Applications for removable storage

[0001] This application claims the priority under 35 U.S.C. 119 (e)(1) of copending U.S. provisional application No. 60/353,940, filed on Jan. 31, 2002 and incorporated herein by reference.

[0002] 1. Technical Field of the Invention

[0003] The present invention relates generally to data transfer and, more specifically, to secure data transfer to a removable storage medium.

[0004] 2. Description of the Related Art

[0005] The world is ever changing with technological advancements designed to improve the quality and efficiency of the way we live. As each era of advancements tends to have a theme, the current age could best be described as the Digital Revolution. Today, each aspect of daily routines seems to be converging into the digital domain. Whether work, entertainment or basic life tasks, everything is slowly being turned into bits and bytes. This transformation has put huge demands on being able to store and transport this information.

[0006] Solid-state memory in the form of flash memory, for example, has recently become the storage of choice in a variety of mobile and handheld devices, notably information equipment and consumer electronics products. Unlike RAM which is also solid-state memory, flash memory is non-volatile which retains its stored data even after power is turned off. In spite of the high cost, flash memory is increasingly being used in mass storage applications where information is stored semi-permanently in file format. Conventional mass storage, based on rotating magnetic media such as hard drives and floppy disks, is unsuitable for the mobile and handheld environments because disk drives tend to be bulky, are prone to mechanical failure and have high power requirements. These undesirable attributes make disk based storage impractical in most mobile and portable applications.

[0007] While a variety of removable mediums exist today for storing video and audio data, such as removable rigid magnetic drives, removable flexible magnetic drives, CD RW, DVD-R, RW, RW, RAM, ROM, Flash of all kinds, Magneto Optical, HDD, and Magnetic Tape of all kinds, each may have different encryption for the data stored and generally all stored data is encrypted.

[0008] For example, the DVD forum utilizes a special encryption key that is required to decrypt the data, however, this key is in the form of logic gates that are embedded into the end device doing the decryption. Further, this type of security scheme does not enable selective security based on the kind of disc used or that enables the tracking of which write drive wrote the data to the storage medium based on embedded security information.

[0009] Though encryption techniques are known to provide some measure of security for removable storage devices, current methods have failed to provide a means for adequate security of protected material (e.g. copyrighted movies and music) while enabling the end user to use the same storage device for unsecure/unencrypted information (example: purchased movies verse home movies) without jeopardizing the secure data. In this arena, an improved approach will add security and provide flexibility for the end user.

[0010] Therefore, it would be advantageous to provide improved security for downloading of data (e.g. video, music and etc.) to a removable storage medium in a secure way while providing the flexibility of using the same storage device for unsecure data.

[0011] The present invention achieves technical advantages a method, apparatus and system for selectively securing data to a removable storage medium. A convey device having an identifier and operable to read an identifier from the removable storage medium and further operable to encrypt the data and write the encrypted data and a passkey to the removable storage medium. The passkey includes the convey device identifier, removable storage medium identifier, and a content code which corresponds to the data. An access device having in input adapted to receive the removable storage medium and operable to read the removable storage medium identifier and passkey. The access device is further operable to decrypt the encrypted data in response to an encryption code. The encryption code can be received from a server in which the server has and input adapted to communicate with the convey device and the access device and is operable to correlate the convey device identifier, removable storage medium identifier, and the content code. The server is further operable to issue the encryption code to the access device.

[0012] For a more complete understanding of the present invention, reference is made to the following detailed description taken in conjunction with the accompanying drawings wherein:

[0013] FIG. 1 illustrates a secure system for data storage in accordance with an exemplary embodiment of the present invention;

[0014] FIG. 2 illustrates a download station in accordance with an exemplary embodiment of the present invention; and

[0015] FIG. 3 illustrates a playstation in accordance with an exemplary embodiment of the present invention.

[0016] The numerous innovative teachings of the present application will be described with particular reference to the presently preferred exemplary embodiments. However, it should be understood that this class of embodiments provides only a few examples of the many advantageous uses and innovative teachings herein. In general, statements made in the specification of the present application do not necessarily delimit any of the various claimed inventions. Moreover, some statements may apply to some inventive features, but not to others.

[0017] Throughout the drawings, it is noted that the same reference numerals or letters will be used to designate like or equivalent elements having the same function. A detailed description of known functions and constructions unnecessarily obscuring the subject matter of the present invention have been omitted for clarity.

