Search Images Maps Play YouTube Gmail Drive Calendar More »
Sign in
Screen reader users: click this link for accessible mode. Accessible mode has the same essential features but works better with your reader.

Patents

  1. Advanced Patent Search
Publication numberUS20110010299 A1
Publication typeApplication
Application numberUS 12/801,927
Publication date13 Jan 2011
Filing date1 Jul 2010
Priority date28 Jun 1996
Also published asUS7770230, US20080175384, US20160217274
Publication number12801927, 801927, US 2011/0010299 A1, US 2011/010299 A1, US 20110010299 A1, US 20110010299A1, US 2011010299 A1, US 2011010299A1, US-A1-20110010299, US-A1-2011010299, US2011/0010299A1, US2011/010299A1, US20110010299 A1, US20110010299A1, US2011010299 A1, US2011010299A1
InventorsShannon Lee Byrne, Innes Muecke, Andrew Patterson, David Slik
Original AssigneeShannon Lee Byrne, Innes Muecke, Andrew Patterson, David Slik
Export CitationBiBTeX, EndNote, RefMan
External Links: USPTO, USPTO Assignment, Espacenet
System for dynamically encrypting content for secure internet commerce and providing embedded fulfillment software
US 20110010299 A1
Abstract
A data distribution system is provided which supplies customers with an executable for requested secured data files to provide the customer with fulfillment software, obviating the need for the customer to download fulfillment software prior to requesting secure data. The data distribution system is characterized by server technology which can dynamically encrypt secured data files just prior to a customer request to download the data file. A framework for building a universal data distribution infrastructure is provided which employs Requesters.
Images(7)
Previous page
Next page
Claims(9)
1. A method of delivering encrypted content to a user computer via a communication network comprising the steps of:
generating queries using said user computer to search for content via said communication network, said content being available from an information provider via a server and said communication network;
downloading a package from said information provider, said package comprising selected content retrieved from said server data repository and bundled in response to said queries and a unique package identifier assigned to said package and stored in said server data repository, at least a portion of said content being encrypted using a key in response to said queries;
selecting at least one content item provided in said package using said user computer;
generating a machine-dependent product code at said user computer, said product code comprising a unique identifier corresponding to said user computer; and
transmitting a request for said at least one content item and said product code to said information provider.
2. A method as claimed in claim 1, wherein said at least one content item is encrypted and further comprising the steps of:
receiving a release code from said information provider to decrypt said at least one content item, said release code being generated using said product code and said key; and
decrypting said purchaseable item at said user computer using said release code.
3. A method as claimed in claim 1, wherein said package comprises secure content previews of selected said content items from said server data repository, said selected content items being stored unencrypted at said data repository, said selecting step comprising the step of reviewing said previews, and further comprising the step of encrypting said at least one purchaseable item in response to said request.
4. A method as claimed in claim 1, wherein said unique identifier is derived from a hardware device in said user computer.
5. A method as claimed in claim 1, wherein said unique identifier is derived from a card number of a circuit board in said user computer.
6. A method as claimed in claim 1, wherein said selected content items in said package comprise mixed digital media content having at least two of images, audio, video and software.
7. A method of delivering encrypted content to a user computer via a communication network comprising the steps of:
storing individual pieces of content in a server, each of said individual pieces comprising at least one of an image, audio, video and software;
receiving queries from a user computer searching for content via a communication network to obtain selected content comprising at least two selections from the stored said individual pieces of content;
retrieving said selected content from said server in response to said queries, said selected content comprising at least two of said individual pieces of content selected by the user;
encrypting each of the respective said individual pieces of content selected by the user with corresponding keys;
bundling the selected ones of said individual pieces of content in said selected content into a customized package;
generating and storing a unique package identifier for said package;
transmitting said package and said package identifier to said user computer for downloading; and
receiving a request from said user computer to decrypt a selected portion of said package, said request comprising a product code generated using said package identifier and a hardware identifier that is unique to said user computer.
8. A method as claimed in claim 7, further comprising generating a release code for decrypting said selected portion using said key and said product code.
9. A method as claimed in claim 8, wherein the release code is not generated on the server when the respective one of said individual pieces corresponding to said selected portion was encrypted but after the user has downloaded the respective one of said individual pieces and generated said product code.
Description
  • [0001]
    This application is a continuation of U.S. patent application Ser. No. 11/978,566, filed Oct. 30, 2007, which is a continuation of U.S. patent application Ser. No. 10/126,973, filed Apr. 22, 2002 (now U.S. Pat. No. 7,356,847), which is a continuation-in-part of U.S. patent application Ser. No. 10/126,974, filed Apr. 22, 2002 (now U.S. Pat. No. 7,010,697), which is a continuation of U.S. patent application Ser. No. 09/031,536, filed Feb. 27, 1998 (now abandoned), which is a continuation-in-part of U.S. patent application Ser. No. 08/670,846, filed Jun. 28, 1996 (now U.S. Pat. No. 5,809,145), the entire subject of which are hereby incorporated herein by reference.
  • FIELD OF INVENTION
  • [0002]
    The invention relates to a system for allowing information providers to prepare digital information for secure electronic commerce via the internet, including dynamic encryption of the information, and for allowing customers to browse and purchase secured, purchasable data or simply to unlock secured correspondence that is intended for a some customers and not others without having to pre-load fulfillment software.
