronic books and electronic magazines, to local secure storage.
  • the hardware upgrade 1001 is an additional local storage unit 1003 (e.g., hard disk, floppy, optical disk or magnetic cartridge and may include a microprocessor 1005 , instruction memory 1007 , and a random access memory 1009 , as shown in FIG. 16 b ).
  • a small portable viewer may also provided with the upgrade 1001 to enable downloaded text to be read without the use of a television.
  • the downloadable information may be text or graphics supplied by the operations center 250 or cable headend.
  • electronic books may be downloaded and read anywhere with the viewer 266 .
  • electronic books may be downloaded and stored in compressed form for later decompression.
  • the electronic books may be decompressed only at the time of viewing.
  • Important text that the public desires immediate access may made available through this system. Text such as the President's speech, a new law, or a recent abortion decision rendered by the Supreme Court may be made immediately available.
  • electronic book ordering information is stored at each set top terminal 610 until it is polled by the cable headend using a polling request message format.
  • a polling request message format consists of six fields, namely: (1) a leading flag at the beginning of the message, (2) an address field, (3) a subscriber region designation, (4) a set top terminal identifier that includes a polling command/response (or P/F) bit, (5) an information field, and (6) a trailing flag at the end of the message.
  • P/F polling command/response
  • FIG. 17 shows components of a set top terminal 610 ′.
  • the components include a data receiver 617 ′ and a data transmitter 1011 .
  • the data transmitter provides upstream data communications capability between the set top terminal 610 ′ and the cable headend. Upstream data transmissions are accomplished using the polling system described and, using a data transmitter 1011 . Both receiver 617 ′ and transmitter 1011 may be built into the set top terminal 610 ′ itself or added through an upgrade module. Regardless of the specific hardware configuration, the set top terminal's data transmission capabilities may be accomplished using the hardware shown in FIG. 17 .
  • FIG. 17 shows RF signals, depicted as being received by a data receiver 617 ′ and tuner 613 working in unison. Both of these devices are interfaced with the microprocessor 1013 , which receives inputs 1015 , from the subscriber, either through a set top terminal's keypad, a remote control unit or viewer 266 . Generally, all cable signals intended for reception on the subscriber's TV are accessed by the tuner 613 and subsequently processed by the processing circuitry 1017 .
  • This processing circuitry 1017 typically includes additional components (not shown) for descrambling, demodulation, volume control and remodulation on a Channel 3 or 4 TV carrier.
  • Data targeted to individual set top terminals is received by the data receiver 617 ′ according to each set top terminal's specific address or ID.
  • each addressable set top terminal 610 ′ only receives its own data.
  • the data receiver 617 ′ may receive set top terminal 610 ′ specific data in the information field of the signal frame described or on a separate data carrier located at a convenient frequency in the incoming spectrum.
  • the received data includes information regarding electronic books and menus available for selection.
  • the subscriber may enter a series of commands 1015 using a keypad or remote control in order to choose an electronic book or menu.
  • the set top terminal's microprocessor 1013 instructs the tuner to tune to the proper frequency of the channel carrying data and subsequently instructs the processing circuitry 1017 to begin descrambling of this data.
  • the microprocessor 1013 Upon selection of an electronic book, the microprocessor 1013 stores any selection information in local memory (not shown) for later data transmission back to the cable headend.
  • the set top terminal's microprocessor 1013 coordinates all CATV signal reception and also interacts with various upstream data transmission components.
  • the data transmitter 1011 operates in the return frequency band between 5 and 30 MHZ. In an alternative embodiment, the frequency band of 10 to 15 MHZ may be used. Regardless, however, of the frequency band used, the data transmitter 1011 sends information to the cable headend in the information field of the response frame described.
  • the set top terminal hardware components may be used to accomplish upstream data transmissions.
  • the electronic book system 200 described may also be configured in a book-on-demand style.
  • FIG. 18 a shows one example of a configuration for a book-on-demand system.
  • a book on demand system requires more powerful two-way communications between the consumer's home, bookstore, school or public library and either the operations center 250 or a distribution site 1020 such as the cable headend.
  • this type of two-way communication can be provided by the hardware shown in FIG. 17 and described above. Additional methods related to alternative communication paths are presented in the referenced related applications.
  • the subscriber selects the book to be download from an available menu of books (see for example FIGS. 14 d and 14 e ).
  • the data for menus of available books is usually sent to the subscriber location by the distribution site 1020 .
  • information about the subscriber selection (or request) is then communicated to either a distribution point 1020 (such as a cable headend) or the operations center 250 .
  • a distribution point 1020 such as a cable headend
  • the operations center 250 Upon receipt of this request, the needed textual and graphical information for the book is spooled and sent to the subscriber. In this manner, electronic books are only sent when requested by the subscriber and are sent immediately upon demand for the electronic book (or text).
  • a strong nodal architecture distribution system such as, a video-on-demand cable or telephone television system, through use of individual telephone calls on the public telephone system or cellular phone system, through the use of the Internet, or a number of other data network options.
  • the book-on-demand system allows for a greater selection of electronic books to the subscriber and limits the amount of communicated book data that is unnecessary or unneeded. It also provides the electronic book to the subscriber in a much timelier fashion.
  • a book-on-demand system requires a distribution point 1020 to have more sophisticated equipment to access and “spool out” the textual information.
  • file server technology 1024 for storing the books and distribution technology such as ATM 1028 or telephone-type switching (not shown) to distribute the textual information.
  • the file server 1024 and distribution technology that can be used in configuring such a book-on-demand system is described in U.S. Pat. No. 5,262,875 and U.S. Pat. No. 5,218,695, cited above.
  • FIG. 18 a shows an embodiment for a book-on-demand system that utilizes file server technology.
  • the embodiment of FIG. 18 a will support distribution of nearly any digital data.
  • Books or textual files are received from publishers 282 and other sources through local feeds 1032 , ATM 1028 , or by satellite dish 1036 , for example.
  • the data is then stored in memory 1040 at the file server 1024 .
  • the distribution point 1020 is a cable headend that receives requests from subscribers and delivers text to subscribers over a two-way communication system (such as a video-on-demand system (VOD) 1044 ).
  • VOD video-on-demand system
  • the library 262 can be connected to either a basic premium-type service cable system 1048 , a near video-on-demand type cable system (or pay-per-view (PPV) 1052 ) or a video-on-demand cable system 1044 . In connecting with either of these three systems the library 262 may access the cable directly or may access the system through a set top terminal 601 ′, 601 ′′, or 601 ′′′.
  • a basic premium-type service cable system 1048 a near video-on-demand type cable system (or pay-per-view (PPV) 1052 ) or a video-on-demand cable system 1044 .
  • PSV pay-per-view
  • the distribution point 1020 transmits a list of available books through the cable delivery system to the library 262 .
  • the library 262 displays the list of available books on a menu or similar format. As described earlier, the library 262 may use menus which list categories of available books to form its request from the distribution point 1020 .
  • the library 262 sends a request signal on the two-way communication system 1044 back to the distribution point 1020 .
  • This request signal can be handled in two ways.
  • the library 262 either initiates the request or the distribution point 1020 polls the various libraries on to the two-way system 1044 .
  • the text associated with that book title is transmitted to the library 262 using the two-way cable system 1044 .
  • FIG. 18 b is an expanded view of an operations center 250 that supports a regional or national book-on-demand system.
  • the operations center 250 shown supports distribution of nearly any digital data.
  • the operations center 250 supports multiple feeds to receive digital information by tape 1060 , 1060 ′, ATM 1028 , or satellite 1036 .
  • the information is processed through an input MUX 1064 and a small file server 1068 before reaching the master file server 1072 .
  • Digital data such as books received from publishers 282 is then stored on the master file server 1072 .
  • the digital data may be stored compressed in a standard format such as MPEG2.
  • a system controller 1076 provides control over the regional or national book-on-demand system. Books may be packaged into groups to provide feeds to various cable headends. In addition, scheduling and marketing research are conducted at the operations center 250 . In order to handle the scheduling and market research, book buy data is received at the operations center 250 through a multiplexer 1082 . Book buy information can be provided by the operations center 250 to the billing and collection system 278 .
  • the operations center 250 is also equipped to insert messages or advertisements into the file server. These messages or advertisements will eventually be received by the subscribers.
  • the master file server 1072 uses an output multiplexer 1080 and ATM 1028 as well as satellite connections to distribute digital data.
  • cable headends receive text data on books from the master file server 1080 through the output multiplexer 1028 and an ATM system 1028 . After receiving the digital book data, the cable headends store the books in a local file server 1024 .
  • FIG. 18 a 's distribution point 1020 is an example of a cable headend which may receive data from the operations center 250 of FIG. 18 b through an ATM hookup 1088 or satellite hookup. All communications and storage in the Book on Demand system may make use of the security mechanisms presented in Section VII.
  • Cryptography consists of an encryption and reversing decryption process.
  • a basic encryption process operates on a string of digital bits, or clear text, by modifying the clear text using a series of mathematical operations with both the clear text and a second string of bits, called an encryption key, as inputs, resulting in a third string of bits, called ciphertext.
  • a reversing process exists using a fourth string of bits, called a decryption key, that, when input into a decryption process consisting of a second series of mathematical operations, along with the ciphertext, the resulting output is the original clear text string of digital bits.
  • symmetric encryption uses a cryptographic algorithm where the same key used by encryption process 5001 to encrypt data is also used by decryption process 5002 to decrypt data.
  • decryption process 5002 uses a cryptographic algorithm where the same key used by encryption process 5001 to encrypt data is also used by decryption process 5002 to decrypt data.
  • E SK [X] 5005 encryption of unencrypted content X 5003 , using symmetric key SK 5004
  • decryption of encrypted content E SK [X] 5005 using symmetric key SK 5004 is represented as D SK [E SK [X]] and results in unencrypted content X 5003 .
  • Asymmetric public key encryption is a cryptographic system using two keys, one key to encrypt content, and a different key to decrypt the same content. These key pairs and the associated cryptographic algorithms are constructed such that knowledge of one of the two keys does not reveal the other key. Additionally, in asymmetric public key encryption, content encrypted using one key cannot be decrypted using the same key. Therefore, one of the keys of the key pair, the public key, can be distributed widely, while the other key of the key pair is held closely and protected, the private key. This allows a first party, or a sender S to encrypt content using the sender's private key, pKS 5013 and encryption process E pKS 5011 .
  • the sender can then distribute the resulting encrypted content E pKS [X] 5014 to any second party, or recipient that possesses the sender's public key PKS 5015 .
  • the recipient can then decrypt the encrypted content E pKS [X] 5014 using the sender's public key, PKS 5015 and decryption process D PKS 5012 .
  • Encryption of unencrypted content X 5003 using the private key of sender S is represented as E pKS [X]
  • decryption of the encrypted content, using the public key of the sender is represented as D PKS [E pKS [X]].
  • FIG. 19 b depicts the case where content is encrypted in a private key.
  • the sender could use the recipient public key PKR 5023 and encryption process E PKR 5021 to encrypt the unencrypted content X 5003 . Then, only the recipient, using a recipient's private key pKR 5025 , is able to decrypt the encrypted content E PKR [X] 5024 using decryption process D pKR 5022 . Encryption of the unencrypted content X 5003 using the recipient's public key PKR 5025 , is represented as E PKR [X], whereas decryption of the encrypted content E pKS [X] 5014 , using the recipient's private key 5025 is represented as D pKR [E PKR [X]].
  • FIG. 19 c depicts the case where content is encrypted in a public key.
  • Publishers 282 or other content providers 110 can deliver their electronic book content to the operations center 250 via a secured mechanism.
  • an asymmetric public key encryption technique is used, as described in Contemporary Cryptography, edited by Gustavus Simmons, published by IEEE Press in 1992, and hereby incorporated by reference.
  • Public key algorithms used may include the Merkle-Hellman Knapsacks technique, as described in U.S. Pat. No. 4,218,582 to Hellman and Merkle, the RSA technique, as described in U.S. Pat. No. 4,405,829 to Rivest, Shamir, and Adleman, the Pohlig-Hellman technique, as described in U.S. Pat. No.
  • a publisher 282 serving as a sender 4998 , first encrypts electronic book content EBC 5100 destined for the operations center 250 , which serves as the recipient 4999 , using a symmetric key encryption process E SK 5102 and DES, PKZIP, BLOWFISH, or any other symmetric encryption algorithm, resulting in encrypted content E SK [EBC] 5109 .
  • the encryption process E SK 5102 uses a symmetric key SK 5103 either randomly generated by a key generator process 5104 or previously defined and retrieved from key storage memory 5105 . Then, the publisher 282 encrypts the symmetric key SK 5103 with private key encryption process E pKS 5106 using the publisher's private key pKS 5107 , resulting in encrypted key E pKS [SK] 5108 . Then, the publisher 282 packages encrypted key E pKS [SK] 5108 , encrypted content E SK [EBC] 5109 and non-encrypted information 5110 related to the electronic book or the exchange and delivers the package to the operations center 250 .
  • the operations center 250 decrypts the encrypted key E pKS [SK] 5108 and uses the recovered symmetric key SK 5103 to decrypt the encrypted content E SK [EBC] 5109 using decryption process D SK 5113 .
  • symmetric key encryption is used in conjunction with a certificate authority 4997 .
  • the certificate authority 4997 a trusted source, provides a symmetric key to each publisher 282 , serving as the sender 4998 , and the operations center 250 , serving as the recipient 4999 .
  • the certificate authority 4997 may be an existing commercial entity such as Entrust or Verisign or a private entity established for the sole purpose of electronic book secure distribution.
  • the publisher 282 contacts the certificate authority 4997 , sending a request 5120 for a transaction symmetric key SKT 5121 to be used during a transaction.
  • the certificate authority 4997 either randomly generates the transaction symmetric key SKT 5121 by using a key generator process 5124 or retrieves the previously defined transaction symmetric key SKT 5121 from key storage memory 5125 .
  • the transaction symmetric key SKT 5121 is encrypted by the certificate authority 4997 using symmetric key encryption process E SKS 5123 and the publisher's symmetric key SKS 5122 .
  • a resulting encrypted transaction symmetric key E SKS [SKT] 5126 is delivered by the certificate authority 4997 to the publisher 282 .
  • the publisher 282 decrypts the encrypted transaction symmetric key E SKS [SKT] 5126 using decryption process D SKS 5127 and the publisher's symmetric key SKS 5122 to recover the transaction symmetric key SKT 5121 .
  • the publisher 282 uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to encrypt the electronic book content EBC 5100 using encryption process E SKT 5128 , resulting in encrypted content E SKT [EBC] 5129 .
  • the publisher 282 then delivers the encrypted content E SKT [EBC] 5129 to the operations center 250 .
  • the transaction symmetric key SKT 5121 is also encrypted by the certificate authority 4997 using symmetric key encryption process E SKR 5131 and the operations center's symmetric key SKR 5130 .
  • the resulting encrypted transaction symmetric key E SKR [SKT] 5132 is delivered by the certificate authority 4997 to the operations center 250 .
  • the operations center 250 decrypts the encrypted transaction symmetric key E SKR [SKT] 5132 using decryption process D SKR 5133 and the operations center's symmetric key SKR 5130 to recover the transaction symmetric key SKT 5121 .
  • the operations center 250 uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to decrypt the encrypted content E SKT [EBC] 5129 using decryption process D SKT 5134 , resulting in unencrypted electronic book content 5100 .
  • the publisher 282 acting as the sender 4998 , generates a transaction symmetric key SKT 5140 .
  • the publisher 282 either randomly generates the transaction symmetric key SKT 5140 by using a key generator process 5141 , or retrieves a previously defined transaction symmetric key SKT 5140 from key storage memory 5142 .
  • the publisher 282 encrypts the electronic book content EBC 5100 using encryption process E SKT 5143 and the transaction symmetric key SKT 5140 , and delivers encrypted content E SKT [EBC] 5144 to the operations center 250 , acting as recipient 4999 .
  • the publisher 282 then encrypts the transaction symmetric key SKT 5140 using encryption process E SKS 5145 and a publisher's symmetric key SKS 5146 that it shares with a third party certificate authority 4997 and delivers an encrypted symmetric key E SKS [SKT] 5147 to the certificate authority 4997 .
  • the certificate authority 4997 decrypts the encrypted symmetric key E SKS [SKT] 5147 using decryption process D SKS 5148 and the publisher's symmetric key SKS 5146 .
  • the operations center 250 may contact the certificate authority 4997 using request 5149 to obtain the transaction symmetric key SKT 5140 .
  • the operations center 250 may be required to complete a financial transaction with the certificate authority 4997 , paying for the electronic book content first.
  • the certificate authority 4997 then encrypts the transaction symmetric key SKT 5140 using encryption process E SKR 5150 and an operations center's symmetric key SKR 5151 that the certificate authority 4997 shares with the operations center 250 and delivers encrypted symmetric key E SKR [SKT] 5152 to the operations center 250 .
  • the operations center 250 decrypts the encrypted symmetric key E SKR [SKT] 5152 using decryption process D SKR 5153 and the operations center's symmetric key SKR 5151 , and uses the recovered transaction symmetric key SKT 5140 to decrypt the encrypted content E SKT [EBC] 5144 using decryption process D SKT 5154 , resulting in electronic book content EBC 5100 .
  • the publisher 282 serving as the sender 4998 , encrypts a transaction stream TS 5165 between the publisher 282 and the operations center 250 , serving as the recipient 4999 .
  • the publisher 282 may use a sender private key pKS 5160 and encryption process E pKS 5161 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E pKS [TS] 5162 .
  • the operations center 250 uses decryption process D PKS 5164 and sender public key PKS 5163 to decrypt the encrypted transaction stream E pKS [TS] 5162 .
  • the publisher 282 serving as the sender 4998 , may use a public key of the operations center 250 , serving as the recipient 4999 , to encrypt the transaction stream TS 5165 .
  • the publisher 282 may use a recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E PKR [TS] 5173 .
  • the operations center 250 uses decryption process D pKR 5174 and recipient private key pKR 5172 to decrypt the encrypted transaction stream E PKR [TS] 5173 .
  • the publisher 282 serving as the sender 4998 , may use a transaction symmetric key SKT 5181 that both the publisher 282 and the operations center 250 have stored in advance of the transaction to encrypt the transaction stream TS 5165 .
  • the publisher 282 uses encryption process E SKT 5180 and transaction symmetric key SKT 5181 to generate the encrypted transaction stream E SKT [TS] 5182 .
  • the operations center 250 uses decryption process D SKT 5183 and transaction symmetric key SKT 5181 to decrypt the encrypted transaction stream E SKT [TS] 5182 , resulting in the transaction stream TS 5165 .
  • the publisher 282 serving as the sender 4998
  • the operations center 250 serving as the recipient 4999
  • initiate the transaction by negotiating a shared key to use for the transaction, using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, described in U.S. Pat. No. 4,200,700 to Hellman, Diffie, and Merkle, which is hereby incorporated by reference, to generate the shared transaction symmetric key.
  • Key negotiation information 5190 is exchanged between the publisher 282 and the operations center 250 .
  • a publisher's key generator algorithm 5191 generates the transaction symmetric key SKT 5193 and the operations center's key generator algorithm 5192 generates the transaction symmetric key SKT 5193 .
  • the publisher 282 encrypts the electronic book content EBC 5100 using encryption process E SKT 5194 and the shared transaction symmetric key SKT 5193 and delivers the resulting encrypted content E SKT [EBC] 5195 to the operations center 250 .
  • the operations center 250 uses the shared transaction symmetric key SKT 5193 and decryption process D SKT 5196 to decrypt encrypted content E SKT [EBC] 5195 .
  • Initial key negotiation information 5200 is exchanged between a seed key generation algorithm 5201 at the publisher 282 and a seed key generation algorithm 5202 at the operations center 250 .
  • the seed key generation algorithm 5201 at the publisher 282 and the seed key generation algorithm 5202 at the operations center 250 each generate seed key SK 5203 using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700.
  • the seed key SK 5203 is then used by key sequence generator 5204 at the publisher 282 to generate the first in a sequence of keys, transaction symmetric key SKTi 5206 .
  • the seed key SK 5203 is used by key sequence generator 5205 at the operations center 250 to generate an identical sequence of keys, beginning with shared transaction symmetric key SKTi 5206 .
  • the publisher 282 encrypts the electronic book content EBC 5100 using encryption process E SKTi 5207 and the shared transaction symmetric key SKTi 5206 and delivers a resulting encrypted content E SKTi [EBC] 5208 to the operations center 250 .
  • the operations center 250 uses the transaction symmetric key SKTi 5206 and decryption process D SKTi 5209 to decrypt the encrypted content E SKTi [EBC] 5206 .
  • the publisher key sequence generator 5204 and the operations center key sequence generator 5205 continue to generate matching transaction symmetric keys for use in encrypting each subsequent transaction between the publisher 282 and the operations center 250 .
  • the publisher 282 may deliver the electronic book content to multiple operations centers. In one embodiment, the publisher 282 delivers the electronic book content to each operations center 250 independently using one of the embodiments described herein. In an alternative embodiment, the publisher 282 may broadcast the electronic book content to multiple operations centers 250 simultaneously. In one embodiment used for broadcasting, depicted in FIG. 25 a , the publisher 282 , serving as the sender 4998 , encrypts the electronic book content EBC 5100 using encryption process E SKT 5211 and transaction symmetric key SKT 5210 , resulting in encrypted content E SKT [EBC] 5217 .
  • the transaction symmetric key SKT 5210 is then encrypted using public key encryption process E PKA 5212 and public key PKA 5213 for recipient A 4999 , the first operations center 250 to receive the electronic book content, resulting in encrypted key E PKA [SKT] 5218 .
  • the transaction symmetric key SKT 5210 is then encrypted using public key encryption process E PKB 5212 ′ and public key PKB 5213 ′ for recipient B 4999 ′, the second operations center 250 to receive the electronic book content, resulting in encrypted key E PKB [SKT] 5218 ′. This process is repeated for each of the operations centers 250 receiving the electronic book content.
  • the encrypted content E SKT [EBC] 5217 along with encrypted keys 5218 , 5218 ′, and 5218 ′′, are delivered to all the receiving operations centers 250 .
  • Each operations center 250 uses its own private key to decrypt the transaction symmetric key SKT 5210 .
  • recipient A 4999 uses decryption process D pKA 5214 and private key pKA 5216 to decrypt the encrypted key E PKA [SKT] 5218 , recovering the transaction symmetric key SKT 5210 .
  • Decryption process D SKT 5215 is then used to decrypt encrypted content E SKT [EBC] 5217 using transaction symmetric key SKT 5210 .
  • operations centers 250 may be assigned to predefined groups. Prior to the distribution of electronic book content EBC 5100 by publisher 282 , serving as the sender 4998 , for each defined group, a group symmetric key SKG 5220 is created and distributed by the publisher 282 to each operations center 250 , serving as recipients 4999 , 4999 ′ and 4999 ′′ within the group.
  • the publisher 282 When the publisher 282 sends the electronic book content EBC 5100 to a pre-defined group of operations centers, the publisher 282 encrypts the electronic book content EBC 5100 using encryption process E SKG 5221 and the group symmetric key SKG 5220 pre-defined for that group and delivers the encrypted content E SKG [EBC] to all the operations centers 250 in the group.
  • Recipients 4999 , 4999 ′, and 4999 ′′ use decryption process D SKG 5223 and the group symmetric key SKG 5220 for that group to which they are assigned to decrypt the encrypted content E SKG [EBC].
  • integrity checking algorithms may be employed.
  • the publisher 282 serving as sender 4998 , uses a one-way hashing algorithm 5231 , as presented in Applied Cryptography, by Bruce Schneier, published by John Wiley & Sons, Inc. in 1996, and hereby incorporated by reference, where a hashing value 5232 is calculated by the publisher 282 based on the electronic book content file 5230 as an input. This resulting hashing value 5232 , along with the actual encrypted electronic book file 5237 that has been encrypted by the publisher 282 via encryption process 5235 is delivered to the operations center 250 , serving as the recipient 4999 .
  • the operations center 250 decrypts the encrypted electronic book file 5237 using decryption process 5236 to recover electronic book content file 5230 ′.
  • the operations center 250 uses the hashing algorithm 5231 with the electronic book content file 5230 ′ as an input to generate a hashing value 5232 ′.
  • a comparator 5223 compares the hashing value 5232 ′ and the hashing value 5232 delivered with the encrypted electronic book file 5237 . If the hashing value 5232 ′ calculated by the operations center 250 coincides with the hashing value 5232 delivered by the publisher 282 , the integrity of the electronic book content file 5230 ′ is ensured.
  • the publisher 282 and operations center 250 may use an authentication method.
  • a Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668 to Kravitz, and hereby incorporated by reference.
  • the publisher 282 uses a password as an identifier. This password may be delivered along with the electronic book content to authenticate the publisher 282 as the sender.
  • the operations center 250 compares this password with the password the operations center 250 has for the publisher 282 . If the passwords match, the source of the electronic book content, i.e., the publisher 282 , is verified.
  • public key encryption is used as a digital signature to authenticate the publisher 282 .
  • the publisher 282 encrypts the electronic book content using the publisher's private key pKS.
  • the operations center 250 correctly decrypts the encrypted electronic book content with the publisher's public key PKS, the identity of the publisher 282 is authenticated since only the publisher 282 has access to the publisher's private key pKS used to encrypt the electronic book content.
  • the publisher 282 upon initiation of the transaction, notifies the operations center 250 , serving as the recipient 4999 , of the publisher's intention to deliver electronic book content to the operations center 250 .
  • This notification may be in the form of delivery notification message 5240 .
  • the operations center 250 then encrypts a randomly generated message RGM generated by the operations center 250 using encryption process E pKR and the operations center's private key pKR and sends the resulting E pKR [RGM] 5241 to the publisher 282 .
  • the publisher 282 decrypts E pKR [RGM] 5241 using decryption process D PKR and the operations center's public key PKR.
  • the publisher 282 then encrypts the electronic book content EBC, along with the randomly generated message RGM received from the operations center 250 using encryption process E pKS and the publisher's private key pKS and sends the resulting E pKs [EBC,RGM] 5242 to the operations center 250 .
  • the operations center 250 decrypts E pKs [EBC,RGM] 5242 using decryption process DPKS and the publisher's public key PKS. If the randomly generated message RGM received from the publisher 282 coincides with the randomly generated message RGM that the operations center 250 originally sent to the publisher 282 , the publisher's identity is verified.
  • the ISO one-way authentication protocol framework as defined in ISO standard X.509 is used to provide authentication of the publisher's identity.
  • the operations center 250 may initiate the transaction with the publisher 282 by requesting that an electronic book be delivered from the publisher 282 to the operations center 250 .
  • the publisher 282 and operations center 250 may use any of the above authentication method embodiments.
  • the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668 to Kravitz, and hereby incorporated by reference.
  • the operations center 250 uses a password as an identifier. This password is delivered along with the electronic book request to authenticate the operations center 250 .
  • the publisher 282 compares this password with the password the publisher 282 has for the operations center 250 . If the passwords match, the source of the electronic book request, i.e., the operations center 250 , is verified.
  • public key encryption is used as a digital signature to authenticate the operations center 250 .
  • the operations center 250 encrypts the electronic book request using the operations center private key pKR and send the encrypted request to the publisher 282 .
  • the publisher 282 correctly decrypts the encrypted request with the operations center's public key PKR, the identity of the operations center 250 is authenticated since only the operations center 250 has access to the operations center's private key pKR used to encrypt the electronic book request.
  • the operations center 250 upon initiation of the transaction, notifies the publisher 282 , serving as the sender 4998 , of the operations center's intention to request electronic book content from the publisher 282 .
  • This notification may be in the form of initial request message 5250 .
  • the publisher 282 then encrypts a randomly generated message RGM generated by the publisher 282 using encryption process E pKS and the publisher's private key pKS and sends the resulting E pKS [RGM] 5251 to the operations center 250 .
  • the operations center 250 decrypts E pKS [RGM] 5251 using decryption process D pKS and the publisher's public key PKS.
  • the operations center 250 then encrypts the electronic book request EBR, along with the randomly generated message RGM received from the publisher 282 using encryption process E pKR and the operations center's private key pKR, and sends the resulting E pKR [EBR,RGM] 5252 to the publisher 282 .
  • the publisher 282 decrypts E pKR [EBR,RGM] 5252 using decryption process D PKR and the operations center's public key PKR. If the randomly generated message RGM received from the operations center 250 coincides with the randomly generated message RGM that the publisher 282 originally sent to the operations center 250 , the operations center's identity is verified.
  • the ISO one-way authentication protocol framework as defined in ISO standard X.509 is used to provide authentication of the publisher's identity.
  • the operations center 250 requests an electronic book from the publisher 282 .
  • the publisher 282 first authenticates the requesting operations center 250 .
  • An embodiment of the authentication sequence is shown in FIG. 29 , where the publisher 282 is serving as the sender 4998 and the operations center 250 is serving as the recipient 4999 .
  • an authentication sequence may be initiated by the operations center 250 .
  • the authentication sequence begins with the operations center 250 sending a request 5290 to the publisher 282 for a given electronic book content file 5300 .
  • the publisher 282 then responds to the operations center 250 by generating and returning an authentication string 5291 to the operations center 250 .
  • the operations center 250 returns a message to the publisher 282 that contains: 1) a book identifier 5292 , identifying the requested electronic book; 2) the signed authentication string 5293 that has been signed using a one-way hash function and then encrypted using the private key of the operations center 250 ; and 3 ) operations center 250 certification information 5294 that the publisher 282 can authenticate with the certificate authority 4997 (not shown in FIG. 29 ).
  • FIG. 30 presents the remaining steps of a secure delivery process, where the publisher 282 serves as the sender 4998 and the operations center 250 serves as the recipient 4999 .
  • the publisher 282 authenticates the operations center 250 , shown as authentication step 5309 .
  • the publisher 282 then creates the requested electronic book file 5300 in file creation step 5310 , creates an unprotected metadata header 5301 containing non-secure information about the electronic book in step 5311 , and creates a protected metadata header 5302 containing secure information about the electronic book, shown in metadata header step 5312 .
  • Secure information about the electronic book may include an electronic book identifier, an identifier of the format being used for the protected metadata header 5302 , the content decryption key 5306 and decryption algorithm to be used to decrypt the electronic book content, the number of copies of the electronic book that are allowed to be derived from the original electronic book version, distribution features supported for the electronic book, fair use features associated with the electronic book, and integrity checking information to ensure the protected metadata header 5302 is unaltered since its creation.
  • Distribution features may include the ability to sell one or more copies of the electronic book at a cost, distribute one or more copies of the electronic book at no cost, or loan one or more copies of the electronic book.
  • Fair use features may include the ability to use the electronic book for a defined time period, the ability to loan or print a number of copies of the entire electronic book or portions of the electronic book, and the ability to define and track the number of copies already loaned or printed.
  • the publisher 282 may then compress the electronic book file 5300 , shown in compression step 5313 , and the publisher 282 may then perform an encryption process on the electronic book file 5300 , shown in encryption step 5314 .
  • the publisher 282 may perform the encryption process on the electronic book file 5300 and then compress the encrypted electronic book file. To encrypt the electronic book, the publisher 282 may use a pre-defined or randomly generated symmetric key or the publisher 282 may use its own private key. The content decryption key 5306 may then be placed in the protected metadata header 5302 , shown in decryption key loading step 5315 .
  • the publisher 282 may calculate and place integrity checking information in the protected metadata header 5302 , as shown in integrity checking steps 5316 and 5317 , respectively.
  • Integrity checking information may include the results of a one-way hashing algorithm 5304 , for example, using an algorithm as presented in Applied Cryptography by Bruce Schneier, performed on all or a portion of the protected metadata header 5302 .
  • the hashing function 5304 may be performed using the content decryption key 5306 or another predefined hashing key, resulting in hashing value 5305 .
  • the publisher 282 may then encrypt the entire protected metadata header 5302 or some portion of the protected metadata header 5302 using the public key of the operations center 250 or a pre-determined symmetric key known by both the publisher 282 and the operations center 250 , as shown in encryption step 5318 .
  • the packaged electronic book with metadata headers may then be delivered to the operations center 250 or the operations center 250 may retrieve the packaged electronic book from the publisher 282 , as shown in delivery step 5319 .
  • the operations center 250 may decrypt the protected metadata header 5302 , validate that the protected metadata header 5302 has not been altered by performing a one-way hash calculation on the protected metadata header 5302 and comparing the result to the hash value 5305 contained in the protected metadata header 5302 , and re-encrypt the protected metadata header 5302 for storage.
  • the operations center 250 may store the received packaged electronic book directly without decrypting the protected metadata header 5302 .
  • Processing and storage of the decryption and encryption keys used on the protected metadata header 5302 at the operations center 250 may be done entirely in software, entirely on a secure smart card or removable device, or some combination of the two.
  • a publisher 282 converts the electronic book content and associated metadata into a deliverable format.
  • the prepared electronic book file is then delivered to the operations center 250 , for example over the Internet using a secure socket layer (SSL) protected communication link.
  • SSL secure socket layer
  • This exchange depicted in FIG. 31 , may be initiated by the operations center 250 , serving as the recipient 4999 , sending a request message 5330 to the publisher 282 , serving as the sender 4998 , to deliver the requested electronic book content 5100 to the operations center 250 .
  • the request message 5330 may contain a login and password sequence that is used by the publisher 282 to initially validate the operations center 250 .
  • the publisher 282 may use the specific Internet Protocol (IP) address of the operations center 250 , included in the request message 5330 , for validation purposes.
  • IP Internet Protocol
  • the publisher 282 may send a certificate 5331 , which may include identifying information and the publisher's public key PKS, to the operations center 250 .
  • the operations center 250 verifies the certificate 5331 was issued by a trusted third party certificate authority 4997 .
  • the operations center 250 compares the information in the certificate that is received from the trusted third party certificate authority 4997 , including the publisher's identifying information and public key PKS.
  • the operations center 250 then notifies the publisher 282 which encryption algorithms that the operations center 250 can support using a supported algorithm message 5332 .
  • the publisher 282 selects an algorithm and notifies the operations center 250 of the selection using a selected algorithm message 5333 .
  • the operations center 250 generates a transaction symmetric key SKT 5334 , encrypts the transaction symmetric key SKT 5334 using the public key PKS of the publisher 282 and the algorithm provided in the selected algorithm message 5333 and sends the resulting E PKS [SKT] 5335 to the publisher 282 .
  • the publisher 282 decrypts E PKS [SKT] 5335 using decryption process D pKS and the publisher's private key pKS.
  • the transaction symmetric key SKT 5334 is then used to encrypt and decrypt the transaction between the publisher 282 and the operations center 250 .
  • an exchange may be initiated by the publisher 282 , serving as sender 4998 , by sending a request message 5340 to the operations center 250 , serving as recipient 4999 , that the publisher 282 wishes to deliver electronic book content to the operations center 250 .
  • the request message 5340 may contain a login and password sequence that may be used by the operations center 250 to initially validate the publisher 282 .
  • the operations center 250 may use the specific IP address of the publisher 282 , included in the request message 5340 , for validation purposes.
  • the operations center 250 sends a certificate 5341 to the publisher 282 that may include identifying information and the operations center's public key PKR.
  • the publisher 282 verifies the certificate was issued by a trusted third party certificate authority 4997 (not shown in FIG. 32 ).
  • the publisher 282 compares the information in the certificate 5341 that is received from the trusted third party certificate authority 4997 , including operations center's identifying information and public key PKR.
  • the publisher 282 then notifies the operations center 250 which encryption algorithms the publisher 282 can support using a supported algorithms message 5342 .
  • the operations center 250 selects an algorithm and notifies the publisher 282 of the selection via a selected algorithm message 5434 .
  • the publisher 282 generates a transaction symmetric key SKT 5344 , encrypts the transaction symmetric key SKT 5344 using the public key PKR of the operations center 250 and the algorithm provided in the selected algorithm message 5343 and sends the resulting E PKR [SKT] 5345 to the operations center 250 .
  • the operations center 250 decrypts E PKR [SKT] 5345 using decryption process D pKR and the operations center's private key pKR.
  • the transaction symmetric key SKT 4344 is then used to encrypt and decrypt the transaction between the publisher 282 and the operations center 250 .
  • the operations center 250 may store the electronic book file unencrypted or may re-encrypt the electronic book file for storage. Alternatively, the operations center 250 may also compute a hash value of the electronic book file to be used for validation the integrity of the file when recovered from storage for delivery to a home system 258 .
  • the operations center 250 may respond to the publisher 282 , serving as the sender in FIG. 33 , by first generating a reply message REP as shown in reply generation step 5260 .
  • the operations center 250 then encrypts reply message REP in the operations center's private key pKR using encryption process E pKR , resulting in E pKR [REP], as shown in encryption step 5261 .
  • the operations center 250 then encrypts E pKR [REP] in the publisher's public key PKS using encryption process E PKS resulting in E PKS [E pKR [REP]], as shown in encryption step 5262 .
  • the operations center sends E PKS [E pKR [REP]] to the publisher, as shown in sending step 5263 .
  • the publisher 282 then decrypts E PKS [E pKR [REP]], using decryption process D pKS and the publisher's private key pKS, resulting in E pKR [REP] as shown in decruption step 5264 .
  • the publisher 282 then decrypts the resulting E pKR [REP] using decryption process D PKR and the operations center's public key PKR, as shown in decryption step 5265 .
  • the valid reception of reply message REP by publisher 282 serves as verification of receipt of the electronic book content delivered to the operations center 250 by the publisher 282 .
  • the ISO two-way authentication protocol framework as defined in ISO standard X.509 is used to provide verification of receipt of electronic book content by the operations center 250 .
  • Exchanging encryption key information between the publisher 282 and the operations center 250 may be done using communication networks.
  • encryption key distribution may be accomplished by storing the encryption key information on a smart card, PCMCIA card device, CD ROM, or other portable memory storage device and delivering the device to the appropriate location for retrieval and use in future encryption and decryption activities.
  • the key When the key is delivered in physical form, the key may have associated with it a valid time period of use. Once this period has expired, a new key is required.
  • the device may support the capability to be updated remotely via a communication network.
  • Encryption, decryption, hashing, digital signature processing, formatting, compression, key management, and other security related activities presented herein that are performed by the publisher 282 or the operations center 250 may be done in hardware using a specialized processor.
  • security related activities may be done in software via a standard or secure processor.
  • a portion of security related activities may be done in software using a standard or secure processor while the remaining portion done in hardware via a specialized processor.
  • the operations center 250 may encrypt the electronic book content EBC with a symmetric key algorithm and store the encrypted electronic book content along with any non-encrypted content associated with the electronic book in storage memory device 5270 at the operations center 250 .
  • secure storage is done on a memory device at the driver-level, where all information stored on the memory storage device 5270 is encrypted by a memory device driver prior to being stored on memory storage device 5270 , as described in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference.
  • any content X 5272 to be stored on the memory storage device 5270 is encrypted using encryption process E SK 5274 in memory device driver 5271 and a symmetric key SK 5276 , resulting in encrypted content E SK [X] 5273 .
  • the encrypted content E SK [X] 5273 is then stored on memory storage device 5270 .
  • decryption process D SK 5275 decrypts encrypted content E SK [X] 5273 with symmetric key SK 5276 , resulting in the original content X 5272 .
  • secure storage is done at the file level, also as described in Applied Cryptography, by Bruce Schneier, where each file is encrypted individually with a different symmetric key prior to storage and stored in its encrypted form on memory storage device 5270 .
  • the symmetric key SK 5276 can then be stored separate from the stored encrypted content X 5272 .
  • encryption is done in hardware using a specialized encryption processor. In an alternate embodiment, encryption is done in software using a standard or secure processor.
  • the operations center 250 serving as the storage site 4996 , uses a one-way hashing algorithm 5280 , as presented in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference, where a hashing value 5281 is calculated by the operations center 250 based on the electronic book content EBC 5100 prior to encryption process 5282 .
  • the hashing value 5281 along with encrypted content E SK [EBC] 5284 is then stored on memory storage device 5283 .
  • the operations center 250 decrypts encrypted content E SK [EBC] 5284 using decryption process DSK 5285 and retrieves the stored hashing value 5281 .
  • the operations center 250 then calculates a hashing value 5281 ′, using the hashing algorithm 5280 and the retrieved electronic book content EBC 5100 .
  • Comparator 5286 compares the hashing value 5281 to the hashing value 5281 ′ to determine if they coincide. If hashing value 5281 and the hashing value 5281 ′ coincide, the integrity of the electronic book content EBC 5100 retrieved for memory storage device 5283 can be ensured.
  • the operations centers 250 can deliver their electronic book content to home systems 258 via a secured mechanism.
  • an asymmetric public key encryption technique is used, as described in Contemporary Cryptography, edited by Gustavus Simmons, published by IEEE Press in 1992, and hereby incorporated by reference.
  • Public key algorithms used may include the Merkle-Hellman Knapsacks technique, as described in U.S. Pat. No. 4,218,582, the RSA technique, as described in U.S. Pat. No. 4,405,829, the Pohlig-Hellman technique, as described in U.S. Pat. No. 4,424,414, the Schnorr Signatures technique, as described in U.S. Pat. No. 4,995,082, or any other public key technique.
  • the operations center 250 serving as the sender 4998 , first encrypts the electronic book content EBC 5100 destined for the home system 258 , serving as the recipient 4999 , and using a symmetric key encryption process E SK 5102 , using DES, PKZIP, BLOWFISH, or any other symmetric encryption algorithm, resulting in encrypted content E SK [EBC] 5109 .
  • the encryption process E SK 5102 uses a symmetric key SK 5103 either randomly generated by a key generator process 5104 or previously defined and retrieved from key storage memory 5105 .
  • the operations center 250 encrypts the symmetric key SK 5103 with private key encryption process E pKS 5106 using the operations center's private key pKS 5107 , resulting in encrypted key E pKS [SK] 5108 . Then, the operations center 250 packages encrypted key E pKS [SK] 5108 , encrypted content E SK [EBC] 5109 and non-encrypted information 5110 related to the electronic book or the exchange and delivers the package to the home system 258 .
  • the home system 258 decrypts the encrypted key E pKS [SK] 5108 and uses the recovered symmetric key SK 5103 to decrypt the encrypted content E SK [EBC] 5109 using decryption process D SK 5113 .
  • a certificate authority 4997 a trusted source, provides a symmetric key to the operations center 250 , serving as the sender 4998 , and to the home system 258 , serving as the recipient 4999 .
  • the certificate authority 4997 may be an existing commercial entity such as Entrust or Verisign or a private entity established for the sole purpose of electronic book secure distribution.
  • the operations center 250 contacts the certificate authority 4997 , sending the request 5120 for the transaction symmetric key SKT 5121 to be used during the transaction.
  • the certificate authority 4997 either randomly generates the transaction symmetric key SKT 5121 by using the key generator process 5124 or retrieves the previously defined transaction symmetric key SKT 5121 from key storage memory 5125 .
  • the transaction symmetric key SKT 5121 is encrypted by the certificate authority 4997 using the symmetric key encryption process E SKS 5123 using the operations center's symmetric key SKS 5122 .
  • the resulting encrypted symmetric key E SKS [SKT] 5126 is delivered by the certificate authority 4997 to the operations center 250 .
  • the operations center 250 decrypts the encrypted symmetric key E SKS [SKT] 5126 using decryption process D SKS 5127 and using the operations center's symmetric key SKS 5122 to recover the transaction symmetric key SKT 5121 .
  • the operations center 250 uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to encrypt the electronic book content EBC 5100 using encryption process E SKT 5128 , resulting in encrypted content E SKT [EBC] 5129 .
  • the operations center 250 delivers the encrypted content E SKT [EBC] 5129 to the home system 258 .
  • the transaction symmetric key SKT 5121 is also encrypted by the certificate authority 4997 using symmetric key encryption process E SKR 5131 and the home system's symmetric key SKR 5130 .
  • the resulting encrypted symmetric key E SKR [SKT] 5132 is delivered by the certificate authority 4997 to the home system 258 .
  • the home system 258 decrypts the encrypted symmetric key E SKR [SKT] 5132 using decryption process D SKR 5133 and using the home system's symmetric key SKR 5130 to recover the transaction symmetric key SKT 5121 .
  • the home system 258 uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to decrypt the encrypted content E SKT [EBC] 5129 using decryption process D SKT 5134 , resulting in the unencrypted electronic book content 5100 .
  • the operations center 250 acting as the sender 4998 , generates a transaction symmetric key SKT 5140 .
  • the operations center 250 either randomly generates the transaction symmetric key SKT 5140 by using the key generator process 5141 or retrieves the previously defined transaction symmetric key SKT 5140 from key storage memory 5142 .
  • the operations center 250 encrypts the electronic book content EBC 5100 using encryption process E SKT 5143 and the transaction symmetric key SKT 5140 , and delivers the encrypted content E SKT [EBC] 5144 to the home system 258 , acting as the recipient 4999 .
  • the operations center 250 encrypts the transaction symmetric key SKT 5140 using encryption process E SKS 5145 and the operations center's symmetric key SKS 5146 that the operations center 250 shares with a third party certificate authority 4997 and delivers the encrypted transaction symmetric key E SKS [SKT] 5147 to the third party certificate authority 4997 .
  • the certificate authority 4997 decrypts the encrypted transaction symmetric key E SKS [SKT] 5147 using decryption process D SKS 5148 and the operations center's symmetric key SKS 5146 .
  • the home system 258 may contact the certificate authority 4997 using request 5149 to obtain the transaction symmetric key SKT 5140 .
  • the home system 258 Prior to the certificate authority 4997 delivering the needed transaction symmetric key 5140 to the home system 258 , the home system 258 may be required to complete a financial transaction with the certificate authority 4997 , paying for the electronic book content first.
  • the certificate authority 4997 then encrypts the transaction symmetric key SKT 5140 using encryption process E SKR 5150 and the home system's symmetric key SKR 5151 that the certificate authority 4997 shares with the home system 258 , and delivers the encrypted symmetric key E SKR [SKT] 5152 to the home system 258 .
  • the home system 258 decrypts the encrypted symmetric key E SKR [SKT] 5152 using decryption process D SKR 5153 and the home system's symmetric key SKR 5151 , and uses the recovered transaction symmetric key SKT 5140 to decrypt the encrypted content E SKT [EBC] using decryption process D SKT 5154 , resulting in electronic book content EBC 5100 .
  • the operations center 250 serving as the sender 4998 , encrypts the entire transaction stream TS 5165 between the operations center 250 and the home system 258 , serving as the recipient 4999 .
  • the operations center 250 may use the sender private key pKS 5160 and encryption process E pKS 5161 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E pKS [TS] 5162 .
  • the home system 258 uses decryption process D PKS 5164 and sender public key PKS 5163 to decrypt the encrypted transaction stream E pKS [TS] 5162 .
  • the operations center 250 may use the public key of the home system 258 , serving as the recipient 4999 , to encrypt the transaction stream TS 5165 .
  • the operations center 250 may use the recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E PKR [TS] 5173 .
  • the home system 258 uses decryption process D pKR 5174 and recipient private key pKR 5172 to decrypt the encrypted transaction stream E PKR [TS] 5173 .
  • FIG. 23 b the operations center 250 may use the public key of the home system 258 , serving as the recipient 4999 , to encrypt the transaction stream TS 5165 .
  • the operations center 250 may use the recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E PKR [TS] 5173 .
  • the home system 258 uses decrypti
  • the operations center 250 may use a transaction symmetric key SKT 5181 that both the operations center 250 and the home system 258 have stored in advance of the transaction to encrypt the transaction stream TS 5165 .
  • the operations center 250 uses encryption process E SKT 5180 and transaction symmetric key SKT 5181 to generate encrypted transaction stream E SKT [TS] 5182 .
  • the home system 258 uses decryption process D SKT 5183 and transaction symmetric key SKT 5181 to decrypt encrypted transaction stream E SKT [TS] 5182 , resulting in transaction stream TS 5165 .
  • the operations center 250 serving as the sender 4998
  • the home system 258 serving as the recipient 4999
  • initiate the transaction by negotiating a shared key to use for the transaction, using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700, to generate the shared transaction symmetric key.
  • Key negotiation information 5190 is exchanged between key generation algorithms 5191 operated by both the operations center 250 and the home system 258 .
  • the operations center's key generator algorithm 5191 generates the transaction symmetric key SKT 5193
  • the home system's key generator algorithm 5192 generates the transaction symmetric key SKT 5193 .
  • the operations center 250 encrypts the electronic book content EBC 5100 using encryption process E SKT 5194 and the shared transaction symmetric key SKT 5193 and delivers the resulting encrypted content E SKT [EBC] 5195 to the home system 258 .
  • the home system 258 uses the shared transaction symmetric key SKT 5193 and decryption process DSKT 5196 to decrypt the encrypted content E SKT [EBC] 5195 .
  • the operations center 250 serves as the sender 4998 and home system 258 serves as the recipient 4999 .
  • Initial key negotiation information 5200 is exchanged between the seed key generation algorithm 5201 at the operations center 250 and the seed key generation algorithm 5202 at the home system 258 .
  • the seed key generation algorithm 5201 at the operations center 250 and the seed key generation algorithm 5202 at the home system 258 each generate seed key SK 5203 using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700.
  • Seed key 5203 is then used by key sequence generator 5204 at the operations center 250 site to generate the first in a sequence of keys, transaction symmetric key S KTi 5206 . Similarly, seed key 5203 is used by key sequence generator 5205 at the home system 258 to generate the identical sequence of keys, beginning with transaction symmetric key S KTi 5206 .
  • the operations center 250 encrypts the electronic book content EBC 5100 using encryption process E SKTi 5207 and the shared transaction symmetric key S KTi 5206 and delivers the resulting encrypted content E SKTi [EBC] 5208 to the home system 258 .
  • the home system 258 uses the transaction symmetric key S KTi 5206 and decryption process DSKTi 5209 to decrypt the encrypted content E SKTi [EBC] 5206 .
  • the operations center 250 key sequence generator 5204 and home system 258 key sequence generator 5205 continue to generate matching transaction symmetric keys for use in encrypting each subsequent transaction between the operations center 250 and the home system 258 .
  • the operations center 250 may deliver the electronic book content to multiple home systems. In one embodiment, the operations center 250 delivers the electronic book content to each home system 258 independently using one of the embodiments contained herein. In an alternative embodiment, the operations center 250 may broadcast the electronic book content to multiple home systems simultaneously.
  • the operations center 250 serving as the sender 4998 , encrypts the electronic book content EBC 5100 using encryption process E SKT 5211 and transaction symmetric key SKT 5210 , resulting in encrypted content E SKT [EBC] 5217 .
  • the transaction symmetric key SKT 5210 is then encrypted using public key encryption process E PKA 5212 and public key PKA 5213 for recipient A 4999 , the first home system 258 to receive the electronic book content, resulting in encrypted key E PKA [SKT] 5218 .
  • the transaction symmetric key SKT 5210 is then encrypted using public key encryption process E PKB 5212 ′ and public key PKB 5213 ′ for recipient B 4999 ′, the second home system 258 to receive the electronic book content, resulting in encrypted key E PKB [SKT] 5218 ′. This is repeated for each of the home systems 258 receiving the electronic book content.
  • the encrypted content E SKT [EBC] 5217 along with the encrypted keys 5218 , 5218 ′, and 5218 ′′, are delivered to all the receiving home systems 258 .
  • Each home system 258 uses its own private key to decrypt the transaction symmetric key SKT 5210 .
  • recipient A 4999 uses decryption process D pKA 5214 and private key pKA 5216 to decrypt the encrypted key E PKA [SKT] 5218 , recovering the transaction symmetric key SKT 5210 .
  • Decryption process D SKT 5215 is then used to decrypt encrypted content E SKT [EBC] 5217 using transaction symmetric key SKT 5210 .
  • home systems may be assigned to predefined groups. Prior to the distribution of electronic book content EBC 5100 by operations center 250 , serving as the sender 4998 , for each defined group, a group symmetric key SKG 5220 is created and distributed by the operations center 250 to each home system 258 , serving as recipients 4999 , 4999 ′ and 4999 ′′ within the group.
  • the operations center 250 When the operations center 250 sends electronic book content EBC 5100 to a pre-defined group of home systems 258 , the operations center 250 encrypts the electronic book content EBC 5100 using encryption process E SKG 5221 and the group symmetric key SKG 5220 pre-defined for that group and delivers the encrypted content E SKG [EBC] to all the home systems in the group.
  • Recipients 4999 , 4999 ′, and 4999 ′′ use decryption process D SKG 5223 and the group symmetric key SKG 5220 for that group to which they are assigned to decrypt the encrypted content E SKG [EBC].
  • the operations center 250 serving as the sender 4998 , uses a one-way hashing algorithm 5231 , as presented in Applied Cryptography, by Bruce Schneier, published by John Wiley & Sons, Inc. in 1996, and hereby incorporated by reference, where a hashing value 5232 is calculated by the operations center 250 based on the electronic book content file 5230 as an input. This resulting hashing value 5232 , along with the actual encrypted electronic book file 5237 that has been encrypted by the operations center 250 via encryption process 5235 is delivered to the home system 258 , serving as the recipient 4999 .
  • a hashing value 5232 is calculated by the operations center 250 based on the electronic book content file 5230 as an input.
  • This resulting hashing value 5232 along with the actual encrypted electronic book file 5237 that has been encrypted by the operations center 250 via encryption process 5235 is delivered to the home system 258 , serving as the recipient 4999 .
  • the home system 258 decrypts the encrypted electronic book file 5237 using decryption process 5236 to recover the electronic book content file 5230 ′.
  • the home system 258 uses the hashing algorithm 5231 with the electronic book content file 5230 ′ as input to generate a hashing value 5232 ′, which is compared to the hashing value 5232 delivered with the encrypted electronic book file 5237 . If the hashing value 5232 ′ calculated by the home system 258 coincides with the hashing value 5232 delivered by the operations center 250 as determined by comparator 5233 , the integrity of the electronic book content file 5230 ′ can be ensured.
  • the operations center 250 and home system 258 may use an authentication method.
  • the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference.
  • the operations center 250 uses a password as an identifier. This password may be delivered along with the electronic book content to authenticate the operations center 250 .
  • the home system 258 compares this password with the password the home system 258 has for the operations center 250 . If the passwords match, the source of the electronic book content, i.e., the operations center 250 , is verified.
  • public key encryption is used as a digital signature to authenticate the operations center 250 as the sender.
  • the operations center 250 encrypts the electronic book content using the operations center's private key pKS.
  • the home system 258 correctly decrypts the encrypted electronic book content with the operations center's public key PKS, the identity of the operations center 250 is authenticated since only the operations center 250 has access to the operations center's private key pKS used to encrypt the electronic book content.
  • the operations center 250 upon initiation of the transaction, notifies the home system 258 , serving as the recipient 4999 , of the operations center's intention to deliver electronic book content to the home system 258 .
  • This notification may be in the form of delivery notification message 5240 .
  • the home system 258 then encrypts a randomly generated message RGM generated by the home system 258 using encryption process EpKR and the home system's private key pKR and sends the resulting E pKR [RGM] 5241 to the operations center 250 .
  • the operations center 250 decrypts E pKR [RGM] 5241 using decryption process D PKR and the home system's public key PKR.
  • the operations center 250 then encrypts the electronic book content EBC, along with the randomly generated message RGM received from the home system 258 using encryption process E pKS and the operations center's private key pKS and sends the resulting E pKS [EBC,RGM] 5242 to the home system 258 .
  • the home system 258 decrypts E pKS [EBC,RGM] 5242 using decryption process D PKS and the operations center's public key PKS. If the randomly generated message RGM received from the operations center 250 coincides with the randomly generated message RGM that the home system 258 originally sent to the operations center 250 , the operations center's identity is verified.
  • the ISO one-way authentication protocol framework as defined in ISO standard X.509 is used to provide authentication of the operations center's identity.
  • the home system 258 may initiate the transaction with the operations center 250 by requesting that an electronic book be delivered from the operations center 250 to the home system 258 .
  • the operations center 250 and home system 258 may use any of the above authentication method embodiments.
  • the Digital Signature Algorithm is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference.
  • the home system 258 uses a password as an identifier. This password is delivered along with the electronic book request to authenticate the home system 258 .
  • the operations center 250 or the billing and collection system 278 operating on behalf of the operations center 250 , compares this password with the password it has for the home system 258 . If the password matches, the source of the electronic book request, i.e., the home system 258 , is verified.
  • public key encryption is used as a digital signature to authenticate the home system 258 .
  • the home system 258 encrypts the electronic book request using the home system's private key pKR and sends the encrypted request to the operations center 250 , or the billing and collection system 278 operating on behalf of the operations center 250 .
  • the operations center 250 , or the billing and collection system 278 operating on behalf of the operations center 250 correctly decrypts the encrypted request with the home system's public key PKR, the identity of the home system 258 is authenticated since only the home system 258 has access to the home system's private key pKR used to encrypt the electronic book request.
  • the home system 258 upon initiation of the transaction, notifies the operations center 250 , serving as the sender 4998 , of the home system's intention to request electronic book content from the operations center 250 .
  • This notification may be in the form of initial request message 5250 .
  • the operations center 250 then encrypts a randomly generated message RGM generated by the operations center 250 using encryption process E pKS and the operations center's private key pKS and sends the resulting E pKS [RGM] 5251 to the home system 258 .
  • the home system 258 decrypts E pKS [RGM] 5251 using decryption process DPKS and the operations center's public key PKS.
  • the home system 258 then encrypts the electronic book request EBR, along with the randomly generated message RGM received from the operations center 250 using encryption process EpKR and the home system's private key pKR, and sends the resulting E pKR [EBR,RGM] 5252 to the operations center 250 .
  • the operations center 250 decrypts E pKR [EBR,RGM] 5252 using decryption process DPKR and the home system's public key PKR. If the randomly generated message RGM received from the home system 258 coincides with the randomly generated message RGM that the operations center 250 originally sent to the home system 258 , the home system's identity is verified.
  • the ISO one-way authentication protocol framework as defined in ISO standard X.509 is used to provide authentication of the operations center's identity.
  • the home system 258 requests an electronic book from the operations center 250 .
  • the operations center 250 first authenticates the requesting home system 258 .
  • An embodiment of the authentication sequence is shown in FIG. 29 , where the operations center 250 is serving as the sender 4998 and the home system 258 is serving as the recipient 4999 .
  • an authentication sequence may be initiated by the home system 258 .
  • the authentication sequence begins with the home system 258 sending a request 5290 to the operations center 250 for a given electronic book content file 5300 .
  • the operations center 250 then responds to the home system 258 by generating and returning an authentication string 5291 to the home system 258 .
  • the home system 258 returns a message to the operations center 250 that contains: 1) a book identifier 5292 , identifying the requested electronic book; 2) the signed authentication string 5293 that has been signed using a one-way hash function and then encrypted using the private key of the home system 258 ; and 3) home system 258 certification information 5294 that the operations center 250 can authenticate with the certificate authority 4997 (not shown in FIG. 29 ).
  • the operations center 250 then retrieves the requested encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage.
  • the operations center 250 decrypts the protected metadata header 5302 and validates that the protected metadata header 5302 has not been altered by performing a one-way hash function on the protected metadata header 5302 and comparing the result to the hash value contained in the protected metadata header 5302 . If the protected metadata header 5302 was stored unencrypted, the operations center 250 retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage and validates the protected metadata header 5302 using a one-way hashing function.
