Content Server Encryption Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional content servers facilitate easy copying and distribution of proprietary content, failing to protect the economic interests of creators and distributors by allowing users to retain content after rental or borrowing, leading to unauthorized use.
Innovation Solution
A content server system that stores content in a protected format with associated keys, ensuring that the content remains encrypted and inaccessible without the decryption keys, and verifies ownership through a registration database or physical medium validation to ensure secure distribution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If content is stored in unprotected format for easy access, then user convenience is improved, but content security and anti-copying protection deteriorates
Solution Approach 1:
The content is segmented into two separate components: encrypted content data and decryption keys. The content is stored in an encrypted state on the mass storage device, while the decryption keys are stored separately in a safeguarded format. This segmentation ensures that even if content is accessible, it cannot be used without the corresponding keys, thus maintaining both user convenience and content security.
Solution Approach 2:
An encryption/decryption mechanism serves as an intermediary between the stored content and the user. The content remains encrypted during storage and is only decrypted temporarily during authorized playback. This intermediary layer prevents direct access to unprotected content while allowing legitimate users to access content through the controlled decryption process.
2Ease of operation
If content is decrypted and stored for permanent access, then user accessibility is improved, but unauthorized distribution and rent-and-rip capability worsens
Solution Approach 1:
The system performs preliminary encryption of content before storage and preliminary protection of keys in a safeguarded format. This preliminary action ensures that content is never stored in an easily copyable state. The encryption is performed in advance, and the keys are protected beforehand, preventing any subsequent unauthorized copying or distribution.
Solution Approach 2:
The system implements a temporary decryption approach where content is decrypted only when needed for authorized playback and then effectively discarded from memory. The decryption keys are recovered from their safeguarded storage only when verification of ownership or rental rights is performed. This cycle of temporary decryption and recovery prevents permanent storage of unprotected content that could be distributed unauthorizedly.
3Ease of operation
If decryption keys are stored with content for convenient playback, then playback convenience is improved, but key theft and content extraction worsens
Solution Approach 1:
The system segments the storage location and protection level of content and keys. Content is stored in encrypted form in standard mass storage, while keys are stored separately in a safeguarded format with restricted access. This segmentation allows convenient playback through controlled key retrieval while preventing key theft and content extraction by ensuring keys cannot be easily accessed or copied.
Solution Approach 2:
The safeguarded storage format acts as an intermediary layer between the content and the keys. Instead of storing keys directly with content, the system uses this intermediary safeguarded format that requires verification procedures for key access. This mediator maintains protection reliability while still enabling convenient authorized playback through the controlled key release mechanism.
Data Source
AI summary
A method of storing content, in accordance with one embodiment of the present invention, includes receiving an item of content in a protected format and a key corresponding to the item of content. The item of content in its protected format may be stored on a mass storage device. The key may also be stored in a safeguarded format on the mass storage device.