  • BACKGROUND OF THE INVENTION
  • [0003]
    Demand for network-based distribution of protected and unprotected data is increasing dramatically. Yet, many challenges exist that need to be addressed to effectively distribute data via electronic commerce such as: (1) conducting reliable, secure transactions necessary to build confidence with both information providers (e.g., data publishers) and data customers; (2) ensuring that data can be located, accessed and purchased in a timely manner; and (3) ensuring that information providers or publishers can specify access controls and that the administration of the posting of datasets which are capable of changing dynamically is not unwieldy and unmanageable.
  • [0004]
    A need exists for a data distribution infrastructure which addresses the aforementioned challenges and which overcomes a number of disadvantages associated with existing distributed data commerce systems. Traditional distributed data commerce systems are implemented behind a firewall so that secure transactions can be made. These systems, however, are characterized by high installation and maintenance costs for both software and hardware. Another disadvantage associated with many existing distributed data commerce systems is the requirement of a customer to load special fulfillment software onto the customer computer prior to the acquisition of any secure data. The fulfillment software enables the customer to order, purchase and decrypt secure data. Another disadvantage of many existing distributed data commerce systems arises from the static encryption of datasets. Information providers typically encrypt datasets to be distributed as secure datasets and store the secured datasets on a web server prior to any demand for the datasets by customers. Thus, modification of the datasets and overall administration of the posting of the datasets is less efficient since the data is already encrypted.
  • SUMMARY OF THE INVENTION
  • [0005]
    In accordance with an aspect of the present invention, a method of delivering encrypted content to a user computer via a communication network is provided. Queries are generated using said user computer to search for content via said communication network. The content can be available from an information provider via a server and the communication network, for example. A package is downloaded from the information provider and comprises, for example, selected content retrieved from the server data repository and bundled in response to the queries. A unique package identifier is assigned to the package and stored in the server data repository. At least a portion of the content is encrypted using a key in response to said queries. The package can be previewed using the user computer and at least one content item provided in said package can be selected. A machine-dependent product code is generated at the user computer. The product code comprises a unique identifier corresponding to said user computer. A request for the at least one content item and the product code is transmitted to the information provider.
  • [0006]
    In accordance with another aspect of the present invention, a method of delivering encrypted content to a user computer via a communication network is provided. Individual pieces of content are stored in a server, each of the individual pieces comprising at least one of an image, audio, video and software. Queries are received from a user computer searching for content via a communication network to obtain selected content comprising at least two selections from the stored individual pieces of content. The selected content is retrieved from the server in response to the queries, the selected content comprising at least two of the individual pieces of content selected by the user. Each of the respective individual pieces of content selected by the user are encrypted with corresponding keys. The selected ones of the individual pieces of content are bundled into a customized package. A unique package identifier for the package is generated and stored. The package and the package identifier are transmitted to the user computer for downloading. A request is received from the user computer to decrypt a selected portion of the package. The request comprises a product code generated using the package identifier and a hardware identifier that is unique to the user computer. A release code is generated for decrypting the selected portion using the key and the product code. The release code is not generated on the server when the respective one of the individual pieces was encrypted but rather after the user has downloaded the respective one of the individual pieces and generated the product code.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • [0007]
    These and other features and advantages of the present invention will be more readily comprehended from the following detailed description when read in connection with the appended drawings, which form a part of this original disclosure, and wherein:
  • [0008]
    FIG. 1 is a schematic block diagram of a data distribution system illustrating the dynamic downloading of an executable with secure data files to provide customers with fulfillment software in accordance with an embodiment of the present invention;
  • [0009]
    FIGS. 2 and 3 depict exemplary computer screens generated on an information provider's computer to allow an information provider to create purchasable content in accordance with an embodiment of the present invention;
  • [0010]
    FIG. 4 is a flow chart depicting the sequence of operations for requesting a secured file with an embedded executable in accordance with an embodiment of the present invention;
  • [0011]
    FIGS. 5, 6 and 7 are exemplary computer screens generated on a customer computer for selecting a purchasable item and purchasing a release code to decrypt the purchasable item in accordance with an embodiment of the present invention;
  • [0012]
    FIG. 8 depicts an exemplary computer screen generated on an information provider's computer to locate a release code corresponding to a product code for a requested purchasable item in accordance with an embodiment of the present invention;
  • [0013]
    FIG. 9 is a schematic block diagram of a data distribution system which dynamically encrypts secure content in accordance with an embodiment of the present invention; and
  • [0014]
    FIGS. 10, 11 and 12 are schematic block diagrams illustrating software modules including Requesters in a distributed framework for building universal data distribution infrastructures in accordance with an embodiment of the present invention.
  • DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Overview
  • [0015]
    A data distribution system (DDS) 10 is provided in accordance with the present invention to allow information providers (IPs) to prepare digital information (hereinafter referred to as “content”) for commerce, as well as to perform data retrieval and transmission, and transactional services. A number of embodiments are described below which provide different electronic commerce functions. For example, a desktop encryption/decryption system (DES) is described in connection with FIGS. 1-8 which permits seamless integration of secured data commerce functionality with existing software applications and operating systems without requiring modification to a user's system. An information provider (IP) 12, as shown in FIG. 1, can use the DES to make digital content into a purchasable item, or simply to encrypt the content for a secured correspondence transmission that does not require purchasing thereof A customer 14 can receive the secured correspondence or purchasable item via the interne or download these items from a compact disc (CD), for example. The DES provides the secured correspondence or purchasable item with an embedded executable to provide preview and purchase functions to the customer without having to modify software applications and operating system (OS) on the customer computer prior to receiving the secured content.