  • the operations center 250 modifies the fields of the unprotected metadata header 5301 and protected metadata header 5302 based on the home system 258 request and the rules established by the publisher 282 and the operations center 250 for electronic book use.
  • the operations center 250 may then encrypt the entire protected metadata header 5302 or some portion of the protected metadata header 5302 using the public key of the home system 258 or a pre-determined symmetric key known by both the operations center 250 and the home system 258 .
  • the packaged electronic book with metadata headers may then be delivered to home system 258 or the home system 258 may retrieve the packaged electronic book from the operations center 250 .
  • the home system 258 may decrypt the protected metadata header 5302 , validate that the protected metadata header 5302 has not been altered by performing a one-way hash calculation on the protected metadata header 5302 and comparing the result to the hash value 5305 contained in the protected metadata header 5302 , and re-encrypt the protected metadata header 5302 for storage, or store the received packaged electronic book directly without decrypting the protected metadata header 5302 .
  • the viewer 266 decrypts the protected metadata header 5302 using the decryption key, recovers the content decryption key, and decrypts the electronic book content for display on the viewer. Processing and storage of the decryption and encryption keys used on the protected metadata header 5302 at the home system 258 may be done entirely via software, entirely on a secure smart card or removable device, or some combination of the two.
  • an operations center 250 converts the electronic book content and associated metadata into a deliverable format.
  • the prepared electronic book file is then delivered to the home system 258 , for example over the Internet using a secure socket layer (SSL) protected communication link.
  • SSL secure socket layer
  • This exchange depicted in FIG. 31 , may be initiated by the home system 258 , serving as the recipient 4999 , sending a request message 5330 to the operations center 250 , serving as the sender 4998 , to deliver the requested electronic book content 5100 to the home system 258 .
  • the request message 5330 may contain a login and password sequence that is used by the operations center 250 to initially validate the home system 258 .
  • the operations center 250 may use the specific Internet Protocol (IP) address of the home system 258 , included in the request message 5330 , for validation purposes.
  • IP Internet Protocol
  • the operations center 250 may send a certificate 5331 , which may include identifying information and the operations center's public key PKS, to the home system 258 .
  • the home system 258 verifies the certificate 5331 was issued by a trusted third party certificate authority 4997 .
  • the home system 258 compares the information in the certificate that is received from the trusted third party certificate authority 4997 , including the operations center's identifying information and public key PKS.
  • the home system 258 then notifies the operations center 250 which encryption algorithms that the home system 258 can support using a supported algorithm message 5332 .
  • the operations center 250 selects an algorithm and notifies the home system 258 of the selection using a selected algorithm message 5333 .
  • the home system 258 generates a transaction symmetric key SKT 5334 , encrypts the transaction symmetric key SKT 5334 using the public key PKS of the operations center 250 and the algorithm provided in the selected algorithm message 5333 and sends the resulting E PKS [SKT] 5335 to the operations center 250 .
  • the operations center 250 decrypts E PKS [SKT] 5335 using decryption process D pKS and the operations center's private key pKS.
  • the transaction symmetric key SKT 5334 is then used to encrypt and decrypt the transaction between the operations center 250 and the home system 258 .
  • an exchange may be initiated by the operations center 250 , serving as the sender 4998 , by sending a request message 5340 to the home system 258 , serving as the recipient 4999 , that the operations center 250 wishes to deliver electronic book content to the home system 258 .
  • the request message 5340 may contain a login and password sequence that may be used by the home system 258 to initially validate the operations center 250 .
  • the home system 258 may use the specific IP address of the operations center 250 , included in the request message 5340 , for validation purposes.
  • the home system 258 sends a certificate 5341 to the operations center 250 that may include identifying information and the home system's public key PKR.
  • the operations center 250 verifies the certificate was issued by a trusted third party certificate authority 4997 (not shown in FIG. 32 ).
  • the operations center 250 compares the information in the certificate 5341 which is received from the trusted third party certificate authority 4997 , including home system's identifying information and public key PKR.
  • the operations center 250 then notifies the home system 258 which encryption algorithms the operations center 250 can support using a supported algorithms message 5342 .
  • the home system 258 selects an algorithm and notifies the operations center 250 of the selection using a selected algorithm message 5434 .
  • the operations center 250 generates a transaction symmetric key SKT 5344 , encrypts the transaction symmetric key SKT 5344 using the public key PKR of the home system 258 and the algorithm provided in the selected algorithm message 5343 and sends the resulting E PKR [SKT] 5345 to the home system 258 .
  • the home system 258 decrypts E PKR [SKT] 5345 using decryption process D pKR and the home system's private key pKR.
  • the transaction symmetric key SKT 4344 is then used to encrypt and decrypt the transaction between the operations center 250 and the home system 258 .
  • the home system 258 may store the electronic book file unencrypted or may re-encrypt the electronic book file for storage. Alternatively, the home system 258 may also compute a hash value of the electronic book file to be used for validation the integrity of the file when recovered from storage for delivery to a home system 258 .
  • the operations center 250 is requested to initiate the delivery of the electronic book to the requesting home system 258 .
  • the home system 258 which may be a dedicated library 262 and viewer 266 , or alternatively a personal computer serving the functions of the library system 262 , along with a dedicated electronic book viewer 266 , is provided with the location to obtain the requested electronic book file by the operations center 250 , as shown in location step 5501 .
  • This location may be an Internet website or any other location accessible by the home system 258 .
  • the operations center 250 compresses the requested electronic book file, as shown in compression step 5502 .
  • the operations center 250 then generates a random transaction symmetric key SKT, as shown in key generation step 5503 and encrypts the compressed electronic book file using encryption process ESKT and the transaction symmetric key SKT, as shown in encryption step 5504 .
  • Non secure metadata is then appended to the compressed, encrypted electronic book file, as shown in appending step 5505 .
  • the transaction symmetric key SKT is then encrypted using the public key PKR of the requesting home system 258 and encryption process E PKR , as shown in encryption step 5506 .
  • the encrypted electronic book file is then digitally signed as shown in signature step 5507 , for example, using the algorithm presented in Applied Cryptography by Bruce Schneier, and the private key of the operations center 250 pKS and is placed in the location provided to the home system 258 for retrieval in distribution step 5508 .
  • the operations center 250 removes the electronic book file from the location after a fixed period if the electronic book file is not retrieved by the home system 258 , as shown in removal step 5509 .
  • the home system 258 retrieves the compressed, encrypted electronic book file from the specified location and stores the retrieved encrypted electronic book file for future viewing.
  • Non secure metadata information is stored and used to identify and manage the encrypted electronic book files residing on the home system 259 for use by the viewer 266 .
  • the operations center 250 generates a public and private key pair PKR and pKR for the home system 258 and provides the home system 258 the generated private key pKR during an initial home system 258 registration process. During this initial home system 258 registration process, the operations center 250 also provides the home system 258 with the public key of the operations center 250 , PKS.
  • encrypted electronic book content E SK [EBC] 5515 is stored in compressed and encrypted format at the operations center 250 for access by requesting home systems 258 .
  • the symmetric key SK 5510 used to encrypt the electronic book content EBC 5512 is stored in protected memory at the operations center 250 .
  • a home system 258 which may consist of a library 262 and viewer 266 or a standalone viewer 266 , contacts the operations center 250 using any one of a number of communication means as presented in the co-pending U.S. patent application Ser. No. 09/289,957 titled ALTERNATIVE ELECTRONIC BOOK DELIVERY SYSTEMS and incorporated herein by reference, including direct dial-in by the viewer 266 using a PSTN.
  • Access to the operations center 250 by the home system 258 may be password protected where the home system 258 presents a password to the operations center 250 upon accessing the operations center 250 .
  • the password provided by the home system 258 must match a password the operations center 250 is expecting from a specific home system 258 for before the operations center 250 allows for the purchase of any electronic book content.
  • a request message 5511 is sent by the home system 258 to the operations center 250 to purchase a specific electronic book EBC 5512 .
  • the home system 258 provides unique identifying information, including the home system 258 internal serial number.
  • the operations center 250 retrieves the stored symmetric key SK 5510 used to encrypt the requested electronic book from protected memory and encrypts symmetric key SK 5510 using encryption process E SKS 5512 and shared key SKS 5513 .
  • the shared key SKS 5513 is obtained from the home system 258 during an initial home system 258 registration process and is stored by the operations center 250 after this initial registration process.
  • the encrypted electronic book content E SK [EBC] 5515 and the encrypted key E SKS [SK] 5514 are then moved to a location assigned to the requesting home system 258 . Any encrypted electronic book and associated encrypted key residing in the home system's assigned location can then be selected and downloaded to the requesting home system 258 at any time.
  • Other information shared by the operations center 250 and the home system 258 including the home system 258 unique internal serial number, is used to authenticate the validity of a requesting home system 258 prior to initiating the download of encrypted electronic book content to the home system 258 .
  • the operations center 250 obtains information about the home system 258 , including the shared key SKS 5513 and internal serial number during an initial home system 258 registration process. Also, the operations center 250 provides the assigned location for the home system 258 to retrieve future electronic book content during this registration process.
  • the home system 258 uses shared key SKS 5513 and decryption process D SKS to decrypt the encrypted key E SKS [SK] 5514 to recover the symmetric key SK 5510 .
  • the encrypted electronic book content E SK [EBC] 5515 or a portion thereof is then decrypted using the recovered symmetric key SK 5510 and decryption process DSK and the resulting electronic book content EBC 5512 is then decompressed for display on the viewer 266 .
  • the home system 258 may respond to the operations center 250 , serving as the sender in FIG. 33 , by first generating a reply message REP as shown in step 5260 .
  • the home system 258 then encrypts reply message REP in the home system's private key pKR using encryption process E pKR , resulting in E pKR [REP], as shown in step 5261 .
  • the home system 258 then encrypts E pKR [REP] in the operations center's public key PKS using encryption process E PKS , resulting in E PKS [E pKR [REP]], as shown in step 5262 .
  • the home system 250 sends E PKS [E pKR [REP]] to the operations center 250 , as shown in step 5263 .
  • the operations center 250 then decrypts E PKS [E pKR [REP]], using decryption process D pKS and the operations center's private key pKS, resulting in E pKR [REP] as shown in step 5264 .
  • the operations center 250 then decrypts the resulting E pKR [REP] using decryption process D PKR and the home system's public key PKR, as shown in step 5265 .
  • the valid reception of reply message REP by operations center 250 serves as verification of receipt of the electronic book content delivered to the home system 258 by the operations center 250 .
  • the ISO two-way authentication protocol framework as defined in ISO standard X.509 is used to provide verification of receipt of electronic book content by the home system 258 .
  • Exchanging encryption key information between the operations center 250 and home system 258 may be done using communication networks.
  • encryption key distribution may be accomplished by storing the encryption key information on a smart card, PCMCIA card device, CD ROM, or other portable memory storage device and delivering the device to the appropriate location for retrieval and use in future encryption and decryption activities.
  • the key When the key is delivered in physical form, the key may have associated with it a valid time period of use. Once this period has expired, a new key is required.
  • the device may support the capability to be updated remotely via a communication network.
  • Encryption, decryption, hashing, digital signature processing, formatting, compression, key management, and other security related activities presented herein that are performed by the operations center 250 or the home system 258 may be done in hardware using a specialized processor.
  • security related activities may be done in software using a standard or secure processor.
  • a portion of security related activities may be done in software using a standard or secure processor while the remaining portion done in hardware via a specialized processor.
  • the home system 258 may encrypt the electronic book content EBC 5100 with a symmetric key algorithm and may store the encrypted electronic book content along with any non-encrypted content associated with the electronic book in storage memory device 5270 at the home system 258 .
  • secure storage is done on a memory device at the driver-level, where all information stored on the memory storage device 5270 is encrypted by a memory device driver prior to being stored on memory storage device 5270 , as described in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference.
  • any content X 5272 to be stored on the memory storage device 5270 is encrypted using encryption process ESK 5274 in the memory device driver 5271 and a symmetric key SK 5276 , resulting in encrypted content E SK [X] 5273 .
  • the encrypted content E SK [X] 5273 is then stored on the memory storage device 5270 .
  • decryption process D SK 5275 decrypts encrypted content E SK [X] 5273 with symmetric key SK 5276 , resulting in the original content X 5272 .
  • secure storage is done at the file level, also as described in Applied Cryptography, by Bruce Schneier, where each file is encrypted individually with a different symmetric key prior to storage and stored in its encrypted form on memory storage device 5270 .
  • the symmetric key SK 5276 can then be stored separate from the stored encrypted content X 5272 .
  • encryption is done in hardware using a specialized encryption processor. In an alternate embodiment, encryption is done in software using a standard or secure processor.
  • the home system 258 serving as the storage site 4996 , uses a one-way hashing algorithm 5280 , as presented in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference, where a hashing value 5281 is calculated by the home system 258 based on the electronic book content EBC 5100 prior to encryption process 5282 .
  • the hashing value 5281 along with encrypted content E SK [EBC] 5284 is then stored on memory storage device 5283 .
  • the home system 258 decrypts encrypted content E SK [EBC] 5284 using decryption process D SK 5285 and retrieves the stored hashing value 5281 .
  • the home system 258 then calculates a hashing value 5281 ′, using the hashing algorithm 5280 and the retrieved electronic book content EBC 5100 .
  • Comparator 5286 compares the hashing value 5281 to the hashing value 5281 ′ to determine if they coincide. If the hashing value 5281 and the hashing value 5281 ′ coincide, the integrity of the electronic book content EBC 5100 retrieved for memory storage device 5283 can be ensured.
  • the security methods described above may also be applied to the communications between an operations center 250 or cable headend and an upgraded cable set-top converter 601 that is configured to function as a library 262 .
  • the home system 258 combines the library 262 and viewer 266 functions into a single device.
  • the home system 258 includes two separate devices, a library 262 and a viewer 266 .
  • all security processing required with the viewer 266 may be done entirely in the viewer 266 .
  • all security processing required with the viewer 266 may be done entirely in the library 262 .
  • security processing between the home system 258 and the viewer 266 is done by the library 262
  • separate security processing may be implemented between the library 262 and the viewer 266 .
  • the library 262 can deliver electronic book content to the viewer 266 via a secured mechanism.
  • an asymmetric public key encryption technique is used, as described in Contemporary Cryptography, edited by Gustavus Simmons, published by IEEE Press in 1992, and hereby incorporated by reference.
  • Public key algorithms used may include the Merkle-Hellman Knapsacks technique, as described in U.S. Pat. No. 4,218,582, the RSA technique, as described in U.S. Pat. No. 4,405,829, the Pohlig-Hellman technique, as described in U.S. Pat. No. 4,424,414, the Schnorr Signatures technique, as described in U.S. Pat. No. 4,995,082, or any other public key technique.
  • the library 262 serving as the sender 4998 , first encrypts the electronic book content EBC 5100 destined for the viewer 266 , serving as the recipient 4999 , using a symmetric key encryption process E SK 5102 , and using DES, PKZIP, BLOWFISH, or any other symmetric encryption algorithm, resulting in encrypted content E SK [EBC] 5109 .
  • the encryption process E SK 5102 uses a symmetric key SK 5103 either randomly generated by a key generator process 5104 or previously defined and retrieved from key storage memory 5105 .
  • the library 262 encrypts the symmetric key SK 5103 with private key encryption process E pKS 5106 using the library's private key pKS 5107 , resulting in encrypted key E pKS [SK] 5108 . Then, the library 262 packages encrypted key E pKS [SK] 5108 , encrypted content E SK [EBC] 5109 and non-encrypted information 5110 related to the electronic book or the exchange and delivers the package to the viewer 266 .
  • the viewer 266 decrypts the encrypted key E pKS [SK] 5108 and uses the recovered symmetric key SK 5103 to decrypt the encrypted content E SK [EBC] 5109 using decryption process D SK 5113 .
  • the library 262 serving as the sender 4998 , encrypts the entire transaction stream TS 5165 between the library 262 and the viewer 266 , serving as the recipient 499 .
  • the library 262 may use the sender private key pKS 5160 and encryption process E pKS 5161 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E pKS [TS] 5162 .
  • the viewer 266 uses decryption process D PKS 5164 and sender public key PKS 5163 to decrypt the encrypted transaction stream E pKS [TS] 5162 .
  • the library 262 serving as the sender 4998 , may use the public key of the viewer 266 , serving as the recipient 4999 , to encrypt the transaction stream TS 5165 .
  • the library 262 may use the recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E PKR [TS] 5173 .
  • the viewer 266 uses decryption process D pKR 5174 and recipient private key pKR 5172 to decrypt the encrypted transaction stream E PKR [TS] 5173 .
  • FIG. 23 b the library 262 , serving as the sender 4998 , may use the public key of the viewer 266 , serving as the recipient 4999 , to encrypt the transaction stream TS 5165 .
  • the library 262 may use the recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E PKR [
  • the library 262 may use a transaction symmetric key SKT 5181 that both the library 262 and the viewer 266 have stored in advance of the transaction to encrypt the transaction stream TS 5165 .
  • the library 262 uses encryption process E SKT 5180 and transaction symmetric key SKT 5181 to generate encrypted transaction stream E SKT [TS] 5182 .
  • the viewer 266 uses decryption process D SKT 5183 and transaction symmetric key SKT 5181 to decrypt encrypted transaction stream E SKT [TS] 5182 , resulting in transaction stream TS 5165 .
  • the library 262 serving as the sender 4998
  • the viewer 266 serving as the recipient 4999
  • initiate the transaction by negotiating a shared key to use for the transaction, using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700, to generate the shared transaction symmetric key.
  • Key negotiation information 5190 is exchanged between key generation algorithms 5191 operated by both the library 262 and the viewer 266 .
  • the library's key generator algorithm 5191 generates the transaction symmetric key SKT 5193
  • the viewer's key generator algorithm 5192 generates the transaction symmetric key SKT 5193 .
  • the library 262 encrypts the electronic book content EBC 5100 using encryption process E SKT 5194 and the shared transaction symmetric key SKT 5193 and delivers the resulting encrypted content E SKT [EBC] 5195 to the viewer 266 .
  • the viewer 266 uses the shared transaction symmetric key SKT 5193 and decryption process D SKT 5196 to decrypt the encrypted content E SKT [EBC] 5195 .
  • the library 262 serves as the sender 4998 and viewer 266 serves as the recipient 4999 .
  • Initial key negotiation information 5200 is exchanged between the seed key generation algorithm 5201 at the library 262 and the seed key generation algorithm 5202 at the viewer 266 .
  • seed key generation algorithm 5201 at the library 262 and the seed key generation algorithm 5202 at the viewer 266 each generate seed key SK 5203 using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700. Seed key 5203 is then used by key sequence generator 5204 at the library 262 site to generate the first in a sequence of keys, transaction symmetric key SKTi 5206 .
  • seed key 5203 is used by key sequence generator 5205 at the viewer 266 to generate the identical sequence of keys, beginning with transaction symmetric key S KTi 5206 .
  • the library 262 encrypts the electronic book content EBC 5100 using encryption process E SKTi 5207 and the shared transaction symmetric key S KTi 5206 and delivers the resulting encrypted content E SKTi [EBC] 5208 to the viewer 266 .
  • the viewer 266 uses the transaction symmetric key S KTi 5206 and decryption process D SKTi 5209 to decrypt the encrypted content E SKTi [EBC] 5206 .
  • the library 262 key sequence generator 5204 and viewer 266 key sequence generator 5205 continue to generate matching transaction symmetric keys for use in encrypting each subsequent transaction between the library 262 and the viewer 266 .
  • the library 262 serving as the sender 4998 , uses a one-way hashing algorithm 5231 , as presented in Applied Cryptography, by Bruce Schneier, published by John Wiley & Sons, Inc. in 1996, and hereby incorporated by reference, where a hashing value 5232 is calculated by the library 262 based on the electronic book content file 5230 as an input. This resulting hashing value 5232 , along with the actual encrypted electronic book file 5237 that has been encrypted by the library 262 via encryption process 5235 is delivered to the viewer 266 , serving as the recipient 4999 .
  • the viewer 266 decrypts the encrypted electronic book file 5237 using decryption process 5236 to recover the electronic book content file 5230 ′.
  • the viewer 266 uses the hashing algorithm 5231 with the electronic book content file 5230 ′ as input to generate a hashing value 5232 ′, which is compared to the hashing value 5232 delivered with the encrypted electronic book file 5237 . If the hashing value 5232 ′ calculated by the viewer 266 coincides with the hashing value 5232 delivered by the library 262 as determined by comparator 5233 , the integrity of the electronic book content file 5230 ′ can be ensured.
  • the library 262 and viewer 266 may use an authentication method.
  • the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference.
  • the library 262 uses a password as an identifier. This password may be delivered along with the electronic book content to authenticate the library 262 as the sender. The viewer 266 compares this, password with the password the viewer 266 has for the library 262 . If the passwords match, the source of the electronic book content, i.e., the library 262 , is verified.
  • public key encryption is used as a digital signature to authenticate the library 262 .
  • the library 262 encrypts the electronic book content using the library's private key pKS.
  • the viewer 266 correctly decrypts the encrypted electronic book content with the library's public key PKS, the identity of the library 262 is authenticated since only the library 262 has access to the library's private key pKS used to encrypt the electronic book content.
  • the ISO one-way authentication protocol framework as defined in ISO standard X.509 is used to provide authentication of the library's identity.
  • a viewer 266 may initiate the transaction with the library 262 by requesting that an electronic book be delivered from the library 262 to the viewer 266 .
  • the library 262 and viewer 266 may use the above authentication method embodiments.
  • the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference.
  • the viewer 266 uses a password as an identifier. This password may be delivered along with the electronic book request to authenticate the viewer 266 .
  • the library 262 compares this password with the password the library unit 266 has for the viewer 266 . If the passwords match, the source of the electronic book request, i.e., the viewer 266 , is verified.
  • public key encryption is used as a digital signature to authenticate the viewer 266 .
  • the viewer 266 encrypts the electronic book request using the viewer 266 private key pKR and send the encrypted request to the publisher 282 .
  • the publisher 282 correctly decrypts the encrypted request with the viewer's public key PKR, the identity of the viewer 266 is authenticated since only the viewer 266 has access to the viewer's private key pKR used to encrypt the electronic book request.
  • the viewer 266 upon initiation of the transaction, notifies the library 262 , serving as the sender 4998 , of the viewer's intention to request electronic book content from the library 262 .
  • This notification is in the form of initial request message 5250 .
  • the library 262 then encrypts a randomly generated message RGM generated by the library 262 using encryption process E pKS and the library's private key pKS and sends the resulting E pKS [RGM] 5251 to the viewer 266 .
  • the viewer 266 decrypts E pKS [RGM] 5251 using decryption process D PKS and the library's public key PKS.
  • the viewer 266 then encrypts the electronic book request EBR, along with the randomly generated message RGM received from the library 262 using encryption process E pKR and the viewer's private key pKR and sends the resulting E pKR [EBR,RGM] 5252 to the library 262 .
  • the library 262 decrypts E pKR [EBR,RGM] 5252 using decryption process D PKR and the viewer's public key PKR. If the randomly generated message RGM received from the viewer 266 coincides with the randomly generated message RGM that the library 262 originally sent to the viewer 266 , the viewer's identity is verified.
  • the ISO one-way authentication protocol framework as defined in ISO standard X.509 is used to provide authentication of the library's identity.
  • the compressed and encrypted electronic book content file E SKT [EBC] is stored on the library system 262 .
  • the entire compressed and encrypted electronic book file E SKT [EBC] is downloaded to the viewer 266 from the library system 262 .
  • the viewer 266 verifies the source of the electronic book by using the public key of the viewer 266 PKS to decrypt the digital signature provided.
  • the viewer 266 then decrypts the symmetric key using decryption process D pKR and the viewer's private key pKR.
  • the viewer 266 uses decryption process D SKT and the transaction symmetric key SKT to decrypt all or a portion of the electronic book file prior to display.
  • the viewer 266 then decompresses the electronic book file and displays a page of the electronic book on the viewer 266 display.
  • Exchanging encryption key information between the library 262 and viewer 266 may be done using communication networks.
  • encryption key distribution may be accomplished by storing the encryption key information on a smart card, PCMCIA card device, CD ROM, or other portable memory storage device and delivering the device to the appropriate location for retrieval and use in future encryption and decryption activities.
  • the key When the key is delivered in physical form, the key may have associated with it a valid time period of use. Once this period has expired, a new key may be required.
  • the device may support the capability to be updated remotely via a communication network.
  • Encryption, decryption, hashing, digital signature processing, formatting, compression, key management, and other security related activities presented herein that are performed by the library 262 or the viewer 266 may be done in hardware using a specialized processor.
  • security related activities may be done in software using a standard or secure processor.
  • a portion of security related activities may be done in software using a standard or secure processor while the remaining portion done in hardware using a specialized processor.
  • the viewer 266 may encrypt the electronic book content EBC 5100 with a symmetric key algorithm and store the encrypted electronic book content along with any non-encrypted content associated with the electronic book in storage memory device 5270 at the viewer 266 .
  • secure storage is done on a memory device at the driver-level, where all information stored on the memory storage device 5270 is encrypted by memory device driver prior to being stored on memory storage device 5270 , as described in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference.
  • any content X 5272 to be stored on the memory storage device 5270 is encrypted using encryption process E SK 5274 in memory device driver 5271 and symmetric key SK 5276 , resulting in encrypted content E SK [X] 5273 .
  • the resulting encrypted content E SK [X] 5273 is then stored on memory storage device 5270 .
  • decryption process DSK 5275 decrypts encrypted content E SK [X] 5273 with symmetric key SK 5276 , resulting in the original content X 5272 .
  • secure storage is done at the file level, also as described in Applied Cryptography, by Bruce Schneier, where each file is encrypted individually with a different symmetric key prior to storage and stored in its encrypted form on memory storage device 5270 .
  • the symmetric key SK 5276 can then be stored separate from the stored encrypted content X 5272 .
  • encryption is done in hardware using a specialized encryption processor. In an alternate embodiment, encryption is done in software using a standard or secure processor.
  • the viewer 266 serving as the storage site 4996 , uses a one-way hashing algorithm 5280 , as presented in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference, where a hashing value 5281 is calculated by the viewer 266 based on the electronic book content EBC 5100 prior to encryption process 5282 .
  • the hashing value 5281 along with the encrypted content E SK [EBC] 5284 is then stored on the memory storage device 5283 .
  • the viewer 266 decrypts encrypted content E SK [EBC] 5284 using decryption process D SK 5285 and retrieves the stored hashing value 5281 .
  • the viewer 266 then calculates hashing value 5281 ′, using hashing algorithm 5280 and the retrieved electronic book content EBC 5100 .
  • Comparator 5286 compares the hashing value 5281 to the hashing value 5281 ′ to determine if they coincide. If the hashing value 5281 and the hashing value 5281 ′ coincide, the integrity of the electronic book content EBC 5100 retrieved for memory storage device 5283 can be ensured and the viewer 266 displays the retrieved content.
  • the security methods described above may also be applied to the communications between an upgraded cable set-top converter 601 that is configured to function as a library unit 262 and a viewer 266 .
  • Kiosks public libraries, schools, and bookstore systems can deliver electronic book content to a viewer 266 or public viewer 912 using a secured mechanism.
  • an asymmetric public key encryption technique is used, as described in Contemporary Cryptography, edited by Gustavus Simmons, published by IEEE Press in 1992, and hereby incorporated by reference.
  • Public key algorithms used may include the Merkle-Hellman Knapsacks technique, as described in U.S. Pat. No. 4,218,582, the RSA technique, as described in U.S. Pat. No. 4,405,829, the Pohlig-Hellman technique, as described in U.S. Pat. No. 4,424,414, the Schnorr Signatures technique, as described in U.S. Pat. No. 4,995,082, or any other public key technique.
  • a kiosk serving as the sender 4998 , first encrypts the electronic book content EBC 5100 destined for the viewer 266 or the public viewer 912 (see FIG. 15 ), serving as the recipient 4999 , using a symmetric key encryption process E SK 5102 , and using DES, PKZIP, BLOWFISH, or any other symmetric encryption algorithm, resulting in encrypted content E SK [EBC] 5109 .
  • the encryption process E SK 5102 uses a symmetric key SK 5103 either randomly generated by a key generator process 5104 or previously defined and retrieved from key storage memory 5105 .
  • the kiosk encrypts the symmetric key SK 5103 with private key encryption process E pKS 5106 using the kiosk's private key pKS 5107 , resulting in encrypted key E pKS [SK] 5108 .
  • the kiosk packages encrypted key E pKS [SK] 5108 , encrypted content E SK [EBC] 5109 and non-encrypted information 5110 related to the electronic book or the exchange and delivers the package to the viewer 266 or public viewer 912 .
  • decryption process D PKS 5111 and the kiosk's public key PKS 5112 the viewer 266 or public viewer 912 decrypts the encrypted key E pKS [SK] 5108 and uses the recovered symmetric key SK 5103 to decrypt the encrypted content E SK [EBC] 5109 using decryption process DSK 5113 .
  • a certificate authority 4997 a trusted source, provides a symmetric key to each kiosk, serving as the sender 4998 , and the viewer 266 or public viewer 912 , serving as the recipient 4999 .
  • the certificate authority 4997 may be an existing commercial entity such as Entrust or Verisign or a private entity established for the sole purpose of electronic book secure distribution.
  • the kiosk contacts the certificate authority 4997 , sending a request 5120 for a transaction symmetric key SKT 5121 to be used during the transaction.
  • the certificate authority 4997 either randomly generates the transaction symmetric key SKT 5121 by using a key generator process 5124 or retrieves the previously defined transaction symmetric key SKT 5121 from key storage memory 5125 .
  • the transaction symmetric key SKT 5121 is encrypted by the certificate authority 4997 using symmetric key encryption process E SKS 5123 and the kiosk's symmetric key SKS 5122 .
  • the resulting encrypted symmetric key E SKS [SKT] 5126 is delivered by the certificate authority 4997 to the kiosk.
  • the kiosk decrypts the encrypted symmetric key E SKS [SKT] 5126 using decryption process D SKS 5127 and using the kiosk's symmetric key SKS 5122 to recover the transaction symmetric key SKT 5121 .
  • the kiosk uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to encrypt the electronic book content EBC 5100 using encryption process E SKT 5128 , resulting in encrypted content E SKT [EBC] 5129 .
  • the kiosk delivers the encrypted content E SKT [EBC] 5129 to the viewer 266 or public viewer 912 .
  • the transaction symmetric key SKT 5121 is also encrypted by the certificate authority 4997 using symmetric key encryption process E SKR 5131 using the viewer's symmetric key SKR 5130 .
  • the resulting encrypted symmetric key E SKR [SKT] 5132 is delivered by the certificate authority 4997 to the viewer 266 or public viewer 912 .
  • the viewer 266 or public viewer 912 decrypts the encrypted symmetric key E SKR [SKT] 5132 using decryption process DSKR 5133 and the viewer's symmetric key SKR 5130 to recover the transaction symmetric key SKT 5121 .
  • the viewer 266 or public viewer 912 uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to decrypt the encrypted content E SKT [EBC] 5129 using decryption process D SKT 5134 , resulting in the unencrypted electronic book content 5100 .
  • the kiosk acting as the sender 4998 , generates a transaction symmetric key SKT 5140 .
  • the kiosk either randomly generates the transaction symmetric key SKT 5140 by using the key generator process 5141 or retrieves the previously defined transaction symmetric key SKT 5140 from key storage memory 5142 .
  • the kiosk encrypts the electronic book content EBC 5100 using encryption process E SKT 5143 and the transaction symmetric key SKT 5140 , and delivers the encrypted content E SKT [EBC] 5144 to the viewer 266 or public viewer 912 , acting as the recipient 4999 .
  • the kiosk encrypts the transaction symmetric key SKT 5140 using encryption process E SKS 5145 and the kiosk's symmetric key SKS 5146 that the kiosk shares with a third party certificate authority 4997 and delivers the encrypted symmetric key E SKS [SKT] 5147 to the third party certificate authority 4997 .
  • the certificate authority 4997 decrypts the encrypted symmetric key E SKS [SKT] 5147 using decryption process D SKS 5148 and the kiosk's symmetric key SKS 5146 .
  • the viewer 266 or public viewer 912 may contact the certificate authority 4997 using the request 5149 to obtain the transaction symmetric key 5140 .
  • the viewer 266 or public viewer 912 may be required to complete a financial transaction with the certificate authority 4997 , paying for the electronic book content first.
  • the certificate authority 4997 then encrypts the transaction symmetric key SKT 5140 using encryption process E SKR 5150 and the viewer's symmetric key SKR 5151 that the certificate authority 4997 shares with the viewer 266 or public viewer 912 , and delivers the encrypted symmetric key E SKR [SKT] 5152 to the viewer 266 or public viewer 912 .
  • the viewer 266 or public viewer 912 decrypts the encrypted symmetric key E SKR [SKT] 5152 using decryption process D SKR 5153 and the viewer's symmetric key SKR 5151 , and uses the recovered transaction symmetric key SKT 5140 to decrypt the encrypted content E SKT [EBC] using decryption process D SKT 5154 , resulting in electronic book content EBC 5100 .
  • the kiosk serving as the sender 4998 , encrypts the entire transaction stream TS 5165 between the kiosk and the viewer 266 or public viewer 912 , serving as the recipient 499 .
  • the kiosk may use the sender private key pKS 5160 and encryption process E pKS 5161 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E pKS [TS] 5162 .
  • the viewer 266 or public viewer 912 uses decryption process D PKS 5164 and sender public key PKS 5163 to decrypt the encrypted transaction stream E pKS [TS] 5162 .
  • the kiosk serving as the sender 4998 , may use the public key of the viewer 266 or public viewer 912 , serving as the recipient 4999 , to encrypt the transaction stream TS 5165 .
  • the kiosk may use the recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165 , resulting in encrypted transaction stream E PKR [TS] 5173 .
  • the viewer 266 or public viewer 912 uses decryption process D pKR 5174 and recipient private key pKR 5172 to decrypt the encrypted transaction stream E PKR [TS] 5173 .
  • the kiosk serving as the sender 4998 , may use a transaction symmetric key SKT 5181 that both the kiosk and the viewer 266 or public viewer 912 have stored in advance of the transaction to encrypt the transaction stream TS 5165 .
  • the kiosk uses encryption process E SKT 5180 and transaction symmetric key SKT 5181 to generate encrypted transaction stream E SKT [TS] 5182 .
  • the viewer 266 or public viewer 912 uses decryption process D SKT 5183 and transaction symmetric key SKT 5181 to decrypt encrypted transaction stream E SKT [TS] 5182 , resulting in transaction stream TS 5165 .
  • the kiosk serving as the sender 4998 , and viewer 266 or public viewer 912 , serving as the recipient 4999 , initiate the transaction by negotiating a shared key to use for the transaction, using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700, to generate the shared transaction symmetric key.
  • Key negotiation information 5190 is exchanged between key generation algorithms 5191 operated by both the kiosk and the viewer 266 or public viewer 912 .
  • the kiosk's key generator algorithm 5191 generates the transaction symmetric key SKT 5192 and the viewer's key generator algorithm 5192 generates the transaction symmetric key SKT 5193 .
  • the kiosk encrypts the electronic book content EBC 5100 using encryption process E SKT 5194 and the shared transaction symmetric key SKT 5193 and delivers the resulting encrypted content E SKT [EBC] 5195 to the viewer 266 or public viewer 912 .
  • the viewer 266 or public viewer 912 uses the shared transaction symmetric key SKT 5193 and decryption process D SKT 5196 to decrypt the encrypted content E SKT [EBC] 5195 .
  • the kiosk serves as the sender 4998 and viewer 266 or public viewer 912 serves as the recipient 4999 .
  • Initial key negotiation information 5200 is exchanged between the seed key generation algorithm 5201 at the kiosk and the seed key generation algorithm 5202 at the viewer 266 or public viewer 912 .
  • the seed key generation algorithm 5201 at the kiosk and the seed key generation algorithm 5202 at the viewer 266 or public viewer 912 each generate seed key SK 5203 using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700.
  • Seed key 5203 is then used by key sequence generator 5204 at the kiosk site to generate the first in a sequence of keys, transaction symmetric key S KTi 5206 .
  • seed key 5203 is used by key sequence generator 5205 at the viewer 266 or public viewer 912 to generate the identical sequence of keys, beginning with transaction symmetric key SKTi 5206 .
  • the kiosk encrypts the electronic book content EBC 5100 using encryption process E SKTi 5207 and the shared transaction symmetric key S KTi 5206 and delivers the resulting encrypted content E SKTi [EBC] 5208 to the viewer 266 or public viewer 912 .
  • the viewer 266 or the public viewer 912 uses the transaction symmetric key S KTi 5206 and decryption process D SKTi 5209 to decrypt the encrypted content E SKTi [EBC] 5206 .
  • the kiosk key sequence generator 5204 and viewer 266 or public viewer 912 key sequence generator 5205 continue to generate matching transaction symmetric keys for use in encrypting each subsequent transaction between the kiosk and the viewer 266 or public viewer 912 .
  • the kiosk serving as sender 4998 , uses a one-way hashing algorithm 5231 , as presented in Applied Cryptography, by Bruce Schneier, published by John Wiley & Sons, Inc. in 1996, and hereby incorporated by reference, where a hashing value 5232 is calculated by the kiosk based on the electronic book content file 5230 as input. This resulting hashing value 5232 , along with the actual encrypted electronic book file 5237 that has been encrypted by the kiosk via encryption process 5235 is delivered to the viewer 266 or public viewer 912 , serving as recipient 4999 .
  • the viewer 266 or public viewer 912 decrypts the encrypted electronic book file 5237 using decryption process 5236 to recover the electronic book content file 5230 ′.
  • the viewer 266 or public viewer 912 uses the hashing algorithm 5231 with the electronic book content file 5230 ′ as input to generate a hashing value 5232 ′, which is compared to the hashing value 5232 delivered with the encrypted electronic book file 5237 . If the hashing value 5232 ′ calculated by the viewer 266 or public viewer 912 coincides with the hashing value 5232 delivered by the kiosk as determined by comparator 5233 , the integrity of the electronic book content file 5230 ′ can be ensured.
  • the kiosk and viewer 266 or the public viewer 912 may use an authentication method.
  • the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference.
  • the kiosk uses a password as an identifier. This password is delivered along with the electronic book content to authenticate the kiosk. The viewer 266 or the public viewer 912 compares this password with the password the viewer 266 or the public viewer 912 has for the kiosk. If the passwords match, the source of the electronic book content, i.e., the kiosk, is verified.
  • public key encryption is used as a digital signature to authenticate the kiosk.
  • the kiosk encrypts the electronic book content using the kiosk's private key.
  • the identity of the kiosk is authenticated since only the kiosk has access to the kiosk's private key used to encrypt the electronic book content.
  • the kiosk serving as the sender 4998 , notifies the viewer 266 or the public viewer 912 , serving as the recipient 4999 , of the kiosk's intention to deliver electronic book content to the viewer 266 or public viewer 912 .
  • This notification may be in the form of delivery notification message 5240 .
  • the viewer 266 or the public viewer 912 then encrypts a randomly generated message RGM generated by the viewer 266 or the public viewer 912 using encryption process E pKR and the viewer's private key pKR and sends the resulting E pKR [RGM] 5241 to the kiosk.
  • the kiosk decrypts E pKR [RGM] 5241 using decryption process D PKR and the viewer's public key PKR.
  • the kiosk then encrypts the electronic book content EBC 5100 , along with the randomly generated message RGM received from the viewer 266 or the public viewer 912 using encryption process E pKS and the kiosk's private key pKS and sends the resulting E pKS [EBC,RGM] 5242 to the viewer 266 or the public viewer 912 .
  • the viewer 266 or the public viewer 912 decrypts E pKS [EBC,RGM] 5242 using decryption process D PKS and the kiosk's public key PKS.
  • the kiosk's identity is verified.
  • the ISO one-way authentication protocol framework as defined in ISO standard X.509 is used to provide authentication of the kiosk's identity.
  • a viewer 266 or public viewer 912 may initiate the transaction with the kiosk by requesting that an electronic book be delivered from the kiosk to the viewer 266 or the public viewer 912 .
  • the kiosk and viewer 266 or the public viewer 912 may use the above authentication method embodiments.
  • the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference.
  • the viewer 266 or the public viewer 912 uses a password as an identifier.
  • This password is delivered along with the electronic book request to authenticate the viewer 266 or the public viewer 912 .
  • the kiosk compares this password with the password it has for the viewer 266 or the public viewer 912 . If the password matches, the source of the electronic book request, i.e., the viewer 266 or the public viewer 912 is verified.
  • public key encryption is used as a digital signature to authenticate the viewer 266 or the public viewer 912 .
  • the viewer 266 or the public viewer 912 encrypts the electronic book request using the viewer 266 or the public viewer 912 private key pKR and send the encrypted request to the kiosk.
  • the kiosk correctly decrypts the encrypted request with the viewer's public key PKR, the identity of the viewer 266 or the public viewer 912 is authenticated since only the viewer 266 or the public viewer 912 has access to the viewer's private key pKR used to encrypt the electronic book request.
  • the viewer 266 or the public viewer 912 upon initiation of the transaction, notifies the kiosk, serving as the sender 4998 , of the viewer's intention to request electronic book content from the kiosk.
  • This notification is in the form of initial request message 5250 .
  • the kiosk then encrypts a randomly generated message RGM generated by the kiosk using encryption process E pKS and the kiosk's private key pKS and sends the resulting E pKS [RGM] 5251 to the viewer 266 or public viewer 912 .
  • the viewer 266 or the public viewer 912 decrypts E pKS [RGM] 5251 using decryption process D PKS and the kiosk's public key PKS.
  • the viewer 266 or the public viewer 912 then encrypts the electronic book request EBR, along with the randomly generated message RGM received from the kiosk using encryption process E pKR and the viewer's private key pKR and sends the resulting E pKR [EBR,RGM] 5252 to the kiosk.
  • the kiosk decrypts E pKR [EBR,RGM] 5252 using decryption process D PKR and the viewer's public key PKR. If the randomly generated message RGM received from the viewer 266 or the public viewer 912 coincides with the randomly generated message RGM that the kiosk originally sent to the viewer 266 or the public viewer 912 , the viewer's identity is verified.
  • the ISO one-way authentication protocol framework as defined in ISO standard X.509 is used to provide authentication of the kiosk's identity.
  • a viewer 266 or the public viewer 912 requests an electronic book to be borrowed from the kiosk.
  • the kiosk must first authenticate the viewer 266 or the public viewer 912 .
  • An embodiment of the authentication sequence is depicted in FIG. 29 , where the kiosk is serving as sender 4998 and the viewer 266 or the public viewer 912 is serving as recipient 4999 .
  • an authentication sequence may be initiated by the viewer 266 or the public viewer 912 .
  • the authentication sequence begins with the viewer 266 or the public viewer 912 sending a request 5290 to the kiosk for a given electronic book content file 5300 .
  • the kiosk responds to the viewer 266 or the public viewer 912 by generating and returning an authentication string 5291 to the viewer 266 or the public viewer 912 .
  • the viewer 266 or the public viewer 912 returns a message to the kiosk that contains: 1) a book identifier 5292 , identifying the requested electronic book; 2) the signed authentication string 5293 that has been signed using a one-way hash function and then encrypted using the private key of the viewer 266 or public viewer 912 ; and 3) viewer 266 or the public viewer 912 certification information 5294 that the kiosk can authenticate with a certificate authority 4997 .
  • the kiosk retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage.
  • the kiosk decrypts the protected metadata header 5302 using the decryption key and validates that the protected metadata header 5302 has not been altered by performing a one-way hash function on the protected metadata header 5302 and comparing the result to the hash value contained in the protected metadata header 5302 .
  • the kiosk retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage and validates the protected metadata header using a one-way hashing function.
  • the kiosk modifies the fields of the unprotected metadata header 5301 and protected metadata header 5302 based on the viewer 266 or the public viewer 912 request and the rules established by the kiosk and the public library for electronic book uses and the loan duration time.
  • the kiosk may then encrypt the entire protected metadata header 5302 or some portion of the protected metadata header 5302 using the public key of the viewer 266 or the public viewer 912 or a pre-determined symmetric key known by both the kiosk and the viewer 266 or the public viewer 912 .
  • the packaged electronic book with metadata headers may then be delivered to viewer 266 or the public viewer 912 or the viewer 266 or the public viewer 912 may retrieve the packaged electronic book from the kiosk.
  • the viewer 266 or the public viewer 912 may decrypt the protected metadata header 5302 , validate that the protected metadata header 5302 has not been altered by performing a one-way hash calculation on the protected metadata header 5302 and comparing the result to the hash value 5305 contained in the protected metadata header 5302 , and re-encrypt the protected metadata header 5302 for storage, or store the received packaged electronic book directly without decrypting the protected metadata header 5302 .
  • the viewer When the electronic book is opened for display on the viewer 266 or the public viewer 912 , the viewer decrypts the protected metadata header 5302 using the appropriate decryption key, recovers the content decryption key, and decrypts the electronic book content for display on the viewer.
  • the viewer 266 or the public viewer 912 sends a return request to the kiosk.
  • an authentication sequence may be initiated by the viewer 266 or the public viewer 912 . The authentication sequence begins with the viewer 266 or the public viewer 912 sending a request to the kiosk to return a given electronic book content file.
  • the viewer 266 or the public viewer 912 generates and inserts an authentication string in the request sent to the kiosk.
  • the kiosk returns a message to the viewer 266 or the public viewer 912 that contains an authentication string that has been signed using a one-way hash function and then encrypted using the private key of the kiosk.
  • the protected metadata header 5302 or some portion of the header may then be encrypted in the public key of the kiosk or the private key of the viewer.
  • the packaged electronic book with metadata headers may then be returned to the kiosk and deleted from the viewer.
  • the kiosk decrypts the protected metadata header 5302 , modifies the protected metadata header 5302 to reflect that the electronic book is no longer being borrowed, and stores the modified protected metadata header 5302 .
  • This return process may also be used to return an electronic book to a kiosk for a refund. Processing of and storage of the decryption and encryption keys used on the protected metadata header 5302 at the viewer 266 or the public viewer 912 may be done entirely via software, entirely on a secure smart card or removable device, or some combination of the two.
  • the viewer 266 or the public viewer 912 serving a recipient 4999 in FIG. 33 may respond to the kiosk, serving as the sender in FIG. 33 , by first generating a reply message REP as shown in step 5260 .
  • the viewer 266 or the public viewer 912 then encrypts reply message REP in the viewer's private key pKR using encryption process E pKR , resulting in E pKR [REP], as shown in step 5261 .
  • the viewer 266 or the public viewer 912 then encrypts E pKR [REP] in the kiosk's public key PKS using encryption process E PKS , resulting in E PKS [E pKR [REP]], as shown in step 5262 .
  • the viewer 266 or the public viewer 912 sends E PKS [E pKR [REP]] to the kiosk, as shown in step 5263 .
  • the kiosk then decrypts E PKS [E pKR [REP]], using decryption process D pKS and the kiosk's private key pKS, resulting in E pKR [REP] as shown in step 5264 .
  • the kiosk then decrypts the resulting E pKR [REP] using decryption process D PKR and the viewer's public key PKR, as shown in step 5265 .
  • the valid reception of reply message REP by kiosk serves as verification of receipt of the electronic book content delivered to the viewer 266 or the public viewer 912 by the kiosk.
  • the ISO two-way authentication protocol framework as defined in ISO standard X.509 is used to provide verification of receipt of electronic book content by the viewer 266 or the public viewer 912 .
  • Exchanging encryption key information between the kiosk and viewer 266 or the public viewer 912 may be done via communication networks.
  • encryption key distribution may be accomplished by storing the encryption key information on a smart card, PCMCIA card device, CD ROM, or other portable memory storage device and delivering the device to the appropriate location for retrieval and use in future encryption and decryption activities.
  • the key When the key is delivered in physical form, the key may have associated with it a valid time period of use. Once this period has expired, a new key is required.
  • the device may support the capability to be updated remotely using a communication network.
  • Encryption, decryption, hashing, digital signature processing, formatting, compression, key management, and other security related activities presented herein that are performed by the kiosk or the viewer 266 or the public viewer 912 may be done in hardware using a specialized processor.
  • security related activities may be done in software using a standard or secure processor.
  • a portion of security related activities may be done in software using a standard or secure processor while the remaining portion done in hardware using a specialized processor.
  • the viewer 266 or the public viewer 912 may encrypt the electronic book content EBC 5100 with a symmetric key algorithm and store the encrypted electronic book content along with any non-encrypted content associated with the electronic book in storage memory device 5270 at the viewer 266 or the public viewer 912 .
  • secure storage is done on a memory device at the driver-level, where all information stored on the memory storage device 5270 is encrypted by memory device driver prior to being stored on memory storage device 5270 , as described in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference.
  • any content X 5272 to be stored on the memory storage device 5270 is encrypted using encryption process E SK 5274 in memory device driver 5271 and symmetric key SK 5276 , resulting in encrypted content E SK [X] 5273 .
  • the resulting encrypted content E SK [X] 5273 is then stored on memory storage device 5270 .
  • decryption process D SK 5275 decrypts encrypted content E SK [X] 5273 with symmetric key SK 5276 , resulting in the original content X 5272 .
  • secure storage is done at the file level, also as described in Applied Cryptography, by Bruce Schneier, where each file is encrypted individually with a different symmetric key prior to storage and stored in its encrypted form on memory storage device 5270 .
  • the symmetric key SK 5276 can then be stored separate from the stored encrypted content X 5272 .
  • encryption is done in hardware using a specialized encryption processor. In an alternate embodiment, encryption is done in software using a standard or secure processor.
  • the viewer 266 or the public viewer 912 uses a one-way hashing algorithm 5280 , as presented in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference, where a hashing value 5281 is calculated by the viewer 266 or the public viewer 912 based on the electronic book content EBC 5100 prior to encryption process 5282 .
  • This hashing value 5281 along with the encrypted content E SK [EBC] 5284 is then stored on memory storage device 5283 .
  • the viewer 266 or the public viewer 912 decrypts encrypted content E SK [EBC] 5284 using decryption process DSK 5285 and retrieves the stored hashing value 5281 .
  • the viewer 266 or the public viewer 912 then calculates hashing value 5281 ′, using hashing algorithm 5280 and the retrieved electronic book content EBC 5100 .
  • Comparator 5286 compares hashing value 5281 to hashing value 5281 ′ to determine if they coincide. If the hashing value 5281 and the hashing value 5281 ′ coincide, the integrity of the electronic book content EBC 5100 retrieved for memory storage device 5283 can be ensured.
  • the security methods described above may also be applied to the communications between a public library system and a viewer, between a school or school library system and a viewer, and between a bookstore system and a viewer.
  • the borrowing viewer requests an electronic book to be borrowed from the lending viewer.
  • the lending viewer may first authenticate the borrowing viewer.
  • An embodiment of the authentication sequence is depicted in FIG. 29 , where the lending viewer is serving as the sender 4998 and the viewer 266 or the public viewer 912 is serving as the recipient 4999 .
  • an authentication sequence may be initiated by the borrowing viewer. The authentication sequence begins with the borrowing viewer sending a request 5290 to the lending viewer for a given electronic book content file 5300 .
  • the lending viewer then responds to the borrowing viewer by generating and returning an authentication string 5291 to the borrowing viewer.
  • the borrowing viewer returns a message to the lending viewer that contains: 1) a book identifier 5292 ; identifying the requested electronic book; 2) the signed authentication string 5293 that has been signed using a one-way hash function and then encrypted using the private key of the borrowing viewer; and 3) borrowing viewer certification information 5294 that the lending viewer can authenticate with a certificate authority 4997 .
  • the lending viewer retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage.
  • the lending viewer decrypts the protected metadata header 5302 using the decryption key and validates that the protected metadata header 5302 has not been altered by performing a one-way hash function on the protected metadata header 5302 and comparing the result to the hash value contained in the protected metadata header 5302 . If the protected metadata header 5302 was stored unencrypted, the lending viewer retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage and validates the protected metadata header using a one-way hashing function. The lending viewer then modifies the fields of the unprotected metadata header 5301 and protected metadata header 5302 based on the borrowing viewer request and the rules established by the lending viewer and the public library for electronic book uses and the loan duration time. The lending viewer may then encrypt the entire protected metadata header 5302 or some portion of the protected metadata header 5302 using the public key of the borrowing viewer or a pre-determined symmetric key known by both the lending viewer and the borrowing viewer.
  • the packaged electronic book with metadata headers may then be delivered to borrowing viewer or the borrowing viewer may retrieve the packaged electronic book from the lending viewer.
  • the borrowing viewer may decrypt the protected metadata header 5302 , validate that the protected metadata header 5302 has not been altered by performing a one-way hash calculation on the protected metadata header 5302 and comparing the result to the hash value 5305 contained in the protected metadata header 5302 , and re-encrypt the protected metadata header 5302 for storage, or store the received packaged electronic book directly without decrypting the protected metadata header 5302 .
  • the viewer When the electronic book is opened for display on the borrowing viewer, the viewer decrypts the protected metadata header 5302 using the appropriate decryption key, recovers the content decryption key, and decrypts the electronic book content for display on the viewer.
  • the borrowing viewer sends a return request to the lending viewer.
  • an authentication sequence may be initiated by the borrowing viewer.
  • the authentication sequence begins with the borrowing viewer sending a request to the lending viewer to return a given electronic book content file.
  • the borrowing viewer generates and inserts an authentication string in the request sent to the lending viewer.
  • the lending viewer returns a message to the borrowing viewer that contains an authentication string that has been signed using a one-way hash function and then encrypted using the private key of the lending viewer.
  • the protected metadata header 5302 or some portion of the header may then be encrypted in the public key of the lending viewer or the private key of the viewer.
  • the packaged electronic book with metadata headers may then be returned to the lending viewer and deleted from the viewer.
  • the lending viewer decrypts the protected metadata header 5302 , modifies the protected metadata header 5302 to reflect that the electronic book is no longer being borrowed, and stores the modified protected metadata header 5302 .
  • Processing of and storage of the decryption and encryption keys used on the protected metadata header 5302 at the borrowing viewer may be done entirely using software, entirely on a secure smart card or removable device, or some combination of the two.
  • a number of mechanisms may be implemented in the electronic book delivery system to support copyright protection.
  • all transactions between the publisher 282 and the operations center 250 , the operations center 250 and home systems 258 , the library 262 and the viewer 266 , or a kiosk and the viewer 266 or the public viewer 912 may make use of the protocol defined in the 5C Digital Transmission Content Protection Specification, developed by Hitachi, Ltd., Intel Corporation, Matsushita Electric Industrial Co., Ltd., Sony Corporation, and Toshiba Corporation, available from the Digital Transmission Licensing Administrator, at www.dtcp.com and hereby incorporated by reference.
  • Alternate embodiments to support copyright protection in the distribution of electronic books are addressed below.
  • Visible copyright notifications may be applied to electronic book content, establishing the rights holder's legal claim to copyright protection.
  • Copyright holder information, electronic book source information, and/or copyright disclaimer information may be embedded as a visible watermark within the electronic book.
  • This copyright information may be associated with the electronic book and delivered with the electronic book when the electronic book is distributed from one entity to another or the electronic book is copied.
  • the copyright information may be displayed the first time an electronic book is viewed.
  • the copyright information may be displayed initially, each time an electronic book is viewed. Alternatively, the information may always be displayed whenever an electronic book is being viewed.
  • This copyright information may be inserted as actual text, overlaid on electronic book text, or inserted as background graphical information in the electronic book.
  • Associated with a delivered electronic book may be an indication of an electronic book's printing rights.
  • Printing rights information may be applied to all users of an electronic book title, or printing rights may apply to a specific user of an electronic book.
  • Printing rights information may be delivered with an electronic book by the operations center 250 and used by the home system 258 in determining what printing capabilities are allowed.
  • An electronic book may be allowed to be printed an unlimited number of times.
  • An electronic book may be allowed to be printed one time only.
  • An electronic book may not be allowed to be printed at all.
  • an electronic book may be allowed to be printed, but the electronic version of the electronic book title may be deleted after this one printing.
  • the copyright information may be applied to the printed content.
  • the copyright information may be applied on the first page printed, on several pages printed, or on all pages printed.
  • the software running on the secure processor in the home system 258 performs the print management function.
  • the electronic book distribution system can make use of steganography to further protect electronic books from copyright violation attempts.
  • Steganography serves to hide secret messages in other messages, concealing the existence of the secret message.
  • the most familiar form of steganographic technique is invisible ink.
  • Steganographic techniques can allow for hidden identifiers to be inserted into electronic books for identifying and tracking purposes.
  • the source and various intermediate handlers of electronic book content can insert their identifying marker within an electronic book.
  • This identifier may be a message signed with the private key of the entity inserting the identifier.
  • an identification value representing the purchasing viewer 266 or the public viewer 912 may be inserted in the electronic book using steganographic techniques.
  • the operations center 250 may insert the purchasing viewer's identifier, or alternatively, the home system 258 may insert the purchasing viewer's identifier.
  • the steganographic technique of modifying graphics on a pixel basis is used to encode hidden identifying information.
  • non-obvious markings are added to the text of an electronic book.
  • modification of line spacings is used to encode hidden identifying information.
  • Audio watermarking techniques can be used to encode identifying information into audio provided with electronic books.
  • Graphic watermarking using HighWater Designs' fingerprinted binary information technique or Digimarc Corporation's DigiMarc technology, as defined in U.S. Pat. No. 5,721,788, Method and System for Digital Image Signature, to Powell, hereby incorporated by reference, may be used.
  • video watermarking techniques may be used to encode identifying information into video provided with electronic books.
  • a hashing value Prior to the delivery of the electronic book containing steganographic identifiers, a hashing value may be calculated and also delivered with the electronic book. The hashing value may be recalculated and compared with the hashing value calculated prior to delivery of the electronic book to the home system 258 . If the hashing values match, the steganographic identifiers can be assured to be unaltered.
  • Steganographics may be incorporated into a security and validation system.
  • Embedded steganographic information including the electronic book publisher 282 , rightholders, the originating operations center 250 , and other intermediate sources and the purchasing home system 258 identifier, may be delivered within each electronic book sold to a home system 258 .
  • the operations center 250 or billing and collection subsystem 278 may query the home system 258 to determine the sources of all resident electronic books and to ensure that the books are assigned to that specific home system 258 . This query may include the operations center 250 or billing and collection subsystem 278 accessing and retrieving the steganographically-hidden information from within each electronic book stored at the home system 258 .
  • the operations center 250 or billing and collection subsystem 278 may not allow the transaction to proceed and may send a disable command that disables the home system 258 from operation until the issue can be resolved with the operations center 250 .
  • the home system 258 under the control of the secure processor, may only display electronic books that are watermarked with that home system's unique identifier.
  • Critical to the security of electronic book distribution system is the ability to modify the security algorithms in case of a security breach.
  • the security algorithms operating on the electronic book home system 258 are updated by software downloaded using a communication network. In an alternative embodiment, the security algorithms operating on the electronic book home system 258 are updated using software downloaded from a smart card, PC-MCIA device, or other memory device attached to the home system 258 .