[0018] Referring now to FIG. 1 there is illustrated a secure system for data storage in accordance with an exemplary embodiment of the present invention. The system includes a download station 11 adapted to encrypt data, decrypt data, generate passkeys, communicate with other devices, and transfer data to a removable storage device, such as a disc 15. The transferred data can be video and audio such as that found in movies and music, video games, or other programmed data, for example. Each disc 15 is adapted to include an unique identification number (ID) which is stored and encrypted on the disc 15. The ID is also stored in a remote storage device, such as a server 13 which is adapted to be accessed through a telephone connection 19 or some form of net connection. The disc 15 is insertable into the download station 11 where the disc 15 ID is verified by the download station 11 through communication with the server 13. The download station 11 also communicates with the server 13 to notify it of data selected to be programmed to the disc 15 in which the server 13 correlates this data with the download station ID. The download station 11 can also verify the type of disc (i.e. movie disc, audio disc, multi-storage disc, etc.). After the disc 15 is verified, the download station 11 encrypts the selected data and transfers it to the disc 15 along with a passkey generated by the download station 11. The passkey is a combination of a unique ID assigned to the download station, the disc's ID, and a password for correlating to the transferred data.

[0019] For access to the transferred data, the disc 15 is introduced to a playstation 17. The playstation 17 is adapted to decrypt the passkey to determine the ID of the download station, the ID of the disc containing the data, and the password. The playstation 17 is further adapted to compare the disc ID determined from the passkey and the ID encrypted on the disc itself (to protect against a pirated disc). The playstation 17 is further adapted to communicate with the server 13 to verify that the download station 11 is valid and did indeed program the disc 15 with the selected data identified by the password. Communication can be through a telephone connection 19 or some form of net connection. With verification complete, the playstation then authorized access to the identified data. Additionally, unsecure or un-encrypted data can be downloaded to the disc 15 for access by the playstation without the need for verification with a download station ID, disc ID or a passkey.

[0020] Referring now to FIG. 2 there is illustrated a download station 11 in accordance with an exemplary embodiment of the present invention. The download station 11 includes a digital signal processor (DSP) 24 with a unique ID, memory 22 and drive electronics 26. The DSP ID is a unique 64 bit ID. The DSP 24 is adapted to collect the encrypted disc ID and decrypt it. The DSP is also adapted to connect with the server 13 to compare the disc ID to a list of known manufactured disc IDs stored on the server 13 to verify a valid disc (i.e. not a pirated copy). Further, the DSP is adapted to determine the type of disc (i.e. Movie disc, Audio disc, standard disc, etc.). Data to be transferred to the disc 15 is stored in the download station memory 22. In this embodiment, the memory 22 is flash memory. In addition, the memory 22 can be included within the download station 11 or located remotely to the download station 11. For transfer of data to the disc 15, the DSP 24 collects the data from the memory 22, encrypts the data, generates a passkey for the data (via the passkey generator 28), and notifies the drive electronics 26 to transfer the encrypted data and passkey to the disc 15 in which the drive electronics 26 is adapted to transfer the data. The passkey is a combination of the DSP ID, the disc ID and a password for access to the data.

[0021] In another embodiment, the DSP 24 collects the data to be transferred from a remote storage device. For example, the DSP 24 can collect the data over the telephone connection 19 from memory associated with the server 13.

[0022] Referring now to FIG. 3 there is illustrated a playstation 17 in accordance with an exemplary embodiment of the present invention. The playstation 17 includes a DSP 32 and drive electronics 34 for communicating with the disc 15. The drive electronics 34 is adapted to read from the disc 15 to obtain the passkey and the disc ID. The DSP 32 is adapted to collect and decrypt the passkey to reveal the DSP ID of the programming download station 11, the disc ID of the disc that was programmed by the programming download station 11, and the password for access to the data. The DSP 32 is further adapted to verify that the disc ID of the disc that was programmed by the programming download station 11 matches the disc ID of the disc introduced to the playstation 17. Also, the DSP 32 is adapted to verify, through communication with the server 13, that the download station ID is valid and did indeed program the disc 15 with the data identified by the password. Following a positive verification, the DSP 32 decrypts the data and makes the data available to the drive electronics 34 for user access. The encryption/decryption technique of the DSP 22, 32 can be selectively updated to further frustrate pirating efforts. For example, the encryption technique can be updated once a day for each download station through communications with the server 13.

[0023] All 4 forms of media (ROM/WORM/RW/HYBRID) can have uses in embodiments of the present invention. For example in a video application and, more specifically in a movie rental application, a removable storage disc can be purchased at the entrance of a video store which allows for movie downloads. For example, 100 GB of data on a 120 mm disc can hold between 5 and 10 movies depending on the compression and resolution. The download station 11 can enable searching the memory 22 for available video and viewing of short previews. For executing a download, the station 11 bursts a movie to the disc in any format desired (NTSC/HDTV or both). A client then pays for the movie rental and heads home for viewing on a playstation 17 (i.e. digital VCR). After watching the video at home, the playstation 17 can selectively disable the movie either after so many viewings or after so much time has elapsed, for example.