  • [0016]
    In addition, server-based technology is provided which permits dynamic encryption of content and which permits customers and IPs to otherwise engage in internet commerce (i.e., to request, preview, download and purchase selected secured content), as will be described below in connection with FIG. 9. Finally, a distributed framework is provided which can be adopted by IPs as a standardized framework from which to build a universal data distribution infrastructure, as shown in FIGS. 10-12. The distributed framework preferably employs the kernel and Requester technology that is the subject of U.S. Pat. No. 5,809,145, the entire subject of which is hereby incorporated herein by reference for all purposes.
  • Desktop Encryption/Decryption System (DES)
  • [0017]
    The DES provides an IP 12 with means to create secured content in the form of purchasable items or secured correspondence. The DES preferably comprises software operating on a IP computer (e.g., a Web Server 16) which generates screens 16 and 18, as depicted in FIGS. 2 and 3, respectively, when the IP is preparing content for secure commerce or transmission. The IP 12 can create content via an input device and an application program (e.g., word processing, image processing or publishing software) or retrieve existing content stored in a memory device. The newly created or retrieved files are listed in the dialogue box 20 in the “Save as Purchasable” screen 18. In accordance with the present invention, the DES software translates a user input such as selection of the “Save” button 22 into a DES function. For example, when the “Save as Purchasable” option 24 is selected by the IP 12, the “Save” call resulting from activating the “Save” button is flagged by the DES to create a purchasable item. The DES subsequently invokes special handlers in accordance with the present invention to prepare, secure (e.g., encrypt) and package the saved content for distribution via sale, or simply secure correspondence transmission with no sale.
  • [0018]
    In addition to using a secure wrapper for encryption, the DES provides the encrypted content with an embedded executable in accordance with the present invention. The executable translates application-wide and OS-wide calls such as “file open”, “read”, “write” and “close” into DES events such as saving selected data as a purchasable item, or providing customers with preview and purchasing dialogue, in the OS and one or more of the applications being run on the IP 12 computer or customer 14 computer. Thus, the fulfillment software required to preview, request a release code, purchase a release code and to decrypt selected content via the release code is provided to a customer computer following transmission of the selected secure content. The DES is therefore advantageous because a customer need not have previously installed fulfillment software prior to the request or receipt of the selected secure content.
  • [0019]
    With regard to an IP, the DES stores content saved as purchasable content on a hard drive 26 or other memory device as a protected file. The encryption can be, for example, in accordance with an encryption method that generates machine-dependent release codes such as the method described in U.S. Pat. No. 5,809,145 incorporated by reference herein. Other encryption algorithms, however, can be used. The special handlers of the DES assign a product code for the protected file containing the purchasable item and create a release code or key to decrypt or unlock the protected file. By way of an example, raw and unencrypted data in a digital format is stored in independent data files at, for example, an IP data processing facility. The key for encrypting and decrypting the data can be generated, for example, cryptographically using a random number generator. The encrypted data is then stored in a database at a particular location. A unique dataset code is assigned to the dataset and is preferably generated using a hash algorithm on the location of the dataset. The location of the dataset, the key and the hashed dataset code are then stored in a key management database maintained at the IP or separate fulfillment center. The encrypted data is distributed via CD-ROM, for example, or made available via a network (e.g., the internet).
  • [0020]
    A user can select a dataset and initiate a request by clicking on an item in a preview screen, for example. A hardware-dependent digital signature (HDDS) is generated in response to the dataset request. The signature can be based on a card number of a board within the customer computer or other computer-specific device. The location of the selected dataset is determined by the computer using a table on the CD-ROM or available via a network and preferably hashed. The hashed location is then concatenated with the HDDS and compressed to present the user with a product code corresponding to the selected dataset.
  • [0021]
    The product code is forwarded to the IP or fulfillment center, where it is processed to decompress the product code, and to extract the hashed location of the selected dataset and the HDDS. The hashed location is used to find the key within the key management database for decrypting the requested dataset. The I-IDDS is then hashed and encrypted along with the key. The encrypted key is concatenated with the hashed dataset code, compressed, and sent as a release code to the customer.
  • [0022]
    With reference to FIG. 3, the IP 12 can store the release codes in a key database 28. In the DES, a customer 14 can obtain a release code for a selected purchasable item or for secure correspondence directed to the customer via a telephone order or a facsimile modem or transaction in accordance with one embodiment of the present invention. The DES preferably provides a two layer approach to providing protected content for commerce. First, encrypted files are browsed and downloaded by the customer 14. Second, the customer 14 subsequently initiates a transaction to unlock selected ones of the encrypted file(s). Thus, the content to be protected in the present example is statically encrypted, that is, it is encrypted and stored at an IP 12 or provided on a physically distributed memory medium such as a CD even before a customer 14 has decided to unlock and, if necessary, download or purchase the content. A method of dynamically encrypting the content in accordance with another aspect of the present invention is described in connection with FIG. 9.