Abstract

The invention, electronic book security and copyright protection system, provides for secure distribution of electronic text and graphics to subscribers and secure storage. The method may be executed at a content provider's site, at an operations center, over a video distribution system or over a variety of alternative distribution systems, at a home subsystem, and at a billing and collection system. The content provider or operations center and/or other distribution points perform the functions of manipulation and secure storage of text data, security encryption and coding of text, cataloging of books, message center, and secure delivery functions. The home subsystem connects to a secure video distribution system or variety of alternative secure distribution systems, generates menus and stores text, and transacts through communicating mechanisms. A portable book-shaped viewer is used for secure viewing of the text. A billing system performs the transaction, management, authorization, collection and payments utilizing the telephone system or a variety of alternative communication systems using secure techniques.

Description

    RELATED APPLICATIONS
  • This application is a continuation-in-part of U.S. application Ser. No. 07/991,074 entitled TELEVISION PROGRAM PACKAGING AND DELIVERY SYSTEM WITH MENU DRIVEN SUBSCRIBER ACCESS, filed Dec. 9, 1992, and U.S. application Ser. No. 08/336,247 entitled ELECTRONIC BOOK SELECTION AND DELIVERY SYSTEM, filed Nov. 7, 1994, and U.S. application Ser. No. 08/160,194 and PCT/US93/11606 entitled ADVANCED SET-TOP TERMINAL FOR CABLE TELEVISION DELIVERY SYSTEMS, filed Dec. 2, 1993, and U.S. application Ser. No. 08/906,469 entitled REPROGRAMMABLE TERMINAL FOR SUGGESTING PROGRAMS OFFERED ON A TELEVISION PROGRAM DELIVERY SYSTEM, filed Aug. 5, 1997, and U.S. application Ser. No. 09/191,520 entitled DIGITAL BROADCAST PROGRAM ORDERING, filed Nov. 13, 1998. These applications are incorporated by reference herein. Also incorporated by reference are co-pending U.S. application Ser. No. 09/237,827 entitled ELECTRONIC BOOK HAVING LIBRARY CATALOG MENU AND SEARCHING FEATURES, filed Jan. 27, 1999, U.S. application Ser. No. 09/237,828 entitled ELECTRONIC BOOK ELECTRONIC LINKS, filed Jan. 27, 1999, U.S. application Ser. No. 09/289,956, entitled ELECTRONIC BOOK ALTERNATIVE DELIVERY METHODS, filed on Apr. 13, 1999, and U.S. application Ser. No. 09/289,957, entitled ELECTRONIC BOOK ALTERNATIVE DELIVERY SYSTEMS, filed on Apr. 13, 1999.
  • BACKGROUND ART
  • Sparked by the concept of an information superhighway, a revolution will take place in the distribution of books. Not since the introduction of Gutenberg's movable typeset printing has the world stood on the brink of such a revolution in the distribution of text material. The definition of the word book will change drastically in the near future. Due to reasons such as security, convenience, cost, and other technical problems, book and magazine publishers are currently only able to distribute their products in paper form. This invention solves the problems encountered by publishers.
  • TECHNICAL FIELD AND BRIEF SUMMARY OF INVENTION
  • The electronic book selection and delivery system is a new way to distribute books to bookstores, public libraries, schools and consumers. The technological breakthroughs of this invention provide a secure electronic system for both delivering selected books and receiving payments. The system has an unusual combination of features that provides the consumer with a daily use household appliance that has a high tech aura while being very practical, portable, and easy to use.
  • An advantage of the system is that it eliminates the distribution of any physical object such as a paper book or computer memory device from any book or text distribution system. The purchase of a book becomes a PAY-PER-READ event avoiding the overhead, middle-men, printing costs, and time delay associated with the current book distribution system. Published material and text such as the President's speech, a new law, a court decision on abortion, or O.J. Simpson's testimony can be made immediately available to the consumer at a nominal fee. Alternatively, books may be made available free to the end use consumer, subsidized by advertisers who sponsor books or embed advertising within the books.
  • The system is a novel combination of new technology involving the television, cable, telephone, and computer industries. It utilizes high bandwidth data transmissions, strong security measures, sophisticated digital switching, high resolution visual displays, novel controls, and user friendly interface software.
  • The primary components of the text delivery system are the subsystem for preparing the text for secure delivery and the subsystem for receiving and selecting text that was delivered. An embodiment of the system includes additional components and optional features that enhance the system. The system may be configured for use by bookstores, public libraries, schools and consumers. In one embodiment, the system for consumer use is made up of four subsystems, namely: (1) an operations center, (2) a distribution system, (3) a home subsystem including reception, selection, viewing, transacting and transmission capabilities, and (4) a billing and collection system. Alternative configurations of the system are defined to allow for a variety of traditional and non-traditional delivery methods.
  • The operations center performs several primary functions: manipulating text data (including receiving, formatting and storing of text data), security encoding of text, cataloging of books, providing a messaging center capability, and performing uplink and secure delivery functions. In one embodiment, the system delivers the text from the operations center to consumer homes by inserting text data within analog video signals. The insertion of text is generally performed with an encoder at an uplink site that is within or near the operations center. The system can use several lines of the Vertical Blanking Interval (VBI), all the lines of the analog video signal, a digital video signal or unused portions of bandwidth to transmit text data. Using the VBI delivery method, the top ten or twenty book titles may be transmitted with video during normal programming utilizing existing cable or broadcast transmission capability without disruption to the subscriber's video reception. Using the entire video signal, thousands of books may be transmitted within just one hour of air time. Nearly any analog or digital video or data distribution system may be used to deliver the text data. The text data may also be transmitted over other low and high speed signal paths including a telephone network (e.g., a public switched telephone network) having a high speed connection such as an asynchronous digital subscriber line (ADSL) connection and the Internet, for example. The text data is delivered in a secure fashion over the distribution systems.
  • The home subsystem performs at least four functions: connecting to the distribution system, selecting text, storing text, and transacting through a communicating mechanism. The components of the home subsystem may be configured in a variety of hardware configurations. Each function may be performed by a separate component, the components may be integrated, or the capability of existing cable set top converter boxes, computers, and televisions may be utilized. A connector, library unit and viewer unit may be used. In one embodiment, the connector portion of the home subsystem receives an analog video signal and strips or extracts the text from the video. The home library stores the text signal, provides a user friendly software interface to the system and processes the transactions at the consumer home. The viewer provides a screen for viewing text or menus and novel user friendly controls. Alternative embodiments are presented that support the secure delivery and storage of text using a variety of communication and security mechanisms.
  • The viewing device may be a portable book shaped viewer which securely stores one or more books for viewing and provides a screen for interacting with the home library unit. A high resolution LCD display is used to both read the books and to interact with the home library software. In one embodiment, an optional phone connector or return-path cable connection initiates the telephone calls and, with the aid of the library, transmits the necessary data to complete the ordering and billing portion of the consumer transaction. Alternative embodiments are presented in the referenced related applications that support ordering and billing using a variety of communication mechanisms. The user-friendly controls include a bookmark, current book and page turn button. The billing and collection system performs transaction management, authorizations, collections and publisher payments automatically.
  • A system similar to the system for consumer use may be used in bookstores, schools and public libraries.
  • The electronic books are delivered from an operations center or other remote location to an end-user location such as a home system using security mechanisms that prevent unauthorized access to the electronic books. An asymmetric public key encryption technique may be used by the operations center, serving as a sending party. The operations center encrypts the electronic book using a symmetric key and a symmetric key encryption algorithm. The symmetric key may be randomly generated, or the symmetric key may be previously defined and retrieved from storage. The operations center then encrypts the symmetric key. The encrypted electronic book and the encrypted symmetric key are delivered to the home system. The home system decrypts the encrypted symmetric key and uses the symmetric key to decrypt the encrypted electronic book.
  • In another embodiment, only symmetric key encryption is used to protect the electronic book during delivery. A third party trusted source may provide a symmetric key to both the party sending the electronic book and the party receiving the electronic book. The trusted source encrypts the symmetric key using a symmetric key of the sending party and delivers the encrypted symmetric key to the sending party. The sending party decrypts the symmetric key and uses the decrypted symmetric key to encrypt the electronic book. The receiving party, which also receives the symmetric key from the trusted source in an encrypted format, decrypts the symmetric key using the receiving party's symmetric key. The receiving party then uses the decrypted symmetric key from the trusted source to decrypt the electronic book.
  • In another embodiment, the sending party and the receiving party negotiate a shared key for use in the delivery of the electronic book. The parties exchange key negotiation information and use the same key generation algorithm to generate the same key.
  • In yet another embodiment, a seed key generation algorithm is used to generate a sequence of encryption keys.
  • In an embodiment, the encrypted electronic book is broadcast to home systems. In another embodiment, the encrypted electronic book is provided on demand. In yet another embodiment, the encrypted electronic book is provided on a physical storage medium such as a smart card.
  • The system for providing secure electronic book delivery may also include integrity checking algorithms to ensure the electronic book was not altered in route. The system may also include mechanisms that identify the sending party and the receiving party.
  • Secure delivery of electronic books may be provided between a content provider such as a publisher and a distribution center such as an operations center. Secure delivery may also be provided between the operations center and a home system, between the home system library and the home system viewer, between a lending facility such as a public library and a home system, and between multiple viewers.
  • The system may also incorporate copyright protection mechanisms including application of visible copyright notices to the delivered electronic books. Other copyright information may be embedded within the electronic book using a visible watermark, for example.
  • BRIEF DESCRIPTION OF DRAWINGS
  • FIG. 1 a is a block diagram of the primary components of an electronic book selection and delivery system.
  • FIG. 1 b is a block diagram of an electronic book selection and delivery system that uses a composite video signal.
  • FIG. 2 is a schematic showing an overview of the electronic book selection and delivery system.
  • FIG. 3 is a schematic of a delivery plan for the electronic book selection and delivery system.
  • FIG. 4 is a block diagram of the operations center.
  • FIG. 5 a is a flow diagram of processing at the operations center and uplink.
  • FIG. 5 b is a block diagram of a hardware configuration for an uplink site.
  • FIG. 6 a is a block diagram of a hardware configuration for a four component home subsystem.
  • FIG. 6 b is a schematic of a two unit home subsystem.
  • FIG. 7 is a flow diagram of processes performed by a video connector.
  • FIG. 8 is a block diagram for an example of a library unit.
  • FIG. 9 is a flow diagram of processes performed by a library unit on the received data stream.
  • FIG. 10 is a flow diagram of processes performed by a library unit on information requests from a viewer.
  • FIG. 11 is a block diagram showing the components for an example of a viewer.
  • FIG. 12 is a flow diagram of processes performed by a viewer on an information request from a subscriber.
  • FIG. 13 is a chart depicting a menu structure and sequencing of menus in a menu system.
  • FIG. 14 a is a schematic of an introductory menu.
  • FIG. 14 b is a schematic showing an example of a main menu.
  • FIGS. 14 c, 14 d, 14 e, 14 f, 14 g, 14 h, 14 i and 14 j are schematics showing examples of submenus.
  • FIG. 15 is a schematic diagram of an electronic book system for a bookstore or public library.
  • FIG. 16 a and FIG. 16 b are schematics of hardware modifications or upgrades to a set top converter.
  • FIG. 17 is a schematic showing a set top terminal that includes a data receiver and data transmitter.
  • FIG. 18 a is a schematic of a book-on-demand system.
  • FIG. 18 b is a schematic of an operations center supporting a book-on-demand system.
  • FIG. 19 a is a diagram of symmetric key encryption.
  • FIG. 19 b is a diagram depicting asymmetric encryption using a private key.
  • FIG. 19 c is a diagram depicting asymmetric encryption using a public key.
  • FIG. 20 is a depiction of public key encryption for electronic book distribution.
  • FIG. 21 is a depiction of symmetric key encryption for electronic book distribution where a certificate authority provides the encryption key.
  • FIG. 22 is a depiction of symmetric key encryption for electronic book distribution where a certificate authority is provided the encryption key.
  • FIG. 23 a is a diagram depicting asymmetric encryption using a private key for an entire transaction stream.
  • FIG. 23 b is a diagram depicting asymmetric encryption using a public key for an entire transaction stream.
  • FIG. 23 c is a diagram of symmetric key encryption for an entire transaction stream.
  • FIG. 24 a depicts transaction key negotiation process.
  • FIG. 24 b depicts seed key negotiation process.
  • FIG. 25 a depicts a secure method for broadcast distribution.
  • FIG. 25 b depicts a secure method for group distribution.
  • FIG. 26 depicts a hashing function process.
  • FIG. 27 depicts a sender initiated, sender identification process.
  • FIG. 28 depicts a recipient initiated, sender identification process.
  • FIG. 29 depicts a recipient authentication sequence.
  • FIG. 30 depicts a secure delivery process.
  • FIG. 31 depicts a recipient initiated, secure socket layer exchange.
  • FIG. 32 depicts a sender initiated, secure socket layer exchange.
  • FIG. 33 depicts a reception verification sequence.
  • FIG. 34 depicts driver level secure storage.
  • FIG. 35 depicts file level secure storage.
  • FIG. 36 depicts an operations center to home system delivery process.
  • DETAILED DESCRIPTION OF INVENTION
  • FIG. 1 a shows an electronic book distribution system 100 that may be used for secure distribution of an electronic book. A content provider 110 may publish hard copy versions of books or other printed media including newspapers, magazines, and product catalogs, for example. The content provider 110 may convert printed materials to an electronic format, apply security mechanisms, and provide the electronic formatted materials to a distribution center 120, over uplink path 115. The uplink path 115 may be a wired or a wireless path. The uplink path 115 may be a telecommunications network, for example. The uplink path 115 may be a satellite relay path or a wireless telephone path. The uplink path 115 may involve providing electronic books to the distribution center on a fixed media, such as a CD-ROM, for example.
  • In FIG. 1 a, the content provider 110 and the distribution center 120 are shown as separate components of the electronic book distribution system 100. However, the content provider 110 and the distribution center 120 may be co-located. The distribution center 120 may convert printed matter into an electronic format. Alternately, the distribution center 120 may receive electronic files from an outside source, such as the content provider 110. The distribution center 120 may process and store electronic books using secure techniques as presented in Section VII.
  • The distribution center 120 distributes electronic books. The distribution may be, for example, over distribution path 125, distribution network 130, and distribution path 135 to an electronic book subsystem or terminal 140, which may include an electronic book viewer (not shown). The terminal may also be a television, a set top terminal, a personal computer, or similar device. An apparatus and method for the secure distribution of electronic books is disclosed in greater detail later. The distribution network 130 may be an electronic book store, an Internet web site, a wired or wireless telecommunications network, an intranet, a radio program delivery system, a television program delivery system, including cable television, satellite television broadcast, and over-the-air broadcast, for example. The electronic book distribution network 130 could include direct delivery through a mail delivery system of electronic books on a fixed media, such as a CD-ROM, for example.
  • FIG. 1 b shows components of an electronic book distribution system 170 using a television program delivery system to distribute electronic books. In the embodiment shown in FIG. 1 b, the components of the electronic book selection and delivery system 170 are an encoder 174, a video distribution system 178, a connector 182, and a text selector 186. The encoder 174 places textual data on a video signal to form a composite video signal. Although the composite signal may contain only textual data, it usually carries both video and textual data. A variety of equipment and methods may be used to encode text data onto a video signal. The video distribution system 178 distributes the composite video signal from the single point of the encoder 174 to multiple locations, which have connectors 182. The connector 182 receives the digital or analog video signal from the video distribution system 178 and separates, strips or extracts the text data from the composite video signal. If necessary, the extracted text data is converted into a digital bit stream. The text selector 186 works in connection with the connector 182 to select text.
  • Using the connector 182 and text selector 186 combination, various methods of selecting and retrieving desired text from a composite or video signal are possible. Text may be preselected, selected as received or selected after being received and stored. One method is for the connector 182 to strip or extract all the text from the video signal and have the text selector 186 screen all the text as received from the connector 182. The text selector 186 only stores text in long term or permanent memory if the text passes a screening process described below.
  • FIG. 2 shows another embodiment of an electronic book selection and delivery system 200. The delivery system 200 includes: an operations center 250 including an uplink site 254, a video distribution system 208, a home system 258 including a video connector 212, a library 262, a viewer 266, and a phone connector 270, telephone system 274, an Internet web site 279 and a billing and collection system 278. Also as shown in FIG. 2, the home system 258 may include connections to a television 259 and a personal computer 261 may be used to display menu screens, electronic books, electronic files, or any other information associated with the electronic book delivery system 200. In addition, the television 259 and the personal computer 261 may provide control functions that replicate and supplement those of the viewer 266.
  • The operations center 250 receives textual material from outside sources 282 such as publishers, newspapers, and on-line services. Alternately, the outside sources may maintain electronic books at the Internet web site 279. The outside sources 282 may convert textual and graphical material to digital format and apply security mechanisms, or may contract with another vendor to provide this service. The operations center 250 may receive the textual and graphical material in various digital formats and may convert the textual material to a standard compressed format for storage. In so doing, the operations center 250 may create a pool of textual material that is available to be delivered to the home system 258. The textual material may be grouped by books or titles for easy access.
  • As used herein, “book” means textual or graphical information such as contained in any novels, encyclopedias, articles, magazines, newspapers, catalogues, periodicals, or manuals. The term “title” may represent the actual title assigned by an author to a book, or any other designation indicating a particular group, portion, or category of textual information. The title may refer to a series of related textual information, a grouping of textual information, or a portion of textual data. For example, “Latest Harlequin Romance”, “Four Child Reading Books (Ages 10-12),” “Encyclopedia ‘BRITANNICA’™,” “President's Speech,” “Instruction Manual,” “Schedule of 4th of July Events,” “Pet Handbooks,” “Roe v. Wade,” and “The Joy of Cooking,” are suitable titles. Also, the title may be a graphical symbol or icon. Thus, a picture of a wrench may be a title for a repair book, a picture of a computer a title for a computer book, a graphical symbol of a telephone a title for a telephone book, a drawing of a dagger a title for a mystery book, a picture of a bat and ball a title for a sports book, and a picture of tickertape a title for a business book.
  • The operations center 250 includes the uplink site 254 for placing the text onto a telecommunications signal in a secure fashion and sending the telecommunications signal into a distribution system. The uplink site 254 would generally include an encoder 204 (not shown in FIG. 2) to encode the text onto the telecommunications signal.
  • Many analog and digital video distribution systems may be used with the electronic book delivery system 200, such as cable television distribution systems, broadcast television distribution systems, video distributed over telephone systems, direct satellite broadcast distribution systems, and other wire and wireless video distribution systems. Nearly any distribution system which can deliver a telecommunications signal, including a video signal, will work with the electronic book delivery system 200. It is also possible to distribute the electronic book without using a telecommunications signal as described in the embodiments presented in the referenced related applications. Methods used for securing the distribution of materials over the electronic book delivery system 200 are presented in Section VII.
  • The home system 258 performs five functions: (1) connecting with a video distribution system; (2) selecting data; (3) storing data; (4) displaying data; and (5) handling transactions. An important optional function of the home system 258 is communicating using, in one embodiment, a telephone communication system 274. The home system 258 may be made up of four parts: a video connector 212 or similar type of connector for connecting with the distribution system 208, a library 262 for storing and processing, a viewer 266 for viewing menus and text and a telephone connector 270 for connecting with a telephone communications system 274. Additional embodiments are presented in the referenced related applications that address alternative communication mechanisms.
  • The billing and collection system 278 may be co-located with the operations center 250 or located remote from the operations center 250. The billing and collection system 278 may be in communication with the home system 258 using telephone-type communication systems (for example 274). Any of a number of communication systems as presented in the referenced related applications, such as a cellular system or the Internet, will operate with the billing and collection system 278. The billing and collection system 278 records the electronic books or portions of text that are selected or ordered by the subscriber. The collection system will charge a subscriber's credit account or bill the subscriber. In addition, the billing and collection system 278 may monitor that amount due to publishers or other outside sources 282 who have provided textual data or other services such as air time to enable the text delivery system 200 to operate.
  • Also shown in FIG. 2 is an intranet 279′. The intranet 279′ may be used as a part of a private distribution network for distributing and circulating electronic books. For example, a university library may use the intranet 279′ to circulate electronic books to university students and professors.
  • FIG. 3 is an expanded overview of a delivery plan 301 for the electronic book delivery system 200. It is a comprehensive delivery plan 301 to support various types of users and various billing systems. FIG. 3 shows that, publishers 282 may provide text transfer 302 to the operations center 250′ and receive payments 306 from the billing and collection system 278′. A separate channel uplink site 254′ is shown in this configuration receiving data 310 from the operations center 250′. The operations center 250′ has three separate sections (318, 322, 326) one for text receiving, formatting and re-entry 318, a second for security encoding and processing 322 and a third section for catalog and messaging center functions 326.
  • The collection and billing system 278′ shown has two sections (330, 334) one for transaction management, authorizations and publisher payments 330, and the other for customer service 334. The customer service section 334 provides for data entry and access to customer account information. Transaction accounting information 338 is supplied to credit card companies 342 by the transaction management section 330 of the billing and collection system 278′. The credit card companies 342 provide billing 346 to customers either electronically or by mail.
  • Methods for communicating between the subscriber base 348 and the billing and collection system 278′ include: by telephone switching 350 alone, cellular switching 354 and telephone switching 350 combined, and by use of the cable system 358 and the telephone switching 350. The system shown supports both one-way 362 and two-way cable communication 366 with subscribers. Additional communication methods are presented in the referenced related applications. Public libraries and schools 370 as well as bookstores 374 may use the delivery system 301. Methods used for securing these communications are presented in Section VII.
  • Public libraries and schools 370 could have a modified system to allow the viewer to be checked-out or borrowed while bookstores 374 would rent or sell the viewer and sell electronic book data. The bookstores 374 as well as the public libraries and schools 370 may be serviced by cable 378. Optional direct broadcast systems (DBS) 382 can also be used with the system 200 as detailed in the referenced related applications.
  • I. The Operations Center
  • FIG. 4 is a schematic of the operations center 250, which includes the uplink 254. The operations center 250 may gather text or books by receiving, decrypting, formatting, storing, and encoding. A data stream 302 containing text may be received at the operations center 250 by a data receiver 402. The data receiver 402 is under the control of a processor 404. After reception, the data stream is decrypted using digital logic for decrypting 403 which is under the control of the processor 404. The data stream is then formatted using digital logic for formatting 406 which is also under the control of the processor 404. If any additional text is generated at the operations center 250 locally for insertion into the distributed signal, the text generation is handled through text generator hardware 410, which may include a data receiver and a keyboard (not shown). Following processing by the text generator 410, the additional text can be added to the text received by the combining hardware 414 that includes digital logic circuitry (not shown).
  • The processing at the operations center 250 is controlled by a processor 404, which uses an instruction memory 416. The processor 404 and instruction memory 416 may be supplied by a personal computer or mini-computer, for example. To perform the catalog and messaging functions, the operations center 250 uses a catalog and message memory 420 and the text generator 410 if necessary.
  • The data stream of text, catalog and messages may be encoded by security module encoding 424 prior to being sent to the uplink module 254. Various encoding techniques may be used by the security encoding module 424 such as the commercial derivative of NSA's encryption algorithm (Data Encryption System (DES)) and General Instrument's DigiCipher II. Additional embodiments are presented n Section VII. Following encoding, the encoded text may be stored in text memory 428 prior to being sent to the uplink 254. A first-in-first-out text memory arrangement may be used under the control of the processor 404. Various types of memory may be used for the text memory 428 including RAM. The operations center 250 may use file server technology for the text memory 428 to catalog and spool books for transmission as is described below. The operations center 250 may also store the electronic book as secure compressed data files using the secure storage techniques presented in Section VI.
  • In an embodiment, to transmit textual data, the distribution system 208 (see FIG. 2) may use high bandwidth transmission techniques such as those defined by the North American Broadcast Teletext Standard (NABTS) and the World System Teletext (WST) standard. Using the WST format (where each line of the Vertical Blanking Interval contains 266 data bits), a four hundred page book, for example, may be transmitted during regular television programming using four lines of the Vertical Blanking Interval at a rate of approximately one book every 1.6 minutes (63,840 bits per second). Alternatively, books may be transmitted over a dedicated channel, which interrupts programming so that 246 lines of video can be used to transmit approximately 2,250 books every hour (3.9 Mbits per second). A teletext type format is the simplest but possibly the slowest text format to use with the electronic book delivery system 200. In either event, an encoder 204 may be used at an uplink site 254 to insert textual data into the analog video signal. In many other respects, the delivery of the textual information may be completed using an existing cable television plant and equipment. Alternative transmit formats and delivery systems are presented in the referenced related applications.
  • FIG. 5 a is a flowchart of steps involved in processing text from the publisher or provider 282 that may occur at the operations center 250. As shown in block 500, the publisher 282 processes data files of text for books, compresses, encrypts and sends the data files to the operations center 250 or uplink 254. Text files for books may be sent one book at a time. As shown in block 504, the uplink 254 or operations center 250 receives and processes the data stream from the publisher 282. Generally, part of this processing includes encryption and error correction. Specific embodiments used for encryption are presented in Section VII. Text files may be delivered for receipt by multiple home subsystems simultaneously, or to a specific individual home subsystem.
  • In FIG. 5 a, the electronic books are distributed to consumers using a video distribution system such as a cable television system. However, the electronic books may also be packaged as data packets and distributed over other telecommunications networks such as a digital wireless telephone network, for example.
  • In one embodiment, as shown in block 508, files are broken into smaller packets of information. Header information is added to the packets. The bit stream is converted from a serial digital bit stream to an analog bit stream that is compatible with an NTSC video signal. Block 512 shows the switching of analog data into the video lines of a video signal. The analog data may be placed either in the VBI or the active video lines. In some instances, unused portions of bandwidth (such as 5-40 MHZ, 70-75 MHZ, 100-109 MHZ or other guard bands) may be used instead of the video lines. Alternate transmission methods are presented in the referenced related applications.
  • FIG. 5 b is an example of a hardware configuration to perform some of the functions for blocks 508 and 512. A video feed 516 is received and processed through a sync stripper 520. The stripped sync signal 532 is used by the digital logic control 524. The digital logic control 524 receives the sync signal 532 and a serial digital bit stream 528 for processing. The digital logic control 524 passes the serial digital bit stream to the Digital to Analog converter 536 and outputs a control signal 540 for the video switch 544. The video switch 544 integrates the video feed 516 and analog data stream 548 into a video feed with analog data signal inserted 552.
  • As an alternative to cable, broadcast or other television delivery methods, the public telephone system may be used to transmit books to the subscribers. An average book would take about 7 minutes to transmit over the public telephone system. Using the telephone system, it is not necessary to combine video and text into a composite signal. In most other respects, the operations center would remain similar whether text delivery was by telephone or cable. File server technology (such as that described in U.S. Pat. No. 5,262,875, entitled AUDIO/VIDEO FILE SERVER INCLUDING DECOM-PRESSION/PLAYBACK MEANS, issued to Mincer, et al., and, U.S. Pat. No. 5,218,695, entitled FILE SERVER SYSTEM HAVING HIGH-SPEED WRITE EXECUTION, issued to Noveck, et al., incorporated herein by reference) may be used at the operations center with a telephone system text delivery method.
  • As another alternative to cable, television, and telephone system delivery, the public telephone system may be used to provide access to the Internet, where the Internet web site 279 may be accessed. Electronic books may be ordered, paid for, and delivered directly from the Internet web site 279 over the telephone system. In addition, the electronic book viewer 266 may be used for wireless voice and data communications using the Internet.
  • When a wireless telephone network is used to distribute electronic books, or otherwise communicate with the home system 258, the home system 258 may receive data using any one or more standard protocols including time division multiple access (TDMA), code division multiple access (CDMA), Global Systems for Mobile Communications (GSM) and Advanced Mobile Telephone System (AMPS) protocols. In any delivery system using the telephone system, individual subscribers may increase the electronic book deliver rate by incorporating high speed modems or other communications devices such as an Integrated Services Digital Network (ISDN) connector, or by use of a Digital Subscriber Line (DSL). These alternative delivery methods are presented in the referenced related applications.
  • II. The Home System
  • The hardware configuration for a four component home system 258 is shown in FIG. 6 a. FIG. 6 b shows a hardware configuration for a two component home subsystem. The home system 258 performs several functions, such as receiving data and video transmissions, stripping (or extracting) the data from the video signal, decrypting the data, screening and storing the data, providing user friendly interface controls and software, displaying menus and text, processing transactions, initiating telephone calls and transmitting billing data. Various hardware configurations may be utilized to achieve the desired functions of the home system 258. For example, as shown in FIG. 6 b, the home system 258 can be configured to utilize the reception and channel tuning capability of the current installed subscriber base of cable converter boxes and televisions 601 and networked computers. The home system 258 can also be designed as an advanced set top terminal converter box with menu generation capability, electronic memory and a telephone modem as described in section V below. Alternatively, the home system 258 can be configured to support alternate delivery and ordering methods as described in the referenced related applications.
  • The electronic components which make up the home system 258 can be arranged in a variety of ways. In the four unit subsystem of FIG. 6 a the viewer 266 and library 262 are wired together while the remaining components communicate through RF transceivers 604. In a simple version of the home system 258 there are only two units, a library 262 and a viewer 266. FIG. 6 b shows a two unit home system 258 with certain optional features.
  • The viewer 266 is generally equipped with a high resolution viewing area 602, digital logic (including a key 605, security 606, and a microprocessor 621), video graphics control and memory 607, power supply circuitry 602 (not shown), an optional battery 603 and an optional RF transceiver 604. In a two unit arrangement, the library 262 contains the connector function to the electronic book distribution system 208, connector function to a public telephone communications system, and memory 600 (which may be removable and portable 600′). More specifically, the library 262 would include data stripping functions 617, digital logic 609, memory storage 600, power circuitry 610, optional connections 611 (including cellular or PCN 611′), optional battery (not shown), optional tuner module 613 and an optional RF transceiver 604. The connector 212 and the public telephone system connection 270, as well as the removable portable memory unit 600 of the library 262 may be broken out into separate components. (FIG. 6 b shows a removable portable hard disk memory 600′ with removable cartridges 614.) Finally, the home system 258 may include an attached keyboard 267 or a wireless keyboard 268. Both the attached keyboard 267 and the wireless keyboard 268 may be used to communicate with the viewer 266 (not shown) or the library unit 262. The wireless keyboard 268 may communicate using radio frequency (RF) signaling, for example.
  • In an alternate arrangement, all functions of the home system 258 may be incorporated into a single unit. The functions of the library 262, for example, may be carried out by a card or chipset in the viewer 266. All the communications devices needed to couple the home system 258 to various telecommunications networks may also be incorporated into the viewer. All interfaces between the home system 258 and the subscriber may be included with the viewer 266. In this embodiment, the viewer 266 may include a communication device for receiving inputs from a separate keyboard. The viewer 266 may also include a built-in video camera 608″ that may be used to transmit images of the subscriber. Using the transceiver 608, the camera 608″ and the speaker/microphone 608′, the subscriber may use the viewer 266 for video conferencing, for example.
  • Therefore, the home system 258 may have as many as five separate components, which communicate with each other. The two, three, four or five separate components which make up the home subsystem can communicate with each other in a variety of ways, including hardwired connection 615, RF transceiver 604 and other wireless methods.
  • RF communications may be used in the home, allowing separate components to be located throughout the home without restriction. The data communicated between the units may be secure data using security techniques presented in Section VII. In addition, the library 262 may provide power to the viewer 266 through the hard wire communication link 615.
  • To receive and strip data from a video signal at the consumer's home, a device such as a cable interface device or cable connector 212 is used. The cable connector device includes a tuner 613, while the cable interface device makes use of existing tuning equipment in the home. In either configuration, data is stripped from the video signal and stored at the subscribers location in the library 262. The phone connector 270, optional connector 611, and modular connector 701 initiate communications and transmit ordering and billing information to the operations center 250 or billing and collection system 278. A digital connector 619 is provided to communicate digital information with the set top 601. The library 262 is the intelligent component of the home subsystem, incorporating the hardware and software necessary to store the text data, generate menus and effect the purchase transactions. In addition to an RF transceiver 604, the home library 262 also includes the necessary jacks and connections to allow the system to be connected to the viewer 266. As shown in FIG. 6 b, the library 262 communicates the text data to the viewer 266 in a secure format, which requires a key 605 for decryption. The text may be decrypted page by page just before viewing. Alternative security embodiments for library 262 to viewer 266 communications are presented in Section VII.
  • a. The Video Connector
  • FIG. 7 shows the flow of the processes performed by the video connector 212. The video connector 212 receives the video signal 608, tunes to the channel containing the text data 612, strips the text data from the video signal 616, and communicates the text data stream to logic components in the library 622.
  • The connection to the video distribution system may be a cable connector to a cable television delivery system, as shown in FIG. 6 b. The cable connector includes a data stripper circuit 617, which accepts video input from either a set top converter, TV or VCR 601, or an optional tuner block 613 that receives the CATV signal through the cable connector 212′. The data stripper circuit 617 strips data out of the video, and outputs a digital bit stream to the digital logic portion 609 of the library unit 262. The data is embedded in the video signal either in the vertical blanking interval or the active video portion in an encrypted and compressed format. The data stripper circuit 617 can be placed inside the set top converter box 601, TV, or in the library 262. The data stripper circuit 617 outputs the digital bit stream to be used by the library digital logic 609.
  • The video connector 212 may also contain a channel tuner module 613 that can tune to the video channel and provide access to the video that contains the data to be stripped. Using the optional tuner module 613, a set top converter, VCR, or TV tuner is not needed in the home system 258. The optional tuner module 613 would instead receive the CATV signal directly through the cable connector 212. Additional connector options, which allow for the receipt of text files using alternative delivery methods, are presented in the referenced related applications. This ubiquitous access is provided using the modular connector 700 as depicted in FIG. 6 b.
  • b. Library
  • An embodiment of the library 262 for a two unit home subsystem is shown in both FIG. 6 b and FIG. 8. The embodiment shown includes the following optional parts: the video connector 212, phone connector 270, RF transceiver 604, and battery pack 624 in addition to a removal portable memory 600′, microprocessor 628, instruction memory unit 632, digital logic 636, and power unit 640.
  • The library 262 contains a digital logic section 609 (not shown in FIG. 8) which includes the microprocessor 628, the digital logic 636 and the instruction memory unit 632. The microprocessor 628 may be a secure microprocessor such as the Mot SC21 device sold by Motorola. The digital logic section 609 will receive the serial digital bit stream from the data stripper circuit 617 and process the data. Error correction and security processing will also be performed by the digital logic section 609 and the data will be checked for proper address. If the address of the data is correct and the library 262 is authorized to receive the data, the data will be decrypted and transferred to the memory storage unit 600, 600′. Authorization to receive the data may be provided by the cable headend or another distribution point. An authorization code may be sent in the serial digital bit stream. The digital logic section 609 will send appropriate text and graphical data to the memory storage unit 600, 600′. It may decrypt then re-encrypt the data or transfer this data in a compressed and encrypted format and the data remains stored in a compressed and encrypted format.
  • i. Memory Storage Unit
  • The memory storage unit of the library may be a removable portable memory unit 600′ (as shown in FIGS. 6 a, 6 b and 8). A variety of options are available for memory storage: a hard disk drive, such as an 80 megabyte, a 200 megabyte, a hard disk with removable platters, and CD ROM. Referring to FIG. 6 b, a hard disk drive unit 600′, which contains removable platters, may also be used. This would provide virtually unlimited library storage capacity. Data may be stored in the memory storage unit in a compressed and encrypted format. As is also shown in FIG. 6 b, the data may also contain a key or unique ID number that matches the ID or key of the viewer 266. This matching of a unique key or ID number prevents unauthorized transfer of text data from the memory storage unit to an unauthorized viewer. Alternative embodiments to store text data in encrypted format are addressed in Section VII. Small memory devices such as smart cards, electronic memory cards or PCMCIA cards (personal computer memory card industry association) may also be used to store the data.
  • ii. Power Circuitry
  • As shown in FIGS. 6 b and 8, the library 262 will accept power from AC wall power 610, DC power 640, or optional battery power 624. The power circuitry 610, 640 may provide all the voltage necessary from either the battery 624 or AC unit for the various circuitry in the library. The power circuitry 610, 640 may also provide power to the viewer through a single data cable when connected to the viewer. The power circuitry 610, 640 will recharge the battery using AC power when in operation. With the optional battery unit 624 installed, the library 262 becomes a portable unit and can still provide power to the viewer 266. In order to extend battery life, power conservation measures may be utilized, such as shutting down the memory system when not in use. When the viewer unit 266 is being utilized and the library circuitry is not being utilized, virtually all power may be shut down to the library 262.
  • iii. Connection to the Public Telephone System
  • In an embodiment, the connection to the telephone system may be provided by a connector device 611, which consists of a modem. Various available modems may be used to perform this function. As shown in FIG. 6 b, cellular phone or PCN phone connections 611′ may also be provided. When the home system 258 is first initialized, the modem may be used to transfer the name and credit card information of the consumer to the billing and collection system 278. The telephone connection 270 may be utilized each time an electronic book is purchased by a consumer to complete and record the transaction. The telephone connection 270 may also be used to receive the text data from the operations center 250, by-passing the video distribution system 208. The phone connection 270 may be a separate unit as shown in FIG. 6 b. However, alternate means exist to connect the home system 258 to the billing and collection system 278 or the operations center 250. The modular connector 701 (shown in FIGS. 6 b and 8) provides access to each communication network to provide a path from the home system 258 to the billing and collection system 278 or the operations center 250. These alternatives are presented in detail in the referenced related applications.
  • iv. Library Processing
  • FIG. 9 shows for one embodiment, an example of processing performed by the digital logic section 609 of the library 262 on the data stream 651 received from the video connector 212 or stripper circuit 617. In step S650, digital logic section 609 checks the data stream 651 for error correction. If an error is detected, in step S654 digital logic section 609 de-interleaves the data and in step S658 runs a FEC (Forward Error Correcting) algorithm. In steps S650, S654 and S658, the digital logic section 609 performs the error correction needed on the data stream. If no error correction is necessary the digital logic section 609 proceeds to step S662 and checks data packets individually for packet address.
  • If the address is a unique address, the process moves to step S666 and the digital logic section 609 checks whether the address of the packet matches the library box ID number. The library box ID number is a unique number associated with the library 262. The library box ID is used to ensure security of the data. The process then moves to Step S668, and the digital logic section 609 performs the decryption processing, as presented in Section VII. The process then moves to step S670 and the digital logic section 609 determines whether an electronic file has already been opened into which the data packet can be saved. If no data file has been opened, the digital logic section 609 opens a new data file for that packet. If an electronic file has been opened, the process moves to step S678 and the digital logic section 609 saves the packet in the electronic file on disk. The process moves to step 682 and the digital logic section 609 checks to see if this is the last packet for a particular book for a particular textual data block being received. If it is the last packet of information, the process moves to step 686 and the digital logic section 609 closes the electronic file and updates the directory of available electronic files. Following either step S682 or S686, the process returns to receive another data packet from the data stream received from the data stripper block.
  • If the packet address is checked and the address is determined to be a broadcast address, the process moves to step S690 and the digital logic section 609 determines the type of message that is being sent. The message may be an index of book titles, menu (and menu graphics) information, announcements, special offerings, discounts, promotions, and previews, for example. The process then moves to step S694 and the digital logic section 609 stores the message in an appropriate electronic message file. The process then returns to step S650 to receive another data packet and perform another error check.
  • Using the process of FIG. 9, the library 262 is able to receive, store and update directories related to the textual data and graphical data (that can be used to depict pictures in a given book or to generate menus). Variations of the processes are possible depending on the format of the data and operating system of the library 262. FIG. 10 shows an example of the processing of information requests from the viewer 266 at the library 262. Information requests from the viewer 266 are received either through the cable connecting the viewer 266 to the library 262 or through wireless transmissions such as RF. It is possible in some embodiments for subscribers' requests to come from a set top converter box 602 (see Section V).
  • Information requests received from the viewer 266 generally fall into three categories: (1) directory data of books stored in the library 262, (2) index of all available books on the system, and (3) requests for a specific book (step S700). In step S704, the digital logic section 609 answers a request from the viewer 266 for a directory of data showing the books stored at the viewer 266. The directory of data is sent to the viewer 266 so that it may be displayed to the subscriber. In step S708, the digital logic section 609 handles requests from the viewer 266 for an index of all available books on the system. The library 262 will obtain an index of all the available books on the system and transmit that index, in step S712, with menu information to the viewer 266. In step S716, the digital logic section 609 replies to a request from the viewer 266 for a specific book. In step S720, the digital logic section 609 opens an electronic file for the specific book requested by the viewer 266 and transmits the record or transmits the information on a packet-by-packet basis to the viewer 266. This process of transmitting the specific book, record, or packets to the viewer 266 continues until the last record or packet has been sent in step S724.
  • In addition to the processes shown on FIG. 10 in handling a request for a specific book, the library 262 also orders and receives specific books from the operations center 250 using the process as described in step S716. Following a request for a specific book which is not stored at the library 262, the library 262 will proceed to determine the next available time the book will be on the video distribution system 208 or an alternative delivery system and ensure reception and storage of that book (process not shown). In performing this process the library 262 will transmit to the viewer information on when it will obtain the text data for the book so that the subscriber may view the book. In addition to timing information, price and other ordering information may also be passed by the library 262 to the subscriber.
  • c. The Viewer
  • FIG. 11 is a block diagram of a viewer 266 showing its internal components. The viewer 266 of FIG. 11 is similar to the viewer 266 depicted in FIG. 6 b. The viewer 266 is designed to physically resemble a bound book. The viewer 266 is made up of five primary components and seven optional components: (1) LCD display 602, (2) digital circuitry (not shown), (3) video graphics controller 607N, (4) controls 740, (5) book memory 728, (6) optional power supply circuitry 736, (7) optional battery 603N, (8) optional RF transceiver 604, and (9) optional cellular or mobile connector (such as 611N) (10) optional keyboards 267 and 268, and (11) an optional speaker/microphone 608′, (12) optional alternative communication interface devices.
  • (1) A high resolution LCD screen 602, of VGA quality, may be used by the viewer 266 to display text and graphic images. The screen may be the size of one page of an electronic book. A two page screen or two screens may also be used with the viewer 266.
  • (2) Digital circuitry that includes a secure microprocessor 621, instruction memory 732, and digital logic. Data is transferred to the viewer 266 in compressed and encrypted format. In one embodiment, the secure microprocessor 621 compares the ID number of the viewer 266 with the incoming data stream and only stores the text data if the ID number of the viewer 266 matches that within the incoming data stream. The viewer 266 may be configured to not output text data or other data and that the data is decompressed and decrypted only at the moment of viewing and only for the current page being viewed. These measures provide additional security against unauthorized access to data. Additional embodiments are presented in Section VII.
  • (3) A video graphics controller 607′ that is capable of assisting and displaying VGA quality text and graphic images is included in the viewer 266. The graphics controller 607′ is controlled by the digital circuitry described above. Text may be displayed in multiple font sizes.
  • (4) The viewer 266 of FIG. 11 has touch panel controls 740. These unique and novel controls 740 allow the consumer to select stored electronic books and electronic books from catalogues, move a cursor, and turn pages in an electronic book. Typically, the controls 740 include forward and reverse page buttons 742, 741, a ball 743 for cursor movement, one or more selection buttons 745, a current book button 747 and a bookmark button 749 (see FIG. 14 a).
  • The controls 740 should be easy to use and conveniently located. Referring to FIG. 14 a, the controls for the viewer 266 may be located below the screen 602 at the bottom portion of the viewer 266. The next page turn button 742 is the most used button 740 and is located towards the right edge of the page. The subscriber is likely to use right hand thumb movements to work the controls particularly the page turn buttons 741, 742. Therefore, the buttons may be arranged in such a manner that the buttons are easily controlled by a subscriber's right thumb. Generally, this can be accommodated either on the lower portion of the viewer 266 (as shown) or along the right hand margin of the viewer 266 (not shown). The current book button 747 and bookmark button 749 are usually the least used of the controls 740. Therefore, in the example shown, those buttons 747, 749 are located on the inside portion towards the binder of the viewer 266.
  • Locating the ball 743 or other cursor movement device (such as four pointer arrows not shown) in the bottom center of the viewer 266 is both easier for the subscriber to use and easier in manufacturing the viewer 266. The selection buttons for the cursor 745 may be located below the middle diameter of the cursor ball 743 on the right and left sides of the ball as shown. If pointer arrows are used for cursor movement, a selection button 745 may be located in the center of the four arrow buttons (not shown). Again, the most used controls 740 should be located where a subscriber's right hand thumb would normally rest.
  • (5) Book memory 728 for at least one electronic book or more of text is included in the viewer 266. The memory 728 stores text and any graphics, which represent pictures in a book. The memory 728 can also store menu graphics data. Two different memory 728 devices may be used in the viewer 266, one for the instructions for the microprocessor 621 in the digital circuitry and a second type of memory may be used for the book memory 728 (and graphics). Various memory devices available on the market may be used such as, ROM, RAM or a small hard disk. Since an electronic book requires approximately 0.6 megabytes of storage, a small hard disk providing approximately 60 MBytes of storage provides memory to store approximately 100 electronic books.
  • Text for electronic books may be displayed in various font sizes. To accommodate various fonts for display, a variety of fonts are stored in instruction 732 or book memory 728. Thus larger or smaller fonts may be recalled from memory 621, 728 to create displays desired by the subscriber.
  • (6) Power supply circuitry 736 in the viewer 266 will accept power from either an AC power source or from an optional battery 603′, or the library 262. The power supply circuitry 736 provides the necessary voltages to accommodate the various systems within the viewer 266.
  • (7) An optional battery 603′ is provided in one embodiment. The battery 603′ is automatically recharged when AC power is available.
  • (8) An optional RF transceiver 604 which provided two-way data link between the viewer 266 and other components of the home subsystem can also be included in the viewer 266.
  • (9) Also, the viewer 266 may include a cellular transceiver (not shown) for mobile communications.
  • (10) The optional wired (attached) keyboard 267 and wireless (e.g., RF) keyboard 268 (see FIG. 6 a) may be used with the viewer 266 to provide communications between the subscriber and the viewer 266.