[0024] To secure the IP stored on the disc, the following exemplary security implementation can be used:

[0025] STEP 1: The download station 11 verifies and identifies the disc 15 (which is encrypted with a unique ID). The download station DSP 24 (which has a unique 64 bit ID) collects the encrypted unique disc ID and decrypts it. The DSP 24 then connects to the server 13 to comparing the disc ID to a list of known manufactured IDs to verify it is a valid disc (i.e. not a pirated copy). The DSP 24 also determines what kind of disc it is (i.e. Movie disc, Audio Disc, Standard Disc or etc).

[0026] STEP 2: Authorization is given to write the movie to the disc. The DSP 24 signals the drive electronics 26 that everything is verified with the disc 15 and authorization to copy the movie to the disc 15 is given.

[0027] STEP 3: The movie is written to the disc 15. The encrypted information to be written to the disc 15 is sent to the drive 26 to be written to the disc 15. Also written to the disc 15 is a passkey which is made up of a combination of the DSP ID, the disc ID and a password for the movie.

[0028] STEP 4: The disc 15 is taken home by the client and inserted into their playstation 17 (i.e. DVCR).

[0029] STEP 5: The client enables play to watch the video. The playstation DSP 32 then decrypts the passkey revealing the DSP ID of the station that programmed the movie, the ID of the disc that it was stored on and the password for the movie. If the disc ID from this passkey matches the ID seen on the disc itself (again making sure the disc isn't pirated), then the DSP 32 verifies from the server 13 that the download station 11 is valid and did indeed program this disc with the movie identified by the password. The DSP 32 authorizes the drive electronics 34 to begin reading the movie and decrypts the movie in real time for viewing on a viewing monitor. The encryption/decryption technique on the DSP 32 can be updated as often as necessary via the phone connection. Since this code is relatively small, it would be easy to update with the b/w of the phone line. This would further frustrate pirating efforts.

[0030] Should anyone try to pirate the content they would need to decipher the encryption scheme, produce their own disc with a pirated unique identifier, pirate the unique identifier in the DSP, produce their own DSP with the encryption algorithm and repeat this for each encryption algorithm updated. The added verification between the writing download station and the Digital VCR would also frustrate pirating. If someone does however, successfully copy the IP, then of the recorded information on the disc will enable the tracing and prosecuting of the violators.

[0031] In at least one embodiment the disc 15 is pre-recorded with the encrypted movie, encryption algorithm for the DSP 24, the passkey and everything required to play on the Digital VCR. Thus, the client's experience is very similar to today.

[0032] In another embodiment, the disc 15 is pre-recorded with the encrypted movie only. The movie disc 15 is then inserted into a download station 11 in which the DSP 24 in cooperation with the drive compares the unique ID on the disc 15 to ensure it is a valid disc. The DSP 24 then verifies via the server 13 that the movie on the disc is correct. If it is, then the unique ID of the disc 15 is combined with the unique ID of the DSP 24 and the password for the movie. This passkey is then written to the disc 15 along with the encryption code.

[0033] The server 13 then records that this movie is permanently aligned with this particular disc. If anyone else with a disc that has the same unique ID tries to do anything other than play that movie, then it is marked as a pirate copy. The client is then charged for the movie.

[0034] Upon placing the disc 15 in the player 17 at home, the DSP 32 verifies that the disc ID is valid and what kind of disc it is. The server 13 indicates that this disc 15 should have a certain movie on it. The DSP 32 decrypts the passkey to verify the disc ID's match, the right DSP ID wrote the passkey, and that the right movie is stored on the disc. If everything matches, then it proceeds to load the encryption code into the DSP 32. After the encryption code is loaded into the DSP 32, it begins to play the movie.

[0035] In another embodiment, inventory of movies are eliminated. The download station 11, as in the movie rental example, is implemented instead. The big difference would be that the client selects off the shelf only the jewell case for the movie. They would take this to the cashier, who would insert a blank disc into the drive and scan the case. Scanning the case enables the drive to follow the standard procedure for writing the movie indicated by the data from the scan. The client would pay for the movie and proceed as normal.

[0036] Due to the permanent nature of the desired movie on the disc 15, it is necessary to store the encryption technique on the disc 15 as this is the most convenient way to manage the updates to the encryption technology.

[0037] The combination of download station ID (i.e. DSP ID), disc ID and passkey (i.e. content key) provides increased security for storage of data that is also trackable to the very download station that programmed the content. Further, disc categorization enables unencrypted use of the drive technology for non-secure data. Disc categorization is simply identifying either a disc or a layer on a disc as either a movie disc, an audio disc, a data disc, a personal disc, or etc. In this way the system could easily identify a home movie (i.e. a personal disc) verses a store bought movie that could contain intellectual property.

[0038] Although a preferred embodiment of the method and system of the present invention has been illustrated in the accompanied drawings and described in the foregoing Detailed Description, it is understood that the invention is not limited to the embodiments disclosed, but is capable of numerous rearrangements, modifications, and substitutions without departing from the spirit of the invention as set forth and defined by the following claims.