  • [0023]
    The purchase transaction supported by the DES is illustrated in FIG. 4. With reference to block 36 in FIG. 4, the customer 14 computer lists files retrievable from a CD in a CD drive connected thereto, or from a local hard drive, or from a remote website database 26 via an interne browser. The customer 14 computer generates a screen 30 (FIG. 5) which lists files that can be “opened” in a dialogue box 32 in a conventional manner using application software and/or the OS. If selected from the box 32, the embedded executable of a purchasable item preferably interprets the selection of the “open” button 34 as a request for a preview display screen 50, as shown in FIG. 6, which is optionally provided by the executable when the purchasable item is encrypted.
  • [0024]
    As indicated by the communication paths 52 and 54 illustrated in FIG. 1, the customer browses secure content and downloads the same into a local memory device (blocks 36 and 38 of FIG. 4). The downloaded files are each preferably provided with an embedded executable in accordance with the present invention. When a customer 14 selects the “open” button 34 (FIG. 5), or selects a “Purchase” button 56 on the “Preview” screen 50 in the currently-executing software application, and the file to be opened is identified as being purchasable, special handlers in the embedded executable annunciate user interface elements and initialize operations to be performed on the read and write functions. For example, a “Purchase Item” screen 58, as indicated in FIG. 7, is generated by the executable on the customer computer.
  • [0025]
    With continued reference to FIGS. 1 and 4, the executable provided with the downloaded secure content provides means for the customer computer to commence unlocking or decrypting the secure content in accordance with the present invention. The executable is represented by the reference numeral 57 for illustrative purposes. In accordance with the present invention, the executable 57 is not made available to the customer 14 computer until after downloading, as represented by the data path 54.
  • [0026]
    As illustrated by the data path 55 in FIG. 1 and the block 40 in FIG. 4, the executable 57 now commences decrypting of the secured content. As shown in FIG. 7, the customer 14 has the options 62, 64 and 66, respectively, of contacting the fulfillment center to purchase the selected content via a telephone transaction with an operator at a fulfillment center order desk 68 (FIG. 1), of transmitting a facsimile purchase order using a modem, or conducting an internet commerce transaction (e.g., as described below in connection with FIG. 9. The dialogue box in FIG. 7 provides a product code 60 for identifying the selected secured content to a fulfillment center, as indicated by the data path 61 in FIG. 1. The product code can be spoken to an operator at the order desk 68 during a telephone transaction, or transmitted via a facsimile modem or via the interne. The customer provides additional data such as a credit card information for payment and customer name (block 42 of FIG. 4).
  • [0027]
    With reference to blocks 44, 46 and 48 in FIG. 4, an order desk operator can enter the product code 60 on an IP computer. A release code screen 70 (FIG. 8) can be generated for display on the order desk computer to indicate the release code once a release code has been located in the key database 28 which corresponds to the product code. Upon verification of valid credit card payment with a bank 72 via a commerce server 74, the order desk computer retrieves the release code 69, as indicated at 65, and provides the release code to the customer, as indicated at 63. The customer computer can then use the release code corresponding to the product code to unlock the protected file so that the purchased content is ready for use. It is to be understood that release codes, as well as product codes, can be transmitted between the customer 14 and the IP 12 verbally via a telephone call, or by transmission via the interne or facsimile
  • Server-Based Technology for Commerce-Enabling a Website
  • [0028]
    In accordance with another aspect of the present invention, the DDS 10 uses server-based technology to implement internet commerce at an IP website. As shown in FIG. 9, a customer 14 uses an internet browser 56 to access an IP website via a Web server 16. The IP allows the customer to initiate queries on the server data repository and search for content. The customer then selects content that is of interest. The IP can bundle various mixed digital media content (e.g., images, audio, video, software) into a customized package. The portions of the package are encrypted with a unique cryptographic key(s). A unique package identifier (or “serial number”) is created and stored in a transaction database, along with the unique cryptographic key(s). Alternatively, the identifiers and keys may be generated prior the to packaging process, as long as they have not been used by another package. The package may contain previews of digital content and/or trial versions of software applications that are not encrypted. As described above, a software application (e.g., an embedded executable) that manages the package is added to the package contents and is configured so that the customer can execute the application on their computer after they have downloaded the package. The management application allows the user to access any preview and trial content, and handles the enablement process. As stated above, the present invention is advantageous because no pre-installed fulfillment software is required on the customer's computer.
  • [0029]
    In accordance with the present invention, the web server 16 preferably comprises a number of application-specific programs (ASPs) for implementing an encryption server 84, ASPs for controlling an order desk 86, and ASPs 88 for electronic commerce (EC) server functions. The customer downloads the package as a single file or data stream. The customer can view any preview content included in the package. After review of secure content previews 79 using preview pages 80, the customer 14 can select purchasable items via Shopping Basket pages 82. When the customer initiates the fulfillment process, a product code is created that contains the unique package identifier (serial number), and a hardware identifier that is unique to the hardware of the customer's computer. The product code is sent to the fulfillment server. The product codes for the requested purchasable items are provided to the encryption server 84.