  • (11) The optional speaker and microphone 608′ allow the viewer 266 to provide audio signals to the subscriber, and allow the subscriber to provide an audio input. The speaker and microphone 608′ may be used in conjunction with the cellular transceiver 608 or other telecommunications equipment to provide for reception and transmission of telephony and data.
  • (12) The optional alternative communication interface devices allow the viewer 266 to make use of a variety of communication paths, including wireless Internet paths.
  • The viewer 266 of FIG. 11 has parts available for providing connections to: a library 744, electronic card memory 748, CD ROM units 752, and a portable memory unit 756 (such as that shown in FIG. 6 b as 600′). Various electronic memory cards such as PCMCIA can be used with the viewer 266 to supply and store electronic books.
  • Security, low power consumption and excellent display technology are desired features of the viewer 266 design. The viewer 266 should be lightweight and portable. The viewer 266 contains a software operating system that allows electronic books to be stored, read and erased and includes the capability to order electronic books and retain them in memory 728 for a predefined period of time determined by the system operator. The software can be configured to allow the electronic book to be read during a period of time (i.e., two weeks) and then automatically erased, read once and erased, or held in memory permanently. In one embodiment, each viewer 266 may have a unique key 605. All of the data storage may be encrypted with the key 605 for an individual viewer 266 to prevent more than one viewer 266 accessing the text file or electronic book file. Alternative security embodiments are presented in Section VII.
  • FIG. 12 is a flow diagram of some of the processes executed by the microprocessor 621 in the viewer 266. The viewer 266 may receive inputs from the subscriber through touch panel controls 740. In step S800, the subscriber's information requests are then processed by the microprocessor 621.
  • In step S804, if the subscriber requests a menu of available electronic books, the microprocessor 621 will select an electronic book menu. In step S808, the microprocessor 621 will open the electronic files that list the electronic books which are available (related to the category of topic of the menu) and display the menu with the names of the available electronic books.
  • If the subscriber selects a particular book to read, then in step S812, the microprocessor 621 will process the selection and determine the electronic file that contains the specific electronic book. In step S816, the microprocessor 621 will open the file for that specific electronic book and normally access the first page. (If a pointer has already been set in that books electronic file, the process may default to that page.) In step S820, the microprocessor 621 will then determine which page needs to be displayed. That is, the microprocessor 621 will determine whether a next page, previous page or a bookmarked page needs to be displayed. If the pointer for the electronic file is not in the correct location then in step S828, the microprocessor 621 will move the pointer and obtain the previous page of data from the stored file. Otherwise, in step S824, the microprocessor 621 will normally obtain the next page of text from the stored electronic file. In step S832, the microprocessor 621 decrypts the text data using one of the embodiments presented in Section VII, decompresses the text data and sends the data to the video display. The video display will generally have a video display memory associated with it. In step S832, the microprocessor 621 will send the data directly to that video display memory. The circuitry for the display then completes the process of displaying the page of text.
  • If the subscriber, through the controls 740, requests (from step S800) that the power be turned off, then in step S836, the microprocessor 621 initiates power off. In step S840, the microprocessor 621 saves the pointer in memory to the page number in the book that the viewer 266 is currently reading. In step S844, the microprocessor 621 closes all the electronic files and signals the power circuitry to shut down the power to the various circuits in the viewer 266. With these examples of basic processes the viewer 266 is able to display book selections and display text from those electronic books.
  • d. Menu System
  • Referring generally to FIG. 13, the electronic book system 200 may have a menu system 851 for selecting features and books from the electronic book system 200. The operating software and memory required for the menu system 851 may be located at the viewer 266 (e.g., the instruction memory 732 and/or book memory 728). However, it can also be located at the library 262 (e.g., the instruction memory 632) or the library 262 and the viewer 266 can share the software and memory needed to operate the menu system 851. Since the menus are usually displayed on the viewer, and since the viewer 266 may be capable of operating in the absence of the library 262, the basic software and memory to create the menus is more conveniently located at the viewer 266.
  • The menu system 851 allows sequencing between menus and provides menu graphics for graphical displays such as on the LCD display 602 of the viewer 266. In an electronic book system that uses a set top converter these menus may also be displayed on a television screen. In an electronic book system that uses a computer, these menus may also be displayed on the computer monitor. In an embodiment, the menus provide just basic text information from which the subscriber makes choices. In other embodiments, the menus provide visual displays with graphics and icons to assist the subscriber and allow for subscriber interaction and real-time ordering of electronic books or other content available to the subscriber.
  • FIG. 13 depicts the menu system 851 with sequencing. The primary menus in the menu system 851 are an introductory menu 850, a main menu 854 and various submenus 858. In the embodiment shown, there are three levels of submenus 858. In certain instances one or two submenus 858 is sufficient to easily direct the subscriber to the selection or information requested. However, there are features in which three or more submenus 858 make the user interface more friendly for the subscriber. Each level of submenus 858 may consist of multiple possible menus for display. The particular menu displayed depends on the selection by the subscriber on the previous shown menu. An example of this tree sequence of one to many menus are the help submenus 887, 888. Depending upon the specific help requested, a different level two help menu is displayed to the subscriber.
  • An example of an introductory menu 850 is shown on FIG. 14 a. Generally the introductory menu 850 introduces the viewer 266 to the system and provides initial guidance, announcements and instruction. The introductory menu 850 is followed by a main menu 854, an example of which is shown in FIG. 14 b. The main menu provides the viewer 266 with the basic selection or features available in the system. FIG. 14 b is an example of a main menu 854 offering many additional features and submenus 858 to the subscriber. For example, FIG. 14 b shows that the viewer 266 is able to choose by a point and click method, many options including: (1) free previews, (2) books you can order, (3) books in your library, (4) your current book, (5) help, (6) on-line services and (6) other system features. Following a selection on the main menu 854, a corresponding submenu 858 is shown.
  • FIG. 13 shows fourteen available primary or first level submenus. They are (1) account set up 862, (2) free previews 866, (3) book suggestion entries 855, (4) books in your library 872, (5) books you can order 878, (6) your current book 884, (7) help 887, (8) available features 890, (9) messages 893, (10) account information 896, (11) outgoing message submenu 898, (12) show links submenu 970, (13) create links submenu 980, and
  • (14) show interactive files submenu 990. FIG. 14 c is an example of a first level submenu for books in your library 872. This “Book In Your Library” example submenu 872 shows six available books by title and author and provides the subscriber with the ability to check a different shelf of books 874 or return to the main menu 854. FIGS. 14 d and 14 e show example submenus 858 for books that may be ordered using the “Books You Can Order” submenu 878.
  • FIG. 14 f is an example of a confirmation menu which confirms a subscribers order. In this particular example, the subscriber is required to enter a PIN number to complete the subscriber's order. Any alpha-numeric or similar password may be used to ensure the subscriber is an authorized subscriber. In one embodiment, the subscriber confirms an order with a PIN or password and then receives a final confirmation screen. The final confirmation screen is primarily text and may state:
      • Your book order is now being processed using CABLE.
      • Your book will be delivered overnight and your VISA account will be charged $2.95.
      • Your book will be available for reading at 6:00 AM EST tomorrow. Make sure that:
      • 1. your Library Unit and Cable Connection Unit are plugged in with aerials up tonight; and
      • 2. you tune your cable converter to THE BOOK Channel. The TV set does not have to remain on.
        or similar language.
  • Examples of the “Account Set Up Menu” 862 and further submenus 858 related to account set up (which provide instructions and account input 864) are shown in FIG. 14 g and FIG. 14 h. These submenus 858 allow initialization of an account at the operations center 250 and orders to be charged to credit cards. The submenus 858 include the ability to enter data related to your desired PIN number or password, credit cards, phone numbers, etc. In one embodiment, the account set up is performed using the telephone system. A confirmation menu verifies that the account has been properly set up with the desired PIN or password and credit card. However, additional set-up methods are presented in the referenced related applications.
  • Free previews for books 866 are also provided by submenus (868, 870). Examples of the free preview menus are shown in FIG. 14 i and FIG. 14 j. FIG. 14 i shows a menu depicting various books for which previews are available for viewing. Following a book selection, a screen submenu showing an excerpt of the selected book cover's description is provided along with an excerpt from a critic's review of the selected book. In one embodiment, this preview screen for a particular book also allows the subscriber to select a submenu, which provides information about the author. The book preview submenu may also include a still video picture or graphics portraying a book cover or a scene from the book. An example of such a still video picture or graphics is shown in FIG. 14 j, which depicts a preview screen 870 about the author. The author's preview screen 870 shows a picture of the author, provides a short biography, and may allow the subscriber to order the author's books. The price for ordering the authors various books may also be shown on the menu.
  • In addition to free previews, in other embodiments, the electronic book system 200 provides the subscriber with a book suggestion feature (see 855). This is accomplished using the menu system 851 and the processor with associated memory located at the viewer 266, library 262 or at the distribution point (1020 or 250). When necessary, information for the book suggestion feature is sent in the text data of the signal to the home system 258. With this feature, books or authors are suggested to a subscriber based upon historical data of the subscriber's previous orders, demographics or mood of the subscriber, other indicators, and/or by text word searches.
  • In one book suggestion embodiment, text word searches of preview information (such as book cover descriptions, critics reviews and biographies about the author) and/or text of books or other titles are performed by the library 262 using databases stored in the library memory 600. Personalized book or author suggestions are made to the subscriber by obtaining information from the subscriber indicative of general subscriber interests. Subscriber entries may be solicited from the subscriber using the book suggestion entry submenu 855. The system uses these subscriber entries either directly or indirectly to search for books or authors to suggest to the subscriber.
  • Generally, the electronic book suggestion methods may be categorized into two categories, either responsive methods (which respond to a series of subscriber menu entries), or intelligent methods (which analyze data to suggest a book). Using a responsive or intelligent method, the system 200 determines a list of suggested titles or authors and creates a second or third level submenu 856, 857 to suggest the titles for subscriber selection.
  • Responsive methods of suggesting titles include, for example, the use of mood questions, searching for authors, and keyword searching. Using the instruction memory 732 and menu generation hardware (e.g., 607) of the viewer 266, a series of mood questions can be presented on menus to determine a subscribers interest at a particular time. For this methodology, the home system's 250 processor 404 and instruction memory 416 assign each title mood indicators (and sub-indicators) from a group such as light, serious, violent, short, long, dull, exciting, complex, easy-read, young theme, old theme, adventure, romance, drama, fiction, science-fiction, etc. These indicators are sent to the home system 258 with the text data and are stored in library memory 600. Based upon the subscriber entries, the processor associates a set of indicators with the subscriber's request and a set of books with matching indicators are located for suggesting to the subscriber.
  • Responsive searches for authors or keywords (a search word provided by the subscriber) are generally performed by the library processor 628 and instruction memory 632 on data stored in the library memory 600. For example, a keyword given by the subscriber may be searched for a match in library memory 600 storing the book reviews, critics and previews databases. Thus, if a subscriber provided an entry of the word “submarine” on an appropriate submenu, the title “Hunt For Red October” may be located by the microprocessor 628 using instruction from a routine in instruction memory 632.
  • Intelligent methods of suggesting programs include analyzing personal profile data on the subscriber and/or historical data about the subscriber such as past books ordered by the subscriber (or buy data). This method may be performed at the distribution point or operations center 250 by the on-site processor 404 using subscriber databases stored in memory 428. The home system 258 receives the text data including program suggestion information from the distribution point or operations center 250 and generates the program suggestion submenus 855, 856, 857 using the same text data receiving 212 and viewer menu generation hardware (e.g., 607, 621) described above. Software routines and algorithms stored in instruction memories (e.g. 632, 732) are used to analyze historical data and book ordered data to determine a line of books to suggest to the subscriber.
  • The algorithms for this powerful feature of suggesting books or authors to subscribers is disclosed in great detail in U.S. Pat. No. 5,798,785, entitled TERMINAL FOR SUGGESTING PROGRAMS OFFERED ON A TELEVISION PROGRAM DELIVERY SYSTEM, filed Dec. 2, 1993, which is incorporated herein by reference.
  • Referring to FIG. 13, submenus 858 are shown on the “Books In Your Library” submenu 872 and may be broken into shelf numbers with submenus for each shelf 874, 876. The submenus 858 for the “Books You Can Order” submenu 878 is similarly broken out into submenus by shelves 880, 882. These shelves may each be a category or genre of books. Books may be grouped into categories such as best sellers, novels, fiction, romance, etc. See FIG. 14 d.
  • Referring to FIG. 13, the submenu 858 for “Your Current Book” 884 allows a subscriber to select a current book 884 and then determine what page to view. This selection is confirmed with a level two submenu 885. The help submenu 887 provides the subscriber with additional help screens 888. The submenus 858 for available features 890 may be broken out into a sequence of separate submenus for each feature 891, 892. Referring to FIG. 13, messages can also be sent with the electronic book selection and delivery system 200. A level one message screen provides the subscriber with the ability to select from various messages the subscriber has pending 893. Each message is then shown on a separate submenu screen 894, 895. The message may contain text and graphics.
  • Referring to FIG. 13, account information is shown on a level one submenu 896 and then follow-on submenus 858 show the recent orders and your account balance 897. There is also a level one submenu for outgoing messages 898 which has a follow-on submenu used as an input screen 899.
  • In addition to the specific features and submenus described in FIG. 13 and FIG. 14 a through FIG. 14 j, many other variations and features are possible. When a book is finally selected for viewing the title page 886 will appear on the screen followed by a page of text.
  • III. The Billing and Collection System
  • In one embodiment, the billing and collection system 278 (shown in FIGS. 2 and 3) utilizes the latest technology in electronic transaction and telephone switching to track orders, authorize deliveries, bill consumers, and credit publishers automatically. The telephone calls initiated by the phone connector 270 are received by the billing and collection system 278 which responds immediately without human intervention by placing the order and charging the consumers credit card account. Data is compiled periodically and publishers 282 are credited for sales of their books or other text. The billing and collection system 278 may also connect with subscribers through two-way cable connections, cellular, or other communication means. These additional methods are detailed in the referenced related applications.
  • The billing and collection system 278 communicates with the operations center to track changes in available books and to provide statistical data to the operations center 250.
  • IV. Public Library, School, and Bookstore System
  • The electronic book system can be modified to be used at public libraries, schools, bookstores, newsstands, or stand-alone kiosks. FIG. 15 shows one possible arrangement of components for the distribution location. The main unit is the file server 900. The file server 900 is a large electronic memory unit that can store thousands of books, newspapers, or periodicals. Various electronic storage means may be used in the file servers, such as hard disks, read-write CD ROMs and read-only CD ROMs.
  • The system comprises five components; the file server 900, a converter or video connector 904 or connector capable of interfacing to one of the alternative delivery systems presented in the referenced related applications, a controller 908, a viewer 912, and a catalog printer 916. The software for controlling the system is primarily located in the controller 908. The converter or video connector 904 is similar to those described above. In this configuration the controller unit 908 monitors the data being transferred to the file server 900 by the converter 904. The controller 908 may be provided with a viewing screen and several control buttons. When it is necessary to have a larger screen to perform more sophisticated controlling of the system a viewer 266 may be connected to the controller 908 and the viewer screen and controls 740 may be used.
  • For security reasons, the controller 908 is only able to download books to public viewers 912 which are authorized to receive books from the particular file server 900. Also for security reasons it is not desirable that the public viewer 912 have access to more than one file server 900. In this way, security can be maintained over the text data for books. The public viewer 912 may be limited to receiving one or two books at a time from the controller 908. When the user of the public viewer 912 needs a new or additional book, the user returns the viewer 912 to the school or public library where the user receives a new book from the controller 908. Additional security mechanisms associated with this kiosk-based distribution of electronic books are presented in Section VII.
  • In order to track the books that are available on the file server 900, the titles of the available books may be printed on a catalog printer 916. The catalog printer 916 is connected to the library controller 908 and the titles of the books are downloaded to the catalog printer 916. For security reasons, the coded text for any of the electronic books may not be authorized for printing using the controller 908 and catalog printer 916. In order to maintain security over the data, none of the electronic book data may be allowed to be downloaded to the printer 916. Once a complete printout of available book titles, magazines, or other textual material is complete, a hard copy of the catalog 920 can be maintained at the file server 900.
  • The system shown may also be used at bookstores. The bookstores can rent the public viewer 912 to customers with the text for one or two books loaded onto the public viewer 912. The public viewer 912 may be provided with an automatic timeout sequence. The timeout sequence would erase the textual data for the books after a certain period of time, for example, two weeks. It is expected that after a period of time (perhaps within two weeks) the renter would return the public viewer 912 to the bookstore and receive additional books for viewing. Using this arrangement, it is also possible for the bookstore to (permanently) sell a viewer 912 to a regular customer. The customer then returns to the bookstore from time to time to receive textual data for a book which the customer can then store permanently on the customer's own viewer 912. Various other configurations are possible for bookstores, schools and public libraries using the file server 900 and public viewer 912 can be described.
  • V. Use of a Set Top Converter
  • Existing set top converter boxes such as those made by Scientific Atlanta or General Instruments are presently unequipped to handle the book selection system of the present invention. Although set top converters may be built which include the library functions, hardware modifications are necessary in order to use the book selection system with existing set top converter technology.
  • FIGS. 16 a and 16 b are examples of hardware modifications or upgrades. A port is used to attach hardware upgrades described below to a set top terminal. Two upgrades are possible to set top converters 601 to assist in receiving and selecting electronic books, a menu generation card upgrade (FIG. 16 a) and an information download unit (FIG. 16 b). Each of these upgrades may be connected to the set top terminal unit through an upgrade port. A four wire cable, ribbon cable, FireWire (IEEE 1394B) interface connector, USB connector, or the like may be used to connect the upgrade to the set top converter 601.
  • A card addition 950 to a set top converter 601 is depicted in FIG. 16 a. The card 950 shown provides the additional functionality needed to utilize the book selection system with existing set top converter 601 technology. The card 950 may be configured to slip inside the frame of a set top terminal and become part of the set top terminal, an advanced set top terminal. The primary functions the card 950 adds to the set top converter 601 are the interpreting of data signals, generating of menus, sequencing of menus, and, ultimately, the ability of the subscriber to select a book using either the television or a viewer 266. The card 950 also provides a method for a remote location, such as the cable headend, to receive information on books ordered. The books ordered information and control commands may be passed from the cable headend to the card 950 using telephone lines or alternative ordering methods as presented in the referenced related applications.
  • The primary components of the card 950 are a PC chip CPU 952, a VGA graphic controller 954, a video combiner 956, logic circuitry 958, NTSC encoder 960, a receiver 962, demodulator (not shown), and a connector 611′, which consists of a dialer. The card 950 operates by receiving the data text signal from the cable headend through the coaxial cable. The logic circuitry 958 of the card 950 receives data 964, infrared commands 966, and synchronization signals (not shown) from the set top converter 601. Menu selections made by the viewer 266 on the remote control are received by the set top converter's 601 IR equipment and passed through to the card 950. The card 950 interprets the IR signal and determines the book (or menu) the subscriber has selected. The card 950 modifies the IR command to send the information to the set top converter 601. The modified IR command contains the channel information needed by the set top converter 601. Using the phone line 968 and dialer 611′, the card 950 is able to transmit electronic books ordered information to the cable headend. It is also possible to receive the electronic books over the telephone lines and other telecommunications networks, including wireless networks, and by-pass the video distribution system.
  • These commands are passed through the interface linking the set top terminal's microprocessor with the microprocessor of the hardware upgrades. In this way, subscriber inputs, entered through the set top terminal keypad or remote control, can be transferred to any of the hardware upgrades for processing and responses generated therein can then be sent back to the set top terminal for display. In one embodiment the IR commands 966 are transferred from set top terminal 601 to hardware upgrade.
  • Hardware upgrades may include a microprocessor, interactive software, processing circuitry, bubble memory, and a long-term memory device. In addition to these basic components, the hardware upgrade may make use of an additional telephone modem or CD-ROM device.
  • An information download hardware upgrade 1001 shown in FIG. 16 b allows the subscriber to download large volumes of information from the operations center 250 or cable headend using a set top terminal 610. The hardware upgrade 1001 will enable subscribers to download data, such as electronic books and electronic magazines, to local secure storage. Primarily, the hardware upgrade 1001 is an additional local storage unit 1003 (e.g., hard disk, floppy, optical disk or magnetic cartridge and may include a microprocessor 1005, instruction memory 1007, and a random access memory 1009, as shown in FIG. 16 b). A small portable viewer may also provided with the upgrade 1001 to enable downloaded text to be read without the use of a television.
  • The downloadable information may be text or graphics supplied by the operations center 250 or cable headend. With the upgrade 1001, electronic books may be downloaded and read anywhere with the viewer 266. Using the upgrade 1001, electronic books may be downloaded and stored in compressed form for later decompression. The electronic books may be decompressed only at the time of viewing. Important text that the public desires immediate access may made available through this system. Text such as the President's speech, a new law, or a recent abortion decision rendered by the Supreme Court may be made immediately available.
  • In one embodiment, electronic book ordering information is stored at each set top terminal 610 until it is polled by the cable headend using a polling request message format. An example of a polling request message format consists of six fields, namely: (1) a leading flag at the beginning of the message, (2) an address field, (3) a subscriber region designation, (4) a set top terminal identifier that includes a polling command/response (or P/F) bit, (5) an information field, and (6) a trailing flag at the end of the message. A similar response frame format for information communicated by the set top terminal to the cable headend in response to the polling request may be used. FIG. 17 shows components of a set top terminal 610′. The components include a data receiver 617′ and a data transmitter 1011. The data transmitter provides upstream data communications capability between the set top terminal 610′ and the cable headend. Upstream data transmissions are accomplished using the polling system described and, using a data transmitter 1011. Both receiver 617′ and transmitter 1011 may be built into the set top terminal 610′ itself or added through an upgrade module. Regardless of the specific hardware configuration, the set top terminal's data transmission capabilities may be accomplished using the hardware shown in FIG. 17.
  • FIG. 17 shows RF signals, depicted as being received by a data receiver 617′ and tuner 613 working in unison. Both of these devices are interfaced with the microprocessor 1013, which receives inputs 1015, from the subscriber, either through a set top terminal's keypad, a remote control unit or viewer 266. Generally, all cable signals intended for reception on the subscriber's TV are accessed by the tuner 613 and subsequently processed by the processing circuitry 1017. This processing circuitry 1017 typically includes additional components (not shown) for descrambling, demodulation, volume control and remodulation on a Channel 3 or 4 TV carrier.
  • Data targeted to individual set top terminals is received by the data receiver 617′ according to each set top terminal's specific address or ID. In this way, each addressable set top terminal 610′ only receives its own data. The data receiver 617′ may receive set top terminal 610′ specific data in the information field of the signal frame described or on a separate data carrier located at a convenient frequency in the incoming spectrum. The received data includes information regarding electronic books and menus available for selection. The subscriber may enter a series of commands 1015 using a keypad or remote control in order to choose an electronic book or menu. Upon receipt of such commands, the set top terminal's microprocessor 1013 instructs the tuner to tune to the proper frequency of the channel carrying data and subsequently instructs the processing circuitry 1017 to begin descrambling of this data.
  • Upon selection of an electronic book, the microprocessor 1013 stores any selection information in local memory (not shown) for later data transmission back to the cable headend. The set top terminal's microprocessor 1013 coordinates all CATV signal reception and also interacts with various upstream data transmission components. Typically, the data transmitter 1011 operates in the return frequency band between 5 and 30 MHZ. In an alternative embodiment, the frequency band of 10 to 15 MHZ may be used. Regardless, however, of the frequency band used, the data transmitter 1011 sends information to the cable headend in the information field of the response frame described. Those skilled in the art will recognize that a number of variations and combinations of the above-described set top terminal hardware components may be used to accomplish upstream data transmissions.
  • VI. Books-on-Demand System
  • The electronic book system 200 described may also be configured in a book-on-demand style. FIG. 18 a shows one example of a configuration for a book-on-demand system. A book on demand system requires more powerful two-way communications between the consumer's home, bookstore, school or public library and either the operations center 250 or a distribution site 1020 such as the cable headend. In one embodiment, this type of two-way communication can be provided by the hardware shown in FIG. 17 and described above. Additional methods related to alternative communication paths are presented in the referenced related applications.
  • Referring to FIG. 18 a, in a book-on-demand system, the subscriber selects the book to be download from an available menu of books (see for example FIGS. 14 d and 14 e). The data for menus of available books is usually sent to the subscriber location by the distribution site 1020. After the subscriber's menu selection, information about the subscriber selection (or request) is then communicated to either a distribution point 1020 (such as a cable headend) or the operations center 250. Upon receipt of this request, the needed textual and graphical information for the book is spooled and sent to the subscriber. In this manner, electronic books are only sent when requested by the subscriber and are sent immediately upon demand for the electronic book (or text).
  • In order to support such a demand system, the text delivery and distribution must be conducted on a strong nodal architecture distribution system, such as, a video-on-demand cable or telephone television system, through use of individual telephone calls on the public telephone system or cellular phone system, through the use of the Internet, or a number of other data network options.
  • The book-on-demand system allows for a greater selection of electronic books to the subscriber and limits the amount of communicated book data that is unnecessary or unneeded. It also provides the electronic book to the subscriber in a much timelier fashion.
  • In addition to a stronger distribution system, a book-on-demand system requires a distribution point 1020 to have more sophisticated equipment to access and “spool out” the textual information. This can be accomplished using file server technology 1024 for storing the books and distribution technology such as ATM 1028 or telephone-type switching (not shown) to distribute the textual information. The file server 1024 and distribution technology that can be used in configuring such a book-on-demand system is described in U.S. Pat. No. 5,262,875 and U.S. Pat. No. 5,218,695, cited above.
  • FIG. 18 a shows an embodiment for a book-on-demand system that utilizes file server technology. In addition to books, the embodiment of FIG. 18 a will support distribution of nearly any digital data. Books or textual files are received from publishers 282 and other sources through local feeds 1032, ATM 1028, or by satellite dish 1036, for example. The data is then stored in memory 1040 at the file server 1024. In one embodiment, the distribution point 1020 is a cable headend that receives requests from subscribers and delivers text to subscribers over a two-way communication system (such as a video-on-demand system (VOD) 1044).
  • The library 262 can be connected to either a basic premium-type service cable system 1048, a near video-on-demand type cable system (or pay-per-view (PPV) 1052) or a video-on-demand cable system 1044. In connecting with either of these three systems the library 262 may access the cable directly or may access the system through a set top terminal 601′, 601″, or 601′″.
  • Using the two-way video-on-demand system 1044, a subscriber is able to request a specific book title and receive that text immediately following its request. To accomplish this, the distribution point 1020 transmits a list of available books through the cable delivery system to the library 262. The library 262 displays the list of available books on a menu or similar format. As described earlier, the library 262 may use menus which list categories of available books to form its request from the distribution point 1020. After selecting a book the library 262 then sends a request signal on the two-way communication system 1044 back to the distribution point 1020. This request signal can be handled in two ways. The library 262 either initiates the request or the distribution point 1020 polls the various libraries on to the two-way system 1044. Upon receiving the request for the book title, the text associated with that book title is transmitted to the library 262 using the two-way cable system 1044.
  • FIG. 18 b is an expanded view of an operations center 250 that supports a regional or national book-on-demand system. In fact, the operations center 250 shown supports distribution of nearly any digital data. The operations center 250 supports multiple feeds to receive digital information by tape 1060, 1060′, ATM 1028, or satellite 1036. The information is processed through an input MUX 1064 and a small file server 1068 before reaching the master file server 1072. Digital data such as books received from publishers 282 is then stored on the master file server 1072. The digital data may be stored compressed in a standard format such as MPEG2.
  • A system controller 1076 provides control over the regional or national book-on-demand system. Books may be packaged into groups to provide feeds to various cable headends. In addition, scheduling and marketing research are conducted at the operations center 250. In order to handle the scheduling and market research, book buy data is received at the operations center 250 through a multiplexer 1082. Book buy information can be provided by the operations center 250 to the billing and collection system 278.
  • The operations center 250 is also equipped to insert messages or advertisements into the file server. These messages or advertisements will eventually be received by the subscribers.
  • The master file server 1072 uses an output multiplexer 1080 and ATM 1028 as well as satellite connections to distribute digital data. In one embodiment, cable headends receive text data on books from the master file server 1080 through the output multiplexer 1028 and an ATM system 1028. After receiving the digital book data, the cable headends store the books in a local file server 1024. FIG. 18 a's distribution point 1020 is an example of a cable headend which may receive data from the operations center 250 of FIG. 18 b through an ATM hookup 1088 or satellite hookup. All communications and storage in the Book on Demand system may make use of the security mechanisms presented in Section VII.
  • VII. Electronic Book Security Mechanisms
  • The electronic book distribution system and components may incorporate various forms of security using cryptographic mechanisms. Cryptography consists of an encryption and reversing decryption process. A basic encryption process operates on a string of digital bits, or clear text, by modifying the clear text using a series of mathematical operations with both the clear text and a second string of bits, called an encryption key, as inputs, resulting in a third string of bits, called ciphertext. A reversing process exists using a fourth string of bits, called a decryption key, that, when input into a decryption process consisting of a second series of mathematical operations, along with the ciphertext, the resulting output is the original clear text string of digital bits.
  • Two types of techniques underlie the majority of encryption mechanisms associated with electronic book security: symmetric encryption and asymmetric public key encryption. Referring to FIG. 19 a, symmetric encryption uses a cryptographic algorithm where the same key used by encryption process 5001 to encrypt data is also used by decryption process 5002 to decrypt data. Henceforth, for uses of symmetric key encryption, encryption of unencrypted content X 5003, using symmetric key SK 5004 is represented as ESK[X] 5005, whereas decryption of encrypted content ESK[X] 5005 using symmetric key SK 5004, is represented as DSK[ESK[X]] and results in unencrypted content X 5003.
  • Asymmetric public key encryption is a cryptographic system using two keys, one key to encrypt content, and a different key to decrypt the same content. These key pairs and the associated cryptographic algorithms are constructed such that knowledge of one of the two keys does not reveal the other key. Additionally, in asymmetric public key encryption, content encrypted using one key cannot be decrypted using the same key. Therefore, one of the keys of the key pair, the public key, can be distributed widely, while the other key of the key pair is held closely and protected, the private key. This allows a first party, or a sender S to encrypt content using the sender's private key, pKS 5013 and encryption process E pKS 5011. The sender can then distribute the resulting encrypted content EpKS[X] 5014 to any second party, or recipient that possesses the sender's public key PKS 5015. The recipient can then decrypt the encrypted content EpKS[X] 5014 using the sender's public key, PKS 5015 and decryption process D PKS 5012. Encryption of unencrypted content X 5003 using the private key of sender S is represented as EpKS[X], whereas decryption of the encrypted content, using the public key of the sender is represented as DPKS[EpKS[X]]. FIG. 19 b depicts the case where content is encrypted in a private key. Alternatively, the sender could use the recipient public key PKR 5023 and encryption process E PKR 5021 to encrypt the unencrypted content X 5003. Then, only the recipient, using a recipient's private key pKR 5025, is able to decrypt the encrypted content EPKR[X] 5024 using decryption process D pKR 5022. Encryption of the unencrypted content X 5003 using the recipient's public key PKR 5025, is represented as EPKR[X], whereas decryption of the encrypted content EpKS[X] 5014, using the recipient's private key 5025 is represented as DpKR[EPKR[X]]. FIG. 19 c depicts the case where content is encrypted in a public key.
  • A. Publisher to Operations Center Communications Security
  • Publishers 282 or other content providers 110 can deliver their electronic book content to the operations center 250 via a secured mechanism. In one embodiment, an asymmetric public key encryption technique is used, as described in Contemporary Cryptography, edited by Gustavus Simmons, published by IEEE Press in 1992, and hereby incorporated by reference. Public key algorithms used may include the Merkle-Hellman Knapsacks technique, as described in U.S. Pat. No. 4,218,582 to Hellman and Merkle, the RSA technique, as described in U.S. Pat. No. 4,405,829 to Rivest, Shamir, and Adleman, the Pohlig-Hellman technique, as described in U.S. Pat. No. 4,424,414 to Hellman and Pohlig, the Schnorr Signatures technique, as described in U.S. Pat. No. 4,995,082 to Schnorr, or any comparable public key technique. The techniques described in these U.S. patents are hereby incorporated by reference. In an embodiment depicted in FIG. 20, a publisher 282, serving as a sender 4998, first encrypts electronic book content EBC 5100 destined for the operations center 250, which serves as the recipient 4999, using a symmetric key encryption process E SK 5102 and DES, PKZIP, BLOWFISH, or any other symmetric encryption algorithm, resulting in encrypted content ESK[EBC] 5109. The encryption process E SK 5102 uses a symmetric key SK 5103 either randomly generated by a key generator process 5104 or previously defined and retrieved from key storage memory 5105. Then, the publisher 282 encrypts the symmetric key SK 5103 with private key encryption process E pKS 5106 using the publisher's private key pKS 5107, resulting in encrypted key EpKS[SK] 5108. Then, the publisher 282 packages encrypted key EpKS[SK] 5108, encrypted content ESK[EBC] 5109 and non-encrypted information 5110 related to the electronic book or the exchange and delivers the package to the operations center 250. Using decryption process D PKS 5111 and the publisher's public key PKS 5112, the operations center 250 decrypts the encrypted key EpKS[SK] 5108 and uses the recovered symmetric key SK 5103 to decrypt the encrypted content ESK[EBC] 5109 using decryption process D SK 5113.
  • In an alternate embodiment, depicted in FIG. 21, symmetric key encryption is used in conjunction with a certificate authority 4997. The certificate authority 4997, a trusted source, provides a symmetric key to each publisher 282, serving as the sender 4998, and the operations center 250, serving as the recipient 4999. The certificate authority 4997 may be an existing commercial entity such as Entrust or Verisign or a private entity established for the sole purpose of electronic book secure distribution. The publisher 282 contacts the certificate authority 4997, sending a request 5120 for a transaction symmetric key SKT 5121 to be used during a transaction. The certificate authority 4997 either randomly generates the transaction symmetric key SKT 5121 by using a key generator process 5124 or retrieves the previously defined transaction symmetric key SKT 5121 from key storage memory 5125. The transaction symmetric key SKT 5121 is encrypted by the certificate authority 4997 using symmetric key encryption process E SKS 5123 and the publisher's symmetric key SKS 5122. A resulting encrypted transaction symmetric key ESKS[SKT] 5126 is delivered by the certificate authority 4997 to the publisher 282. The publisher 282 decrypts the encrypted transaction symmetric key ESKS[SKT] 5126 using decryption process DSKS 5127 and the publisher's symmetric key SKS 5122 to recover the transaction symmetric key SKT 5121. The publisher 282 then uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to encrypt the electronic book content EBC 5100 using encryption process E SKT 5128, resulting in encrypted content ESKT[EBC] 5129. The publisher 282 then delivers the encrypted content ESKT[EBC] 5129 to the operations center 250. The transaction symmetric key SKT 5121 is also encrypted by the certificate authority 4997 using symmetric key encryption process E SKR 5131 and the operations center's symmetric key SKR 5130. The resulting encrypted transaction symmetric key ESKR[SKT] 5132 is delivered by the certificate authority 4997 to the operations center 250. The operations center 250 decrypts the encrypted transaction symmetric key ESKR[SKT] 5132 using decryption process D SKR 5133 and the operations center's symmetric key SKR 5130 to recover the transaction symmetric key SKT 5121. The operations center 250 then uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to decrypt the encrypted content ESKT[EBC] 5129 using decryption process D SKT 5134, resulting in unencrypted electronic book content 5100.
  • In yet another embodiment, depicted in FIG. 22, the publisher 282, acting as the sender 4998, generates a transaction symmetric key SKT 5140. The publisher 282 either randomly generates the transaction symmetric key SKT 5140 by using a key generator process 5141, or retrieves a previously defined transaction symmetric key SKT 5140 from key storage memory 5142. The publisher 282 encrypts the electronic book content EBC 5100 using encryption process E SKT 5143 and the transaction symmetric key SKT 5140, and delivers encrypted content ESKT[EBC] 5144 to the operations center 250, acting as recipient 4999. The publisher 282 then encrypts the transaction symmetric key SKT 5140 using encryption process E SKS 5145 and a publisher's symmetric key SKS 5146 that it shares with a third party certificate authority 4997 and delivers an encrypted symmetric key ESKS[SKT] 5147 to the certificate authority 4997. The certificate authority 4997 decrypts the encrypted symmetric key ESKS[SKT] 5147 using decryption process D SKS 5148 and the publisher's symmetric key SKS 5146. The operations center 250 may contact the certificate authority 4997 using request 5149 to obtain the transaction symmetric key SKT 5140. Prior to the certificate authority 4997 delivering the needed transaction symmetric key 5140 to the operations center 250, the operations center 250 may be required to complete a financial transaction with the certificate authority 4997, paying for the electronic book content first. The certificate authority 4997 then encrypts the transaction symmetric key SKT 5140 using encryption process E SKR 5150 and an operations center's symmetric key SKR 5151 that the certificate authority 4997 shares with the operations center 250 and delivers encrypted symmetric key ESKR[SKT] 5152 to the operations center 250. The operations center 250 decrypts the encrypted symmetric key ESKR[SKT] 5152 using decryption process D SKR 5153 and the operations center's symmetric key SKR 5151, and uses the recovered transaction symmetric key SKT 5140 to decrypt the encrypted content ESKT[EBC] 5144 using decryption process D SKT 5154, resulting in electronic book content EBC 5100.
  • In another embodiment, depicted in FIG. 23 a, the publisher 282, serving as the sender 4998, encrypts a transaction stream TS 5165 between the publisher 282 and the operations center 250, serving as the recipient 4999. To do so, the publisher 282 may use a sender private key pKS 5160 and encryption process E pKS 5161 to encrypt the transaction stream TS 5165, resulting in encrypted transaction stream EpKS[TS] 5162.
  • In this embodiment, the operations center 250 uses decryption process D PKS 5164 and sender public key PKS 5163 to decrypt the encrypted transaction stream EpKS[TS] 5162. In another embodiment, depicted in FIG. 23 b, the publisher 282, serving as the sender 4998, may use a public key of the operations center 250, serving as the recipient 4999, to encrypt the transaction stream TS 5165. To do so, the publisher 282 may use a recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165, resulting in encrypted transaction stream EPKR[TS] 5173.
  • In this embodiment, the operations center 250 uses decryption process D pKR 5174 and recipient private key pKR 5172 to decrypt the encrypted transaction stream EPKR[TS] 5173. In another embodiment, depicted in FIG. 23 c, the publisher 282, serving as the sender 4998, may use a transaction symmetric key SKT 5181 that both the publisher 282 and the operations center 250 have stored in advance of the transaction to encrypt the transaction stream TS 5165. In this embodiment, the publisher 282 uses encryption process E SKT 5180 and transaction symmetric key SKT 5181 to generate the encrypted transaction stream ESKT[TS] 5182. The operations center 250 uses decryption process D SKT 5183 and transaction symmetric key SKT 5181 to decrypt the encrypted transaction stream ESKT[TS] 5182, resulting in the transaction stream TS 5165.
  • In another embodiment, depicted in FIG. 24 a, the publisher 282, serving as the sender 4998, and the operations center 250, serving as the recipient 4999, initiate the transaction by negotiating a shared key to use for the transaction, using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, described in U.S. Pat. No. 4,200,700 to Hellman, Diffie, and Merkle, which is hereby incorporated by reference, to generate the shared transaction symmetric key. Key negotiation information 5190 is exchanged between the publisher 282 and the operations center 250. As a result of the negotiation process, a publisher's key generator algorithm 5191 generates the transaction symmetric key SKT 5193 and the operations center's key generator algorithm 5192 generates the transaction symmetric key SKT 5193. The publisher 282 encrypts the electronic book content EBC 5100 using encryption process E SKT 5194 and the shared transaction symmetric key SKT 5193 and delivers the resulting encrypted content ESKT[EBC] 5195 to the operations center 250. The operations center 250 uses the shared transaction symmetric key SKT 5193 and decryption process D SKT 5196 to decrypt encrypted content ESKT[EBC] 5195. In a different embodiment, depicted in FIG. 24 b, the publisher 282 serves as the sender 4998 and operations center 250 serves as the recipient 4999. Initial key negotiation information 5200 is exchanged between a seed key generation algorithm 5201 at the publisher 282 and a seed key generation algorithm 5202 at the operations center 250. As a result, the seed key generation algorithm 5201 at the publisher 282 and the seed key generation algorithm 5202 at the operations center 250 each generate seed key SK 5203 using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700. The seed key SK 5203 is then used by key sequence generator 5204 at the publisher 282 to generate the first in a sequence of keys, transaction symmetric key SKTi 5206. Similarly, the seed key SK 5203 is used by key sequence generator 5205 at the operations center 250 to generate an identical sequence of keys, beginning with shared transaction symmetric key SKTi 5206. The publisher 282 encrypts the electronic book content EBC 5100 using encryption process E SKTi 5207 and the shared transaction symmetric key SKTi 5206 and delivers a resulting encrypted content ESKTi[EBC] 5208 to the operations center 250. The operations center 250 uses the transaction symmetric key SKTi 5206 and decryption process D SKTi 5209 to decrypt the encrypted content ESKTi[EBC] 5206. The publisher key sequence generator 5204 and the operations center key sequence generator 5205 continue to generate matching transaction symmetric keys for use in encrypting each subsequent transaction between the publisher 282 and the operations center 250.
  • The publisher 282 may deliver the electronic book content to multiple operations centers. In one embodiment, the publisher 282 delivers the electronic book content to each operations center 250 independently using one of the embodiments described herein. In an alternative embodiment, the publisher 282 may broadcast the electronic book content to multiple operations centers 250 simultaneously. In one embodiment used for broadcasting, depicted in FIG. 25 a, the publisher 282, serving as the sender 4998, encrypts the electronic book content EBC 5100 using encryption process E SKT 5211 and transaction symmetric key SKT 5210, resulting in encrypted content ESKT[EBC] 5217. The transaction symmetric key SKT 5210 is then encrypted using public key encryption process E PKA 5212 and public key PKA 5213 for recipient A 4999, the first operations center 250 to receive the electronic book content, resulting in encrypted key EPKA[SKT] 5218. The transaction symmetric key SKT 5210 is then encrypted using public key encryption process E PKB 5212′ and public key PKB 5213′ for recipient B 4999′, the second operations center 250 to receive the electronic book content, resulting in encrypted key EPKB[SKT] 5218′. This process is repeated for each of the operations centers 250 receiving the electronic book content. The encrypted content ESKT[EBC] 5217, along with encrypted keys 5218, 5218′, and 5218″, are delivered to all the receiving operations centers 250. Each operations center 250 uses its own private key to decrypt the transaction symmetric key SKT 5210. For example, recipient A 4999 uses decryption process D pKA 5214 and private key pKA 5216 to decrypt the encrypted key EPKA[SKT] 5218, recovering the transaction symmetric key SKT 5210. Decryption process D SKT 5215 is then used to decrypt encrypted content ESKT[EBC] 5217 using transaction symmetric key SKT 5210.
  • In another embodiment, depicted in FIG. 25 b, operations centers 250 may be assigned to predefined groups. Prior to the distribution of electronic book content EBC 5100 by publisher 282, serving as the sender 4998, for each defined group, a group symmetric key SKG 5220 is created and distributed by the publisher 282 to each operations center 250, serving as recipients 4999, 4999′ and 4999″ within the group.
  • When the publisher 282 sends the electronic book content EBC 5100 to a pre-defined group of operations centers, the publisher 282 encrypts the electronic book content EBC 5100 using encryption process E SKG 5221 and the group symmetric key SKG 5220 pre-defined for that group and delivers the encrypted content ESKG[EBC] to all the operations centers 250 in the group. Recipients 4999, 4999′, and 4999″ use decryption process D SKG 5223 and the group symmetric key SKG 5220 for that group to which they are assigned to decrypt the encrypted content ESKG[EBC].
  • To ensure that the electronic book content delivered by the publisher 282 to the operations center 250 was not altered in route, integrity checking algorithms may be employed. In one embodiment, depicted in FIG. 26, the publisher 282, serving as sender 4998, uses a one-way hashing algorithm 5231, as presented in Applied Cryptography, by Bruce Schneier, published by John Wiley & Sons, Inc. in 1996, and hereby incorporated by reference, where a hashing value 5232 is calculated by the publisher 282 based on the electronic book content file 5230 as an input. This resulting hashing value 5232, along with the actual encrypted electronic book file 5237 that has been encrypted by the publisher 282 via encryption process 5235 is delivered to the operations center 250, serving as the recipient 4999.
  • The operations center 250 decrypts the encrypted electronic book file 5237 using decryption process 5236 to recover electronic book content file 5230′. The operations center 250 then uses the hashing algorithm 5231 with the electronic book content file 5230′ as an input to generate a hashing value 5232′. A comparator 5223 compares the hashing value 5232′ and the hashing value 5232 delivered with the encrypted electronic book file 5237. If the hashing value 5232′ calculated by the operations center 250 coincides with the hashing value 5232 delivered by the publisher 282, the integrity of the electronic book content file 5230′ is ensured.
  • To identify the publisher 282 delivering the electronic book and to guarantee non-repudiation, i.e., that the publisher 282 cannot deny that the electronic book was sent, the publisher 282 and operations center 250 may use an authentication method. In one embodiment, a Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668 to Kravitz, and hereby incorporated by reference. In another embodiment, the publisher 282 uses a password as an identifier. This password may be delivered along with the electronic book content to authenticate the publisher 282 as the sender. The operations center 250 compares this password with the password the operations center 250 has for the publisher 282. If the passwords match, the source of the electronic book content, i.e., the publisher 282, is verified.
  • In yet another embodiment, public key encryption is used as a digital signature to authenticate the publisher 282. The publisher 282 encrypts the electronic book content using the publisher's private key pKS. When the operations center 250 correctly decrypts the encrypted electronic book content with the publisher's public key PKS, the identity of the publisher 282 is authenticated since only the publisher 282 has access to the publisher's private key pKS used to encrypt the electronic book content.
  • In another embodiment, depicted in FIG. 27, upon initiation of the transaction, the publisher 282, serving as the sender 4998, notifies the operations center 250, serving as the recipient 4999, of the publisher's intention to deliver electronic book content to the operations center 250. This notification may be in the form of delivery notification message 5240. The operations center 250 then encrypts a randomly generated message RGM generated by the operations center 250 using encryption process EpKR and the operations center's private key pKR and sends the resulting EpKR[RGM] 5241 to the publisher 282. The publisher 282 decrypts EpKR[RGM] 5241 using decryption process DPKR and the operations center's public key PKR. The publisher 282 then encrypts the electronic book content EBC, along with the randomly generated message RGM received from the operations center 250 using encryption process EpKS and the publisher's private key pKS and sends the resulting EpKs[EBC,RGM] 5242 to the operations center 250. The operations center 250 decrypts EpKs[EBC,RGM] 5242 using decryption process DPKS and the publisher's public key PKS. If the randomly generated message RGM received from the publisher 282 coincides with the randomly generated message RGM that the operations center 250 originally sent to the publisher 282, the publisher's identity is verified.
  • In another embodiment, the ISO one-way authentication protocol framework, as defined in ISO standard X.509 is used to provide authentication of the publisher's identity.
  • The operations center 250 may initiate the transaction with the publisher 282 by requesting that an electronic book be delivered from the publisher 282 to the operations center 250. To validate the identity of the operations center 250, the publisher 282 and operations center 250 may use any of the above authentication method embodiments. In one embodiment, the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668 to Kravitz, and hereby incorporated by reference.
  • In another embodiment, the operations center 250 uses a password as an identifier. This password is delivered along with the electronic book request to authenticate the operations center 250. The publisher 282 compares this password with the password the publisher 282 has for the operations center 250. If the passwords match, the source of the electronic book request, i.e., the operations center 250, is verified.
  • In yet another embodiment, public key encryption is used as a digital signature to authenticate the operations center 250. The operations center 250 encrypts the electronic book request using the operations center private key pKR and send the encrypted request to the publisher 282. When the publisher 282 correctly decrypts the encrypted request with the operations center's public key PKR, the identity of the operations center 250 is authenticated since only the operations center 250 has access to the operations center's private key pKR used to encrypt the electronic book request.
  • In another embodiment, depicted in FIG. 28, upon initiation of the transaction, the operations center 250, serving as the recipient 4999, notifies the publisher 282, serving as the sender 4998, of the operations center's intention to request electronic book content from the publisher 282. This notification may be in the form of initial request message 5250. The publisher 282 then encrypts a randomly generated message RGM generated by the publisher 282 using encryption process EpKS and the publisher's private key pKS and sends the resulting EpKS[RGM] 5251 to the operations center 250. The operations center 250 decrypts EpKS[RGM] 5251 using decryption process DpKS and the publisher's public key PKS. The operations center 250 then encrypts the electronic book request EBR, along with the randomly generated message RGM received from the publisher 282 using encryption process EpKR and the operations center's private key pKR, and sends the resulting EpKR[EBR,RGM] 5252 to the publisher 282. The publisher 282 decrypts EpKR[EBR,RGM] 5252 using decryption process DPKR and the operations center's public key PKR. If the randomly generated message RGM received from the operations center 250 coincides with the randomly generated message RGM that the publisher 282 originally sent to the operations center 250, the operations center's identity is verified.
  • In another embodiment, the ISO one-way authentication protocol framework, as defined in ISO standard X.509 is used to provide authentication of the publisher's identity.
  • In yet another embodiment involving delivery of electronic book content from the publisher 282 to the operations center 250, the operations center 250 requests an electronic book from the publisher 282. The publisher 282 first authenticates the requesting operations center 250. An embodiment of the authentication sequence is shown in FIG. 29, where the publisher 282 is serving as the sender 4998 and the operations center 250 is serving as the recipient 4999. To authenticate the operations center 250 requesting an electronic book from the publisher 282, an authentication sequence may be initiated by the operations center 250. The authentication sequence begins with the operations center 250 sending a request 5290 to the publisher 282 for a given electronic book content file 5300. The publisher 282 then responds to the operations center 250 by generating and returning an authentication string 5291 to the operations center 250. The operations center 250 returns a message to the publisher 282 that contains: 1) a book identifier 5292, identifying the requested electronic book; 2) the signed authentication string 5293 that has been signed using a one-way hash function and then encrypted using the private key of the operations center 250; and 3) operations center 250 certification information 5294 that the publisher 282 can authenticate with the certificate authority 4997 (not shown in FIG. 29).
  • FIG. 30 presents the remaining steps of a secure delivery process, where the publisher 282 serves as the sender 4998 and the operations center 250 serves as the recipient 4999. First, the publisher 282 authenticates the operations center 250, shown as authentication step 5309. The publisher 282 then creates the requested electronic book file 5300 in file creation step 5310, creates an unprotected metadata header 5301 containing non-secure information about the electronic book in step 5311, and creates a protected metadata header 5302 containing secure information about the electronic book, shown in metadata header step 5312. Secure information about the electronic book may include an electronic book identifier, an identifier of the format being used for the protected metadata header 5302, the content decryption key 5306 and decryption algorithm to be used to decrypt the electronic book content, the number of copies of the electronic book that are allowed to be derived from the original electronic book version, distribution features supported for the electronic book, fair use features associated with the electronic book, and integrity checking information to ensure the protected metadata header 5302 is unaltered since its creation.
  • Distribution features may include the ability to sell one or more copies of the electronic book at a cost, distribute one or more copies of the electronic book at no cost, or loan one or more copies of the electronic book. Fair use features may include the ability to use the electronic book for a defined time period, the ability to loan or print a number of copies of the entire electronic book or portions of the electronic book, and the ability to define and track the number of copies already loaned or printed. The publisher 282 may then compress the electronic book file 5300, shown in compression step 5313, and the publisher 282 may then perform an encryption process on the electronic book file 5300, shown in encryption step 5314.
  • Alternatively, the publisher 282 may perform the encryption process on the electronic book file 5300 and then compress the encrypted electronic book file. To encrypt the electronic book, the publisher 282 may use a pre-defined or randomly generated symmetric key or the publisher 282 may use its own private key. The content decryption key 5306 may then be placed in the protected metadata header 5302, shown in decryption key loading step 5315.
  • The publisher 282 then may calculate and place integrity checking information in the protected metadata header 5302, as shown in integrity checking steps 5316 and 5317, respectively. Integrity checking information may include the results of a one-way hashing algorithm 5304, for example, using an algorithm as presented in Applied Cryptography by Bruce Schneier, performed on all or a portion of the protected metadata header 5302. The hashing function 5304 may be performed using the content decryption key 5306 or another predefined hashing key, resulting in hashing value 5305. The publisher 282 may then encrypt the entire protected metadata header 5302 or some portion of the protected metadata header 5302 using the public key of the operations center 250 or a pre-determined symmetric key known by both the publisher 282 and the operations center 250, as shown in encryption step 5318.
  • The packaged electronic book with metadata headers may then be delivered to the operations center 250 or the operations center 250 may retrieve the packaged electronic book from the publisher 282, as shown in delivery step 5319. Upon receipt of the packaged electronic book, along with metadata headers 5301 and 5302, by the operations center 250, the operations center 250 may decrypt the protected metadata header 5302, validate that the protected metadata header 5302 has not been altered by performing a one-way hash calculation on the protected metadata header 5302 and comparing the result to the hash value 5305 contained in the protected metadata header 5302, and re-encrypt the protected metadata header 5302 for storage. Alternatively, the operations center 250 may store the received packaged electronic book directly without decrypting the protected metadata header 5302.
  • Processing and storage of the decryption and encryption keys used on the protected metadata header 5302 at the operations center 250 may be done entirely in software, entirely on a secure smart card or removable device, or some combination of the two.
  • In still another embodiment, a publisher 282, or third party electronic book formatter, converts the electronic book content and associated metadata into a deliverable format. The prepared electronic book file is then delivered to the operations center 250, for example over the Internet using a secure socket layer (SSL) protected communication link. This exchange, depicted in FIG. 31, may be initiated by the operations center 250, serving as the recipient 4999, sending a request message 5330 to the publisher 282, serving as the sender 4998, to deliver the requested electronic book content 5100 to the operations center 250.
  • The request message 5330 may contain a login and password sequence that is used by the publisher 282 to initially validate the operations center 250. Alternatively, or in addition, the publisher 282 may use the specific Internet Protocol (IP) address of the operations center 250, included in the request message 5330, for validation purposes. In response, the publisher 282 may send a certificate 5331, which may include identifying information and the publisher's public key PKS, to the operations center 250. The operations center 250 verifies the certificate 5331 was issued by a trusted third party certificate authority 4997. The operations center 250 compares the information in the certificate that is received from the trusted third party certificate authority 4997, including the publisher's identifying information and public key PKS.
  • The operations center 250 then notifies the publisher 282 which encryption algorithms that the operations center 250 can support using a supported algorithm message 5332. The publisher 282 selects an algorithm and notifies the operations center 250 of the selection using a selected algorithm message 5333. The operations center 250 generates a transaction symmetric key SKT 5334, encrypts the transaction symmetric key SKT 5334 using the public key PKS of the publisher 282 and the algorithm provided in the selected algorithm message 5333 and sends the resulting EPKS[SKT] 5335 to the publisher 282. The publisher 282 decrypts EPKS[SKT] 5335 using decryption process DpKS and the publisher's private key pKS. The transaction symmetric key SKT 5334 is then used to encrypt and decrypt the transaction between the publisher 282 and the operations center 250.
  • Alternatively, an exchange, as depicted in FIG. 32, may be initiated by the publisher 282, serving as sender 4998, by sending a request message 5340 to the operations center 250, serving as recipient 4999, that the publisher 282 wishes to deliver electronic book content to the operations center 250.
  • The request message 5340 may contain a login and password sequence that may be used by the operations center 250 to initially validate the publisher 282. Alternatively, or in addition, the operations center 250 may use the specific IP address of the publisher 282, included in the request message 5340, for validation purposes. In response, the operations center 250 sends a certificate 5341 to the publisher 282 that may include identifying information and the operations center's public key PKR.
  • The publisher 282 verifies the certificate was issued by a trusted third party certificate authority 4997 (not shown in FIG. 32). The publisher 282 compares the information in the certificate 5341 that is received from the trusted third party certificate authority 4997, including operations center's identifying information and public key PKR. The publisher 282 then notifies the operations center 250 which encryption algorithms the publisher 282 can support using a supported algorithms message 5342. The operations center 250 selects an algorithm and notifies the publisher 282 of the selection via a selected algorithm message 5434. The publisher 282 generates a transaction symmetric key SKT 5344, encrypts the transaction symmetric key SKT 5344 using the public key PKR of the operations center 250 and the algorithm provided in the selected algorithm message 5343 and sends the resulting EPKR[SKT] 5345 to the operations center 250. The operations center 250 decrypts EPKR[SKT] 5345 using decryption process DpKR and the operations center's private key pKR. The transaction symmetric key SKT 4344 is then used to encrypt and decrypt the transaction between the publisher 282 and the operations center 250.
  • Once the electronic book content is received and decrypted by the operations center 250, the operations center 250 may store the electronic book file unencrypted or may re-encrypt the electronic book file for storage. Alternatively, the operations center 250 may also compute a hash value of the electronic book file to be used for validation the integrity of the file when recovered from storage for delivery to a home system 258.
  • To ensure the publisher 282 that the electronic book content delivered to the operations center 250 was received, the operations center 250, serving the recipient 4999 in FIG. 33, may respond to the publisher 282, serving as the sender in FIG. 33, by first generating a reply message REP as shown in reply generation step 5260. The operations center 250 then encrypts reply message REP in the operations center's private key pKR using encryption process EpKR, resulting in EpKR[REP], as shown in encryption step 5261. The operations center 250 then encrypts EpKR[REP] in the publisher's public key PKS using encryption process EPKS resulting in EPKS[EpKR[REP]], as shown in encryption step 5262. The operations center sends EPKS[EpKR[REP]] to the publisher, as shown in sending step 5263. The publisher 282 then decrypts EPKS[EpKR[REP]], using decryption process DpKS and the publisher's private key pKS, resulting in EpKR[REP] as shown in decruption step 5264. The publisher 282 then decrypts the resulting EpKR[REP] using decryption process DPKR and the operations center's public key PKR, as shown in decryption step 5265. As shown in verification step 5266, the valid reception of reply message REP by publisher 282 serves as verification of receipt of the electronic book content delivered to the operations center 250 by the publisher 282.
  • In another embodiment, the ISO two-way authentication protocol framework, as defined in ISO standard X.509 is used to provide verification of receipt of electronic book content by the operations center 250.
  • Exchanging encryption key information between the publisher 282 and the operations center 250 may be done using communication networks. Alternatively, encryption key distribution may be accomplished by storing the encryption key information on a smart card, PCMCIA card device, CD ROM, or other portable memory storage device and delivering the device to the appropriate location for retrieval and use in future encryption and decryption activities. When the key is delivered in physical form, the key may have associated with it a valid time period of use. Once this period has expired, a new key is required. Alternatively, the device may support the capability to be updated remotely via a communication network.
  • Encryption, decryption, hashing, digital signature processing, formatting, compression, key management, and other security related activities presented herein that are performed by the publisher 282 or the operations center 250 may be done in hardware using a specialized processor. In an alternate embodiment, security related activities may be done in software via a standard or secure processor. In yet another alternative, a portion of security related activities may be done in software using a standard or secure processor while the remaining portion done in hardware via a specialized processor.
  • Once electronic book content is received and decrypted by the operations center 250, the operations center 250 may encrypt the electronic book content EBC with a symmetric key algorithm and store the encrypted electronic book content along with any non-encrypted content associated with the electronic book in storage memory device 5270 at the operations center 250. In one embodiment, depicted in FIG. 34, secure storage is done on a memory device at the driver-level, where all information stored on the memory storage device 5270 is encrypted by a memory device driver prior to being stored on memory storage device 5270, as described in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference. In this embodiment, any content X 5272 to be stored on the memory storage device 5270, including electronic book content, is encrypted using encryption process E SK 5274 in memory device driver 5271 and a symmetric key SK 5276, resulting in encrypted content ESK[X] 5273. The encrypted content ESK[X] 5273 is then stored on memory storage device 5270. Upon retrieval from the memory storage device 5270, decryption process D SK 5275 decrypts encrypted content ESK[X] 5273 with symmetric key SK 5276, resulting in the original content X 5272. In another embodiment, secure storage is done at the file level, also as described in Applied Cryptography, by Bruce Schneier, where each file is encrypted individually with a different symmetric key prior to storage and stored in its encrypted form on memory storage device 5270. The symmetric key SK 5276 can then be stored separate from the stored encrypted content X 5272. In one such embodiment, encryption is done in hardware using a specialized encryption processor. In an alternate embodiment, encryption is done in software using a standard or secure processor.
  • To ensure the electronic book content file has not been modified while it was stored, in one embodiment, depicted in FIG. 35, the operations center 250, serving as the storage site 4996, uses a one-way hashing algorithm 5280, as presented in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference, where a hashing value 5281 is calculated by the operations center 250 based on the electronic book content EBC 5100 prior to encryption process 5282. The hashing value 5281, along with encrypted content ESK[EBC] 5284 is then stored on memory storage device 5283. When the encrypted content ESK[EBC] 5284 is retrieved from storage, the operations center 250 decrypts encrypted content ESK[EBC] 5284 using decryption process DSK 5285 and retrieves the stored hashing value 5281. The operations center 250 then calculates a hashing value 5281′, using the hashing algorithm 5280 and the retrieved electronic book content EBC 5100. Comparator 5286 compares the hashing value 5281 to the hashing value 5281′ to determine if they coincide. If hashing value 5281 and the hashing value 5281′ coincide, the integrity of the electronic book content EBC 5100 retrieved for memory storage device 5283 can be ensured.
  • B. Operations Center to Home System Security
  • The operations centers 250 can deliver their electronic book content to home systems 258 via a secured mechanism. In one embodiment, an asymmetric public key encryption technique is used, as described in Contemporary Cryptography, edited by Gustavus Simmons, published by IEEE Press in 1992, and hereby incorporated by reference. Public key algorithms used may include the Merkle-Hellman Knapsacks technique, as described in U.S. Pat. No. 4,218,582, the RSA technique, as described in U.S. Pat. No. 4,405,829, the Pohlig-Hellman technique, as described in U.S. Pat. No. 4,424,414, the Schnorr Signatures technique, as described in U.S. Pat. No. 4,995,082, or any other public key technique.
  • In this embodiment, depicted in FIG. 20, the operations center 250, serving as the sender 4998, first encrypts the electronic book content EBC 5100 destined for the home system 258, serving as the recipient 4999, and using a symmetric key encryption process E SK 5102, using DES, PKZIP, BLOWFISH, or any other symmetric encryption algorithm, resulting in encrypted content ESK[EBC] 5109. The encryption process E SK 5102 uses a symmetric key SK 5103 either randomly generated by a key generator process 5104 or previously defined and retrieved from key storage memory 5105. Then, the operations center 250 encrypts the symmetric key SK 5103 with private key encryption process E pKS 5106 using the operations center's private key pKS 5107, resulting in encrypted key EpKS[SK] 5108. Then, the operations center 250 packages encrypted key EpKS[SK] 5108, encrypted content ESK[EBC] 5109 and non-encrypted information 5110 related to the electronic book or the exchange and delivers the package to the home system 258. Using decryption process D PKS 5111 and the operations center's public key PKS 5112, the home system 258 decrypts the encrypted key EpKS[SK] 5108 and uses the recovered symmetric key SK 5103 to decrypt the encrypted content ESK[EBC] 5109 using decryption process D SK 5113.
  • In an alternate embodiment, depicted in FIG. 21, only symmetric key encryption is used, with a certificate authority 4997. The certificate authority 4997, a trusted source, provides a symmetric key to the operations center 250, serving as the sender 4998, and to the home system 258, serving as the recipient 4999. The certificate authority 4997 may be an existing commercial entity such as Entrust or Verisign or a private entity established for the sole purpose of electronic book secure distribution. The operations center 250 contacts the certificate authority 4997, sending the request 5120 for the transaction symmetric key SKT 5121 to be used during the transaction. The certificate authority 4997 either randomly generates the transaction symmetric key SKT 5121 by using the key generator process 5124 or retrieves the previously defined transaction symmetric key SKT 5121 from key storage memory 5125. The transaction symmetric key SKT 5121 is encrypted by the certificate authority 4997 using the symmetric key encryption process E SKS 5123 using the operations center's symmetric key SKS 5122.
  • The resulting encrypted symmetric key ESKS[SKT] 5126 is delivered by the certificate authority 4997 to the operations center 250. The operations center 250 decrypts the encrypted symmetric key ESKS[SKT] 5126 using decryption process DSKS 5127 and using the operations center's symmetric key SKS 5122 to recover the transaction symmetric key SKT 5121. The operations center 250 then uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to encrypt the electronic book content EBC 5100 using encryption process E SKT 5128, resulting in encrypted content ESKT[EBC] 5129. The operations center 250 delivers the encrypted content ESKT[EBC] 5129 to the home system 258. The transaction symmetric key SKT 5121 is also encrypted by the certificate authority 4997 using symmetric key encryption process E SKR 5131 and the home system's symmetric key SKR 5130. The resulting encrypted symmetric key ESKR[SKT] 5132 is delivered by the certificate authority 4997 to the home system 258. The home system 258 decrypts the encrypted symmetric key ESKR[SKT] 5132 using decryption process D SKR 5133 and using the home system's symmetric key SKR 5130 to recover the transaction symmetric key SKT 5121. The home system 258 then uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to decrypt the encrypted content ESKT[EBC] 5129 using decryption process D SKT 5134, resulting in the unencrypted electronic book content 5100.
  • In yet another embodiment, depicted in FIG. 22, the operations center 250, acting as the sender 4998, generates a transaction symmetric key SKT 5140. The operations center 250 either randomly generates the transaction symmetric key SKT 5140 by using the key generator process 5141 or retrieves the previously defined transaction symmetric key SKT 5140 from key storage memory 5142. The operations center 250 encrypts the electronic book content EBC 5100 using encryption process E SKT 5143 and the transaction symmetric key SKT 5140, and delivers the encrypted content ESKT[EBC] 5144 to the home system 258, acting as the recipient 4999.
  • The operations center 250 encrypts the transaction symmetric key SKT 5140 using encryption process E SKS 5145 and the operations center's symmetric key SKS 5146 that the operations center 250 shares with a third party certificate authority 4997 and delivers the encrypted transaction symmetric key ESKS[SKT] 5147 to the third party certificate authority 4997. The certificate authority 4997 decrypts the encrypted transaction symmetric key ESKS[SKT] 5147 using decryption process D SKS 5148 and the operations center's symmetric key SKS 5146. The home system 258 may contact the certificate authority 4997 using request 5149 to obtain the transaction symmetric key SKT 5140. Prior to the certificate authority 4997 delivering the needed transaction symmetric key 5140 to the home system 258, the home system 258 may be required to complete a financial transaction with the certificate authority 4997, paying for the electronic book content first. The certificate authority 4997 then encrypts the transaction symmetric key SKT 5140 using encryption process E SKR 5150 and the home system's symmetric key SKR 5151 that the certificate authority 4997 shares with the home system 258, and delivers the encrypted symmetric key ESKR[SKT] 5152 to the home system 258. The home system 258 decrypts the encrypted symmetric key ESKR[SKT] 5152 using decryption process D SKR 5153 and the home system's symmetric key SKR 5151, and uses the recovered transaction symmetric key SKT 5140 to decrypt the encrypted content ESKT[EBC] using decryption process D SKT 5154, resulting in electronic book content EBC 5100.
  • In another embodiment, depicted in FIG. 23 a, the operations center 250, serving as the sender 4998, encrypts the entire transaction stream TS 5165 between the operations center 250 and the home system 258, serving as the recipient 4999. To do so, the operations center 250 may use the sender private key pKS 5160 and encryption process E pKS 5161 to encrypt the transaction stream TS 5165, resulting in encrypted transaction stream EpKS[TS] 5162. In this embodiment, the home system 258 uses decryption process D PKS 5164 and sender public key PKS 5163 to decrypt the encrypted transaction stream EpKS[TS] 5162.
  • In another embodiment, depicted in FIG. 23 b, the operations center 250, serving as sender 4998, may use the public key of the home system 258, serving as the recipient 4999, to encrypt the transaction stream TS 5165. To do so, the operations center 250 may use the recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165, resulting in encrypted transaction stream EPKR[TS] 5173. In this embodiment, the home system 258 uses decryption process D pKR 5174 and recipient private key pKR 5172 to decrypt the encrypted transaction stream EPKR[TS] 5173. In another embodiment, depicted in FIG. 23 c, the operations center 250, serving as sender 4998, may use a transaction symmetric key SKT 5181 that both the operations center 250 and the home system 258 have stored in advance of the transaction to encrypt the transaction stream TS 5165. In this embodiment, the operations center 250 uses encryption process E SKT 5180 and transaction symmetric key SKT 5181 to generate encrypted transaction stream ESKT[TS] 5182. The home system 258 uses decryption process D SKT 5183 and transaction symmetric key SKT 5181 to decrypt encrypted transaction stream ESKT[TS] 5182, resulting in transaction stream TS 5165.
  • In another embodiment, depicted in FIG. 24 a, the operations center 250, serving as the sender 4998, and the home system 258, serving as the recipient 4999, initiate the transaction by negotiating a shared key to use for the transaction, using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700, to generate the shared transaction symmetric key. Key negotiation information 5190 is exchanged between key generation algorithms 5191 operated by both the operations center 250 and the home system 258. As a result of the negotiation process, the operations center's key generator algorithm 5191 generates the transaction symmetric key SKT 5193 and the home system's key generator algorithm 5192 generates the transaction symmetric key SKT 5193.
  • The operations center 250 encrypts the electronic book content EBC 5100 using encryption process E SKT 5194 and the shared transaction symmetric key SKT 5193 and delivers the resulting encrypted content ESKT[EBC] 5195 to the home system 258. The home system 258 uses the shared transaction symmetric key SKT 5193 and decryption process DSKT 5196 to decrypt the encrypted content ESKT[EBC] 5195.
  • In a different embodiment, depicted in FIG. 24 b, the operations center 250 serves as the sender 4998 and home system 258 serves as the recipient 4999. Initial key negotiation information 5200 is exchanged between the seed key generation algorithm 5201 at the operations center 250 and the seed key generation algorithm 5202 at the home system 258. As a result, the seed key generation algorithm 5201 at the operations center 250 and the seed key generation algorithm 5202 at the home system 258 each generate seed key SK 5203 using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700. Seed key 5203 is then used by key sequence generator 5204 at the operations center 250 site to generate the first in a sequence of keys, transaction symmetric key S KTi 5206. Similarly, seed key 5203 is used by key sequence generator 5205 at the home system 258 to generate the identical sequence of keys, beginning with transaction symmetric key S KTi 5206.
  • The operations center 250 encrypts the electronic book content EBC 5100 using encryption process E SKTi 5207 and the shared transaction symmetric key S KTi 5206 and delivers the resulting encrypted content ESKTi[EBC] 5208 to the home system 258. The home system 258 uses the transaction symmetric key S KTi 5206 and decryption process DSKTi 5209 to decrypt the encrypted content ESKTi[EBC] 5206. The operations center 250 key sequence generator 5204 and home system 258 key sequence generator 5205 continue to generate matching transaction symmetric keys for use in encrypting each subsequent transaction between the operations center 250 and the home system 258.
  • The operations center 250 may deliver the electronic book content to multiple home systems. In one embodiment, the operations center 250 delivers the electronic book content to each home system 258 independently using one of the embodiments contained herein. In an alternative embodiment, the operations center 250 may broadcast the electronic book content to multiple home systems simultaneously.
  • In one embodiment used for broadcasting, depicted in FIG. 25 a, the operations center 250, serving as the sender 4998, encrypts the electronic book content EBC 5100 using encryption process E SKT 5211 and transaction symmetric key SKT 5210, resulting in encrypted content ESKT[EBC] 5217. The transaction symmetric key SKT 5210 is then encrypted using public key encryption process E PKA 5212 and public key PKA 5213 for recipient A 4999, the first home system 258 to receive the electronic book content, resulting in encrypted key EPKA[SKT] 5218. The transaction symmetric key SKT 5210 is then encrypted using public key encryption process E PKB 5212′ and public key PKB 5213′ for recipient B 4999′, the second home system 258 to receive the electronic book content, resulting in encrypted key EPKB[SKT] 5218′. This is repeated for each of the home systems 258 receiving the electronic book content. The encrypted content ESKT[EBC] 5217, along with the encrypted keys 5218, 5218′, and 5218″, are delivered to all the receiving home systems 258. Each home system 258 uses its own private key to decrypt the transaction symmetric key SKT 5210. For example, recipient A 4999 uses decryption process D pKA 5214 and private key pKA 5216 to decrypt the encrypted key EPKA[SKT] 5218, recovering the transaction symmetric key SKT 5210. Decryption process D SKT 5215 is then used to decrypt encrypted content ESKT[EBC] 5217 using transaction symmetric key SKT 5210.
  • In another embodiment, depicted in FIG. 25 b, home systems may be assigned to predefined groups. Prior to the distribution of electronic book content EBC 5100 by operations center 250, serving as the sender 4998, for each defined group, a group symmetric key SKG 5220 is created and distributed by the operations center 250 to each home system 258, serving as recipients 4999, 4999′ and 4999″ within the group.
  • When the operations center 250 sends electronic book content EBC 5100 to a pre-defined group of home systems 258, the operations center 250 encrypts the electronic book content EBC 5100 using encryption process E SKG 5221 and the group symmetric key SKG 5220 pre-defined for that group and delivers the encrypted content ESKG[EBC] to all the home systems in the group. Recipients 4999, 4999′, and 4999″ use decryption process D SKG 5223 and the group symmetric key SKG 5220 for that group to which they are assigned to decrypt the encrypted content ESKG[EBC].
  • To ensure that the electronic book content delivered by the operations center 250 to the home system 258 was not altered in route, integrity checking algorithms may be employed. In one embodiment, depicted in FIG. 26, the operations center 250, serving as the sender 4998, uses a one-way hashing algorithm 5231, as presented in Applied Cryptography, by Bruce Schneier, published by John Wiley & Sons, Inc. in 1996, and hereby incorporated by reference, where a hashing value 5232 is calculated by the operations center 250 based on the electronic book content file 5230 as an input. This resulting hashing value 5232, along with the actual encrypted electronic book file 5237 that has been encrypted by the operations center 250 via encryption process 5235 is delivered to the home system 258, serving as the recipient 4999.
  • The home system 258 decrypts the encrypted electronic book file 5237 using decryption process 5236 to recover the electronic book content file 5230′. The home system 258 then uses the hashing algorithm 5231 with the electronic book content file 5230′ as input to generate a hashing value 5232′, which is compared to the hashing value 5232 delivered with the encrypted electronic book file 5237. If the hashing value 5232′ calculated by the home system 258 coincides with the hashing value 5232 delivered by the operations center 250 as determined by comparator 5233, the integrity of the electronic book content file 5230′ can be ensured.
  • To identify the operations center 250 delivering the electronic book and to guarantee non-repudiation, i.e., that the operations center 250 cannot deny that the electronic book was sent, the operations center 250 and home system 258 may use an authentication method. In one embodiment, the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference. In another embodiment, the operations center 250 uses a password as an identifier. This password may be delivered along with the electronic book content to authenticate the operations center 250. The home system 258 compares this password with the password the home system 258 has for the operations center 250. If the passwords match, the source of the electronic book content, i.e., the operations center 250, is verified.
  • In yet another embodiment, public key encryption is used as a digital signature to authenticate the operations center 250 as the sender. The operations center 250 encrypts the electronic book content using the operations center's private key pKS. When the home system 258 correctly decrypts the encrypted electronic book content with the operations center's public key PKS, the identity of the operations center 250 is authenticated since only the operations center 250 has access to the operations center's private key pKS used to encrypt the electronic book content.
  • In another embodiment, depicted in FIG. 27, upon initiation of the transaction, the operations center 250, serving as the sender 4998, notifies the home system 258, serving as the recipient 4999, of the operations center's intention to deliver electronic book content to the home system 258. This notification may be in the form of delivery notification message 5240. The home system 258 then encrypts a randomly generated message RGM generated by the home system 258 using encryption process EpKR and the home system's private key pKR and sends the resulting EpKR[RGM] 5241 to the operations center 250. The operations center 250 decrypts EpKR[RGM] 5241 using decryption process DPKR and the home system's public key PKR. The operations center 250 then encrypts the electronic book content EBC, along with the randomly generated message RGM received from the home system 258 using encryption process EpKS and the operations center's private key pKS and sends the resulting EpKS[EBC,RGM] 5242 to the home system 258. The home system 258 decrypts EpKS[EBC,RGM] 5242 using decryption process DPKS and the operations center's public key PKS. If the randomly generated message RGM received from the operations center 250 coincides with the randomly generated message RGM that the home system 258 originally sent to the operations center 250, the operations center's identity is verified.
  • In another embodiment, the ISO one-way authentication protocol framework, as defined in ISO standard X.509 is used to provide authentication of the operations center's identity.
  • The home system 258 may initiate the transaction with the operations center 250 by requesting that an electronic book be delivered from the operations center 250 to the home system 258. To validate the identity of the home system 258, the operations center 250 and home system 258 may use any of the above authentication method embodiments. In one embodiment, the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference.
  • In another embodiment, the home system 258 uses a password as an identifier. This password is delivered along with the electronic book request to authenticate the home system 258. The operations center 250, or the billing and collection system 278 operating on behalf of the operations center 250, compares this password with the password it has for the home system 258. If the password matches, the source of the electronic book request, i.e., the home system 258, is verified.
  • In yet another embodiment, public key encryption is used as a digital signature to authenticate the home system 258. The home system 258 encrypts the electronic book request using the home system's private key pKR and sends the encrypted request to the operations center 250, or the billing and collection system 278 operating on behalf of the operations center 250. When the operations center 250, or the billing and collection system 278 operating on behalf of the operations center 250 correctly decrypts the encrypted request with the home system's public key PKR, the identity of the home system 258 is authenticated since only the home system 258 has access to the home system's private key pKR used to encrypt the electronic book request.
  • In another embodiment, depicted in FIG. 28, upon initiation of the transaction, the home system 258, serving as the recipient 4999, notifies the operations center 250, serving as the sender 4998, of the home system's intention to request electronic book content from the operations center 250. This notification may be in the form of initial request message 5250. The operations center 250 then encrypts a randomly generated message RGM generated by the operations center 250 using encryption process EpKS and the operations center's private key pKS and sends the resulting EpKS[RGM] 5251 to the home system 258. The home system 258 decrypts EpKS[RGM] 5251 using decryption process DPKS and the operations center's public key PKS. The home system 258 then encrypts the electronic book request EBR, along with the randomly generated message RGM received from the operations center 250 using encryption process EpKR and the home system's private key pKR, and sends the resulting EpKR[EBR,RGM] 5252 to the operations center 250. The operations center 250 decrypts EpKR[EBR,RGM] 5252 using decryption process DPKR and the home system's public key PKR. If the randomly generated message RGM received from the home system 258 coincides with the randomly generated message RGM that the operations center 250 originally sent to the home system 258, the home system's identity is verified.
  • In another embodiment, the ISO one-way authentication protocol framework, as defined in ISO standard X.509 is used to provide authentication of the operations center's identity.
  • In yet another embodiment of electronic book content delivery from the operations center 250 to the home system 258, the home system 258 requests an electronic book from the operations center 250. The operations center 250 first authenticates the requesting home system 258. An embodiment of the authentication sequence is shown in FIG. 29, where the operations center 250 is serving as the sender 4998 and the home system 258 is serving as the recipient 4999. To authenticate a home system 258 requesting an electronic book from the operations center 250, an authentication sequence may be initiated by the home system 258. The authentication sequence begins with the home system 258 sending a request 5290 to the operations center 250 for a given electronic book content file 5300. The operations center 250 then responds to the home system 258 by generating and returning an authentication string 5291 to the home system 258. The home system 258 returns a message to the operations center 250 that contains: 1) a book identifier 5292, identifying the requested electronic book; 2) the signed authentication string 5293 that has been signed using a one-way hash function and then encrypted using the private key of the home system 258; and 3) home system 258 certification information 5294 that the operations center 250 can authenticate with the certificate authority 4997 (not shown in FIG. 29).
  • The operations center 250 then retrieves the requested encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage. The operations center 250 decrypts the protected metadata header 5302 and validates that the protected metadata header 5302 has not been altered by performing a one-way hash function on the protected metadata header 5302 and comparing the result to the hash value contained in the protected metadata header 5302. If the protected metadata header 5302 was stored unencrypted, the operations center 250 retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage and validates the protected metadata header 5302 using a one-way hashing function. The operations center 250 then modifies the fields of the unprotected metadata header 5301 and protected metadata header 5302 based on the home system 258 request and the rules established by the publisher 282 and the operations center 250 for electronic book use. The operations center 250 may then encrypt the entire protected metadata header 5302 or some portion of the protected metadata header 5302 using the public key of the home system 258 or a pre-determined symmetric key known by both the operations center 250 and the home system 258. The packaged electronic book with metadata headers may then be delivered to home system 258 or the home system 258 may retrieve the packaged electronic book from the operations center 250.
  • Upon receipt of the packaged electronic book, along with metadata headers 5301 and 5302, by the home system 258, the home system 258 may decrypt the protected metadata header 5302, validate that the protected metadata header 5302 has not been altered by performing a one-way hash calculation on the protected metadata header 5302 and comparing the result to the hash value 5305 contained in the protected metadata header 5302, and re-encrypt the protected metadata header 5302 for storage, or store the received packaged electronic book directly without decrypting the protected metadata header 5302. When the electronic book is opened for display on the viewer 266, the viewer 266 decrypts the protected metadata header 5302 using the decryption key, recovers the content decryption key, and decrypts the electronic book content for display on the viewer. Processing and storage of the decryption and encryption keys used on the protected metadata header 5302 at the home system 258 may be done entirely via software, entirely on a secure smart card or removable device, or some combination of the two.
  • In still another embodiment, an operations center 250, or third party electronic book formatter, converts the electronic book content and associated metadata into a deliverable format. The prepared electronic book file is then delivered to the home system 258, for example over the Internet using a secure socket layer (SSL) protected communication link. This exchange, depicted in FIG. 31, may be initiated by the home system 258, serving as the recipient 4999, sending a request message 5330 to the operations center 250, serving as the sender 4998, to deliver the requested electronic book content 5100 to the home system 258.
  • The request message 5330 may contain a login and password sequence that is used by the operations center 250 to initially validate the home system 258. Alternatively, or in addition, the operations center 250 may use the specific Internet Protocol (IP) address of the home system 258, included in the request message 5330, for validation purposes. In response, the operations center 250 may send a certificate 5331, which may include identifying information and the operations center's public key PKS, to the home system 258. The home system 258 verifies the certificate 5331 was issued by a trusted third party certificate authority 4997. The home system 258 compares the information in the certificate that is received from the trusted third party certificate authority 4997, including the operations center's identifying information and public key PKS.
  • The home system 258 then notifies the operations center 250 which encryption algorithms that the home system 258 can support using a supported algorithm message 5332. The operations center 250 selects an algorithm and notifies the home system 258 of the selection using a selected algorithm message 5333. The home system 258 generates a transaction symmetric key SKT 5334, encrypts the transaction symmetric key SKT 5334 using the public key PKS of the operations center 250 and the algorithm provided in the selected algorithm message 5333 and sends the resulting EPKS[SKT] 5335 to the operations center 250. The operations center 250 decrypts EPKS[SKT] 5335 using decryption process DpKS and the operations center's private key pKS. The transaction symmetric key SKT 5334 is then used to encrypt and decrypt the transaction between the operations center 250 and the home system 258.
  • Alternatively, an exchange, as depicted in FIG. 32, may be initiated by the operations center 250, serving as the sender 4998, by sending a request message 5340 to the home system 258, serving as the recipient 4999, that the operations center 250 wishes to deliver electronic book content to the home system 258.
  • The request message 5340 may contain a login and password sequence that may be used by the home system 258 to initially validate the operations center 250. Alternatively, or in addition, the home system 258 may use the specific IP address of the operations center 250, included in the request message 5340, for validation purposes. In response, the home system 258 sends a certificate 5341 to the operations center 250 that may include identifying information and the home system's public key PKR.
  • The operations center 250 verifies the certificate was issued by a trusted third party certificate authority 4997 (not shown in FIG. 32). The operations center 250 compares the information in the certificate 5341 which is received from the trusted third party certificate authority 4997, including home system's identifying information and public key PKR. The operations center 250 then notifies the home system 258 which encryption algorithms the operations center 250 can support using a supported algorithms message 5342. The home system 258 selects an algorithm and notifies the operations center 250 of the selection using a selected algorithm message 5434. The operations center 250 generates a transaction symmetric key SKT 5344, encrypts the transaction symmetric key SKT 5344 using the public key PKR of the home system 258 and the algorithm provided in the selected algorithm message 5343 and sends the resulting EPKR[SKT] 5345 to the home system 258. The home system 258 decrypts EPKR[SKT] 5345 using decryption process DpKR and the home system's private key pKR. The transaction symmetric key SKT 4344 is then used to encrypt and decrypt the transaction between the operations center 250 and the home system 258.
  • Once the electronic book content is received and decrypted by the home system 258, the home system 258 may store the electronic book file unencrypted or may re-encrypt the electronic book file for storage. Alternatively, the home system 258 may also compute a hash value of the electronic book file to be used for validation the integrity of the file when recovered from storage for delivery to a home system 258.
  • In still another embodiment, depicted in FIG. 36, once an electronic book is selected by the home system 258, as shown in selection step 5500 and paid for, the operations center 250 is requested to initiate the delivery of the electronic book to the requesting home system 258. The home system 258, which may be a dedicated library 262 and viewer 266, or alternatively a personal computer serving the functions of the library system 262, along with a dedicated electronic book viewer 266, is provided with the location to obtain the requested electronic book file by the operations center 250, as shown in location step 5501. This location may be an Internet website or any other location accessible by the home system 258. The operations center 250 compresses the requested electronic book file, as shown in compression step 5502. The operations center 250 then generates a random transaction symmetric key SKT, as shown in key generation step 5503 and encrypts the compressed electronic book file using encryption process ESKT and the transaction symmetric key SKT, as shown in encryption step 5504. Non secure metadata is then appended to the compressed, encrypted electronic book file, as shown in appending step 5505. The transaction symmetric key SKT is then encrypted using the public key PKR of the requesting home system 258 and encryption process EPKR, as shown in encryption step 5506. The encrypted electronic book file is then digitally signed as shown in signature step 5507, for example, using the algorithm presented in Applied Cryptography by Bruce Schneier, and the private key of the operations center 250 pKS and is placed in the location provided to the home system 258 for retrieval in distribution step 5508. The operations center 250 removes the electronic book file from the location after a fixed period if the electronic book file is not retrieved by the home system 258, as shown in removal step 5509.
  • The home system 258 retrieves the compressed, encrypted electronic book file from the specified location and stores the retrieved encrypted electronic book file for future viewing. Non secure metadata information is stored and used to identify and manage the encrypted electronic book files residing on the home system 259 for use by the viewer 266. The operations center 250 generates a public and private key pair PKR and pKR for the home system 258 and provides the home system 258 the generated private key pKR during an initial home system 258 registration process. During this initial home system 258 registration process, the operations center 250 also provides the home system 258 with the public key of the operations center 250, PKS.
  • In another embodiment, encrypted electronic book content ESK[EBC] 5515 is stored in compressed and encrypted format at the operations center 250 for access by requesting home systems 258. The symmetric key SK 5510 used to encrypt the electronic book content EBC 5512 is stored in protected memory at the operations center 250. In this embodiment, a home system 258, which may consist of a library 262 and viewer 266 or a standalone viewer 266, contacts the operations center 250 using any one of a number of communication means as presented in the co-pending U.S. patent application Ser. No. 09/289,957 titled ALTERNATIVE ELECTRONIC BOOK DELIVERY SYSTEMS and incorporated herein by reference, including direct dial-in by the viewer 266 using a PSTN.
  • Access to the operations center 250 by the home system 258 may be password protected where the home system 258 presents a password to the operations center 250 upon accessing the operations center 250. The password provided by the home system 258 must match a password the operations center 250 is expecting from a specific home system 258 for before the operations center 250 allows for the purchase of any electronic book content. A request message 5511 is sent by the home system 258 to the operations center 250 to purchase a specific electronic book EBC 5512. In this request message 5511, the home system 258 provides unique identifying information, including the home system 258 internal serial number. Once the requesting home system 258 is verified using the provided password and the identifying information provided in the request message 5511, the operations center 250 retrieves the stored symmetric key SK 5510 used to encrypt the requested electronic book from protected memory and encrypts symmetric key SK 5510 using encryption process ESKS 5512 and shared key SKS 5513.
  • The shared key SKS 5513 is obtained from the home system 258 during an initial home system 258 registration process and is stored by the operations center 250 after this initial registration process. The encrypted electronic book content ESK[EBC] 5515 and the encrypted key ESKS[SK] 5514 are then moved to a location assigned to the requesting home system 258. Any encrypted electronic book and associated encrypted key residing in the home system's assigned location can then be selected and downloaded to the requesting home system 258 at any time. Other information shared by the operations center 250 and the home system 258, including the home system 258 unique internal serial number, is used to authenticate the validity of a requesting home system 258 prior to initiating the download of encrypted electronic book content to the home system 258. The operations center 250 obtains information about the home system 258, including the shared key SKS 5513 and internal serial number during an initial home system 258 registration process. Also, the operations center 250 provides the assigned location for the home system 258 to retrieve future electronic book content during this registration process.
  • Once the encrypted electronic book content ESK[EBC] 5515 and the encrypted key ESKS[SK] 5514 are downloaded to a home system 258, the home system 258 uses shared key SKS 5513 and decryption process DSKS to decrypt the encrypted key ESKS[SK] 5514 to recover the symmetric key SK 5510. The encrypted electronic book content ESK[EBC] 5515 or a portion thereof is then decrypted using the recovered symmetric key SK 5510 and decryption process DSK and the resulting electronic book content EBC 5512 is then decompressed for display on the viewer 266.
  • To ensure the operations center 250 that the electronic book content delivered to the home system 258 was received, the home system 258, serving as the recipient 4999 in FIG. 33, may respond to the operations center 250, serving as the sender in FIG. 33, by first generating a reply message REP as shown in step 5260. The home system 258 then encrypts reply message REP in the home system's private key pKR using encryption process EpKR, resulting in EpKR[REP], as shown in step 5261. The home system 258 then encrypts EpKR[REP] in the operations center's public key PKS using encryption process EPKS, resulting in EPKS[EpKR[REP]], as shown in step 5262. The home system 250 sends EPKS[EpKR[REP]] to the operations center 250, as shown in step 5263. The operations center 250 then decrypts EPKS[EpKR[REP]], using decryption process DpKS and the operations center's private key pKS, resulting in EpKR[REP] as shown in step 5264. The operations center 250 then decrypts the resulting EpKR[REP] using decryption process DPKR and the home system's public key PKR, as shown in step 5265. As shown in step 5266, the valid reception of reply message REP by operations center 250 serves as verification of receipt of the electronic book content delivered to the home system 258 by the operations center 250.
  • In another embodiment, the ISO two-way authentication protocol framework, as defined in ISO standard X.509 is used to provide verification of receipt of electronic book content by the home system 258.
  • Exchanging encryption key information between the operations center 250 and home system 258 may be done using communication networks. Alternatively, encryption key distribution may be accomplished by storing the encryption key information on a smart card, PCMCIA card device, CD ROM, or other portable memory storage device and delivering the device to the appropriate location for retrieval and use in future encryption and decryption activities. When the key is delivered in physical form, the key may have associated with it a valid time period of use. Once this period has expired, a new key is required. Alternatively, the device may support the capability to be updated remotely via a communication network.
  • Encryption, decryption, hashing, digital signature processing, formatting, compression, key management, and other security related activities presented herein that are performed by the operations center 250 or the home system 258 may be done in hardware using a specialized processor. In an alternate embodiment, security related activities may be done in software using a standard or secure processor. In yet another alternative, a portion of security related activities may be done in software using a standard or secure processor while the remaining portion done in hardware via a specialized processor.
  • Once electronic book content is received and decrypted by the home system 258, the home system 258 may encrypt the electronic book content EBC 5100 with a symmetric key algorithm and may store the encrypted electronic book content along with any non-encrypted content associated with the electronic book in storage memory device 5270 at the home system 258. In one embodiment, depicted in FIG. 34, secure storage is done on a memory device at the driver-level, where all information stored on the memory storage device 5270 is encrypted by a memory device driver prior to being stored on memory storage device 5270, as described in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference. In this embodiment, any content X 5272 to be stored on the memory storage device 5270, including electronic book content, is encrypted using encryption process ESK 5274 in the memory device driver 5271 and a symmetric key SK 5276, resulting in encrypted content ESK[X] 5273. The encrypted content ESK[X] 5273 is then stored on the memory storage device 5270. Upon retrieval from memory storage device 5270, decryption process D SK 5275 decrypts encrypted content ESK[X] 5273 with symmetric key SK 5276, resulting in the original content X 5272. In another embodiment, secure storage is done at the file level, also as described in Applied Cryptography, by Bruce Schneier, where each file is encrypted individually with a different symmetric key prior to storage and stored in its encrypted form on memory storage device 5270. The symmetric key SK 5276 can then be stored separate from the stored encrypted content X 5272. In one such embodiment, encryption is done in hardware using a specialized encryption processor. In an alternate embodiment, encryption is done in software using a standard or secure processor.
  • To ensure the electronic book content file has not been modified while it was stored, in one embodiment, depicted in FIG. 35, the home system 258, serving as the storage site 4996, uses a one-way hashing algorithm 5280, as presented in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference, where a hashing value 5281 is calculated by the home system 258 based on the electronic book content EBC 5100 prior to encryption process 5282. The hashing value 5281, along with encrypted content ESK[EBC] 5284 is then stored on memory storage device 5283. When the encrypted content ESK[EBC] 5284 is retrieved from storage, the home system 258 decrypts encrypted content ESK[EBC] 5284 using decryption process D SK 5285 and retrieves the stored hashing value 5281. The home system 258 then calculates a hashing value 5281′, using the hashing algorithm 5280 and the retrieved electronic book content EBC 5100. Comparator 5286 compares the hashing value 5281 to the hashing value 5281′ to determine if they coincide. If the hashing value 5281 and the hashing value 5281′ coincide, the integrity of the electronic book content EBC 5100 retrieved for memory storage device 5283 can be ensured.