  • [0030]
    As stated previously, the encryption server retrieves the selected purchasable items from a data repository 90 wherein the data is not necessarily encrypted in any way. The retrieved purchasable items are encrypted on-the-fly by the encryption module 88 by preferably using machine-dependent release codes. The key is then stored in the database 28 via a SQL server 92. The requested, encrypted files are then provided to the server 16 for downloading to the customer 14. The customer may then go through a commerce transaction to purchase the package, or a component thereof. After viewing the encrypted files via Shopping Basket pages, the customer can enter an EC order page 94. EC server ASPs are provided to obtain the corresponding key or release code from the key database 28 and any available customer data from a customer database 96 via the SQL server 92. The server locates the package identifier and keys in the database. The EC server ASPs 88 also perform transactional services such as a credit card transaction to pay for the requested, encrypted item. The server constructs a unique release code based on the information in the product code and the package keys, and sends it to the customer. Once payment is verified, the IP Website sends the release code to the customer to unlock the desired content. The customer enters the release code into the management application. The content is decrypted to the customer's computer. The customer may repeat the fulfillment process for another component in the package if more that one component exists.
  • [0031]
    Thus, the product code is generated on a customer's computer and contains a secured unique hardware identifier for that customer's computer. It is preferably not generated on the server when the product is encrypted and does not identify the product. A separate unique identifier is preferably used for that purpose. In addition, the release code is not generated on the server when the product is dynamically encrypted and sent to the customer, but rather it is generated on the server after the customer has downloaded the product and has sent the product code to the server. This may occur at a later time when they request the product to be enabled. The customer hardware identifier from the product code is required to generate the release code, thereby linking the release code to that particular customer's computer.
  • Universal Data Distribution Infrastructure
  • [0032]
    In accordance with the present invention and with reference to FIG. 10, a system for dissemination of data is provided which combines a number of disparate system components into a reliable, secure and scalable system to meet the needs of data consumers 12 and IPs 14. The system employs industry standard technologies, systems and development requirements, which generally behave as disparate systems, and Requesters, in accordance with the present invention to facilitate the inter-operation of a disparate systems to allow them to behave as a cohesive, single entity. Requesters are described in U.S. Pat. No. 5,809,145 which is incorporated by reference herein. Using object-oriented kernel programming, a requester architecture is provided to operate as a high speed communication routing system which permits the transfer of data between objects within systems and applications independently of the platform, software and operating system. Thus, the Requester architecture allows for rapid integration of existing technologies into a cohesive virtual network.
  • [0033]
    As shown in FIG. 10, the Requester layers 100 a and 100 b provide a standard way in which to perform high-level communications, bulk delivery and resource exploration, as well as to combine existing and future technologies in a seamless manner. The Requester technology, for example, can be integrated by being built on top of such industry standards as TCP/IP and CORBA.
  • [0034]
    The Requesters in the Requester layers 100 a and 100 b provide three services: messaging, bulk delivery and resource exploration. For messaging, a Requester allows different pieces of software to communicate with each other and can therefore be used extensively throughout an entire system for requests, posting of results and small data transfers. Requester messaging is similar to packet delivery in a network in that messages are routed from one object to others on the same computer or across the interne 102. Bulk delivery operations via Requesters are implemented on top of a messaging architecture to provide managed flows of data based on a connection-oriented mechanism. Requester bulk delivery is efficient because it allows dynamic link profiling, which uses minimum bandwidth while maximizing throughput, automatic bit width selection, failure recovery, compression and advanced flow control. Thus, downloading of large amounts of data is efficient and reliable for the user and easier for an IP since the data can be dumped into a stream or named pipe. Requester resource exploration enables the system to transform a collection of distinct elements into a single entity. Resource exploration permits software to explore what is available using lists, indices and directories, which are automatically generated and updated. Thus, Requester resource exploration significantly reduces maintenance, as well as facilitates the integration of advanced software agents that can dynamically probe large amounts of data in search of specific data entities.
  • [0035]
    In the exemplary system illustrated in FIG. 10, a framework is provided for distributing geographic data. It is to be understood that the framework can be used to distribute any type of data. The Requester layers 100 a and 100 b facilitate communication between data consumers 12, IPs 14 and data managers 15 via an interne or intranet 102. Individual consumers 12 and groups of consumers 104 a and 104 b can access data such as geographic metadata and other data 106 via servers such as an archive server 108 or geographical query server 110.
  • [0036]
    The relationships with consumers 12 is becoming more prevalent since profiles can be built on consumer data preferences as a consumer browses and accesses data. Profiles are an effective means for target marketing through advertisements and special offers. Preferred types of data, purchasing patterns and other information allow companies to identify who their customers are and therefore to more effectively sell their data or create relationships with re-sellers 112 to sell their data. Relationships between sellers and re-sellers for value-added data products based on many suppliers' data, percentages or fixed sums of transactions can be automatically routed by the framework illustrated in FIG. 10 to the correct parties, thereby facilitating supplier/re-seller relationships. The requester layer 100 b, for example, facilitates the routing of financial and other data between transaction servers 114 and financial networks 116.
  • [0037]
    With reference to FIG. 11, client framework 120 can be implemented which standardizes ways in which users communicate with servers over the internet 102. Clients communicating through the Requester layer 100 a to the different standards supported by the framework of the present invention can communicate with all vendor's servers without requiring specialized interface levels to obtain base functionality. Users can therefore point their internet browser to a data supplier's site which automatically loads a Java client link which links the user to the system. A client framework can also be developed to adapt new functionalities implemented on top of the client framework 120. Thus, developers can enhance the client framework to add specialized features and capabilities, to use alternate means of navigation and to embed new technologies. By allowing functions such as a pane to display a web page, data suppliers do not have to learn a completely new way of publishing content since they can place their web site as a metadata value on their archive server 108. For example, by exposing capabilities through an object adapter 122, an embedded Java applet or an ActiveX component can interact with the client to perform functions together to provide a unified user experience.
  • [0038]
    With reference to FIG. 12, server specifications define how servers communicate with each other and with clients through the Requester layers 100 a and 100 b. For example, specifications define how archive servers 108 advertise their presence, how data is labeled, as well as defining metadata requirements, data and metadata access methods, security options, access log formats, object announcement for resource exploration, and persistent wrapping for security in Requester interfaces. Archive server 108 specifications provide guidelines for storing data to be distributed, such as geographic data and metadata. In accordance with the present invention, an archive server specification is provided which sets forth basic functionality, required commands in the manner in which an archive server interacts with the Requester layer 100 and therefore provides information required for a vendor to develop a full-feature archive server based on existing server technologies. In the case of geographic data, many different geospatial data types exist. Specialized archive servers can be created to manage different data types. For example, a spatial data management system 124 such as ESRI SDE can be developed for vector data which runs on top of a database environment 126 to provide full capability vector data support. Raster data has different requirements than vector data and requires a different approach. An archive server 108 can be implemented which supports such capabilities as arbitrary area extraction to better manage raster data.
  • [0039]
    Specifications are also provided for a query server 110 to provide guidelines for query systems for searching of data to be distributed. Query server specifications define basic functionality and commands that must be implemented, how the query server interacts with the requester layer 100, and advanced capabilities, such as automated index generation and resource detection. The specification can be used to create a layer on top of a current search engine to allow the search engine to become a seamless part of a cohesive system. Specifications for query servers can include how query servers advertise their presence, how indexed data can be accessed and discovered automatically, and can provide guidelines for searching data, as well as query initiated methods, list formats and requester interfaces.
  • [0040]
    Similarly, transaction server 114 specifications provide access control systems guidelines by defining basic functionality and commands that must be implemented, as well as defining how a transaction server interacts with a requester layer. Existing transaction servers are easily provided to a system with the addition of a layer such that interfaces with financial networks can be provided by financial transaction servers which is a subset of a transaction server specification. The system illustrated in FIG. 10 preferably uses the SET protocol developed by Visa and MasterCard. Transaction server specifications define how transaction servers advertise their presence, how transaction servers securely retrieve access control information from an archive server and how transaction servers invoke the wrapping of a piece of data and invoke requester interfaces.
  • [0041]
    While certain advantageous embodiments have been chosen to illustrate the invention, it will be understood by those skilled in the art that various changes and modifications can be made therein without departing from the scope of the invention as defined in the appended claims.
Patent Citations
Cited PatentFiling datePublication dateApplicantTitle
US4646234 *29 Feb 198424 Feb 1987Brigham Young UniversityAnti-piracy system using separate storage and alternate execution of selected proprietary and public portions of computer programs
US4713753 *21 Feb 198515 Dec 1987Honeywell Inc.Secure data processing system architecture with format control
US4736423 *31 Jan 19865 Apr 1988International Business Machines CorporationTechnique for reducing RSA Crypto variable storage
US4796220 *15 Dec 19863 Jan 1989Pride Software Development Corp.Method of controlling the copying of software
US4888798 *7 Aug 198619 Dec 1989Oms, Inc.Modular software security
US4897874 *31 Mar 198830 Jan 1990American Telephone And Telegraph Company At&T Bell LaboratoriesMetropolitan area network arrangement for serving virtual data networks
US4926476 *3 Feb 198915 May 1990Motorola, Inc.Method and apparatus for secure execution of untrusted software
US5010571 *10 Sep 198623 Apr 1991Titan Linkabit CorporationMetering retrieval of encrypted data stored in customer data retrieval terminal
US5014234 *25 Aug 19867 May 1991Ncr CorporationSystem with software usage timer and counter for allowing limited use but preventing continued unauthorized use of protected software
US5058162 *9 Aug 199015 Oct 1991Hewlett-Packard CompanyMethod of distributing computer data files
US5123045 *7 Feb 199016 Jun 1992Massachusetts Institute Of TechnologyComprehensive software protection system
US5218638 *5 Dec 19918 Jun 1993Hitachi Ltd.Encipher method and decipher method
US5222134 *9 Apr 199122 Jun 1993Tau Systems CorporationSecure system for activating personal computer software at remote locations
US5247575 *24 Apr 199221 Sep 1993Sprague Peter JInformation distribution system
US5291598 *7 Apr 19921 Mar 1994Gregory GrundyMethod and system for decentralized manufacture of copy-controlled software
US5297206 *7 Oct 199222 Mar 1994Orton Glenn ACryptographic method for communication and electronic signatures
US5319705 *21 Oct 19927 Jun 1994International Business Machines CorporationMethod and system for multimedia access control enablement
US5337357 *27 Jul 19939 Aug 1994Software Security, Inc.Method of software distribution protection
US5341429 *4 Dec 199223 Aug 1994Testdrive CorporationTransformation of ephemeral material
US5369702 *18 Oct 199329 Nov 1994Tecsec IncorporatedDistributed cryptographic object method
US5386369 *12 Jul 199331 Jan 1995Globetrotter Software Inc.License metering system for software applications
US5400403 *16 Aug 199321 Mar 1995Rsa Data Security, Inc.Abuse-resistant object distribution system and method
US5402490 *1 Sep 199228 Mar 1995Motorola, Inc.Process for improving public key authentication
US5410598 *27 Sep 199425 Apr 1995Electronic Publishing Resources, Inc.Database usage metering and protection system and method
US5414772 *23 Jun 19939 May 1995Gemplus DevelopmentSystem for improving the digital signature algorithm
US5416840 *6 Jul 199316 May 1995Phoenix Technologies, Ltd.Software catalog encoding method and system
US5454101 *15 Sep 199226 Sep 1995Universal Firmware Industries, Ltd.Data storage system with set lists which contain elements associated with parents for defining a logical hierarchy and general record pointers identifying specific data sets
US5457746 *19 Dec 199410 Oct 1995Spyrus, Inc.System and method for access control for portable data storage media
US5499295 *31 Aug 199312 Mar 1996Ericsson Inc.Method and apparatus for feature authorization and software copy protection in RF communications devices
US5504814 *24 Jan 19942 Apr 1996Hughes Aircraft CompanyEfficient security kernel for the 80960 extended architecture
US5509070 *15 Dec 199216 Apr 1996Softlock Services Inc.Method for encouraging purchase of executable and non-executable software
US5511122 *3 Jun 199423 Apr 1996The United States Of America As Represented By The Secretary Of The NavyIntermediate network authentication
US5557796 *21 Jan 199417 Sep 1996Digital Equipment Corp.Extensible entity management system including a dispatching kernel and modules which independently interpret and execute commands
US5563946 *25 Apr 19948 Oct 1996International Business Machines CorporationMethod and apparatus for enabling trial period use of software products: method and apparatus for passing encrypted files between data processing systems
US5598470 *25 Apr 199428 Jan 1997International Business Machines CorporationMethod and apparatus for enabling trial period use of software products: Method and apparatus for utilizing a decryption block
US5615264 *8 Jun 199525 Mar 1997Wave Systems Corp.Encrypted data package record for use in remote transaction metered data system
US5634012 *23 Nov 199427 May 1997Xerox CorporationSystem for controlling the distribution and use of digital works having a fee reporting mechanism
US5646992 *23 Sep 19938 Jul 1997Digital Delivery, Inc.Assembly, distribution, and use of digital information
US5671412 *28 Jul 199523 Sep 1997Globetrotter Software, IncorporatedLicense management system for software applications
US5708709 *8 Dec 199513 Jan 1998Sun Microsystems, Inc.System and method for managing try-and-buy usage of application programs
US5734719 *10 Dec 199631 Mar 1998International Business Systems, IncorporatedDigital information accessing, delivery and production system
US5742807 *31 May 199521 Apr 1998Xerox CorporationIndexing system using one-way hash for document service
US5758068 *19 Sep 199526 May 1998International Business Machines CorporationMethod and apparatus for software license management
US5758257 *29 Nov 199426 May 1998Herz; FrederickSystem and method for scheduling broadcast of and access to video programs and other data using customer profiles
US5765152 *13 Oct 19959 Jun 1998Trustees Of Dartmouth CollegeSystem and method for managing copyrighted electronic media
US5809145 *28 Jun 199615 Sep 1998Paradata Systems Inc.System for distributing digital information
US5822428 *7 Mar 199713 Oct 1998Great Notions Corp.Data encryption for product information and access
US5875247 *1 Aug 199523 Feb 1999Fujitsu LimitedSystem for decrypting encrypted software
US5883954 *7 Jun 199516 Mar 1999Digital River, Inc.Self-launching encrypted try before you buy software distribution system
US5883955 *7 Jun 199516 Mar 1999Digital River, Inc.On-line try before you buy software distribution system
US5892900 *30 Aug 19966 Apr 1999Intertrust Technologies Corp.Systems and methods for secure transaction management and electronic rights protection
US5898777 *7 Mar 199627 Apr 1999Portland Software, Inc.Digital product dissemination and sale
US5907617 *14 Jul 199725 May 1999Digital River, Inc.Try before you buy software distribution and marketing system
US5918213 *22 Dec 199529 Jun 1999Mci Communications CorporationSystem and method for automated remote previewing and purchasing of music, video, software, and other multimedia products
US5920868 *3 Jul 19966 Jul 1999Sun Microsystems, Inc.Cataloging apparatus for facilitating the re-use of distributed objects in a distributed object system
US5933620 *28 Mar 19963 Aug 1999Advanced Micro Devices, Inc.Method and apparatus for serializing microprocessor identification numbers
US5956709 *28 Jul 199721 Sep 1999Xue; YanshengDynamic data assembling on internet client side
US5982887 *18 Apr 19969 Nov 1999Casio Computer Co., Ltd.Encrypted program executing apparatus
US5991402 *23 Sep 199723 Nov 1999Aegisoft CorporationMethod and system of dynamic transformation of encrypted material
US5999622 *22 Nov 19957 Dec 1999Microsoft CorporationMethod and apparatus for protecting widely distributed digital information
US6044469 *29 Aug 199728 Mar 2000Preview SoftwareSoftware publisher or distributor configurable software security mechanism
US6088722 *29 Nov 199511 Jul 2000Herz; FrederickSystem and method for scheduling broadcast of and access to video programs and other data using customer profiles
US6212525 *24 Feb 19993 Apr 2001Apple Computer, Inc.Hash-based system and method with primary and secondary hash functions for rapidly identifying the existence and location of an item in a file
US6243692 *22 May 19985 Jun 2001Preview SoftwareSecure electronic software packaging using setup-external unlocking module
US6334214 *3 Apr 199825 Dec 2001Preview SoftwareTry/buy wrapping of installation-ready software for electronic distribution
US6363356 *16 Jul 199826 Mar 2002Preview SoftwareReferrer-based system for try/buy electronic software distribution
US6434532 *12 Mar 199813 Aug 2002Aladdin Knowledge Systems, Ltd.Interactive customer support for computer programs using network connection of user machine
US6442553 *28 Aug 199527 Aug 2002Fujitsu LimitedHash system and hash method for transforming records to be hashed
US6807534 *31 May 200019 Oct 2004Trustees Of Dartmouth CollegeSystem and method for managing copyrighted electronic media
US6898555 *14 Jul 200324 May 2005Aladdin Knowledge Systems Ltd.Method for indicating the integrity of use-information of a computer program
US6915425 *13 Dec 20005 Jul 2005Aladdin Knowledge Systems, Ltd.System for permitting off-line playback of digital content, and for managing content rights
US7047369 *25 Sep 199716 May 2006Aladdin Knowledge Systems Ltd.Software application environment
US7065650 *10 May 200420 Jun 2006Aladdin Knowledge Systems Ltd.Method for indicating the integrity of a collection of digital objects
US7093137 *26 Sep 200015 Aug 2006Casio Computer Co., Ltd.Database management apparatus and encrypting/decrypting system
US7093282 *9 Aug 200115 Aug 2006Hillhouse Robert DMethod for supporting dynamic password
US7130831 *10 Sep 199931 Oct 2006Copyright Clearance Center, Inc.Limited-use browser and security system
US7356847 *22 Apr 20028 Apr 2008Protexis, Inc.System for dynamically encrypting content for secure internet commerce and providing embedded fulfillment software
US7925656 *7 Mar 200812 Apr 2011International Business Machines CorporationNode level hash join for evaluating a query
US20010034658 *31 Jan 200125 Oct 2001Silva Juliana FreireApplications of executable shopping lists
US20010042045 *21 Dec 200015 Nov 2001Howard Christopher J.Limited-use browser and security system
US20020087500 *18 Aug 19984 Jul 2002Brian T. BerkowitzIn-memory database system
US20020136407 *16 Nov 200126 Sep 2002Denning Dorothy E.System and method for delivering encrypted information in a communication network using location identity and key tables
US20020174355 *11 Mar 200221 Nov 2002Arcot Systems, Inc.Techniques for searching encrypted files
US20050229012 *10 Jun 200513 Oct 2005Microsoft CorporationIdentifying and coalescing identical objects encrypted with different keys
US20120323792 *30 Apr 201220 Dec 2012Digital Delivery Networks, Inc.Multi platform and operating system digital content vending, delivery, and maintenance system
Referenced by
Citing PatentFiling datePublication dateApplicantTitle
US8478973 *30 May 20082 Jul 2013Infineon Technologies AgSystem and method for providing a secure application fragmentation environment
US864527721 May 20104 Feb 2014Media Patents, S.L.Process for the on-line sale of a software product
US864527821 May 20104 Feb 2014Media Patents, S.L.Process for the on-line sale of a software product
US20090260003 *7 Apr 200915 Oct 2009Canon Kabushiki KaishaApplication packaging device and method for controlling the same
US20090300366 *30 May 20083 Dec 2009Markus GuellerSystem and Method for Providing a Secure Application Fragmentation Environment
US20100235263 *21 May 201016 Sep 2010Media Patents, S.L.Process for implementing a method for the on-line sale of software product use licenses through a data network, and software component which allows carrying out said process
US20100235264 *21 May 201016 Sep 2010Media Patents, S.L.Process for the on-line sale of a software product
US20110060689 *17 Sep 201010 Mar 2011Media Patents, S.L.Process for implementing a method for the on-line sale of software products and the activation of use licenses through a data network
US20110078044 *3 Dec 201031 Mar 2011Media Patents, S.L.Process for implementing a method for the on-line sale of software product use licenses through a data network, and software component which allows carrying out said process
US20120173735 *26 Dec 20115 Jul 2012Robert Bosch GmbhRadio Tool and Method for the Operation Thereof
Classifications
U.S. Classification705/59, 713/150
International ClassificationH04L9/00, G06F21/00, G06F1/00, H04L29/06, H04L9/28, G06Q30/00
Cooperative ClassificationG06F21/10, G06F2221/0704, H04L69/04, G06F2211/007
European ClassificationH04L29/06C5, G06F21/10
Legal Events
DateCodeEventDescription
19 Aug 2014ASAssignment
Owner name: ARVATO DIGITAL SERVICES LLC, CALIFORNIA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ARVATO DIGITAL SERVICES CANADA, INC.;REEL/FRAME:033563/0241
Effective date: 20140811