  • The security methods described above may also be applied to the communications between an operations center 250 or cable headend and an upgraded cable set-top converter 601 that is configured to function as a library 262.
  • C. Library to Viewer Security
  • In one embodiment, the home system 258 combines the library 262 and viewer 266 functions into a single device. In another embodiment, the home system 258 includes two separate devices, a library 262 and a viewer 266. For this two device embodiment, all security processing required with the viewer 266 may be done entirely in the viewer 266. Alternatively, all security processing required with the viewer 266 may be done entirely in the library 262. When security processing between the home system 258 and the viewer 266 is done by the library 262, separate security processing may be implemented between the library 262 and the viewer 266. The library 262 can deliver electronic book content to the viewer 266 via a secured mechanism.
  • In one embodiment, an asymmetric public key encryption technique is used, as described in Contemporary Cryptography, edited by Gustavus Simmons, published by IEEE Press in 1992, and hereby incorporated by reference. Public key algorithms used may include the Merkle-Hellman Knapsacks technique, as described in U.S. Pat. No. 4,218,582, the RSA technique, as described in U.S. Pat. No. 4,405,829, the Pohlig-Hellman technique, as described in U.S. Pat. No. 4,424,414, the Schnorr Signatures technique, as described in U.S. Pat. No. 4,995,082, or any other public key technique.
  • In this embodiment, depicted in FIG. 20, the library 262, serving as the sender 4998, first encrypts the electronic book content EBC 5100 destined for the viewer 266, serving as the recipient 4999, using a symmetric key encryption process E SK 5102, and using DES, PKZIP, BLOWFISH, or any other symmetric encryption algorithm, resulting in encrypted content ESK[EBC] 5109. The encryption process E SK 5102 uses a symmetric key SK 5103 either randomly generated by a key generator process 5104 or previously defined and retrieved from key storage memory 5105. Then, the library 262 encrypts the symmetric key SK 5103 with private key encryption process E pKS 5106 using the library's private key pKS 5107, resulting in encrypted key EpKS[SK] 5108. Then, the library 262 packages encrypted key EpKS[SK] 5108, encrypted content ESK[EBC] 5109 and non-encrypted information 5110 related to the electronic book or the exchange and delivers the package to the viewer 266. Using decryption process D PKS 5111 and the library's public key PKS 5112, the viewer 266 decrypts the encrypted key EpKS[SK] 5108 and uses the recovered symmetric key SK 5103 to decrypt the encrypted content ESK[EBC] 5109 using decryption process D SK 5113.
  • In another embodiment, depicted in FIG. 23 a, the library 262, serving as the sender 4998, encrypts the entire transaction stream TS 5165 between the library 262 and the viewer 266, serving as the recipient 499. To do so, the library 262 may use the sender private key pKS 5160 and encryption process E pKS 5161 to encrypt the transaction stream TS 5165, resulting in encrypted transaction stream EpKS[TS] 5162. In this embodiment, the viewer 266 uses decryption process D PKS 5164 and sender public key PKS 5163 to decrypt the encrypted transaction stream EpKS[TS] 5162.
  • In another embodiment, depicted in FIG. 23 b, the library 262, serving as the sender 4998, may use the public key of the viewer 266, serving as the recipient 4999, to encrypt the transaction stream TS 5165. To do so, the library 262 may use the recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165, resulting in encrypted transaction stream EPKR[TS] 5173. In this embodiment, the viewer 266 uses decryption process D pKR 5174 and recipient private key pKR 5172 to decrypt the encrypted transaction stream EPKR[TS] 5173. In another embodiment, depicted in FIG. 23 c, the library 262, serving as sender 4998, may use a transaction symmetric key SKT 5181 that both the library 262 and the viewer 266 have stored in advance of the transaction to encrypt the transaction stream TS 5165. In this embodiment, the library 262 uses encryption process E SKT 5180 and transaction symmetric key SKT 5181 to generate encrypted transaction stream ESKT[TS] 5182. The viewer 266 uses decryption process D SKT 5183 and transaction symmetric key SKT 5181 to decrypt encrypted transaction stream ESKT[TS] 5182, resulting in transaction stream TS 5165.
  • In another embodiment, depicted in FIG. 24 a, the library 262, serving as the sender 4998, and the viewer 266, serving as the recipient 4999, initiate the transaction by negotiating a shared key to use for the transaction, using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700, to generate the shared transaction symmetric key. Key negotiation information 5190 is exchanged between key generation algorithms 5191 operated by both the library 262 and the viewer 266. As a result of the negotiation process, the library's key generator algorithm 5191 generates the transaction symmetric key SKT 5193 and the viewer's key generator algorithm 5192 generates the transaction symmetric key SKT 5193.
  • The library 262 encrypts the electronic book content EBC 5100 using encryption process E SKT 5194 and the shared transaction symmetric key SKT 5193 and delivers the resulting encrypted content ESKT[EBC] 5195 to the viewer 266. The viewer 266 uses the shared transaction symmetric key SKT 5193 and decryption process D SKT 5196 to decrypt the encrypted content ESKT[EBC] 5195. In a different embodiment, depicted in FIG. 24 b, the library 262 serves as the sender 4998 and viewer 266 serves as the recipient 4999. Initial key negotiation information 5200 is exchanged between the seed key generation algorithm 5201 at the library 262 and the seed key generation algorithm 5202 at the viewer 266. As a result, the seed key generation algorithm 5201 at the library 262 and the seed key generation algorithm 5202 at the viewer 266 each generate seed key SK 5203 using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700. Seed key 5203 is then used by key sequence generator 5204 at the library 262 site to generate the first in a sequence of keys, transaction symmetric key SKTi 5206.
  • Similarly, seed key 5203 is used by key sequence generator 5205 at the viewer 266 to generate the identical sequence of keys, beginning with transaction symmetric key S KTi 5206. The library 262 encrypts the electronic book content EBC 5100 using encryption process E SKTi 5207 and the shared transaction symmetric key S KTi 5206 and delivers the resulting encrypted content ESKTi[EBC] 5208 to the viewer 266. The viewer 266 uses the transaction symmetric key S KTi 5206 and decryption process D SKTi 5209 to decrypt the encrypted content ESKTi[EBC] 5206. The library 262 key sequence generator 5204 and viewer 266 key sequence generator 5205 continue to generate matching transaction symmetric keys for use in encrypting each subsequent transaction between the library 262 and the viewer 266.
  • To ensure that the electronic book content delivered by the library 262 to the viewer 266 was not altered in route, integrity checking algorithms may be employed. In one embodiment, depicted in FIG. 26, the library 262, serving as the sender 4998, uses a one-way hashing algorithm 5231, as presented in Applied Cryptography, by Bruce Schneier, published by John Wiley & Sons, Inc. in 1996, and hereby incorporated by reference, where a hashing value 5232 is calculated by the library 262 based on the electronic book content file 5230 as an input. This resulting hashing value 5232, along with the actual encrypted electronic book file 5237 that has been encrypted by the library 262 via encryption process 5235 is delivered to the viewer 266, serving as the recipient 4999.
  • The viewer 266 decrypts the encrypted electronic book file 5237 using decryption process 5236 to recover the electronic book content file 5230′. The viewer 266 then uses the hashing algorithm 5231 with the electronic book content file 5230′ as input to generate a hashing value 5232′, which is compared to the hashing value 5232 delivered with the encrypted electronic book file 5237. If the hashing value 5232′ calculated by the viewer 266 coincides with the hashing value 5232 delivered by the library 262 as determined by comparator 5233, the integrity of the electronic book content file 5230′ can be ensured.
  • To identify the library 262 delivering the electronic book, the library 262 and viewer 266 may use an authentication method. In one embodiment, the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference. In another embodiment, the library 262 uses a password as an identifier. This password may be delivered along with the electronic book content to authenticate the library 262 as the sender. The viewer 266 compares this, password with the password the viewer 266 has for the library 262. If the passwords match, the source of the electronic book content, i.e., the library 262, is verified.
  • In yet another embodiment, public key encryption is used as a digital signature to authenticate the library 262. The library 262 encrypts the electronic book content using the library's private key pKS. When the viewer 266 correctly decrypts the encrypted electronic book content with the library's public key PKS, the identity of the library 262 is authenticated since only the library 262 has access to the library's private key pKS used to encrypt the electronic book content. In another embodiment, the ISO one-way authentication protocol framework, as defined in ISO standard X.509 is used to provide authentication of the library's identity.
  • A viewer 266 may initiate the transaction with the library 262 by requesting that an electronic book be delivered from the library 262 to the viewer 266. To validate the identity of the viewer 266, the library 262 and viewer 266 may use the above authentication method embodiments. In another embodiment, the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference. In another embodiment, the viewer 266 uses a password as an identifier. This password may be delivered along with the electronic book request to authenticate the viewer 266. The library 262 compares this password with the password the library unit 266 has for the viewer 266. If the passwords match, the source of the electronic book request, i.e., the viewer 266, is verified.
  • In yet another embodiment, public key encryption is used as a digital signature to authenticate the viewer 266. The viewer 266 encrypts the electronic book request using the viewer 266 private key pKR and send the encrypted request to the publisher 282. When the publisher 282 correctly decrypts the encrypted request with the viewer's public key PKR, the identity of the viewer 266 is authenticated since only the viewer 266 has access to the viewer's private key pKR used to encrypt the electronic book request.
  • In another embodiment, depicted in FIG. 28, upon initiation of the transaction, the viewer 266, serving as the recipient 4999, notifies the library 262, serving as the sender 4998, of the viewer's intention to request electronic book content from the library 262. This notification is in the form of initial request message 5250. The library 262 then encrypts a randomly generated message RGM generated by the library 262 using encryption process EpKS and the library's private key pKS and sends the resulting EpKS[RGM] 5251 to the viewer 266. The viewer 266 decrypts EpKS[RGM] 5251 using decryption process DPKS and the library's public key PKS. The viewer 266 then encrypts the electronic book request EBR, along with the randomly generated message RGM received from the library 262 using encryption process EpKR and the viewer's private key pKR and sends the resulting EpKR[EBR,RGM] 5252 to the library 262. The library 262 decrypts EpKR[EBR,RGM] 5252 using decryption process DPKR and the viewer's public key PKR. If the randomly generated message RGM received from the viewer 266 coincides with the randomly generated message RGM that the library 262 originally sent to the viewer 266, the viewer's identity is verified.
  • In another embodiment, the ISO one-way authentication protocol framework, as defined in ISO standard X.509 is used to provide authentication of the library's identity.
  • In yet another embodiment, the compressed and encrypted electronic book content file ESKT[EBC] is stored on the library system 262. Once the electronic book is ready to be displayed on the viewer 266, the entire compressed and encrypted electronic book file ESKT[EBC] is downloaded to the viewer 266 from the library system 262. The viewer 266 verifies the source of the electronic book by using the public key of the viewer 266 PKS to decrypt the digital signature provided. The viewer 266 then decrypts the symmetric key using decryption process DpKR and the viewer's private key pKR. The viewer 266 then uses decryption process DSKT and the transaction symmetric key SKT to decrypt all or a portion of the electronic book file prior to display. The viewer 266 then decompresses the electronic book file and displays a page of the electronic book on the viewer 266 display.
  • Exchanging encryption key information between the library 262 and viewer 266 may be done using communication networks. Alternatively, encryption key distribution may be accomplished by storing the encryption key information on a smart card, PCMCIA card device, CD ROM, or other portable memory storage device and delivering the device to the appropriate location for retrieval and use in future encryption and decryption activities. When the key is delivered in physical form, the key may have associated with it a valid time period of use. Once this period has expired, a new key may be required. Alternatively, the device may support the capability to be updated remotely via a communication network.
  • Encryption, decryption, hashing, digital signature processing, formatting, compression, key management, and other security related activities presented herein that are performed by the library 262 or the viewer 266 may be done in hardware using a specialized processor. In an alternate embodiment, security related activities may be done in software using a standard or secure processor. In yet another alternative, a portion of security related activities may be done in software using a standard or secure processor while the remaining portion done in hardware using a specialized processor.
  • Once the electronic book content EBC 5100 is received and decrypted by the viewer 266, the viewer 266 may encrypt the electronic book content EBC 5100 with a symmetric key algorithm and store the encrypted electronic book content along with any non-encrypted content associated with the electronic book in storage memory device 5270 at the viewer 266. In one embodiment, depicted in FIG. 34, secure storage is done on a memory device at the driver-level, where all information stored on the memory storage device 5270 is encrypted by memory device driver prior to being stored on memory storage device 5270, as described in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference. In this embodiment, any content X 5272 to be stored on the memory storage device 5270, including electronic book content, is encrypted using encryption process E SK 5274 in memory device driver 5271 and symmetric key SK 5276, resulting in encrypted content ESK[X] 5273. The resulting encrypted content ESK[X] 5273 is then stored on memory storage device 5270. Upon retrieval from memory storage device 5270, decryption process DSK 5275 decrypts encrypted content ESK[X] 5273 with symmetric key SK 5276, resulting in the original content X 5272. In another embodiment, secure storage is done at the file level, also as described in Applied Cryptography, by Bruce Schneier, where each file is encrypted individually with a different symmetric key prior to storage and stored in its encrypted form on memory storage device 5270. The symmetric key SK 5276 can then be stored separate from the stored encrypted content X 5272. In one such embodiment, encryption is done in hardware using a specialized encryption processor. In an alternate embodiment, encryption is done in software using a standard or secure processor.
  • To ensure the electronic book content file has not been modified while it was stored, in one embodiment, depicted in FIG. 35, the viewer 266, serving as the storage site 4996, uses a one-way hashing algorithm 5280, as presented in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference, where a hashing value 5281 is calculated by the viewer 266 based on the electronic book content EBC 5100 prior to encryption process 5282. The hashing value 5281, along with the encrypted content ESK[EBC] 5284 is then stored on the memory storage device 5283. When the encrypted content ESK[EBC] 5284 is retrieved from storage, the viewer 266 decrypts encrypted content ESK[EBC] 5284 using decryption process D SK 5285 and retrieves the stored hashing value 5281. The viewer 266 then calculates hashing value 5281′, using hashing algorithm 5280 and the retrieved electronic book content EBC 5100. Comparator 5286 compares the hashing value 5281 to the hashing value 5281′ to determine if they coincide. If the hashing value 5281 and the hashing value 5281′ coincide, the integrity of the electronic book content EBC 5100 retrieved for memory storage device 5283 can be ensured and the viewer 266 displays the retrieved content.
  • The security methods described above may also be applied to the communications between an upgraded cable set-top converter 601 that is configured to function as a library unit 262 and a viewer 266.
  • D. Kiosk to Viewer Security
  • Kiosks, public libraries, schools, and bookstore systems can deliver electronic book content to a viewer 266 or public viewer 912 using a secured mechanism. In one embodiment, an asymmetric public key encryption technique is used, as described in Contemporary Cryptography, edited by Gustavus Simmons, published by IEEE Press in 1992, and hereby incorporated by reference. Public key algorithms used may include the Merkle-Hellman Knapsacks technique, as described in U.S. Pat. No. 4,218,582, the RSA technique, as described in U.S. Pat. No. 4,405,829, the Pohlig-Hellman technique, as described in U.S. Pat. No. 4,424,414, the Schnorr Signatures technique, as described in U.S. Pat. No. 4,995,082, or any other public key technique.
  • In this embodiment, depicted in FIG. 20, a kiosk, serving as the sender 4998, first encrypts the electronic book content EBC 5100 destined for the viewer 266 or the public viewer 912 (see FIG. 15), serving as the recipient 4999, using a symmetric key encryption process E SK 5102, and using DES, PKZIP, BLOWFISH, or any other symmetric encryption algorithm, resulting in encrypted content ESK[EBC] 5109. The encryption process E SK 5102 uses a symmetric key SK 5103 either randomly generated by a key generator process 5104 or previously defined and retrieved from key storage memory 5105. Then, the kiosk encrypts the symmetric key SK 5103 with private key encryption process E pKS 5106 using the kiosk's private key pKS 5107, resulting in encrypted key EpKS[SK] 5108. The kiosk packages encrypted key EpKS[SK] 5108, encrypted content ESK[EBC] 5109 and non-encrypted information 5110 related to the electronic book or the exchange and delivers the package to the viewer 266 or public viewer 912. Using decryption process D PKS 5111 and the kiosk's public key PKS 5112, the viewer 266 or public viewer 912 decrypts the encrypted key EpKS[SK] 5108 and uses the recovered symmetric key SK 5103 to decrypt the encrypted content ESK[EBC] 5109 using decryption process DSK 5113.
  • In an alternate embodiment, depicted in FIG. 21, only symmetric key encryption is used, using a certificate authority 4997. The certificate authority 4997, a trusted source, provides a symmetric key to each kiosk, serving as the sender 4998, and the viewer 266 or public viewer 912, serving as the recipient 4999. The certificate authority 4997 may be an existing commercial entity such as Entrust or Verisign or a private entity established for the sole purpose of electronic book secure distribution. The kiosk contacts the certificate authority 4997, sending a request 5120 for a transaction symmetric key SKT 5121 to be used during the transaction. The certificate authority 4997 either randomly generates the transaction symmetric key SKT 5121 by using a key generator process 5124 or retrieves the previously defined transaction symmetric key SKT 5121 from key storage memory 5125. The transaction symmetric key SKT 5121 is encrypted by the certificate authority 4997 using symmetric key encryption process E SKS 5123 and the kiosk's symmetric key SKS 5122.
  • The resulting encrypted symmetric key ESKS[SKT] 5126 is delivered by the certificate authority 4997 to the kiosk. The kiosk decrypts the encrypted symmetric key ESKS[SKT] 5126 using decryption process DSKS 5127 and using the kiosk's symmetric key SKS 5122 to recover the transaction symmetric key SKT 5121. The kiosk then uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to encrypt the electronic book content EBC 5100 using encryption process E SKT 5128, resulting in encrypted content ESKT[EBC] 5129. The kiosk delivers the encrypted content ESKT[EBC] 5129 to the viewer 266 or public viewer 912. The transaction symmetric key SKT 5121 is also encrypted by the certificate authority 4997 using symmetric key encryption process E SKR 5131 using the viewer's symmetric key SKR 5130. The resulting encrypted symmetric key ESKR[SKT] 5132 is delivered by the certificate authority 4997 to the viewer 266 or public viewer 912. The viewer 266 or public viewer 912 decrypts the encrypted symmetric key ESKR[SKT] 5132 using decryption process DSKR 5133 and the viewer's symmetric key SKR 5130 to recover the transaction symmetric key SKT 5121. The viewer 266 or public viewer 912 then uses the recovered transaction symmetric key SKT 5121 received from the certificate authority 4997 to decrypt the encrypted content ESKT[EBC] 5129 using decryption process D SKT 5134, resulting in the unencrypted electronic book content 5100.
  • In yet another embodiment, depicted in FIG. 22, the kiosk, acting as the sender 4998, generates a transaction symmetric key SKT 5140. The kiosk either randomly generates the transaction symmetric key SKT 5140 by using the key generator process 5141 or retrieves the previously defined transaction symmetric key SKT 5140 from key storage memory 5142. The kiosk encrypts the electronic book content EBC 5100 using encryption process E SKT 5143 and the transaction symmetric key SKT 5140, and delivers the encrypted content ESKT[EBC] 5144 to the viewer 266 or public viewer 912, acting as the recipient 4999.
  • The kiosk encrypts the transaction symmetric key SKT 5140 using encryption process E SKS 5145 and the kiosk's symmetric key SKS 5146 that the kiosk shares with a third party certificate authority 4997 and delivers the encrypted symmetric key ESKS[SKT] 5147 to the third party certificate authority 4997. The certificate authority 4997 decrypts the encrypted symmetric key ESKS[SKT] 5147 using decryption process D SKS 5148 and the kiosk's symmetric key SKS 5146. The viewer 266 or public viewer 912 may contact the certificate authority 4997 using the request 5149 to obtain the transaction symmetric key 5140. Prior to the certificate authority 4997 delivering the needed transaction symmetric key 5140 to the viewer 266 or public viewer 912, the viewer 266 or public viewer 912 may be required to complete a financial transaction with the certificate authority 4997, paying for the electronic book content first. The certificate authority 4997 then encrypts the transaction symmetric key SKT 5140 using encryption process E SKR 5150 and the viewer's symmetric key SKR 5151 that the certificate authority 4997 shares with the viewer 266 or public viewer 912, and delivers the encrypted symmetric key ESKR[SKT] 5152 to the viewer 266 or public viewer 912. The viewer 266 or public viewer 912 decrypts the encrypted symmetric key ESKR[SKT] 5152 using decryption process D SKR 5153 and the viewer's symmetric key SKR 5151, and uses the recovered transaction symmetric key SKT 5140 to decrypt the encrypted content ESKT[EBC] using decryption process D SKT 5154, resulting in electronic book content EBC 5100.
  • In another embodiment, depicted in FIG. 23 a, the kiosk, serving as the sender 4998, encrypts the entire transaction stream TS 5165 between the kiosk and the viewer 266 or public viewer 912, serving as the recipient 499. To do so, the kiosk may use the sender private key pKS 5160 and encryption process E pKS 5161 to encrypt the transaction stream TS 5165, resulting in encrypted transaction stream EpKS[TS] 5162. In this embodiment, the viewer 266 or public viewer 912 uses decryption process D PKS 5164 and sender public key PKS 5163 to decrypt the encrypted transaction stream EpKS[TS] 5162.
  • In another embodiment, depicted in FIG. 23 b, the kiosk, serving as the sender 4998, may use the public key of the viewer 266 or public viewer 912, serving as the recipient 4999, to encrypt the transaction stream TS 5165. To do so, the kiosk may use the recipient public key PKR 5171 and encryption process E PKR 5170 to encrypt the transaction stream TS 5165, resulting in encrypted transaction stream EPKR[TS] 5173. In this embodiment, the viewer 266 or public viewer 912 uses decryption process D pKR 5174 and recipient private key pKR 5172 to decrypt the encrypted transaction stream EPKR[TS] 5173.
  • In another embodiment, depicted in FIG. 23 c, the kiosk, serving as the sender 4998, may use a transaction symmetric key SKT 5181 that both the kiosk and the viewer 266 or public viewer 912 have stored in advance of the transaction to encrypt the transaction stream TS 5165. In this embodiment, the kiosk uses encryption process E SKT 5180 and transaction symmetric key SKT 5181 to generate encrypted transaction stream ESKT[TS] 5182. The viewer 266 or public viewer 912 uses decryption process D SKT 5183 and transaction symmetric key SKT 5181 to decrypt encrypted transaction stream ESKT[TS] 5182, resulting in transaction stream TS 5165.
  • In another embodiment, depicted in FIG. 24 a, the kiosk, serving as the sender 4998, and viewer 266 or public viewer 912, serving as the recipient 4999, initiate the transaction by negotiating a shared key to use for the transaction, using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700, to generate the shared transaction symmetric key. Key negotiation information 5190 is exchanged between key generation algorithms 5191 operated by both the kiosk and the viewer 266 or public viewer 912. As a result of the negotiation process, the kiosk's key generator algorithm 5191 generates the transaction symmetric key SKT 5192 and the viewer's key generator algorithm 5192 generates the transaction symmetric key SKT 5193.
  • The kiosk encrypts the electronic book content EBC 5100 using encryption process E SKT 5194 and the shared transaction symmetric key SKT 5193 and delivers the resulting encrypted content ESKT[EBC] 5195 to the viewer 266 or public viewer 912. The viewer 266 or public viewer 912 uses the shared transaction symmetric key SKT 5193 and decryption process D SKT 5196 to decrypt the encrypted content ESKT[EBC] 5195.
  • In a different embodiment, depicted in FIG. 24 b, the kiosk serves as the sender 4998 and viewer 266 or public viewer 912 serves as the recipient 4999. Initial key negotiation information 5200 is exchanged between the seed key generation algorithm 5201 at the kiosk and the seed key generation algorithm 5202 at the viewer 266 or public viewer 912.
  • As a result, the seed key generation algorithm 5201 at the kiosk and the seed key generation algorithm 5202 at the viewer 266 or public viewer 912 each generate seed key SK 5203 using, for example, the Elliptic Curve Diffie-Hellman key exchange algorithm, as described in U.S. Pat. No. 4,200,700. Seed key 5203 is then used by key sequence generator 5204 at the kiosk site to generate the first in a sequence of keys, transaction symmetric key S KTi 5206. Similarly, seed key 5203 is used by key sequence generator 5205 at the viewer 266 or public viewer 912 to generate the identical sequence of keys, beginning with transaction symmetric key SKTi 5206.
  • The kiosk encrypts the electronic book content EBC 5100 using encryption process E SKTi 5207 and the shared transaction symmetric key S KTi 5206 and delivers the resulting encrypted content ESKTi[EBC] 5208 to the viewer 266 or public viewer 912. The viewer 266 or the public viewer 912 uses the transaction symmetric key S KTi 5206 and decryption process D SKTi 5209 to decrypt the encrypted content ESKTi[EBC] 5206. The kiosk key sequence generator 5204 and viewer 266 or public viewer 912 key sequence generator 5205 continue to generate matching transaction symmetric keys for use in encrypting each subsequent transaction between the kiosk and the viewer 266 or public viewer 912.
  • To ensure that the electronic book content delivered by the kiosk to the viewer 266 or public viewer 912 was not altered in route, integrity checking algorithms may be employed. In one embodiment, depicted in FIG. 26, the kiosk, serving as sender 4998, uses a one-way hashing algorithm 5231, as presented in Applied Cryptography, by Bruce Schneier, published by John Wiley & Sons, Inc. in 1996, and hereby incorporated by reference, where a hashing value 5232 is calculated by the kiosk based on the electronic book content file 5230 as input. This resulting hashing value 5232, along with the actual encrypted electronic book file 5237 that has been encrypted by the kiosk via encryption process 5235 is delivered to the viewer 266 or public viewer 912, serving as recipient 4999.
  • The viewer 266 or public viewer 912 decrypts the encrypted electronic book file 5237 using decryption process 5236 to recover the electronic book content file 5230′. The viewer 266 or public viewer 912 then uses the hashing algorithm 5231 with the electronic book content file 5230′ as input to generate a hashing value 5232′, which is compared to the hashing value 5232 delivered with the encrypted electronic book file 5237. If the hashing value 5232′ calculated by the viewer 266 or public viewer 912 coincides with the hashing value 5232 delivered by the kiosk as determined by comparator 5233, the integrity of the electronic book content file 5230′ can be ensured.
  • To identify the kiosk of the electronic book, the kiosk and viewer 266 or the public viewer 912 may use an authentication method. In one embodiment, the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference.
  • In another embodiment, the kiosk uses a password as an identifier. This password is delivered along with the electronic book content to authenticate the kiosk. The viewer 266 or the public viewer 912 compares this password with the password the viewer 266 or the public viewer 912 has for the kiosk. If the passwords match, the source of the electronic book content, i.e., the kiosk, is verified.
  • In yet another embodiment, public key encryption is used as a digital signature to authenticate the kiosk. The kiosk encrypts the electronic book content using the kiosk's private key. When the viewer 266 or the public viewer 912 correctly decrypts the encrypted electronic book content with the kiosk's public key, the identity of the kiosk is authenticated since only the kiosk has access to the kiosk's private key used to encrypt the electronic book content.
  • In another embodiment, depicted in FIG. 27, upon initiation of the transaction, the kiosk, serving as the sender 4998, notifies the viewer 266 or the public viewer 912, serving as the recipient 4999, of the kiosk's intention to deliver electronic book content to the viewer 266 or public viewer 912. This notification may be in the form of delivery notification message 5240. The viewer 266 or the public viewer 912 then encrypts a randomly generated message RGM generated by the viewer 266 or the public viewer 912 using encryption process EpKR and the viewer's private key pKR and sends the resulting EpKR[RGM] 5241 to the kiosk. The kiosk decrypts EpKR[RGM] 5241 using decryption process DPKR and the viewer's public key PKR. The kiosk then encrypts the electronic book content EBC 5100, along with the randomly generated message RGM received from the viewer 266 or the public viewer 912 using encryption process EpKS and the kiosk's private key pKS and sends the resulting EpKS[EBC,RGM] 5242 to the viewer 266 or the public viewer 912. The viewer 266 or the public viewer 912 decrypts EpKS[EBC,RGM] 5242 using decryption process DPKS and the kiosk's public key PKS. If the randomly generated message RGM received from the kiosk coincides with the randomly generated message RGM that the viewer 266 or public viewer 912 originally sent to the kiosk, the kiosk's identity is verified. In another embodiment, the ISO one-way authentication protocol framework, as defined in ISO standard X.509 is used to provide authentication of the kiosk's identity.
  • A viewer 266 or public viewer 912 may initiate the transaction with the kiosk by requesting that an electronic book be delivered from the kiosk to the viewer 266 or the public viewer 912. To validate the identity of the viewer 266 or the public viewer 912, the kiosk and viewer 266 or the public viewer 912 may use the above authentication method embodiments. In another embodiment, the Digital Signature Algorithm (DSA) is used, as described in U.S. Pat. No. 5,231,668, and hereby incorporated by reference. In another embodiment, the viewer 266 or the public viewer 912 uses a password as an identifier.
  • This password is delivered along with the electronic book request to authenticate the viewer 266 or the public viewer 912. The kiosk compares this password with the password it has for the viewer 266 or the public viewer 912. If the password matches, the source of the electronic book request, i.e., the viewer 266 or the public viewer 912 is verified. In yet another embodiment, public key encryption is used as a digital signature to authenticate the viewer 266 or the public viewer 912. The viewer 266 or the public viewer 912 encrypts the electronic book request using the viewer 266 or the public viewer 912 private key pKR and send the encrypted request to the kiosk. When the kiosk correctly decrypts the encrypted request with the viewer's public key PKR, the identity of the viewer 266 or the public viewer 912 is authenticated since only the viewer 266 or the public viewer 912 has access to the viewer's private key pKR used to encrypt the electronic book request.
  • In another embodiment, depicted in FIG. 28, upon initiation of the transaction, the viewer 266 or the public viewer 912, serving as the recipient 4999, notifies the kiosk, serving as the sender 4998, of the viewer's intention to request electronic book content from the kiosk. This notification is in the form of initial request message 5250. The kiosk then encrypts a randomly generated message RGM generated by the kiosk using encryption process EpKS and the kiosk's private key pKS and sends the resulting EpKS[RGM] 5251 to the viewer 266 or public viewer 912. The viewer 266 or the public viewer 912 decrypts EpKS[RGM] 5251 using decryption process DPKS and the kiosk's public key PKS. The viewer 266 or the public viewer 912 then encrypts the electronic book request EBR, along with the randomly generated message RGM received from the kiosk using encryption process EpKR and the viewer's private key pKR and sends the resulting EpKR[EBR,RGM] 5252 to the kiosk. The kiosk decrypts EpKR[EBR,RGM] 5252 using decryption process DPKR and the viewer's public key PKR. If the randomly generated message RGM received from the viewer 266 or the public viewer 912 coincides with the randomly generated message RGM that the kiosk originally sent to the viewer 266 or the public viewer 912, the viewer's identity is verified.
  • In another embodiment, the ISO one-way authentication protocol framework, as defined in ISO standard X.509 is used to provide authentication of the kiosk's identity.
  • In yet another embodiment, where the kiosk is functioning as a public library, a viewer 266 or the public viewer 912 requests an electronic book to be borrowed from the kiosk. The kiosk must first authenticate the viewer 266 or the public viewer 912. An embodiment of the authentication sequence is depicted in FIG. 29, where the kiosk is serving as sender 4998 and the viewer 266 or the public viewer 912 is serving as recipient 4999. To authenticate an viewer 266 or the public viewer 912 requesting an electronic book from the kiosk, an authentication sequence may be initiated by the viewer 266 or the public viewer 912. The authentication sequence begins with the viewer 266 or the public viewer 912 sending a request 5290 to the kiosk for a given electronic book content file 5300. The kiosk then responds to the viewer 266 or the public viewer 912 by generating and returning an authentication string 5291 to the viewer 266 or the public viewer 912.
  • The viewer 266 or the public viewer 912 returns a message to the kiosk that contains: 1) a book identifier 5292, identifying the requested electronic book; 2) the signed authentication string 5293 that has been signed using a one-way hash function and then encrypted using the private key of the viewer 266 or public viewer 912; and 3) viewer 266 or the public viewer 912 certification information 5294 that the kiosk can authenticate with a certificate authority 4997. The kiosk retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage. The kiosk decrypts the protected metadata header 5302 using the decryption key and validates that the protected metadata header 5302 has not been altered by performing a one-way hash function on the protected metadata header 5302 and comparing the result to the hash value contained in the protected metadata header 5302.
  • If the protected metadata header 5302 was stored unencrypted, the kiosk retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage and validates the protected metadata header using a one-way hashing function. The kiosk then modifies the fields of the unprotected metadata header 5301 and protected metadata header 5302 based on the viewer 266 or the public viewer 912 request and the rules established by the kiosk and the public library for electronic book uses and the loan duration time. The kiosk may then encrypt the entire protected metadata header 5302 or some portion of the protected metadata header 5302 using the public key of the viewer 266 or the public viewer 912 or a pre-determined symmetric key known by both the kiosk and the viewer 266 or the public viewer 912.
  • The packaged electronic book with metadata headers may then be delivered to viewer 266 or the public viewer 912 or the viewer 266 or the public viewer 912 may retrieve the packaged electronic book from the kiosk. Upon receipt of the packaged electronic book, along with metadata headers 5301 and 5302, by the viewer 266 or the public viewer 912, the viewer 266 or the public viewer 912 may decrypt the protected metadata header 5302, validate that the protected metadata header 5302 has not been altered by performing a one-way hash calculation on the protected metadata header 5302 and comparing the result to the hash value 5305 contained in the protected metadata header 5302, and re-encrypt the protected metadata header 5302 for storage, or store the received packaged electronic book directly without decrypting the protected metadata header 5302.
  • When the electronic book is opened for display on the viewer 266 or the public viewer 912, the viewer decrypts the protected metadata header 5302 using the appropriate decryption key, recovers the content decryption key, and decrypts the electronic book content for display on the viewer. To return a borrowed electronic book to a kiosk, the viewer 266 or the public viewer 912 sends a return request to the kiosk. To authenticate a kiosk and to obtain the public key of the kiosk if not already known by the viewer 266 or the public viewer 912, an authentication sequence may be initiated by the viewer 266 or the public viewer 912. The authentication sequence begins with the viewer 266 or the public viewer 912 sending a request to the kiosk to return a given electronic book content file. The viewer 266 or the public viewer 912 generates and inserts an authentication string in the request sent to the kiosk. The kiosk returns a message to the viewer 266 or the public viewer 912 that contains an authentication string that has been signed using a one-way hash function and then encrypted using the private key of the kiosk. The protected metadata header 5302 or some portion of the header may then be encrypted in the public key of the kiosk or the private key of the viewer.
  • Once the kiosk has been authenticated by the viewer 266 or the public viewer 912, the packaged electronic book with metadata headers may then be returned to the kiosk and deleted from the viewer. The kiosk decrypts the protected metadata header 5302, modifies the protected metadata header 5302 to reflect that the electronic book is no longer being borrowed, and stores the modified protected metadata header 5302. This return process may also be used to return an electronic book to a kiosk for a refund. Processing of and storage of the decryption and encryption keys used on the protected metadata header 5302 at the viewer 266 or the public viewer 912 may be done entirely via software, entirely on a secure smart card or removable device, or some combination of the two.
  • To ensure the kiosk that the electronic book content delivered to the viewer 266 or the public viewer 912 was received, the viewer 266 or the public viewer 912, serving a recipient 4999 in FIG. 33 may respond to the kiosk, serving as the sender in FIG. 33, by first generating a reply message REP as shown in step 5260. The viewer 266 or the public viewer 912 then encrypts reply message REP in the viewer's private key pKR using encryption process EpKR, resulting in EpKR[REP], as shown in step 5261. The viewer 266 or the public viewer 912 then encrypts EpKR[REP] in the kiosk's public key PKS using encryption process EPKS, resulting in EPKS[EpKR[REP]], as shown in step 5262. The viewer 266 or the public viewer 912 sends EPKS[EpKR[REP]] to the kiosk, as shown in step 5263. The kiosk then decrypts EPKS[EpKR[REP]], using decryption process DpKS and the kiosk's private key pKS, resulting in EpKR[REP] as shown in step 5264. The kiosk then decrypts the resulting EpKR[REP] using decryption process DPKR and the viewer's public key PKR, as shown in step 5265. As shown in step 5266, the valid reception of reply message REP by kiosk serves as verification of receipt of the electronic book content delivered to the viewer 266 or the public viewer 912 by the kiosk.
  • In another embodiment, the ISO two-way authentication protocol framework, as defined in ISO standard X.509 is used to provide verification of receipt of electronic book content by the viewer 266 or the public viewer 912. Exchanging encryption key information between the kiosk and viewer 266 or the public viewer 912 may be done via communication networks. Alternatively, encryption key distribution may be accomplished by storing the encryption key information on a smart card, PCMCIA card device, CD ROM, or other portable memory storage device and delivering the device to the appropriate location for retrieval and use in future encryption and decryption activities. When the key is delivered in physical form, the key may have associated with it a valid time period of use. Once this period has expired, a new key is required. Alternatively, the device may support the capability to be updated remotely using a communication network.
  • Encryption, decryption, hashing, digital signature processing, formatting, compression, key management, and other security related activities presented herein that are performed by the kiosk or the viewer 266 or the public viewer 912 may be done in hardware using a specialized processor. In an alternate embodiment, security related activities may be done in software using a standard or secure processor. In yet another alternative, a portion of security related activities may be done in software using a standard or secure processor while the remaining portion done in hardware using a specialized processor.
  • Once electronic book content is received and decrypted by the viewer 266 or the public viewer 912, the viewer 266 or the public viewer 912 may encrypt the electronic book content EBC 5100 with a symmetric key algorithm and store the encrypted electronic book content along with any non-encrypted content associated with the electronic book in storage memory device 5270 at the viewer 266 or the public viewer 912. In one embodiment, depicted in FIG. 34, secure storage is done on a memory device at the driver-level, where all information stored on the memory storage device 5270 is encrypted by memory device driver prior to being stored on memory storage device 5270, as described in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference. In this embodiment, any content X 5272 to be stored on the memory storage device 5270, including electronic book content, is encrypted using encryption process E SK 5274 in memory device driver 5271 and symmetric key SK 5276, resulting in encrypted content ESK[X] 5273. The resulting encrypted content ESK[X] 5273 is then stored on memory storage device 5270. Upon retrieval from memory storage device 5270, decryption process D SK 5275 decrypts encrypted content ESK[X] 5273 with symmetric key SK 5276, resulting in the original content X 5272. In another embodiment, secure storage is done at the file level, also as described in Applied Cryptography, by Bruce Schneier, where each file is encrypted individually with a different symmetric key prior to storage and stored in its encrypted form on memory storage device 5270. The symmetric key SK 5276 can then be stored separate from the stored encrypted content X 5272. In one such embodiment, encryption is done in hardware using a specialized encryption processor. In an alternate embodiment, encryption is done in software using a standard or secure processor.
  • To ensure the electronic book content file has not been modified while it was stored, in one embodiment, depicted in FIG. 35, the viewer 266 or the public viewer 912, serving as storage site 4996, uses a one-way hashing algorithm 5280, as presented in Applied Cryptography, by Bruce Schneier and hereby incorporated by reference, where a hashing value 5281 is calculated by the viewer 266 or the public viewer 912 based on the electronic book content EBC 5100 prior to encryption process 5282. This hashing value 5281, along with the encrypted content ESK[EBC] 5284 is then stored on memory storage device 5283. When the encrypted content ESK[EBC] 5284 is retrieved from storage, the viewer 266 or the public viewer 912 decrypts encrypted content ESK[EBC] 5284 using decryption process DSK 5285 and retrieves the stored hashing value 5281. The viewer 266 or the public viewer 912 then calculates hashing value 5281′, using hashing algorithm 5280 and the retrieved electronic book content EBC 5100. Comparator 5286 compares hashing value 5281 to hashing value 5281′ to determine if they coincide. If the hashing value 5281 and the hashing value 5281′ coincide, the integrity of the electronic book content EBC 5100 retrieved for memory storage device 5283 can be ensured.
  • The security methods described above may also be applied to the communications between a public library system and a viewer, between a school or school library system and a viewer, and between a bookstore system and a viewer.
  • E. Viewer to Viewer Security
  • In an embodiment where an electronic book is being lent by one viewer to another, the borrowing viewer requests an electronic book to be borrowed from the lending viewer. The lending viewer may first authenticate the borrowing viewer. An embodiment of the authentication sequence is depicted in FIG. 29, where the lending viewer is serving as the sender 4998 and the viewer 266 or the public viewer 912 is serving as the recipient 4999. To authenticate a borrowing viewer requesting an electronic book from the lending viewer, an authentication sequence may be initiated by the borrowing viewer. The authentication sequence begins with the borrowing viewer sending a request 5290 to the lending viewer for a given electronic book content file 5300.
  • The lending viewer then responds to the borrowing viewer by generating and returning an authentication string 5291 to the borrowing viewer. The borrowing viewer returns a message to the lending viewer that contains: 1) a book identifier 5292; identifying the requested electronic book; 2) the signed authentication string 5293 that has been signed using a one-way hash function and then encrypted using the private key of the borrowing viewer; and 3) borrowing viewer certification information 5294 that the lending viewer can authenticate with a certificate authority 4997. The lending viewer retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage. The lending viewer decrypts the protected metadata header 5302 using the decryption key and validates that the protected metadata header 5302 has not been altered by performing a one-way hash function on the protected metadata header 5302 and comparing the result to the hash value contained in the protected metadata header 5302. If the protected metadata header 5302 was stored unencrypted, the lending viewer retrieves the encrypted electronic book, along with its associated unprotected metadata header 5301 and protected metadata header 5302 from storage and validates the protected metadata header using a one-way hashing function. The lending viewer then modifies the fields of the unprotected metadata header 5301 and protected metadata header 5302 based on the borrowing viewer request and the rules established by the lending viewer and the public library for electronic book uses and the loan duration time. The lending viewer may then encrypt the entire protected metadata header 5302 or some portion of the protected metadata header 5302 using the public key of the borrowing viewer or a pre-determined symmetric key known by both the lending viewer and the borrowing viewer.
  • The packaged electronic book with metadata headers may then be delivered to borrowing viewer or the borrowing viewer may retrieve the packaged electronic book from the lending viewer. Upon receipt of the packaged electronic book, along with metadata headers 5301 and 5302, by the borrowing viewer, the borrowing viewer may decrypt the protected metadata header 5302, validate that the protected metadata header 5302 has not been altered by performing a one-way hash calculation on the protected metadata header 5302 and comparing the result to the hash value 5305 contained in the protected metadata header 5302, and re-encrypt the protected metadata header 5302 for storage, or store the received packaged electronic book directly without decrypting the protected metadata header 5302. When the electronic book is opened for display on the borrowing viewer, the viewer decrypts the protected metadata header 5302 using the appropriate decryption key, recovers the content decryption key, and decrypts the electronic book content for display on the viewer. To return a borrowed electronic book to a lending viewer, the borrowing viewer sends a return request to the lending viewer. To authenticate a lending viewer and to obtain the public key of the lending viewer if not already known by the borrowing viewer, an authentication sequence may be initiated by the borrowing viewer.
  • The authentication sequence begins with the borrowing viewer sending a request to the lending viewer to return a given electronic book content file. The borrowing viewer generates and inserts an authentication string in the request sent to the lending viewer. The lending viewer returns a message to the borrowing viewer that contains an authentication string that has been signed using a one-way hash function and then encrypted using the private key of the lending viewer. The protected metadata header 5302 or some portion of the header may then be encrypted in the public key of the lending viewer or the private key of the viewer.
  • Once the lending viewer has been authenticated by the borrowing viewer, the packaged electronic book with metadata headers may then be returned to the lending viewer and deleted from the viewer. The lending viewer decrypts the protected metadata header 5302, modifies the protected metadata header 5302 to reflect that the electronic book is no longer being borrowed, and stores the modified protected metadata header 5302. Processing of and storage of the decryption and encryption keys used on the protected metadata header 5302 at the borrowing viewer may be done entirely using software, entirely on a secure smart card or removable device, or some combination of the two.
  • F. Copyright Protection
  • A number of mechanisms may be implemented in the electronic book delivery system to support copyright protection. In one embodiment, all transactions between the publisher 282 and the operations center 250, the operations center 250 and home systems 258, the library 262 and the viewer 266, or a kiosk and the viewer 266 or the public viewer 912, may make use of the protocol defined in the 5C Digital Transmission Content Protection Specification, developed by Hitachi, Ltd., Intel Corporation, Matsushita Electric Industrial Co., Ltd., Sony Corporation, and Toshiba Corporation, available from the Digital Transmission Licensing Administrator, at www.dtcp.com and hereby incorporated by reference. Alternate embodiments to support copyright protection in the distribution of electronic books are addressed below.
  • Visible copyright notifications may be applied to electronic book content, establishing the rights holder's legal claim to copyright protection. Copyright holder information, electronic book source information, and/or copyright disclaimer information may be embedded as a visible watermark within the electronic book. This copyright information may be associated with the electronic book and delivered with the electronic book when the electronic book is distributed from one entity to another or the electronic book is copied. The copyright information may be displayed the first time an electronic book is viewed. The copyright information may be displayed initially, each time an electronic book is viewed. Alternatively, the information may always be displayed whenever an electronic book is being viewed. This copyright information may be inserted as actual text, overlaid on electronic book text, or inserted as background graphical information in the electronic book.
  • Associated with a delivered electronic book may be an indication of an electronic book's printing rights. Printing rights information may be applied to all users of an electronic book title, or printing rights may apply to a specific user of an electronic book. Printing rights information may be delivered with an electronic book by the operations center 250 and used by the home system 258 in determining what printing capabilities are allowed. An electronic book may be allowed to be printed an unlimited number of times. An electronic book may be allowed to be printed one time only. An electronic book may not be allowed to be printed at all.
  • Finally, an electronic book may be allowed to be printed, but the electronic version of the electronic book title may be deleted after this one printing. If the electronic book viewer 266 or library 262 has a printing capability, the copyright information may be applied to the printed content. The copyright information may be applied on the first page printed, on several pages printed, or on all pages printed. The software running on the secure processor in the home system 258 performs the print management function.
  • The electronic book distribution system can make use of steganography to further protect electronic books from copyright violation attempts. Steganography serves to hide secret messages in other messages, concealing the existence of the secret message. The most familiar form of steganographic technique is invisible ink. Steganographic techniques can allow for hidden identifiers to be inserted into electronic books for identifying and tracking purposes.
  • In one embodiment, the source and various intermediate handlers of electronic book content can insert their identifying marker within an electronic book. This identifier may be a message signed with the private key of the entity inserting the identifier. In another embodiment, an identification value representing the purchasing viewer 266 or the public viewer 912 may be inserted in the electronic book using steganographic techniques. The operations center 250 may insert the purchasing viewer's identifier, or alternatively, the home system 258 may insert the purchasing viewer's identifier. In one embodiment, the steganographic technique of modifying graphics on a pixel basis is used to encode hidden identifying information. In another embodiment, non-obvious markings are added to the text of an electronic book. In yet another embodiment, modification of line spacings is used to encode hidden identifying information.
  • Audio watermarking techniques can be used to encode identifying information into audio provided with electronic books. Graphic watermarking, using HighWater Designs' fingerprinted binary information technique or Digimarc Corporation's DigiMarc technology, as defined in U.S. Pat. No. 5,721,788, Method and System for Digital Image Signature, to Powell, hereby incorporated by reference, may be used. In yet another embodiment, video watermarking techniques may be used to encode identifying information into video provided with electronic books.
  • Prior to the delivery of the electronic book containing steganographic identifiers, a hashing value may be calculated and also delivered with the electronic book. The hashing value may be recalculated and compared with the hashing value calculated prior to delivery of the electronic book to the home system 258. If the hashing values match, the steganographic identifiers can be assured to be unaltered.
  • Steganographics may be incorporated into a security and validation system. Embedded steganographic information, including the electronic book publisher 282, rightholders, the originating operations center 250, and other intermediate sources and the purchasing home system 258 identifier, may be delivered within each electronic book sold to a home system 258. Whenever a home system 258 requests the purchase of a new electronic book, the operations center 250 or billing and collection subsystem 278 may query the home system 258 to determine the sources of all resident electronic books and to ensure that the books are assigned to that specific home system 258. This query may include the operations center 250 or billing and collection subsystem 278 accessing and retrieving the steganographically-hidden information from within each electronic book stored at the home system 258. If the home system 258 contains an electronic book from a source that is not valid or an electronic book for which the home system 258 was not the valid recipient, the operations center 250 or billing and collection subsystem 278 may not allow the transaction to proceed and may send a disable command that disables the home system 258 from operation until the issue can be resolved with the operations center 250. Alternatively, the home system 258, under the control of the secure processor, may only display electronic books that are watermarked with that home system's unique identifier.
  • Critical to the security of electronic book distribution system is the ability to modify the security algorithms in case of a security breach.
  • In one embodiment, the security algorithms operating on the electronic book home system 258 are updated by software downloaded using a communication network. In an alternative embodiment, the security algorithms operating on the electronic book home system 258 are updated using software downloaded from a smart card, PC-MCIA device, or other memory device attached to the home system 258.

Claims (16)

1-129. (canceled)
130. A system for encrypting an electronic book for delivery from a first party to a second party, comprising:
a first interface that receives and transmits electronic books and encryption information;
a first memory coupled to the first interface that stores the electronic books and the encryption information;
a first processor coupled to the first interface and the first memory that processes the encryption information and encrypts and decrypts the electronic books;
a second interface that receives electronic books transmitted from the first party, and that receives and transmits encryption information;
a second memory coupled to the second interface that stores the received electronic books and the encryption information; and
a second processor coupled to the second interface and the second memory that processes the encryption information and that decrypts the received electronic books.
131. The system of claim 130, wherein the first and the second parties are coupled to a communications network, and wherein the encryption information and the electronic books are transmitted and received using the communications network.
132. The system of claim 131, wherein the communications network includes one or more of a television delivery system, a wired telephone system, a wireless telephone network, a personal communications network, a wired Internet system, a wireless Internet system, an intranet, a local area network, a radio communications network, and an optical fiber network.
133. The system of claim 130, wherein the encryption information includes an encryption key and a decryption key.
134. The system of claim 133, wherein the encryption key and the decryption keys comprise a symmetric key.
135. The system of claim 134, wherein the first processor comprises a first key generator, the first key generator generating the symmetric key.
136. The system of claim 135, wherein the first key generator generates the symmetric key randomly.
137. The system of claim 134, wherein the second processor comprises a second key generator, the second key generator generating the symmetric key.
138. The system of claim 137, wherein the second key generator generates the symmetric key randomly.
139. The system of claim 134, wherein the first processor and the second processor retrieve the symmetric key from the first and the second memories, respectively.
140. The system of claim 134, wherein the symmetric key is a transaction symmetric key, the transaction symmetric key supplied by a third party.
141. The system of claim 140, wherein the third party is a certificate authority.
142. The system of claim 141, wherein the certificate authority issues the transaction symmetric key encrypted.
143. The system of claim 142, wherein the transaction symmetric key is encrypted by the certificate authority using a first party symmetric key.
144-189. (canceled)
US11/785,959 1992-12-09 2007-04-23 Electronic book security and copyright protection system Abandoned US20070201702A1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US11/785,959 US20070201702A1 (en) 1992-12-09 2007-04-23 Electronic book security and copyright protection system
US14/845,106 US20160070889A1 (en) 1999-09-21 2015-09-03 Electronic book security and copyright protection system

Applications Claiming Priority (7)

Application Number Priority Date Filing Date Title
US99107492A 1992-12-09 1992-12-09
US08/160,194 US5990927A (en) 1992-12-09 1993-12-02 Advanced set top terminal for cable television delivery systems
US08/336,247 US5986690A (en) 1992-12-09 1994-11-07 Electronic book selection and delivery system
US08/906,469 US6408437B1 (en) 1992-12-09 1997-08-05 Reprogrammable terminal for suggesting programs offered on a television program delivery system
US19152098A 1998-11-13 1998-11-13
US09/400,296 US7298851B1 (en) 1992-12-09 1999-09-21 Electronic book security and copyright protection system
US11/785,959 US20070201702A1 (en) 1992-12-09 2007-04-23 Electronic book security and copyright protection system

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US09/400,296 Division US7298851B1 (en) 1992-12-09 1999-09-21 Electronic book security and copyright protection system

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US14/845,106 Continuation US20160070889A1 (en) 1999-09-21 2015-09-03 Electronic book security and copyright protection system

Publications (1)

Publication Number Publication Date
US20070201702A1 true US20070201702A1 (en) 2007-08-30

Family

ID=38444036

Family Applications (2)

Application Number Title Priority Date Filing Date
US09/400,296 Expired - Fee Related US7298851B1 (en) 1992-12-09 1999-09-21 Electronic book security and copyright protection system
US11/785,959 Abandoned US20070201702A1 (en) 1992-12-09 2007-04-23 Electronic book security and copyright protection system

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US09/400,296 Expired - Fee Related US7298851B1 (en) 1992-12-09 1999-09-21 Electronic book security and copyright protection system

Country Status (1)

Country Link
US (2) US7298851B1 (en)

Cited By (50)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030009491A1 (en) * 2001-06-28 2003-01-09 Takeshi Kanai Information processing apparatus, information processing method, recording medium, and program
US20050097007A1 (en) * 2001-06-25 2005-05-05 Microsoft Corporation Client portal
US20050250439A1 (en) * 2004-05-06 2005-11-10 Garthen Leslie Book radio system
US20060155992A1 (en) * 2002-09-19 2006-07-13 Sony Corporation Data processing method, its program and its device
US20090055298A1 (en) * 2004-10-08 2009-02-26 Uwe Foll Method for configuring billing processes in network elements
US20090276632A1 (en) * 2008-04-30 2009-11-05 Singer Howard M Systems, Methods, and Media for Providing Secure Content Information
US20100122162A1 (en) * 2007-02-16 2010-05-13 Satoshi Terada Content display device, television receiver, content display method, content display control program, and recording medium
US20100138873A1 (en) * 2005-10-07 2010-06-03 Sharp Kabushiki Kaisha Receiving device, server, television receiver, mobile terminal, system, receiving method, information processing program, and storage medium
WO2011021111A1 (en) 2009-08-20 2011-02-24 Nds Limited Hindering optical character recognition of a displayed text
US8027339B2 (en) 1997-03-12 2011-09-27 Nomadix, Inc. System and method for establishing network connection
WO2011153193A1 (en) * 2010-06-02 2011-12-08 Amazon Technologies Inc. Referring, lending, and reselling of digital items
US20110313892A1 (en) * 2010-06-16 2011-12-22 Dicke Ronald Method and system for upselling to a user of a digital book lending library
US8156246B2 (en) 1998-12-08 2012-04-10 Nomadix, Inc. Systems and methods for providing content and services on a network system
US20120090032A1 (en) * 2010-10-06 2012-04-12 Victor Trinklein Webtextbooks
US8190708B1 (en) 1999-10-22 2012-05-29 Nomadix, Inc. Gateway device having an XML interface and associated method
US20120173524A1 (en) * 2010-12-31 2012-07-05 Ian Connor Capturing collection information for institutions
US8266269B2 (en) 1998-12-08 2012-09-11 Nomadix, Inc. Systems and methods for providing content and services on a network system
US20120253893A1 (en) * 2011-03-29 2012-10-04 Anbalagan Karthik G Identification of Borrowers for Digital Items
US20120311438A1 (en) * 2010-01-11 2012-12-06 Apple Inc. Electronic text manipulation and display
US20130145483A1 (en) * 2011-12-02 2013-06-06 Jpmorgan Chase Bank, N.A. System And Method For Processing Protected Electronic Communications
US8484027B1 (en) 2009-06-12 2013-07-09 Skyreader Media Inc. Method for live remote narration of a digital book
US20130315397A1 (en) * 2012-05-24 2013-11-28 Sandisk Technologies Inc. System and method to scramble data based on a scramble key
US20130318635A1 (en) * 2012-05-25 2013-11-28 eCHRTISTIAN, INC. Copyright security for electronic books
US8613053B2 (en) 1998-12-08 2013-12-17 Nomadix, Inc. System and method for authorizing a portable communication device
US20140013448A1 (en) * 2009-06-26 2014-01-09 Disney Enterprises, Inc. Method and System for Allocating Access to Digital Media Content
US20140019424A1 (en) * 2012-07-11 2014-01-16 Google Inc. Identifier validation and debugging
US8635277B2 (en) 2011-03-29 2014-01-21 Amazon Technologies, Inc. Mediated lending of digital items
US8799363B2 (en) 2011-03-29 2014-08-05 Amazon Technologies, Inc. Lending digital items to identified recipients
US9116991B2 (en) * 2011-08-16 2015-08-25 Google Inc. Searching encrypted electronic books
US20150256618A1 (en) * 2014-03-06 2015-09-10 Google Inc. Reading group ebook synchronization
US9292873B1 (en) 2006-09-29 2016-03-22 Amazon Technologies, Inc. Expedited acquisition of a digital item following a sample presentation of the item
WO2016056987A1 (en) * 2014-10-09 2016-04-14 Kelisec Ab Generating a symmetric encryption key
US20160188907A1 (en) * 2013-08-08 2016-06-30 Enigio Time Ab Method for creating signals for time-stamping of documents and method for time-stamping of documents
US20160197721A1 (en) * 2015-01-07 2016-07-07 Cyph, Inc. Multi-key encryption method
US9479591B1 (en) 2007-05-21 2016-10-25 Amazon Technologies, Inc. Providing user-supplied items to a user device
US9665529B1 (en) 2007-03-29 2017-05-30 Amazon Technologies, Inc. Relative progress and event indicators
US9672533B1 (en) 2006-09-29 2017-06-06 Amazon Technologies, Inc. Acquisition of an item based on a catalog presentation of items
US10079814B2 (en) 2014-09-23 2018-09-18 Kelisec Ab Secure node-to-multinode communication
US10244277B2 (en) 2013-06-27 2019-03-26 Huawei Technologies Co., Ltd. Video data processing method and apparatus
US10291596B2 (en) 2014-10-09 2019-05-14 Kelisec Ab Installation of a terminal in a secure system
US10296878B1 (en) 2011-06-28 2019-05-21 Amazon Technologies, Inc. Platform for providing generic e-content
US10356090B2 (en) 2014-10-09 2019-07-16 Kelisec Ab Method and system for establishing a secure communication channel
US10511596B2 (en) 2014-10-09 2019-12-17 Kelisec Ab Mutual authentication
US10565388B2 (en) 2009-06-26 2020-02-18 Disney Enterprises, Inc. Method and system for providing digital media rental
US10701047B2 (en) 2015-01-07 2020-06-30 Cyph Inc. Encrypted group communication method
US10733309B2 (en) 2014-10-09 2020-08-04 Kelisec Ab Security through authentication tokens
US10853560B2 (en) 2005-01-19 2020-12-01 Amazon Technologies, Inc. Providing annotations of a digital work
GB2509422B (en) * 2011-09-29 2020-12-30 Hewlett Packard Development Co Decryption and encryption of application data
FR3108748A1 (en) * 2020-03-30 2021-10-01 Cosmian Tech Protection of secret software and confidential data in a secure enclave
US11763085B1 (en) * 2020-03-26 2023-09-19 Grammarly, Inc. Detecting the tone of text

Families Citing this family (89)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6876991B1 (en) 1999-11-08 2005-04-05 Collaborative Decision Platforms, Llc. System, method and computer program product for a collaborative decision platform
US6879988B2 (en) 2000-03-09 2005-04-12 Pkware System and method for manipulating and managing computer archive files
US20060143252A1 (en) * 2000-03-09 2006-06-29 Pkware, Inc. System and method for manipulating and managing computer archive files
US20060143250A1 (en) * 2000-03-09 2006-06-29 Pkware, Inc. System and method for manipulating and managing computer archive files
US20050015608A1 (en) 2003-07-16 2005-01-20 Pkware, Inc. Method for strongly encrypting .ZIP files
US20060143714A1 (en) * 2000-03-09 2006-06-29 Pkware, Inc. System and method for manipulating and managing computer archive files
US8959582B2 (en) 2000-03-09 2015-02-17 Pkware, Inc. System and method for manipulating and managing computer archive files
US20060155731A1 (en) * 2000-03-09 2006-07-13 Pkware, Inc. System and method for manipulating and managing computer archive files
US8230482B2 (en) * 2000-03-09 2012-07-24 Pkware, Inc. System and method for manipulating and managing computer archive files
US7844579B2 (en) 2000-03-09 2010-11-30 Pkware, Inc. System and method for manipulating and managing computer archive files
US7594265B2 (en) * 2001-11-14 2009-09-22 Ati Technologies, Inc. System for preventing unauthorized access to sensitive data and a method thereof
US7545940B2 (en) * 2002-08-02 2009-06-09 Disney Enterprises, Inc. System for publishing content on a portable digital storage medium
WO2005008950A1 (en) * 2003-07-10 2005-01-27 Rsa Security, Inc. Secure seed generation protocol
EP1665254A1 (en) * 2003-09-10 2006-06-07 Koninklijke Philips Electronics N.V. Content protection method and system
US7805614B2 (en) * 2004-04-26 2010-09-28 Northrop Grumman Corporation Secure local or remote biometric(s) identity and privilege (BIOTOKEN)
US20100250438A1 (en) * 2004-07-01 2010-09-30 Jan Hakan Hamnen System and method for distributing electronic content utilizing electronic license keys
US8131647B2 (en) 2005-01-19 2012-03-06 Amazon Technologies, Inc. Method and system for providing annotations of a digital work
US7865734B2 (en) * 2005-05-12 2011-01-04 The Invention Science Fund I, Llc Write accessibility for electronic paper
US8640259B2 (en) 2005-01-20 2014-01-28 The Invention Science Fund I, Llc Notarizable electronic paper
US7739510B2 (en) 2005-05-12 2010-06-15 The Invention Science Fund I, Inc Alert options for electronic-paper verification
US8281142B2 (en) 2005-01-20 2012-10-02 The Invention Science Fund I, Llc Notarizable electronic paper
US7890757B2 (en) * 2005-12-30 2011-02-15 Novell, Inc. Receiver non-repudiation
US8171293B2 (en) * 2005-12-30 2012-05-01 Apple Inc. Receiver non-repudiation via a secure device
JP2007233924A (en) * 2006-03-03 2007-09-13 Sony Corp Information processing system, information processor and information processing method, program and recording medium
US9384672B1 (en) 2006-03-29 2016-07-05 Amazon Technologies, Inc. Handheld electronic book reader device having asymmetrical shape
US8018431B1 (en) 2006-03-29 2011-09-13 Amazon Technologies, Inc. Page turner for handheld electronic book reader device
US8352449B1 (en) 2006-03-29 2013-01-08 Amazon Technologies, Inc. Reader device content indexing
US8413904B1 (en) 2006-03-29 2013-04-09 Gregg E. Zehr Keyboard layout for handheld electronic book reader device
US8051385B1 (en) 2006-03-29 2011-11-01 Amazon Technologies, Inc. Content selection and aggregated search results presentation on a handheld electronic device
US7694874B2 (en) 2006-03-29 2010-04-13 Amazon Technologies, Inc. Over-the-air device provisioning and activation
US7748634B1 (en) 2006-03-29 2010-07-06 Amazon Technologies, Inc. Handheld electronic book reader device having dual displays
US8234302B1 (en) 2006-09-29 2012-07-31 Amazon Technologies, Inc. Controlling access to electronic content
US8112813B1 (en) * 2006-09-29 2012-02-07 Amazon Technologies, Inc. Interactive image-based document for secured data access
US7865817B2 (en) 2006-12-29 2011-01-04 Amazon Technologies, Inc. Invariant referencing in digital works
US7751807B2 (en) 2007-02-12 2010-07-06 Oomble, Inc. Method and system for a hosted mobile management service architecture
US8024400B2 (en) 2007-09-26 2011-09-20 Oomble, Inc. Method and system for transferring content from the web to mobile devices
US10366426B2 (en) 2007-03-09 2019-07-30 Amazon Technologies, Inc. Personalizing handheld electronic book readers
US7716224B2 (en) 2007-03-29 2010-05-11 Amazon Technologies, Inc. Search and indexing on a user device
US20080243991A1 (en) * 2007-03-29 2008-10-02 Ryan Thomas A Content Purchase and Transfer Management for Reader Device
US8108793B2 (en) 2007-05-21 2012-01-31 Amazon Technologies, Inc, Zone-associated objects
US20090234895A1 (en) * 2008-03-17 2009-09-17 Daniel Michael Paul Nugara Method and Apparatus for Digitizing a Paper-Based Publication
GB2458568B (en) * 2008-03-27 2012-09-19 Covertix Ltd System and method for dynamically enforcing security policies on electronic files
US8453051B1 (en) 2008-03-31 2013-05-28 Amazon Technologies, Inc. Dynamic display dependent markup language interface
US10089306B1 (en) 2008-03-31 2018-10-02 Amazon Technologies, Inc. Dynamically populating electronic item
US20090267909A1 (en) * 2008-04-27 2009-10-29 Htc Corporation Electronic device and user interface display method thereof
US8423889B1 (en) 2008-06-05 2013-04-16 Amazon Technologies, Inc. Device specific presentation control for electronic book reader devices
US8516038B2 (en) * 2008-06-06 2013-08-20 Apple Inc. Browsing or searching user interfaces and other aspects
US8762887B2 (en) 2008-06-06 2014-06-24 Apple Inc. Browsing or searching user interfaces and other aspects
US8607166B2 (en) * 2008-06-06 2013-12-10 Apple Inc. Browsing or searching user interfaces and other aspects
US20100027796A1 (en) * 2008-08-01 2010-02-04 Disney Enterprises, Inc. Multi-encryption
US20100114820A1 (en) * 2008-10-27 2010-05-06 International Business Machines Corporation Electronic library book
US8458477B2 (en) * 2008-12-01 2013-06-04 Novell, Inc. Communication with non-repudiation
US8806214B2 (en) 2008-12-01 2014-08-12 Novell, Inc. Communication with non-repudiation and blind signatures
US9449195B2 (en) * 2009-01-23 2016-09-20 Avow Networks Incorporated Method and apparatus to perform online credential reporting
US9087032B1 (en) 2009-01-26 2015-07-21 Amazon Technologies, Inc. Aggregation of highlights
US8378979B2 (en) 2009-01-27 2013-02-19 Amazon Technologies, Inc. Electronic device with haptic feedback
USD601559S1 (en) 2009-01-27 2009-10-06 Amazon Technologies, Inc. Electronic reader device
USD636771S1 (en) 2009-01-27 2011-04-26 Amazon Technologies, Inc. Control pad for an electronic device
US8819541B2 (en) * 2009-02-13 2014-08-26 Language Technologies, Inc. System and method for converting the digital typesetting documents used in publishing to a device-specfic format for electronic publishing
EP2412123B1 (en) * 2009-03-26 2020-07-08 Trustcorp S.A. Method and device for archiving a document
US8832584B1 (en) 2009-03-31 2014-09-09 Amazon Technologies, Inc. Questions on highlighted passages
USD624074S1 (en) 2009-05-04 2010-09-21 Amazon Technologies, Inc. Electronic reader device
US8255820B2 (en) 2009-06-09 2012-08-28 Skiff, Llc Electronic paper display device event tracking
US9262063B2 (en) 2009-09-02 2016-02-16 Amazon Technologies, Inc. Touch-screen user interface
US8471824B2 (en) 2009-09-02 2013-06-25 Amazon Technologies, Inc. Touch-screen user interface
US9188976B1 (en) * 2009-09-02 2015-11-17 Amazon Technologies, Inc. Content enabling cover for electronic book reader devices
US8451238B2 (en) 2009-09-02 2013-05-28 Amazon Technologies, Inc. Touch-screen user interface
US8624851B2 (en) 2009-09-02 2014-01-07 Amazon Technologies, Inc. Touch-screen user interface
US8692763B1 (en) 2009-09-28 2014-04-08 John T. Kim Last screen rendering for electronic book reader
JP5266396B2 (en) 2009-10-30 2013-08-21 パナソニック株式会社 AV data receiving apparatus, AV data receiving method, and AV data transmitting / receiving system
US8965366B1 (en) 2010-02-18 2015-02-24 Amazon Technologies, Inc. World SIM
US9020479B1 (en) 2010-02-18 2015-04-28 Amazon Technologies, Inc. Single version of a user device modem for use with different wireless carriers
US8626165B1 (en) 2010-02-18 2014-01-07 Amazon Technologies, Inc. Dynamic carrier switching
US8866581B1 (en) 2010-03-09 2014-10-21 Amazon Technologies, Inc. Securing content using a wireless authentication factor
US9501582B2 (en) 2010-05-10 2016-11-22 Amazon Technologies, Inc. Providing text content embedded with protected multimedia content
US9495322B1 (en) 2010-09-21 2016-11-15 Amazon Technologies, Inc. Cover display
US8798262B1 (en) * 2010-12-23 2014-08-05 Emc Corporation Preserving LBA information between layers of a storage I/O stack for LBA-dependent encryption
US8701157B1 (en) 2011-10-28 2014-04-15 Google Inc. Configuring policy settings on client computing devices
US9158741B1 (en) 2011-10-28 2015-10-13 Amazon Technologies, Inc. Indicators for navigating digital works
US8347349B1 (en) 2011-10-28 2013-01-01 Google Inc. Configuring browser policy settings on client computing devices
US9172711B2 (en) * 2012-02-13 2015-10-27 PivotCloud, Inc. Originator publishing an attestation of a statement
IN2013CH01202A (en) 2013-03-20 2015-08-14 Infosys Ltd
US9641488B2 (en) 2014-02-28 2017-05-02 Dropbox, Inc. Advanced security protocol for broadcasting and synchronizing shared folders over local area network
US10355854B2 (en) * 2015-12-17 2019-07-16 Intel Corporation Privacy preserving group formation with distributed content key generation
US10015244B1 (en) 2016-04-29 2018-07-03 Rich Media Ventures, Llc Self-publishing workflow
US9886172B1 (en) * 2016-04-29 2018-02-06 Rich Media Ventures, Llc Social media-based publishing and feedback
US9864737B1 (en) 2016-04-29 2018-01-09 Rich Media Ventures, Llc Crowd sourcing-assisted self-publishing
US10083672B1 (en) 2016-04-29 2018-09-25 Rich Media Ventures, Llc Automatic customization of e-books based on reader specifications
US10985915B2 (en) * 2017-04-12 2021-04-20 Blackberry Limited Encrypting data in a pre-associated state

Citations (102)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3860873A (en) * 1971-10-01 1975-01-14 Tape Athon Corp Fm transmission system
US3869873A (en) * 1974-05-20 1975-03-11 Elliott Williams Company Inc Door structure for large freezer
US4071697A (en) * 1976-10-18 1978-01-31 Atari, Inc. Interactive video/telephone transmission system
US4251671A (en) * 1979-10-05 1981-02-17 Miles Laboratories, Inc. Extraction of citric acid
US4429385A (en) * 1981-12-31 1984-01-31 American Newspaper Publishers Association Method and apparatus for digital serial scanning with hierarchical and relational access
US4567512A (en) * 1982-08-19 1986-01-28 World Video Library, Inc. Recorded program communication system
US4578531A (en) * 1982-06-09 1986-03-25 At&T Bell Laboratories Encryption system key distribution method and apparatus
US4639225A (en) * 1982-06-24 1987-01-27 Sharp Kabushiki Kaisha Portable audio-visual electronic apparatus
US4644470A (en) * 1984-07-20 1987-02-17 International Business Machines Corp. Non-unique names for broadcast messages
US4653100A (en) * 1982-01-29 1987-03-24 International Business Machines Corporation Audio response terminal for use with data processing systems
US4724491A (en) * 1984-08-28 1988-02-09 Adams-Russell Co., Inc. Inserting television advertising spots automatically
US4731840A (en) * 1985-05-06 1988-03-15 The United States Of America As Represented By The United States Department Of Energy Method for encryption and transmission of digital keying data
US4796220A (en) * 1986-12-15 1989-01-03 Pride Software Development Corp. Method of controlling the copying of software
US4805014A (en) * 1983-11-07 1989-02-14 Sony Corporation Signal transmission system for a CATV system
US4891838A (en) * 1985-11-04 1990-01-02 Dental Data Service, Inc. Computer accessing system
US4899292A (en) * 1988-03-02 1990-02-06 Image Storage/Retrieval Systems, Inc. System for storing and retrieving text and associated graphics
US4982344A (en) * 1988-05-18 1991-01-01 Xerox Corporation Accelerating link creation
US4985697A (en) * 1987-07-06 1991-01-15 Learning Insights, Ltd. Electronic book educational publishing method using buried reference materials and alternate learning levels
USD314383S (en) * 1986-09-23 1991-02-05 RUF GmbH & Co. KG Elektrotechnische Spezialfabrik Remote-control transmitter
US4995078A (en) * 1988-06-09 1991-02-19 Monslow H Vincent Television broadcast system for selective transmission of viewer-chosen programs at viewer-requested times
US4996597A (en) * 1989-04-20 1991-02-26 Rca Licensing Corporation User programmable switching arrangement
US5078019A (en) * 1989-05-26 1992-01-07 Alps Electric Co., Ltd. Trackball device
US5089956A (en) * 1988-11-29 1992-02-18 International Business Machines Corporation Method of distributing related documents to identified end users in an information processing system
US5091782A (en) * 1990-04-09 1992-02-25 General Instrument Corporation Apparatus and method for adaptively compressing successive blocks of digital video
US5182639A (en) * 1991-10-30 1993-01-26 Suganda Jutamulia Real-time analytic pseudocolor encoder system
US5185667A (en) * 1991-05-13 1993-02-09 Telerobotics International, Inc. Omniview motionless camera orientation system
US5222136A (en) * 1992-07-23 1993-06-22 Crest Industries, Inc. Encrypted communication system
US5282028A (en) * 1990-11-27 1994-01-25 Scientific-Atlanta, Inc. Remote control for digital music terminal with synchronized communications
US5282206A (en) * 1991-12-03 1994-01-25 Fujitsu Limited Synchronization circuit for establishing frame synchronism using pointers in a digital transmission system
US5283639A (en) * 1989-10-23 1994-02-01 Esch Arthur G Multiple media delivery network method and apparatus
US5285272A (en) * 1991-02-26 1994-02-08 Sasktel Video store and forward on demand apparatus and method
US5289288A (en) * 1990-07-20 1994-02-22 Mti Associates Method and apparatus for encoding a video signal having multi-language capabilities
US5289271A (en) * 1991-09-09 1994-02-22 Watson John C Cable television-usage system
US5379057A (en) * 1988-11-14 1995-01-03 Microslate, Inc. Portable computer with touch screen and computer system employing same
US5383112A (en) * 1991-01-07 1995-01-17 Gte Service Corporation Inventory management method
US5384588A (en) * 1991-05-13 1995-01-24 Telerobotics International, Inc. System for omindirectional image viewing at a remote location without the transmission of control signals to select viewing parameters
US5388196A (en) * 1990-09-07 1995-02-07 Xerox Corporation Hierarchical shared books with database
US5388101A (en) * 1992-10-26 1995-02-07 Eon Corporation Interactive nationwide data service communication system for stationary and mobile battery operated subscriber units
US5390348A (en) * 1992-02-12 1995-02-14 Creative Digital Inc. System for tracking and correcting drift and dispersion in satellite transmission signals
US5392387A (en) * 1992-12-17 1995-02-21 International Business Machines Corporation Method and system for enhanced data access efficiency in an electronic book
US5481542A (en) * 1993-11-10 1996-01-02 Scientific-Atlanta, Inc. Interactive information services control system
US5481296A (en) * 1993-08-06 1996-01-02 International Business Machines Corporation Apparatus and method for selectively viewing video information
US5481294A (en) * 1993-10-27 1996-01-02 A. C. Nielsen Company Audience measurement system utilizing ancillary codes and passive signatures
US5483278A (en) * 1992-05-27 1996-01-09 Philips Electronics North America Corporation System and method for finding a movie of interest in a large movie database
US5484292A (en) * 1989-08-21 1996-01-16 Mctaggart; Stephen I. Apparatus for combining audio and visual indicia
US5485221A (en) * 1993-06-07 1996-01-16 Scientific-Atlanta, Inc. Subscription television system and terminal for enabling simultaneous display of multiple services
US5485176A (en) * 1991-11-21 1996-01-16 Kabushiki Kaisha Sega Enterprises Information display system for electronically reading a book
US5486686A (en) * 1990-05-30 1996-01-23 Xerox Corporation Hardcopy lossless data storage and communications for electronic document processing systems
US5495581A (en) * 1992-02-25 1996-02-27 Tsai; Irving Method and apparatus for linking a document with associated reference information using pattern matching
US5598351A (en) * 1993-02-26 1997-01-28 John C. Chater Communication system
US5598279A (en) * 1993-11-02 1997-01-28 Ricoh Company, Ltd. Document circulating apparatus with automatic deletion of data
US5598523A (en) * 1994-03-31 1997-01-28 Panasonic Technologies, Inc. Method and system for displayed menu activation using a matching distinctive arrangement of keypad actuators
US5598209A (en) * 1993-10-20 1997-01-28 Videoconferencing Systems, Inc. Method for automatically adjusting a video conferencing system camera
US5598470A (en) * 1994-04-25 1997-01-28 International Business Machines Corporation Method and apparatus for enabling trial period use of software products: Method and apparatus for utilizing a decryption block
US5600368A (en) * 1994-11-09 1997-02-04 Microsoft Corporation Interactive television system and method for viewer control of multiple camera viewpoints in broadcast programming
US5600573A (en) * 1992-12-09 1997-02-04 Discovery Communications, Inc. Operations center with video storage for a television program packaging and delivery system
US5602596A (en) * 1994-04-08 1997-02-11 U S West Technologies, Inc. Method for navigating a complex multimedia structure at an interactive user station
US5604824A (en) * 1994-09-22 1997-02-18 Houston Advanced Research Center Method and apparatus for compression and decompression of documents and the like using splines and spline-wavelets
US5708960A (en) * 1994-02-17 1998-01-13 Hitachi, Ltd. Subscription newspaper dispatching system
US5710887A (en) * 1995-08-29 1998-01-20 Broadvision Computer system and method for electronic commerce
US5715314A (en) * 1994-10-24 1998-02-03 Open Market, Inc. Network sales system
US5715515A (en) * 1992-12-02 1998-02-03 Scientific-Atlanta, Inc. Method and apparatus for downloading on-screen graphics and captions to a television terminal
US5719938A (en) * 1994-08-01 1998-02-17 Lucent Technologies Inc. Methods for providing secure access to shared information
US5721832A (en) * 1995-05-12 1998-02-24 Regal Greetings & Gifts Inc. Method and apparatus for an interactive computerized catalog system
US5721956A (en) * 1995-05-15 1998-02-24 Lucent Technologies Inc. Method and apparatus for selective buffering of pages to provide continuous media data to multiple users
US5721908A (en) * 1995-06-07 1998-02-24 International Business Machines Corporation Computer network for WWW server data access over internet
US5859594A (en) * 1990-06-28 1999-01-12 Motorola, Inc. Selective call receiver having selectable displays
US5862325A (en) * 1996-02-29 1999-01-19 Intermind Corporation Computer-based communication system and method using metadata defining a control structure
US5862329A (en) * 1996-04-18 1999-01-19 International Business Machines Corporation Method system and article of manufacture for multi-casting audio visual material
US5864823A (en) * 1997-06-25 1999-01-26 Virtel Corporation Integrated virtual telecommunication system for E-commerce
US5870767A (en) * 1996-11-22 1999-02-09 International Business Machines Corporation Method and system for rendering hyper-link information in a printable medium from a graphical user interface
US5870717A (en) * 1995-11-13 1999-02-09 International Business Machines Corporation System for ordering items over computer network using an electronic catalog
US6014184A (en) * 1993-09-09 2000-01-11 News America Publications, Inc. Electronic television program guide schedule system and method with data feed access
US6012890A (en) * 1996-10-04 2000-01-11 Instabook Corporation Electronic bookstore vending machine
US6016484A (en) * 1996-04-26 2000-01-18 Verifone, Inc. System, method and article of manufacture for network electronic payment instrument and certification of payment and credit collection utilizing a payment
US6025871A (en) * 1998-12-31 2000-02-15 Intel Corporation User interface for a video conferencing system
US6025837A (en) * 1996-03-29 2000-02-15 Micrsoft Corporation Electronic program guide with hyperlinks to target resources
US6029045A (en) * 1997-12-09 2000-02-22 Cogent Technology, Inc. System and method for inserting local content into programming content
US6029176A (en) * 1997-11-25 2000-02-22 Cannon Holdings, L.L.C. Manipulating and analyzing data using a computer system having a database mining engine resides in memory
US6029141A (en) * 1997-06-27 2000-02-22 Amazon.Com, Inc. Internet-based customer referral system
US6173335B1 (en) * 1993-07-30 2001-01-09 Apple Computer, Inc. Structure and protocol for routing information in a system
US6177936B1 (en) * 1998-08-20 2001-01-23 International Business Machines Corporation Browser hierarchical contextual information for web pages
US6195667B1 (en) * 1998-10-16 2001-02-27 Softbook Press, Inc. On-line menu updating for an electronic book
US6335678B1 (en) * 1998-02-26 2002-01-01 Monec Holding Ag Electronic device, preferably an electronic book
US6339842B1 (en) * 1998-06-10 2002-01-15 Dennis Sunga Fernandez Digital television with subscriber conference overlay
US6344853B1 (en) * 2000-01-06 2002-02-05 Alcone Marketing Group Method and apparatus for selecting, modifying and superimposing one image on another
US6351750B1 (en) * 1998-10-16 2002-02-26 Softbook Press, Inc. Dynamic conversion of byte ordering for use on different processor platforms
US6367010B1 (en) * 1999-07-02 2002-04-02 Postx Corporation Method for generating secure symmetric encryption and decryption
US6507342B1 (en) * 1990-01-19 2003-01-14 Sony Corporation Information processing apparatus
US20030014754A1 (en) * 2000-02-04 2003-01-16 Chang Vernon S. Advertisement response system
US6510531B1 (en) * 1999-09-23 2003-01-21 Lucent Technologies Inc. Methods and systems for testing parallel queues
US20030018543A1 (en) * 2001-06-25 2003-01-23 Alger Jeffrey H. Client portal
US6675384B1 (en) * 1995-12-21 2004-01-06 Robert S. Block Method and apparatus for information labeling and control
US6683631B2 (en) * 1998-12-31 2004-01-27 International Business Machines Corporation System and method for selecting and deselecting information in an electronic document
US20040039934A1 (en) * 2000-12-19 2004-02-26 Land Michael Z. System and method for multimedia authoring and playback
US6847403B1 (en) * 1997-11-05 2005-01-25 Polycom, Inc. Integrated portable videoconferencing unit
US6990464B1 (en) * 2000-01-11 2006-01-24 Ncr Corporation Apparatus, system and method for electronic book distribution
US7120250B2 (en) * 2002-09-09 2006-10-10 Sony Corporation Content distribution for multiple digital rights management
US20070016657A1 (en) * 2005-07-14 2007-01-18 Fuji Photo Film Co., Ltd. Multimedia data processing devices, multimedia data processing methods and multimedia data processing programs
US7181692B2 (en) * 1994-07-22 2007-02-20 Siegel Steven H Method for the auditory navigation of text
US7181468B2 (en) * 2003-04-28 2007-02-20 Sony Corporation Content management for rich media publishing system
US7185274B1 (en) * 1999-12-07 2007-02-27 Microsoft Corporation Computer user interface architecture wherein users interact with both content and user interface by activating links

Family Cites Families (77)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4023408A (en) 1975-01-10 1977-05-17 Dytronics Company, Inc. Stormscope
US4405829A (en) * 1977-12-14 1983-09-20 Massachusetts Institute Of Technology Cryptographic communications system and method
JPS54129942A (en) 1978-03-31 1979-10-08 Fujitsu Ltd Direct transfer system between sub-systems
US4513390A (en) 1979-06-08 1985-04-23 Planning Research Corporation System for digital transmission and synthesis of integrated data
US4528643A (en) * 1983-01-10 1985-07-09 Fpdc, Inc. System for reproducing information in material objects at a point of sale location
EP0140302A3 (en) 1983-10-28 1989-01-25 International Business Machines Corporation Method for accessing data using a self-service point-of-sale terminal
US4625076A (en) * 1984-03-19 1986-11-25 Nippon Telegraph & Telephone Public Corporation Signed document transmission system
US4941125A (en) 1984-08-01 1990-07-10 Smithsonian Institution Information storage and retrieval system
US4829569A (en) * 1984-09-21 1989-05-09 Scientific-Atlanta, Inc. Communication of individual messages to subscribers in a subscription television system
US4890319A (en) 1984-09-21 1989-12-26 Scientific-Atlantic, Inc. Method for controlling copying of protected information transmitted over a communications link
US4774655A (en) 1984-10-24 1988-09-27 Telebase Systems, Inc. System for retrieving information from a plurality of remote databases having at least two different languages
US4941089A (en) 1986-12-12 1990-07-10 Datapoint Corporation Input/output network for computer system
US5099331A (en) 1987-09-04 1992-03-24 Texas Instruments Incorporated Apparatus for overlaying a displayed image with a second image
US4924513A (en) * 1987-09-25 1990-05-08 Digital Equipment Corporation Apparatus and method for secure transmission of data over an unsecure transmission channel
US5146600A (en) 1988-04-30 1992-09-08 Minolta Camera Kabushiki Kaisha Document image filing system for furnishing additional managerial information for management of documents filed in the system
US5247575A (en) * 1988-08-16 1993-09-21 Sprague Peter J Information distribution system
US5691777A (en) 1988-10-17 1997-11-25 Kassatly; Lord Samuel Anthony Method and apparatus for simultaneous compression of video, audio and data signals
CA2010094A1 (en) 1989-03-09 1990-09-09 Robert R. Butler Binding line book tracking system and method
JPH03225445A (en) 1990-01-30 1991-10-04 Nec Corp Load dispersion striping system
JP3080382B2 (en) * 1990-02-21 2000-08-28 株式会社日立製作所 Cryptographic communication system
US5428529A (en) 1990-06-29 1995-06-27 International Business Machines Corporation Structured document tags invoking specialized functions
JPH04200082A (en) 1990-11-29 1992-07-21 Matsushita Electric Ind Co Ltd Teletext broadcast receiver
AU656542B2 (en) 1990-10-01 1995-02-09 Thomas A. Bush Transactional processing system
JPH04180458A (en) 1990-11-15 1992-06-26 Fuji Xerox Co Ltd Facsimile equipment
US5565999A (en) 1990-12-21 1996-10-15 Canon Kabushiki Kaisha Image data communication processing method, and apparatus therefor
US5220649A (en) 1991-03-20 1993-06-15 Forcier Mitchell D Script/binary-encoded-character processing method and system with moving space insertion mode
US5237614A (en) 1991-06-07 1993-08-17 Security Dynamics Technologies, Inc. Integrated network security system
US5315711A (en) 1991-11-01 1994-05-24 Unisys Corporation Method and apparatus for remotely and centrally controlling a plurality of host processors
JP2793399B2 (en) 1991-12-09 1998-09-03 日本電気株式会社 Buffer device
US5689648A (en) 1992-01-31 1997-11-18 Raychem Corporation Method and apparatus for publication of information
JPH05233547A (en) 1992-02-20 1993-09-10 Nec Corp Transaction inflow controller
US5444853A (en) 1992-03-31 1995-08-22 Seiko Epson Corporation System and method for transferring data between a plurality of virtual FIFO's and a peripheral via a hardware FIFO and selectively updating control information associated with the virtual FIFO's
JP2659896B2 (en) * 1992-04-29 1997-09-30 インターナショナル・ビジネス・マシーンズ・コーポレイション Structured document copy management method and structured document copy management device
JPH06134489A (en) 1992-10-21 1994-05-17 Takenaka Komuten Co Ltd Feeder for good-quality potable water
JP3181592B2 (en) 1992-12-01 2001-07-03 マイクロソフト コーポレイション Method and system for in-place interaction with embedded objects
US5341425A (en) 1992-12-02 1994-08-23 Scientific Atlanta, Inc. Methods and apparatus for uniquely encrypting data at a plurality of data transmission sites for transmission to a reception site
US5986690A (en) 1992-12-09 1999-11-16 Discovery Communications, Inc. Electronic book selection and delivery system
US5341426A (en) 1992-12-15 1994-08-23 Motorola, Inc. Cryptographic key management apparatus and method
JP3360856B2 (en) 1992-12-18 2003-01-07 富士通株式会社 Processor
US5491821A (en) 1993-02-24 1996-02-13 International Business Machines Corporation Method and system for incremental processing of computer objects
US5375160A (en) 1993-05-28 1994-12-20 Ledler Corporation Interface apparatus for effecting captioning and communications between a telephone line and a television
EP0632397A3 (en) 1993-07-02 1995-08-16 Nippon Telegraph & Telephone Book data service system with data delivery by broadcasting.
US5621658A (en) 1993-07-13 1997-04-15 International Business Machines Corporation Method and apparatus for communicating an electronic action from a data processing system to another data processing system via an audio device
CA2458379A1 (en) 1993-12-02 1995-06-08 Discovery Communications, Inc. Electronic book home system
JPH088853A (en) 1994-06-24 1996-01-12 Sony Corp Scrambling device and descrambling device
US7613659B1 (en) 1994-11-28 2009-11-03 Yt Acquisition Corporation System and method for processing tokenless biometric electronic transmissions using an electronic rule module clearinghouse
US5892900A (en) 1996-08-30 1999-04-06 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
AU1334797A (en) 1995-12-14 1997-07-03 Motorola, Inc. Electronic book and method of controlling a rate of information displayed thereby
WO1997022107A1 (en) 1995-12-14 1997-06-19 Motorola Inc. Electronic book and graphical user interface to provide control thereof
AU1413297A (en) 1995-12-14 1997-07-03 Motorola, Inc. Electronic book and method of selecting a primary font and primary size for displaying text therewith
US5661635A (en) 1995-12-14 1997-08-26 Motorola, Inc. Reusable housing and memory card therefor
US5815407A (en) 1995-12-14 1998-09-29 Motorola Inc. Method and device for inhibiting the operation of an electronic device during take-off and landing of an aircraft
WO1997022080A1 (en) 1995-12-14 1997-06-19 Motorola Inc. System and method for an automatic library for a plurality of book cards
US5761681A (en) 1995-12-14 1998-06-02 Motorola, Inc. Method of substituting names in an electronic book
US5893132A (en) 1995-12-14 1999-04-06 Motorola, Inc. Method and system for encoding a book for reading using an electronic book
WO1997022104A1 (en) 1995-12-14 1997-06-19 Motorola Inc. Electronic book and method of displaying an animated page turn therefor
WO1997022062A1 (en) 1995-12-14 1997-06-19 Motorola Inc. Electronic book diary and method for use therefor
US5697793A (en) 1995-12-14 1997-12-16 Motorola, Inc. Electronic book and method of displaying at least one reading metric therefor
AU1569997A (en) 1995-12-14 1997-07-03 Motorola, Inc. Method for abridging text in an electronic book
AU1569797A (en) 1995-12-14 1997-07-03 Motorola, Inc. Electronic book and method of annotation therefor
AU1063597A (en) 1995-12-14 1997-07-03 Motorola, Inc. Method and electronic book for creating a plurality of versions of a book
DE19681251T1 (en) 1995-12-14 1998-08-20 Motorola Inc Method and device for storing and displaying text
AU1569897A (en) 1995-12-14 1997-07-03 Motorola, Inc. System and method of authoring tools for an electronic book
WO1997022108A1 (en) 1995-12-14 1997-06-19 Motorola Inc. Electronic book and graphical user interface for selecting a book to read therewith
US5761682A (en) 1995-12-14 1998-06-02 Motorola, Inc. Electronic book and method of capturing and storing a quote therein
WO1997022065A1 (en) 1995-12-14 1997-06-19 Motorola Inc. Electronic book and method of storing at least one book in an internal machine-readable storage medium
AU1331597A (en) 1995-12-14 1997-07-03 Motorola, Inc. Electronic book and a method of displaying a relative position of a current page of a book therefor
WO1997022106A1 (en) 1995-12-14 1997-06-19 Motorola Inc. Electronic book and method of creating a personal log of reading activity therefor
WO1997022049A1 (en) 1995-12-14 1997-06-19 Motorola Inc. System for inhibiting the operation of an electronic device during take-off and landing of an aircraft
EP0812452A4 (en) 1995-12-14 1999-09-15 Motorola Inc System and method for limiting access to a book card
US5956034A (en) 1996-08-13 1999-09-21 Softbook Press, Inc. Method and apparatus for viewing electronic reading materials
KR100462691B1 (en) 1996-09-25 2004-12-20 에듀케이트, 인코포레이티드 Automated Testing and Electroic Instructional Delivery and Student Management System
US6052717A (en) 1996-10-23 2000-04-18 Family Systems, Ltd. Interactive web book system
US6034680A (en) 1997-04-25 2000-03-07 Foundation For Concepts In Education, Inc. Supplying supplementary information for printed books
US20010011238A1 (en) 1998-03-04 2001-08-02 Martin Forest Eberhard Digital rights management system
US6415316B1 (en) 1998-09-01 2002-07-02 Aidministrator Nederland B.V. Method and apparatus for implementing a web page diary
WO2001018665A1 (en) 1999-09-08 2001-03-15 Discovery Communications, Inc. Video conferencing using an electronic book viewer

Patent Citations (102)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3860873A (en) * 1971-10-01 1975-01-14 Tape Athon Corp Fm transmission system
US3869873A (en) * 1974-05-20 1975-03-11 Elliott Williams Company Inc Door structure for large freezer
US4071697A (en) * 1976-10-18 1978-01-31 Atari, Inc. Interactive video/telephone transmission system
US4251671A (en) * 1979-10-05 1981-02-17 Miles Laboratories, Inc. Extraction of citric acid
US4429385A (en) * 1981-12-31 1984-01-31 American Newspaper Publishers Association Method and apparatus for digital serial scanning with hierarchical and relational access
US4653100A (en) * 1982-01-29 1987-03-24 International Business Machines Corporation Audio response terminal for use with data processing systems
US4578531A (en) * 1982-06-09 1986-03-25 At&T Bell Laboratories Encryption system key distribution method and apparatus
US4639225A (en) * 1982-06-24 1987-01-27 Sharp Kabushiki Kaisha Portable audio-visual electronic apparatus
US4567512A (en) * 1982-08-19 1986-01-28 World Video Library, Inc. Recorded program communication system
US4805014A (en) * 1983-11-07 1989-02-14 Sony Corporation Signal transmission system for a CATV system
US4644470A (en) * 1984-07-20 1987-02-17 International Business Machines Corp. Non-unique names for broadcast messages
US4724491A (en) * 1984-08-28 1988-02-09 Adams-Russell Co., Inc. Inserting television advertising spots automatically
US4731840A (en) * 1985-05-06 1988-03-15 The United States Of America As Represented By The United States Department Of Energy Method for encryption and transmission of digital keying data
US4891838A (en) * 1985-11-04 1990-01-02 Dental Data Service, Inc. Computer accessing system
USD314383S (en) * 1986-09-23 1991-02-05 RUF GmbH & Co. KG Elektrotechnische Spezialfabrik Remote-control transmitter
US4796220A (en) * 1986-12-15 1989-01-03 Pride Software Development Corp. Method of controlling the copying of software
US4985697A (en) * 1987-07-06 1991-01-15 Learning Insights, Ltd. Electronic book educational publishing method using buried reference materials and alternate learning levels
US4899292A (en) * 1988-03-02 1990-02-06 Image Storage/Retrieval Systems, Inc. System for storing and retrieving text and associated graphics
US4982344A (en) * 1988-05-18 1991-01-01 Xerox Corporation Accelerating link creation
US4995078A (en) * 1988-06-09 1991-02-19 Monslow H Vincent Television broadcast system for selective transmission of viewer-chosen programs at viewer-requested times
US5379057A (en) * 1988-11-14 1995-01-03 Microslate, Inc. Portable computer with touch screen and computer system employing same
US5089956A (en) * 1988-11-29 1992-02-18 International Business Machines Corporation Method of distributing related documents to identified end users in an information processing system
US4996597A (en) * 1989-04-20 1991-02-26 Rca Licensing Corporation User programmable switching arrangement
US5078019A (en) * 1989-05-26 1992-01-07 Alps Electric Co., Ltd. Trackball device
US5484292A (en) * 1989-08-21 1996-01-16 Mctaggart; Stephen I. Apparatus for combining audio and visual indicia
US5283639A (en) * 1989-10-23 1994-02-01 Esch Arthur G Multiple media delivery network method and apparatus
US6507342B1 (en) * 1990-01-19 2003-01-14 Sony Corporation Information processing apparatus
US5091782A (en) * 1990-04-09 1992-02-25 General Instrument Corporation Apparatus and method for adaptively compressing successive blocks of digital video
US5486686A (en) * 1990-05-30 1996-01-23 Xerox Corporation Hardcopy lossless data storage and communications for electronic document processing systems
US5859594A (en) * 1990-06-28 1999-01-12 Motorola, Inc. Selective call receiver having selectable displays
US5289288A (en) * 1990-07-20 1994-02-22 Mti Associates Method and apparatus for encoding a video signal having multi-language capabilities
US5388196A (en) * 1990-09-07 1995-02-07 Xerox Corporation Hierarchical shared books with database
US5282028A (en) * 1990-11-27 1994-01-25 Scientific-Atlanta, Inc. Remote control for digital music terminal with synchronized communications
US5383112A (en) * 1991-01-07 1995-01-17 Gte Service Corporation Inventory management method
US5285272A (en) * 1991-02-26 1994-02-08 Sasktel Video store and forward on demand apparatus and method
US5384588A (en) * 1991-05-13 1995-01-24 Telerobotics International, Inc. System for omindirectional image viewing at a remote location without the transmission of control signals to select viewing parameters
US5185667A (en) * 1991-05-13 1993-02-09 Telerobotics International, Inc. Omniview motionless camera orientation system
US5289271A (en) * 1991-09-09 1994-02-22 Watson John C Cable television-usage system
US5182639A (en) * 1991-10-30 1993-01-26 Suganda Jutamulia Real-time analytic pseudocolor encoder system
US5485176A (en) * 1991-11-21 1996-01-16 Kabushiki Kaisha Sega Enterprises Information display system for electronically reading a book
US5282206A (en) * 1991-12-03 1994-01-25 Fujitsu Limited Synchronization circuit for establishing frame synchronism using pointers in a digital transmission system
US5390348A (en) * 1992-02-12 1995-02-14 Creative Digital Inc. System for tracking and correcting drift and dispersion in satellite transmission signals
US5495581A (en) * 1992-02-25 1996-02-27 Tsai; Irving Method and apparatus for linking a document with associated reference information using pattern matching
US5483278A (en) * 1992-05-27 1996-01-09 Philips Electronics North America Corporation System and method for finding a movie of interest in a large movie database
US5222136A (en) * 1992-07-23 1993-06-22 Crest Industries, Inc. Encrypted communication system
US5388101A (en) * 1992-10-26 1995-02-07 Eon Corporation Interactive nationwide data service communication system for stationary and mobile battery operated subscriber units
US5715515A (en) * 1992-12-02 1998-02-03 Scientific-Atlanta, Inc. Method and apparatus for downloading on-screen graphics and captions to a television terminal
US5600573A (en) * 1992-12-09 1997-02-04 Discovery Communications, Inc. Operations center with video storage for a television program packaging and delivery system
US5392387A (en) * 1992-12-17 1995-02-21 International Business Machines Corporation Method and system for enhanced data access efficiency in an electronic book
US5598351A (en) * 1993-02-26 1997-01-28 John C. Chater Communication system
US5485221A (en) * 1993-06-07 1996-01-16 Scientific-Atlanta, Inc. Subscription television system and terminal for enabling simultaneous display of multiple services
US6173335B1 (en) * 1993-07-30 2001-01-09 Apple Computer, Inc. Structure and protocol for routing information in a system
US5481296A (en) * 1993-08-06 1996-01-02 International Business Machines Corporation Apparatus and method for selectively viewing video information
US6014184A (en) * 1993-09-09 2000-01-11 News America Publications, Inc. Electronic television program guide schedule system and method with data feed access
US5598209A (en) * 1993-10-20 1997-01-28 Videoconferencing Systems, Inc. Method for automatically adjusting a video conferencing system camera
US5481294A (en) * 1993-10-27 1996-01-02 A. C. Nielsen Company Audience measurement system utilizing ancillary codes and passive signatures
US5598279A (en) * 1993-11-02 1997-01-28 Ricoh Company, Ltd. Document circulating apparatus with automatic deletion of data
US5481542A (en) * 1993-11-10 1996-01-02 Scientific-Atlanta, Inc. Interactive information services control system
US5708960A (en) * 1994-02-17 1998-01-13 Hitachi, Ltd. Subscription newspaper dispatching system
US5598523A (en) * 1994-03-31 1997-01-28 Panasonic Technologies, Inc. Method and system for displayed menu activation using a matching distinctive arrangement of keypad actuators
US5602596A (en) * 1994-04-08 1997-02-11 U S West Technologies, Inc. Method for navigating a complex multimedia structure at an interactive user station
US5598470A (en) * 1994-04-25 1997-01-28 International Business Machines Corporation Method and apparatus for enabling trial period use of software products: Method and apparatus for utilizing a decryption block
US7181692B2 (en) * 1994-07-22 2007-02-20 Siegel Steven H Method for the auditory navigation of text
US5719938A (en) * 1994-08-01 1998-02-17 Lucent Technologies Inc. Methods for providing secure access to shared information
US5604824A (en) * 1994-09-22 1997-02-18 Houston Advanced Research Center Method and apparatus for compression and decompression of documents and the like using splines and spline-wavelets
US5715314A (en) * 1994-10-24 1998-02-03 Open Market, Inc. Network sales system
US5600368A (en) * 1994-11-09 1997-02-04 Microsoft Corporation Interactive television system and method for viewer control of multiple camera viewpoints in broadcast programming
US5721832A (en) * 1995-05-12 1998-02-24 Regal Greetings & Gifts Inc. Method and apparatus for an interactive computerized catalog system
US5721956A (en) * 1995-05-15 1998-02-24 Lucent Technologies Inc. Method and apparatus for selective buffering of pages to provide continuous media data to multiple users
US5721908A (en) * 1995-06-07 1998-02-24 International Business Machines Corporation Computer network for WWW server data access over internet
US5710887A (en) * 1995-08-29 1998-01-20 Broadvision Computer system and method for electronic commerce
US5870717A (en) * 1995-11-13 1999-02-09 International Business Machines Corporation System for ordering items over computer network using an electronic catalog
US6675384B1 (en) * 1995-12-21 2004-01-06 Robert S. Block Method and apparatus for information labeling and control
US5862325A (en) * 1996-02-29 1999-01-19 Intermind Corporation Computer-based communication system and method using metadata defining a control structure
US6025837A (en) * 1996-03-29 2000-02-15 Micrsoft Corporation Electronic program guide with hyperlinks to target resources
US5862329A (en) * 1996-04-18 1999-01-19 International Business Machines Corporation Method system and article of manufacture for multi-casting audio visual material
US6016484A (en) * 1996-04-26 2000-01-18 Verifone, Inc. System, method and article of manufacture for network electronic payment instrument and certification of payment and credit collection utilizing a payment
US6012890A (en) * 1996-10-04 2000-01-11 Instabook Corporation Electronic bookstore vending machine
US5870767A (en) * 1996-11-22 1999-02-09 International Business Machines Corporation Method and system for rendering hyper-link information in a printable medium from a graphical user interface
US5864823A (en) * 1997-06-25 1999-01-26 Virtel Corporation Integrated virtual telecommunication system for E-commerce
US6029141A (en) * 1997-06-27 2000-02-22 Amazon.Com, Inc. Internet-based customer referral system
US6847403B1 (en) * 1997-11-05 2005-01-25 Polycom, Inc. Integrated portable videoconferencing unit
US6029176A (en) * 1997-11-25 2000-02-22 Cannon Holdings, L.L.C. Manipulating and analyzing data using a computer system having a database mining engine resides in memory
US6029045A (en) * 1997-12-09 2000-02-22 Cogent Technology, Inc. System and method for inserting local content into programming content
US6335678B1 (en) * 1998-02-26 2002-01-01 Monec Holding Ag Electronic device, preferably an electronic book
US6339842B1 (en) * 1998-06-10 2002-01-15 Dennis Sunga Fernandez Digital television with subscriber conference overlay
US6177936B1 (en) * 1998-08-20 2001-01-23 International Business Machines Corporation Browser hierarchical contextual information for web pages
US6195667B1 (en) * 1998-10-16 2001-02-27 Softbook Press, Inc. On-line menu updating for an electronic book
US6351750B1 (en) * 1998-10-16 2002-02-26 Softbook Press, Inc. Dynamic conversion of byte ordering for use on different processor platforms
US6025871A (en) * 1998-12-31 2000-02-15 Intel Corporation User interface for a video conferencing system
US6683631B2 (en) * 1998-12-31 2004-01-27 International Business Machines Corporation System and method for selecting and deselecting information in an electronic document
US6367010B1 (en) * 1999-07-02 2002-04-02 Postx Corporation Method for generating secure symmetric encryption and decryption
US6510531B1 (en) * 1999-09-23 2003-01-21 Lucent Technologies Inc. Methods and systems for testing parallel queues
US7185274B1 (en) * 1999-12-07 2007-02-27 Microsoft Corporation Computer user interface architecture wherein users interact with both content and user interface by activating links
US6344853B1 (en) * 2000-01-06 2002-02-05 Alcone Marketing Group Method and apparatus for selecting, modifying and superimposing one image on another
US6990464B1 (en) * 2000-01-11 2006-01-24 Ncr Corporation Apparatus, system and method for electronic book distribution
US20030014754A1 (en) * 2000-02-04 2003-01-16 Chang Vernon S. Advertisement response system
US20040039934A1 (en) * 2000-12-19 2004-02-26 Land Michael Z. System and method for multimedia authoring and playback
US20030018543A1 (en) * 2001-06-25 2003-01-23 Alger Jeffrey H. Client portal
US7120250B2 (en) * 2002-09-09 2006-10-10 Sony Corporation Content distribution for multiple digital rights management
US7181468B2 (en) * 2003-04-28 2007-02-20 Sony Corporation Content management for rich media publishing system
US20070016657A1 (en) * 2005-07-14 2007-01-18 Fuji Photo Film Co., Ltd. Multimedia data processing devices, multimedia data processing methods and multimedia data processing programs

Cited By (98)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8027339B2 (en) 1997-03-12 2011-09-27 Nomadix, Inc. System and method for establishing network connection
US8594107B2 (en) 1997-03-12 2013-11-26 Nomadix, Inc. System and method for establishing network connection
US8725899B2 (en) 1998-12-08 2014-05-13 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8725888B2 (en) 1998-12-08 2014-05-13 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8266269B2 (en) 1998-12-08 2012-09-11 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8244886B2 (en) 1998-12-08 2012-08-14 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8788690B2 (en) 1998-12-08 2014-07-22 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8613053B2 (en) 1998-12-08 2013-12-17 Nomadix, Inc. System and method for authorizing a portable communication device
US8364806B2 (en) 1998-12-08 2013-01-29 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8606917B2 (en) 1998-12-08 2013-12-10 Nomadix, Inc. Systems and methods for providing content and services on a network system
US10341243B2 (en) 1998-12-08 2019-07-02 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8370477B2 (en) 1998-12-08 2013-02-05 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8156246B2 (en) 1998-12-08 2012-04-10 Nomadix, Inc. Systems and methods for providing content and services on a network system
US9548935B2 (en) 1998-12-08 2017-01-17 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8266266B2 (en) 1998-12-08 2012-09-11 Nomadix, Inc. Systems and methods for providing dynamic network authorization, authentication and accounting
US9160672B2 (en) 1998-12-08 2015-10-13 Nomadix, Inc. Systems and methods for controlling user perceived connection speed
US10110436B2 (en) 1998-12-08 2018-10-23 Nomadix, Inc. Systems and methods for providing content and services on a network system
US8713641B1 (en) 1998-12-08 2014-04-29 Nomadix, Inc. Systems and methods for authorizing, authenticating and accounting users having transparent computer access to a network using a gateway device
US8516083B2 (en) 1999-10-22 2013-08-20 Nomadix, Inc. Systems and methods of communicating using XML
US8190708B1 (en) 1999-10-22 2012-05-29 Nomadix, Inc. Gateway device having an XML interface and associated method
US20050097007A1 (en) * 2001-06-25 2005-05-05 Microsoft Corporation Client portal
US7743326B2 (en) * 2001-06-28 2010-06-22 Sony Corporation Information processing apparatus, information processing method, recording medium, and program
US20030009491A1 (en) * 2001-06-28 2003-01-09 Takeshi Kanai Information processing apparatus, information processing method, recording medium, and program
US7716477B2 (en) * 2002-09-19 2010-05-11 Sony Corporation Data processing method, program of the same, and device of the same
US20060155992A1 (en) * 2002-09-19 2006-07-13 Sony Corporation Data processing method, its program and its device
US20050250439A1 (en) * 2004-05-06 2005-11-10 Garthen Leslie Book radio system
WO2005112300A2 (en) * 2004-05-06 2005-11-24 Garthen Leslie Book radio system
WO2005112300A3 (en) * 2004-05-06 2009-04-23 Garthen Leslie Book radio system
US20090055298A1 (en) * 2004-10-08 2009-02-26 Uwe Foll Method for configuring billing processes in network elements
US9397843B2 (en) * 2004-10-08 2016-07-19 Nokia Solutions And Networks Gmbh & Co. Kg Method for configuring billing processes in network elements
US10853560B2 (en) 2005-01-19 2020-12-01 Amazon Technologies, Inc. Providing annotations of a digital work
US20100138873A1 (en) * 2005-10-07 2010-06-03 Sharp Kabushiki Kaisha Receiving device, server, television receiver, mobile terminal, system, receiving method, information processing program, and storage medium
US8156531B2 (en) 2005-10-07 2012-04-10 Sharp Kabushiki Kaisha Receiving device, server, television receiver, mobile terminal, system, receiving method, information processing program, and storage medium
US9292873B1 (en) 2006-09-29 2016-03-22 Amazon Technologies, Inc. Expedited acquisition of a digital item following a sample presentation of the item
US9672533B1 (en) 2006-09-29 2017-06-06 Amazon Technologies, Inc. Acquisition of an item based on a catalog presentation of items
US20100122162A1 (en) * 2007-02-16 2010-05-13 Satoshi Terada Content display device, television receiver, content display method, content display control program, and recording medium
US8479096B2 (en) 2007-02-16 2013-07-02 Sharp Kabushiki Kaisha Content display device, television receiver, content display method, content display control program, and recording medium
US9665529B1 (en) 2007-03-29 2017-05-30 Amazon Technologies, Inc. Relative progress and event indicators
US9888005B1 (en) 2007-05-21 2018-02-06 Amazon Technologies, Inc. Delivery of items for consumption by a user device
US9479591B1 (en) 2007-05-21 2016-10-25 Amazon Technologies, Inc. Providing user-supplied items to a user device
US9568984B1 (en) 2007-05-21 2017-02-14 Amazon Technologies, Inc. Administrative tasks in a media consumption system
US20090276632A1 (en) * 2008-04-30 2009-11-05 Singer Howard M Systems, Methods, and Media for Providing Secure Content Information
US8484027B1 (en) 2009-06-12 2013-07-09 Skyreader Media Inc. Method for live remote narration of a digital book
US10387629B2 (en) * 2009-06-26 2019-08-20 Disney Enterprises, Inc. Method and system for allocating access to digital media content
US10565388B2 (en) 2009-06-26 2020-02-18 Disney Enterprises, Inc. Method and system for providing digital media rental
US20140013448A1 (en) * 2009-06-26 2014-01-09 Disney Enterprises, Inc. Method and System for Allocating Access to Digital Media Content
WO2011021113A1 (en) 2009-08-20 2011-02-24 Nds Limited Electronic book security features
US8791788B2 (en) 2009-08-20 2014-07-29 Cisco Technology Inc. Electronic book security features
WO2011021111A1 (en) 2009-08-20 2011-02-24 Nds Limited Hindering optical character recognition of a displayed text
WO2011021114A1 (en) 2009-08-20 2011-02-24 Nds Limited Electronic book security features
WO2011021112A1 (en) 2009-08-20 2011-02-24 Nds Limited Electronic book security features
WO2011021110A1 (en) 2009-08-20 2011-02-24 Nds Limited Electronic book security features
US9811507B2 (en) * 2010-01-11 2017-11-07 Apple Inc. Presenting electronic publications on a graphical user interface of an electronic device
US20120311438A1 (en) * 2010-01-11 2012-12-06 Apple Inc. Electronic text manipulation and display
US10824322B2 (en) 2010-01-11 2020-11-03 Apple Inc. Electronic text manipulation and display
US20130232409A1 (en) * 2010-01-11 2013-09-05 Apple Inc. Electronic text manipulation and display
US20130219269A1 (en) * 2010-01-11 2013-08-22 Apple Inc. Electronic text manipulation and display
US9928218B2 (en) 2010-01-11 2018-03-27 Apple Inc. Electronic text display upon changing a device orientation
US20110302009A1 (en) * 2010-06-02 2011-12-08 Freed Ian W Referring, Lending, and Reselling of Digital Items
WO2011153193A1 (en) * 2010-06-02 2011-12-08 Amazon Technologies Inc. Referring, lending, and reselling of digital items
CN102934136A (en) * 2010-06-02 2013-02-13 亚马逊技术股份有限公司 Referring, lending, and reselling of digital items
US20110313892A1 (en) * 2010-06-16 2011-12-22 Dicke Ronald Method and system for upselling to a user of a digital book lending library
US8380632B2 (en) * 2010-06-16 2013-02-19 Ronald DICKE Method and system for upselling to a user of a digital book lending library
US20120090032A1 (en) * 2010-10-06 2012-04-12 Victor Trinklein Webtextbooks
US20120173524A1 (en) * 2010-12-31 2012-07-05 Ian Connor Capturing collection information for institutions
US20120253893A1 (en) * 2011-03-29 2012-10-04 Anbalagan Karthik G Identification of Borrowers for Digital Items
US8799363B2 (en) 2011-03-29 2014-08-05 Amazon Technologies, Inc. Lending digital items to identified recipients
US9912744B1 (en) 2011-03-29 2018-03-06 Amazon Technologies, Inc. Lending digital items to identified recipients
US8635277B2 (en) 2011-03-29 2014-01-21 Amazon Technologies, Inc. Mediated lending of digital items
US10296878B1 (en) 2011-06-28 2019-05-21 Amazon Technologies, Inc. Platform for providing generic e-content
US9116991B2 (en) * 2011-08-16 2015-08-25 Google Inc. Searching encrypted electronic books
GB2509422B (en) * 2011-09-29 2020-12-30 Hewlett Packard Development Co Decryption and encryption of application data
US20130145483A1 (en) * 2011-12-02 2013-06-06 Jpmorgan Chase Bank, N.A. System And Method For Processing Protected Electronic Communications
US20130315397A1 (en) * 2012-05-24 2013-11-28 Sandisk Technologies Inc. System and method to scramble data based on a scramble key
US9459955B2 (en) * 2012-05-24 2016-10-04 Sandisk Technologies Llc System and method to scramble data based on a scramble key
US20130318635A1 (en) * 2012-05-25 2013-11-28 eCHRTISTIAN, INC. Copyright security for electronic books
US20140019424A1 (en) * 2012-07-11 2014-01-16 Google Inc. Identifier validation and debugging
US10244277B2 (en) 2013-06-27 2019-03-26 Huawei Technologies Co., Ltd. Video data processing method and apparatus
US20160188907A1 (en) * 2013-08-08 2016-06-30 Enigio Time Ab Method for creating signals for time-stamping of documents and method for time-stamping of documents
US10803049B2 (en) * 2013-08-08 2020-10-13 Enigio Time Ab Method for creating signals for time-stamping of documents and method for time-stamping of documents
US20150256618A1 (en) * 2014-03-06 2015-09-10 Google Inc. Reading group ebook synchronization
US9282149B2 (en) * 2014-03-06 2016-03-08 Google Inc. Reading group ebook synchronization
US10079814B2 (en) 2014-09-23 2018-09-18 Kelisec Ab Secure node-to-multinode communication
US10348498B2 (en) 2014-10-09 2019-07-09 Kelisec Ab Generating a symmetric encryption key
WO2016056987A1 (en) * 2014-10-09 2016-04-14 Kelisec Ab Generating a symmetric encryption key
US10356090B2 (en) 2014-10-09 2019-07-16 Kelisec Ab Method and system for establishing a secure communication channel
US10693848B2 (en) 2014-10-09 2020-06-23 Kelisec Ab Installation of a terminal in a secure system
US10511596B2 (en) 2014-10-09 2019-12-17 Kelisec Ab Mutual authentication
US10733309B2 (en) 2014-10-09 2020-08-04 Kelisec Ab Security through authentication tokens
US10291596B2 (en) 2014-10-09 2019-05-14 Kelisec Ab Installation of a terminal in a secure system
US10701047B2 (en) 2015-01-07 2020-06-30 Cyph Inc. Encrypted group communication method
US10020946B2 (en) * 2015-01-07 2018-07-10 Cyph, Inc. Multi-key encryption method
US20160197721A1 (en) * 2015-01-07 2016-07-07 Cyph, Inc. Multi-key encryption method
US11438319B2 (en) 2015-01-07 2022-09-06 Cyph Inc. Encrypted group communication method
US11763085B1 (en) * 2020-03-26 2023-09-19 Grammarly, Inc. Detecting the tone of text
FR3108748A1 (en) * 2020-03-30 2021-10-01 Cosmian Tech Protection of secret software and confidential data in a secure enclave
EP3889809A1 (en) * 2020-03-30 2021-10-06 Cosmian Tech Protection of a secret software program and confidential data in a secure enclave
WO2021197871A1 (en) * 2020-03-30 2021-10-07 Cosmian Tech Protection of a secret software and confidential data in a secure enclave

Also Published As

Publication number Publication date
US7298851B1 (en) 2007-11-20

Similar Documents

Publication Publication Date Title
US7298851B1 (en) Electronic book security and copyright protection system
US20160070889A1 (en) Electronic book security and copyright protection system
US7509270B1 (en) Electronic Book having electronic commerce features
CA2390549C (en) Electronic book having electronic commerce features
US7716349B1 (en) Electronic book library/bookstore system
US7835989B1 (en) Electronic book alternative delivery systems
US5986690A (en) Electronic book selection and delivery system
CA2458307C (en) Electronic book secure communication with home subsystem
US7336788B1 (en) Electronic book secure communication with home subsystem
US7299501B2 (en) Electronic book selection and delivery system having encryption and security features
US8095949B1 (en) Electronic book with restricted access features
JP2012054965A (en) Electronic book alternative distributing method
CA2457505A1 (en) Internet-based language archiving system and education facility

Legal Events

Date Code Title Description
AS Assignment

Owner name: ADREA, LLC, CALIFORNIA

Free format text: CHANGE OF NAME;ASSIGNOR:DISCOVERY PATENT HOLDINGS, LLC;REEL/FRAME:025757/0375

Effective date: 20100824

STCB Information on status: application discontinuation

Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION