`Racz et al.
`
`(10) Patent No.:
`(45) Date of Patent:
`
`US 8,1 18,221 B2
`*Feb. 21, 2012
`
`US008118221B2
`
`(54) DATA STORAGE AND ACCESS SYSTEMS
`
`5,226,145 A
`5,367,150 A
`
`5740676” A
`5,457,746 A
`5,532,466 A
`5,588,146 A
`5,677,953 A
`5,703,951 A
`5,740,369 A
`
`5744787 A
`
`7/1993 Moronaga et al.
`11/1994 Kitta et al.
`
`4/i995 Akhieiuzzaman ei 31'
`10/1995 Dolphin
`7/1996 Konno et al.
`12/1996 Leroux
`10/1997 Dolphin
`12/1997 Dolphin
`4/1998 Yokozawa et al.
`
`4/1998 Teicher
`(Continued)
`
`FOREIGN PATENT DOCUMENTS
`
`EP
`
`0 195 098
`
`10/1990
`(Continued)
`
`Primary Examiner — Thien M Le
`74 A
`A
`F' — K1
`' k T
`étogktggoiig’
`gem’ or Wm
`1 pamc
`Ownsen
`
`d &
`
`(75)
`
`Inventors: Patrick Racz, Saint Heller (JE);
`H
`d H 1 t Am t d
`°““°“'ar
`“ 5 =
`5 er am(
`
`.
`(73) Assignee: Smartflash Technologies Limited,
`Wickhains’ Cay (VG)
`
`NL
`
`)
`
`( * ) Notice:
`
`Subject to any disclaimer, the term of this
`patent is extended or adjusted under 35
`U.S.C. 154(b) by 0 days.
`.
`.
`.
`.
`.
`This patent is subject to a terminal dis-
`Claimer.
`
`(21) App1.No.: 12/943,872
`
`(22)
`
`Filed:
`
`Nov. 10, 2010
`
`(65)
`
`Prior Publication Data
`US 2011/0066525 A1
`Mar. 17,2011
`
`Related U.S. Application Data
`
`(57)
`
`ABSTRACT
`
`(63) Continuation of appiicaiioii N0: i2/0i4>558= flied on
`Jan: ‘is’ 2008’ new ‘Pat; No: 7’942=3i7= which is a
`continuation of application No. 11/336,758, filed on
`Jan’ 19’ 2006’ now Pat’ NO’ 7’334’720’ which is a
`continuation of application No. 10/111,716, filed as
`application No. PCT/GB00/04110 on Oct. 25, 2000,
`now abandoned.
`
`(51)
`
`Int CL
`(200601)
`G06K 5/00
`(52) U.S. Cl.
`...................................... .. 235/380; 235/3 82
`(58) Field of Classification Search ................ .. 235/380,
`235/382, 492, 451; 711/100, 101, 103
`See application file for Complete Search history.
`
`(56)
`
`References Cited
`
`U.S. PATENT DOCUMENTS
`
`4,341,951 A
`4,697,073 A
`
`7/1982 Benton
`9/1987 Hara
`
`Data storage and access systems enable downloading and
`paying for data such as audio and video data, text, software,
`games and other types of data A portable data Carrier has an
`interface for sendin and receivin data data memo
`for
`Storm received Cfmem data End
`£1 mem Validrztion
`g
`.
`.
`’
`.
`. P y
`memory for providing payment validation data to an external
`.
`.
`device. The carrier may also store a record of access made to
`the stored content, and content use rules for controlling access
`to the stored content. Embodiments store further access con-
`H01 data and Sapplememary data Such as hot hnks to Web 51195
`and/Or adwmsmg data A °°mP1ememarY data a°°eSS Teflnl‘
`nal, data supply computersystem, and data access device are
`also described. The combination of payment data and stored
`content data and use rule data helps reduce the risk of unau-
`thorized access to data such as compressed music and video
`data, especially over the Internet.
`
`33 Claims, 17 Drawing Sheets
`
`
`
`CONTENT
`DISTRIBUTOR
`WAN GATEWAY
`
`SAMSUNG—1 O16
`
`1
`
`SAMSUNG-1016
`
`
`
`6/2004 Weldon et al.
`igggg ggflyrer 81 91‘
`2/2006 Saeki
`5/2006 Yu
`8/2006 McGee etal
`2/2008 Hulstetal
`3/2010 Wise
`5/2011 Racz etal
`,
`9/2003 G
`11/2006 sign etal
`2/2008 Wise
`
`,
`,,,,,,,,,,,,,,,,,, ,,
`
`,
`
`,,,,,,,,,,,,,,,,,, ,,
`
`'
`
`235/380
`
`235/380
`
`US 8,118,221 B2
`Page 2
`
`6,747,930 B1
`233332; E;
`7,000,836 B2
`7’044’362 B2
`7,083,081 B2
`7,334,720 132*
`7,677,446 B2
`7,942,317 132*
`2003/E)168,515 A1
`2006/0249570 A1
`2008/0041938 A1
`
`U.S. PATENT DOCUMENTS
`5,754,654 A
`5/1998 Hiroyaetal.
`517941202 A
`8/1998 K11“
`5,809,241 A
`9/1998 Haneletal.
`518451281 A
`12/1998 B91150“ 9131‘
`518471372 A
`12/1998 K1911
`5389360 A
`3/1999 E11ere131~
`519011330 A
`5/1999 S9“ 9131‘
`5,918,213 A
`0/1999 B01113-1de131~
`519231884 A
`7/1999 Peyret 9131‘
`5,933,498 A
`8/1999 Schnecketal.
`5,936,220 A
`8/1999 Hoshino et al.
`6,012,534 A
`1/2000 13f<_>_gfiI1 9131-
`6,018,720 A
`1/2000 FuJ1m0t0
`6,078,917 A
`6/2000 Paulsen etal.
`6,119,945 A
`9/2000 Muller et al.
`6,142,369 A
`11/2000 Jonstromer
`6,202,056 B1
`3/2001 Nuttall
`6,385,731 B2
`5/2002 Ananda
`6,415,156 B1
`7/2002 Stadelmann
`6,424,975 B1
`7/2002 Walter etal.
`6,442,570 B1
`8/2002 Wu
`6,473,829 B1
`10/2002 Dahman etal.
`6,510,236 B1
`1/2003 Crane etal.
`6,553,413 B1
`4/2003 Leighton etal.
`6,554,192 B2
`4/2003 Tingl
`6,574,643 B2
`6/2003 Walter etal.
`6,658,568 B1
`12/2003 Ginter et a1.
`
`FOREIGN PATENT DOCUMENTS
`
`0713198 A2
`E1’
`0 823 594 A1
`E1’
`0 542 298
`E1’
`0 843 449 A2
`E1’
`0914 001 A1
`E1’
`10-269291 A
`11’
`11-53184 A
`11’
`11-212785 A
`JP
`11-213010 A
`11’
`11-272762 A
`11’
`W0 98/19237 A1
`W0
`98/33343
`W0
`98/37525
`W0
`* cited by examiner
`
`5/1995
`2/ 1998
`4/ 1998
`5/1998
`5/1999
`10/1998
`2/1999
`8/1999
`8/1999
`10/1999
`5/1998
`7/1998
`8/1998
`
`2
`
`
`
`
`
`U.S. PatentU.S. Patent
`
`
`
`Feb. 21, 2012Feb. 21, 2012
`
`
`
`Sheet 1 of 17Sheet 1 of 17
`
`
`
`US 8,118,221 B2US 8,118,221 B2
`
`
`
`
`
`3
`
`
`
`
`
`U.S. PatentU.S. Patent
`
`
`
`Feb. 21, 2012Feb. 21, 2012
`
`
`
`Sheet 2 of 17Sheet 2 of 17
`
`
`
`US 8,118,221 B2US 8,118,221 B2
`
`4
`
`
`
`
`
`U.S. PatentU.S. Patent
`
`
`
`Feb. 21, 2012Feb. 21, 2012
`
`
`
`Sheet 3 of 17Sheet 3 of 17
`
`
`
`US 8,118,221 B2US 8,118,221 B2
`
`5
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 4 of 17
`
`US 8,118,221 B2
`
`
`
`TERMINAL.
`
`ARTIST
`TERMINAL
`
`ARTIST
`TERMINAL
`
`CREATOR
`
`CONTE NT
`
`108
`
`
`CONTENT
`STORED
`108d
`
`PROVIDER
`CONTENT
`
`
`
`CONTENT
`PROVIDER
`
`
`
`
`
`‘Dab
`CONTENT
`PROVIDER
`
`
`
`108a
`
`CONTENT
`PROVIDER
`
`"29
`
`43-»
`sroaeo
`CONTENT
`
`1 103
`
`CONTENT
`pususnerz
`
`"°°‘\
`couvem
`
`108e
`
`CONTENT
`PROVIDER
`
`101
`
`1 14
`
`
`
`COMMUNICATIONS
`NETWORK
`
`GATEWAY
`ssnvea
`
`"5
`comerrr
`ousmnauron
`wm GATEWAY
`
`
`
`wm
`
`1 17
`
`CONTENT
`
`
`ACCESS
`
`TERMINAL
`
`
`
`“B
`
`118
`
`'12”
`
`PUBUSHER
`
`_-
`STORED
`CONTENT
`
`\
`
`‘I00
`
`Fig. 5
`
`CONTENT
`
`
`
`ACCESS
`TERMINAL
`
`6
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 5 of 17
`
`US 8,118,221 B2
`
`1188
`
`CONTENT
`ACCESS
`TERMINAL
`
` Heb CONTENT
`
`ACCESS
`TERMTNAL
`
`BANK
`
`_
`M NT
`§f§1YEME
`
`1223
`
`121a
`
`BANK mm
`
`CONTENT
`ACCESS
`TERWNAL
`
`1186
`
`“Z 122c
`
`BANK
`
`SYSTEM
`121
`
`mm BANK
`
`128
`
`124
`
`WEB SERVER
`CODE STORAGE
`
`CONTENT ACCESS
`WEB SERVER
`
`
`
`
`
`
`
`
`
`CONTENT
`PAYMENT
`DRM
`ACCESS ONTROL
`
`DISTRIBUTION
`PROCESSOR
`PROCESSOR
`PROCESSOR
`
`PROCESSOR
`PA
`ENT
`DRM CODE
`CRM & PAYMEN
`MANAGEMENT
`ACCESS CONTROL
`STORAGE
`OlSTRlB UTION
`CODE STORAG
`
`CODE STORAGE
`CODE STORAGE
`1308
`
`
`
`
`
`
`
`
`
`
` CONTENT
`ACCESS H-
`DRM DATA
`STORE
`
`
`‘:33
`
`136
`
`132::
`
`138
`
`7
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 6 of 17
`
`US 8,118,221 B2
`
`148
`
`146
`
`_
`M°b"8 C°"”"“5
`
`MOBILE comms
`NETWORK GATEWAY
`
`R
`It
`
`HOME PC
`
`142
`
`1443
`
`1 54
`
`1 so
`
`‘
`
`sr=c
`
`1 543
`
`‘55
`
`-
`
`153
`
`RETWULERIJUU
`SERVER
`
`164
`
`DVD
`
`LAN
`
`1 55
`
`68
`
`comem
`ACCESS
`TERMINAL
`
`CONTENT
`
`ACCESS
`TERMINAL
`
`
`166a
`
`166a
`
`170
`
`
`
`CDIDVD PLAYER
`
`
`SFC Fig. 7
`
`8
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 7 of 17
`
`US 8,118,221 B2
`
`
`
`8,2:
`
`we
`
`Saz.:w<o8.2:2:mt
`
`
`
`zoE8m_mm>wemo_>wawo<....m.u:.z_wosmomu<.._mm»z_
`
`2m5>mat.5
`
`
`
`ozcozFz_omé=w.2oa:<Sn.z_<_om2Gzmmtz.
`
`
`0.52200g.3225 2..3,9.....moEmm:z_mEon_5%.wofimmzz.HQzoemv.
`
`
`
`
`mommmooma.Eozmz_2<mooEoz_xmo.s
`
`
`
`
`
`xmmaomm
`
`
`mm;maoommmaommmm;
`moonmmzmomoEmmE,._Em>mOEm2
`
`
`
`
`
`
`
`
`
`mooouo<"EwE_mozéuxm<55
`
`mmifim
`
`88
`
`
`
`
`
`
`
`mace4<>w_E.mmEmwzoomz:.&o
`
`
`
`wooom:a:<m._.zw._.200
`
`
`
`mooomo<n_mm.E.mum:
`
`
`
`mmmzmo$25.00$50
`
`m.9...
`
`
`
`
`
`
`
`uoooEw:wm<z<_2wzmzta:96
`
`mm,
`
`9
`
`
`
`
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 8 of 17
`
`US 8,118,221 B2
`
`SN
`
`
`
`EH28owmopm
`
`Eozmz<2o
`
`ozimoa
`
`SN
`
`fw<§
`
`
`
`Eozmzmommmoomm
`
`N5
`
`SN
`
`SN
`
`8...
`
`u
`
`mz_2_»
`
`AOEZOO
`
`0.60..
`
`wo<uEm...z_
`
`.2zmm.cm
`
`
`
`<._.<o._.Zm_2>¢n_
`
`
`
`<._<ow3<>nm<o
`
`<»<oEm
`
`«:525
`
`55t.2>omasin
`
`
`
`88»zmzmo<z¢2Emzé...
`
`
`
`wooorzmaowmaSEO
`
`wooo25
`
`
`
`
`
`maoom.wmEz>m.:,mEoo
`
`
`
`
`
`xmozcmzmzo_.Eo_z:z2oomemo:
`
`
`
`<55.mmwoo<
`
`
`
`
`
`<._.<n_mm..:mmm:925.52.Empzoo
`
`
`
`3.40omoommmm:
`
`<3522:05&3»
`
`m.mE
`
`
`
`
`
`5.40JOEZOOmmw8<
`
`
`
`
`
`maoo:w.a..,mwzE..mmn_o
`
`Eosmz«:55:.5o>.zoz
`
`<.n<Q0.Qmdd
`
`Eosmz
`
`
`
`zéoomm.Euz§zmn_
`
`10
`
`10
`
`
`
`
`
`
`
`U.S. Patent
`
`2b.eF
`
`102
`
`aehS
`
`f
`
`US 8,118,221 B2
`
`7E05:
`
`
`1mommwoozazéoomm:._mz<s_mma
`
`lamum———
`on5eafl2
`
`«mm8“
`
`am.
`
`mum
`
`Ed
`
`
`
`m._oEzoo><.:mawo<u_mmE.
`
`mo<..Em:z_
`
`Em
`
`
`
`mo<..Em_.z_Em:.53886Ez8mofixmtemum:I3.8mo<&m=.z_Emmooo
`
`moémfiz.8m
`
`
`
`33mooo._oEz8mm:
`
`11
`
`
`
`
`
`mooomm><.E59.28
`
`11
`
`
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 10 of 17
`
`US 8,118,221 B2
`
`Fig1‘Ia
`
`310
`
`SMART FUISH CARD ENSERTED
`INTO CONTENT ACCESS
`TERMINAL CARD INTERFACE
`
`S11
`
`SCHEME OWNER REGISTRATION
`WEB PAGE LOADED ONTO
`CONTENT ACCESS TERMINAL
`
`S12
`USER REGISTRATION DATA
`ENTERED INTO CONTENT ACCESS
`TERMINAL
`
`S13
`USER REGISTRATION DATA
`TRANSMITTED TO SCHEME OWNER '
`
`S14
`PAYMENT REQUEST RECEIVED
`FROM SCHEME OWNER AT
`CONTENT ACCESS TERMINAL
`
`5 15
`
`
`PAYMENT DATA ENTERED INTO
`CONTENT ACCESS TERMINAL AND
`
`
`TRANSMITTED TO SCHEME OWNER
`
`S16
`
`
`CARD VALUE DATA AND CARD
`VALUE ACCESS CODE RECEIVED
`
`
`BY CONTENT ACCESS TERMINAL
`
`FROM SCHEME OWNER
`
`
`
`S17
`CARD REGISTRATION DATA
`RECEIVED FROM SCHEME OWNER
`AND WRITTEN ONTO CARD
`
`S18
`
`
`
`
`VALUE DATA AND ACCESS CODE
`WRITTEN ONTO CARD AND
`OUTPUT T0 USER
`
`S19
`
`CARD AVAILABLE FOR USE
`
`12
`
`12
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 11 of 17
`
`US 8,118,221 B2
`
`Fig.11b
`
`S20
`
`
`
`
`REQUEST FOR CARD
`
`REGISTRATION WEB PAGE
`RECEIVED FROM CONTENT
`
`ACCESS DEVICE
`
`S21
`TRANSMIT CARD REGISTRATION
`WEB PAGE TO CONTENT
`ACCESS DEVICE
`
`S22
`
`
`
`
`
`RECEIVE USER REGISTRATION
`DATA FROM CONTENT ACCESS
`
`
`TERMINAL AND STORE IN ACCESS
`
`
`CONTROL DATA STORE
`
`S23
`TRANSMIT PAYMENT REQUEST TO
`CONTENT ACCESS TERMINAL
`
`S24
`
`RECEIVE PAYMENT DATA FROM
`CONTENT ACCESS TERMINAL
`
`S25
`
`PAYMENT PROCESSOR VERIFIES
`PAYMENT DATA WITH PAYMENT
`SYSTEM
`
`S28
`
`
`
`
`PAYMENT PROCESSOR
`
`TRANSMITS VALUE DATA AND
`VALUE ACCESS CODE TO
`
`
`CONTENT ACCESS TERMINAL
`
`
`
`S27
`
`PAYMENT PROCESSOR UPDATES
`PAYMENT RECORD DATA STORE
`WITH TRANSACTION DATA
`
`S28
`
`
`CARD REGISTRATION DATA
`LOADED FROM ACCESS CONTROL
`
`
`DATA STORE AND TRANSMITTED
`TO CONTENT ACCESS TERMINAL
`
`
`
`
`S29
`
`TRANSACTION COMPLETE
`
`13
`
`13
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 12 of 17
`
`US 8,118,221 B2
`
`S30
`
`INSERT CARD IN CONTENT
`ACCESS TERMINAL
`
`S31
`USER ENTERS PASSWORD INTO
`CONTENT ACCESS TERMINAL
`
`S32
`
`CONTENT ACCESS TERMINAL
`TRANSMITS PASSWORD TO CARD
`FOR VERIFICATION
`
`
`
`-
`
`ACCESS PERMITTED’?
`
`YES
`
`333
`
`$40
`
`LOAD ouruua cam
`DATA mom CARD
`
`S41
`
`LOAD RETAILER DATA FROM
`RETAILER LAN I wAN
`
`535
`
`
`DISPLAY WARNING AND
`INCREMENT TERMINAL ACCESS
`‘ oemeo coum
`
`$35
`READ CARD THRESHOLD AND
`TOTAL CARD ACCESS DENIED
`coum FROM CARD
`
`
`
`ARD coUNT,(cAR
`
`THRESHOLD -3)?
`
`S3,
`3¢§:§-$‘J(GC0NT€W ERASURE
`
`S33
`
`TERMINAL
`COUNT:-TERMINAL
`
`THRESHOLD?
`
`YES
`
`o
`
`342
`
`
`
`ouspuw MENU. RETAILER DATA
`AND OUTLINE CRM DATA on
`CONTENT ACCESS TERMINAL
`
`
`s43
`
`
`
`
`
`INPUT MENU opnou
`(DOWNLOAD CONTENT:
`ADD MONETARY VALUE:
`CHECK! SPEND CRM VALUE:
`WEB SITE LINKS; EXIT)
`
`DOWNLOAD conrram
`
`
`
`
`
`s44
`LoAo SCHEME OWNER comem
`
`
`ACCESS WEB PAGE omo
`
`
`CONTENT ACCESS TERMINAL
`
`
`
`s39
`OUTPUT ACCESS REFUSED
`ggagtif AND AWNT CARD
`
`c
`
`Fig. 12a
`
`14
`
`14
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 13 of 17
`
`US 8,118,221 B2
`
`S45
`
`
`
`CONTENT SEARCH REQUEST
`
`DATA INPUT AND TRANSMITTED
`TO SCHEME OWNER CONTENT
`
`
`DISTRIBUTION PROCESSOR
`
`
`
`
`
`Fig.12b
`
`S46
`CONTENT SEARCH RESULTS
`
`
`RECEIVED FROM CONTENT
`DISTRIBUTION PROCESSOR AND
`
`
`DISPLAYED ON CONTENT ACCESS
`
`TERMINAL
`S47
`CONTENT ITEM SELECTION DATA
`INPUT AND TRANSMII I ED TO
`SCHEME OWNER
`
`
`
`S48
`
`CONTENT COST DATA, CONTENT
`
`
`USE RULES AND PURCHASE
`OPTIONS DATA RECEIVED FROM
`
`SCHEME OWNER
`S49
`PURCHASE OPTION SELECTION
`AND PURCHASE REQUEST INPUT
`OR EXIT TO MENU SELECTED
`
`S50
`CARD VALUE AND CRM DATA
`READ FROM CARD
`
`EXIT
`
`52
`
`No
`
`$’fLZ'é‘;v',“RS,”"‘,3’;-3'°’E"T
`
`$51
`
`emu VALUE SUFFICIENT?
`
`YES
`
`S53
`
`PAYMENT REQUEST
`TRANSMITTED TO CARD
`
`15
`
`15
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 14 of 17
`
`US 8,118,221 B2
`
`S54
`
`
`
`
`
`
`PAYMENT FOR SCHEME OWNER
`RECEIVED FROM CARD BY
`CONTENT ACCESS TERMINAL AND
`FORWAROED TO e~F’AYMENT
`SYSTEM
`
`
`
`
`
`S55
`
`
`
`PAYMENT RECORD DATA
`RECEIVED FROM e-PAYMENT
`
`
`SYSTEM BY CONTENT ACCESS
`TERMINAL AND FORWARDED TO
`
`CARD
`
`S56
`
`F
`
`I9 .120
`
`
`
`
`
`
`PAYMENT RECORD DATA.
`PURCHASE REQUEST AND CARD
`REGTSTRATION DATA
`TRANSMITTED TO SCHEME
`OWNER
`
`
`
`
`
`
`
`S57
`CONTENT AND CONTENT ACCESS
`RULES DOWNLOADED TO CARD
`
`RECEWE CRM DATA FROM
`CONTENT DISTPJBUTION
`PROCESSOR
`
`S58
`
`S59
`
`WRITE AUDIT TRAIL TO CARD
`AND UPDATE CARD C-RM DATA
`
`16
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 15 of 17
`
`US 8,118,221 B2
`
`860
`
`
`
`
`
`CONTENT ACCESS WEB PAGE
`REQUESTED AND TRANSMITTED
`TO CONTENT ACCESS TERMINAL
`
`
`
`S61
`
`
`
`CONTENT SEARCH REQUEST
`RECEWED FROM CONTENT
`ACCESS TERMINAL
`
`
`
`
`S62
`
`
`
`
`
`CONTENT DESTRIBUTION
`PROCESSOR SEARCHES
`CONTENT ACCESS DATA STORE
`AND TRANSMITS SEARCH
`RESULTS TO CONTENT ACCESS
`TERMINAL
`
`
`
`
`
`
`
`F , 1
`
`S63C0NTENT rrsm sELec:‘r:o~
`
`
`RECEIVED FROM CONTENT
`ACCESS TERNHNAL
`
`
`
`
`
`S64
`
`CONTENT ITEM PURCHASE DATA
`RETRIEVED FROM CONTENT
`ACCESS DATA STORE
`
`S65
`CONTENT PURCHASE DATA
`TRANSMSTTED T0 CONTENT
`ACCESS TERMINAL
`
`S66
`
`
`
`
`PAYMENT RECORD DATA.
`
`PURCHASE REQUEST DATA AND
`CARD REGESTRATTON DATA
`
`
`RECEIVED FROM CONTENT
`
`ACCESS TERMENAL
`
`S67
`PAYMENT RECORD DATA
`VALIDATED WITH 6-PAYMENT
`SYSTEM
`
`0
`
`17
`
`17
`
`
`
`U-S- Patent
`
`Feb. 21, 2012
`
`Sheet 16 of 17
`
`US 8,118,221 B2
`
`563
`PAYMENT WSTRIBUTEON DATA
`READ FROM CONTENT ACCESS
`DATA STORE
`
`S69
`PAYMENT DISTRIBUTION
`INSTRUCTION TRANSMH IED TO
`e~PAYM ENT SYSTEM
`
`370
`
`CONTENT ACCESS RULES FOR
`
`PURCHASED LEVEL OF SERVICE,
`CRM DATA AND CONTENT
`PROVIDER JD DATA READ FROM
`
`CONTENT ACCESS DATA STORE
`
`
`
`
`
`S71
`CONTENT ACCESS RULES
`TRANSMITTED TO CONTENT
`ACCESS TERMINAL
`
`S72
`
`
`DRM PROCESSOR TRANSMITS
` Fig. 126:
`TRANSACTION REQUEST AND
`AUTHENTICAHON TO CONTENT
`
`
`PROVIDER
`
`
`
`
`S73
`
`
`CONTENT ACCESS WEB SERVER
`RECENES PROTECTED CONTENT
`
`
`FROM CONTENT PROVIDER AND
`TRANSMITS CONTENT TO
`
`
`CONTENT ACCESS TERMINAL
`
`S74
`PURCHASE DATA AND CONTENT
`ACCESS RECORD WRITTEN TO
`PAYMENT RECORD DATA STORE
`
`s75
`
`
`USING STORED RULES UPDATED
`
`
`CRM DATA WRITTEN To CONTENT
`ACCESS DATA STORE AND
`
`
`TRANSMITTED To CONTENT
`
`ACCESS TEINAL
`
`S76
`
`PROCESS ENDS
`
`18
`
`18
`
`
`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 17 of 17
`
`US 8,118,221 B2
`
`577
`
`CARD INSERTED SNTO PLAYER
`
`S78
`
`USER PASSWORD ENTERED INTO
`PLAYER AND TRANSMHTED TO
`CARD FOR VALIDATION
`CONTENT ACCESS PERMITTED
`
`
`
`S79
`
`
`
`STORED CONTENT INDEX LOADED
`
`FROM CARD AND DISPLAYED WITH
`MENU (ACCESS CONTENT; CHECK
`
`
`VALUE: CHECK CRM; PLAY OPTTONS)
`
`S80
`
`
`
`SELECTION OF CONTENT ITEMS
`FOR ACCESS ENTERED INTO
`PLAYER
`
` S31
` Fig. 13
`
`CONTENT USE STATUS AND
`CONTENT USE RULES LOADED
`
`FROM CARD
`
`
`
`
`
`USE RULES AND USE STATUS
`COMPARED AND DISPLAYED WITH
`CONTENT PLAY MENU
`
`383
`
` cs CONTENT USE
`PERMITTED?
`
`YES
`PLAY
`
`s34
`
`
`
`
`courerrr AND SUPPLEMENTARY
`WRITEIREAD mans
`DATA MADE AVAIUKBLE TO ussa
`PLAY snrrus DATA
`PLAY
`COMPLETE
`
`S85
`
`CONT
`
`S85
`
`UPDATED CONTENT USE DATA
`WRITTEN TO CARD
`
`S86
`
`ORM DATA AND CRM REWARD
`RULES LOADED FROM THE CARD
`AND UPDATED
`
`19
`
`
`
`US 8,118,221 B2
`
`1
`DATA STORAGE AND ACCESS SYSTEMS
`
`CROSS-REFERENCES TO RELATED
`APPLICATIONS
`
`This application is a continuation of U.S. patent applica-
`tion Ser. No. 12/014,558, filed on Jan. 15, 2008, which is a
`continuation of U.S. patent application Ser. No. 11/336,758,
`filed on Jan. 19, 2006, now issued U.S. Pat. No. 7,334,720;
`which is a continuation of U.S. patent application Ser. No.
`10/111,716, filed on Sep. 17, 2002, which application is a
`national stage application under 35 U.S.C. 371, claiming the
`priority of international PCT Application No. GB001041 10,
`filed on Oct. 25, 2000; which claims priority to UK Applica-
`tion No. 9925227.2, filed on Oct. 25, 1999, each ofwhich is
`incorporated by reference in its entirety for all purposes.
`
`BACKGROUND OF THE INVENTION
`
`This invention is generally concerned with data storage and
`access systems. More particularly, it relates to a portable data
`carrier for storing and paying for data and to computer sys-
`tems for providing access to data to be stored. The invention
`also includes corresponding methods and computer pro-
`grams. The invention is particularly useful for managing
`stored audio and video data, but may also be applied to stor-
`age and access of text and software, including games, as well
`as other types of data.
`One problem associated with the increasingly wide use of
`the internet
`is the growing prevalence of so-called data
`pirates. Such pirates obtain data either by unauthorized or
`legitimate means and then make this data available essentially
`world-wide over the intemet without authorization. Data can
`
`be a very valuable commodity, but once it has been published
`on the intemet it is difficult to police access to and use of it by
`internet users who may not even realize that it is pirated. This
`is a particular problem with audio recordings, and, once the
`bandwidth becomes available, is also likely to be evident with
`video.
`
`Over the past three or four years compressed audio sources
`have become increasingly widely available on web pages.
`One widely used audio data compression format is MP3
`(MPEG—Audio Layer 3 of the MPEG1 compression algo-
`rithm), which is an internationally defined standard including
`a definition of compressed audio information such as speech
`or music. It relies on psycho-acoustic properties of human
`hearing to achieve very large data compression factors. It is
`thus feasible to download usefully long passages of music in
`a practically convenient short time. Pirate data suppliers have
`not been slow to realize the potential of this, and many unau-
`thorized websites have sprung up offering popular music,
`including recent releases by world-farnous bands. This has
`caused the recording industry considerable concern and there
`is an urgent need to find a way to address the problem of data
`piracy.
`
`SUMMARY OF THE INVENTION
`
`According to the present invention there is therefore pro-
`vided a method of providing portable data comprising pro-
`viding a portable data storage device comprising downloaded
`data storage means and payment validation means; providing
`a terminal for internet access; coupling the portable data
`storage device to the terminal; reading payment information
`from the payment validation means using the terminal; vali-
`dating the payment information; and downloading data into
`the portable storage device from a data supplier.
`
`2
`
`Another aspect of the invention provides a corresponding
`mobile data retrieval device for retrieving and outputting data
`such as stored music and/or noise from the data storage
`device.
`
`The payment validation means is, for example, means to
`validate payment with an external authority such as a bank or
`building society. The combination of the payment validation
`means with the data storage means allows the access to the
`downloaded data which is to be stored by the data storage
`means, to be made conditional upon checked and validated
`payment being made for the data. Binding the data access and
`payment together allows the legitimate owners of the data to
`make the data available themselves over the intemet without
`
`fear of loss of revenue, thus undermining the position of data
`pirates.
`A further advantage of the system is that it allows users
`under the age of 18 to make internet purchases. Currently
`internet users pay for goods and/or services by credit card.
`Since credit cards carmot legitimately be used by persons
`under the age of 18 (at least in the UK), a significant fraction
`of adventurous intemet users are excluded from e-commerce,
`one of the most significant predicted uses of the internet. In
`one embodiment ofthe invention, however, the payment vali-
`dation means comprises e-cash; that is, the payment valida-
`tion means stores transaction value information on a cash
`
`value oftransactions validatable by the data storage means. In
`simple terms, the data storage means can be a card which is
`charged up to a desired cash value (if necessary limited to a
`maximum value) at a suitable terminal. This might be an
`interne access terminal but could, more simply, be a device to
`accept the data storage card and to receive and count money
`deposited by the user to charge the card, writing update cash
`value information onto the card. More sophisticated ways of
`updating the cash value on the card are also possible, such as
`direct bank transfer. Since, with this type of embodiment, the
`data storage means is, essentially, precharged with cash rather
`than acting as a credit card, it can be used by young people
`without the risk of their incurring large debts.
`In one embodiment the data storage means is powered by
`the retrieval device when it is connected to the device and
`
`retains a memory of the downloaded data when it is unpow-
`ered. This can be achieved by the use of Flash RAM or, more
`generally, any form of programmable read-only memory.
`Alternatively the data storage means may incorporate a
`rechargeable cell or capacitor and store information in battery
`backed-up static RAM.
`The downloaded data may be entered into the data storage
`device by means of an interface such as a magnetically or
`capacitatively coupled connection or an optical connection,
`but preferably the interface comprises contacts for direct elec-
`trical connection to the storage means. The payment valida-
`tion means may likewise have one of a variety of interfaces
`but again preferably comprises a set of electrical contacts.
`The payment validation means could, however, comprise a
`magnetic or holographic data-strip such as is known for use
`with credit cards and phone cards. The interface to receive the
`downloaded data may be separate from the interface to the
`payment validation means, to facilitate separate and simulta-
`neous access to both these systems. In other embodiments a
`single interface may serve for both data storage and payment.
`Advantageously the payment validation means includes
`memory storing information to identify the person who is
`paying for the downloaded data.
`For additional security the downloaded data may be
`encrypted. In this case data decryption may be necessary at
`some stage, either in the data storage means or in the retrieval
`device or in an information delivering apparatus such as a data
`
`10
`
`15
`
`20
`
`25
`
`30
`
`35
`
`40
`
`45
`
`50
`
`55
`
`60
`
`65
`
`20
`
`20
`
`
`
`US 8,118,221 B2
`
`3
`access terminal Alternatively the data decryption function can
`be shared amongst one or more of these devices. The skilled
`person will be aware of a range of suitable encryption/decryp-
`tion techniques, including Pretty Good Privacy (Registered
`Trade Mark) and PKI (Public Key Infrastructure). Normally,
`when the downloaded data is encrypted, a decryption key
`must be supplied. This can be generated automatically by the
`data access terminal or data access service provider or it can
`be entered by the user into the data access terminal or into the
`mobile data retrieval device.
`
`The data storage means and/or the retrieval device can be
`provided with access control means to prevent unauthorized
`access to the downloaded data. Additionally or alternatively,
`use control means can be provided to stop or provide only
`limited access of the user to the downloaded data in accor-
`
`dance with the amount paid. These access and use control
`functions may in some embodiments be combined, permitted
`use controlling access or permitted access controlling use.
`Thus, for example, a complete set of data information relating
`to a particular topic, a particular music track, or a particular
`software package might be downloaded, although access to
`part ofthe data set might thereafter be controlled by payments
`made by a user at a later stage. In this way, a user could pay to
`enable an extra level on a game or to enable further tracks of
`an album.
`In embodiments where the access or use control means is
`
`responsive to the payment validation means, access or use
`control information may be stored with the downloaded data
`or in a separate storage area, for example in the payment
`validation means. The user’s access to the downloaded data
`
`could advantageously be responsive to the payment valida-
`tion means, for example, by means of a control line coupling
`the payment validation means with a memory access or
`decryption control element.
`In one embodiment the data storage means comprises an
`electronic memory card or smart card and the mobile data
`retrieval device is provided with a slot to receive the card.
`Preferably the card is a push-fit within the retrieval device,
`and retention of the card may be effected by pressure from
`electrical interface connections and/or resilience of the hous-
`
`ing, or by using a resilient retaining means. In a preferred
`embodiment the retrieval device includes an audio output and
`a display, to play a downloaded track and to show information
`about the track and/or an accompanying video.
`To download data onto the data storage means the user can
`employ a data access terminal coupled to the intemet. The
`terminal can directly validate payment; for example in the
`case of a smart card charged with electronic cash it can deduct
`a cash value from the card. Alternatively it can communicate
`with a bank or other financial services provider to control
`payment. In a preferred embodiment, however, the terminal
`connects to a data access service provider which provides a
`portal to other sites and which validates payment and then
`forwards data from a data supplier to the user’s local access
`terminal. The data access service provider may alternatively
`forward payment validation information and/or information
`from the payment validation authority to the data supplier for
`control by the supplier of the data supplied. Thus, access to
`the payment validation system and/or data for downloading
`may be entirely controlled by the data supplier.
`Data held on the data storage means may advantageously
`include data relating to the user’s or payer’s usage of the
`system. This information may include, for example, informa-
`tion on a user’ s spending pattern, information on data suppli-
`ers used and information on the downloaded data. This infor-
`
`mation may be accessed by the data supplier and/or data
`
`4
`
`access service provider and can be used for targeted market-
`ing or loyalty-based incentive schemes such as air miles or the
`like.
`
`The data access terminal may be a conventional computer
`or, alternatively, it may be a mobile phone. Wireless Applica-
`tion Protocol (WAP) and i-mode allow mobile phones to
`efiiciently access the intemet and this allows a mobile phone
`to be used to download data to the data storage means, advan-
`tageously, directly. The data storage means can, if desired,
`incorporate the functionality of a mobile phone SIM (Sub-
`scriber Identity Module) card, which cards already include a
`user identification means, to allow user billing through the
`phone network operator.
`In a preferred embodiment the downloaded data is MP3 or
`other encoded audio data, but the system finds more general
`application for other data types. For example, download data
`can include software, and particularly games, share price
`information, current news information, transport timetable
`information, weather information and catalog shopping
`information. The downloaded information may also include
`compressed video data. The storage capacity of the data stor-
`age means is adaptable to suit the type of data intended to be
`downloaded; for example, 32 megabytes is sufficient for CD
`quality music, but for video it is preferable that the data
`storage means has a capacity of 128 megabytes or greater.
`In another aspect, the invention provides a portable data
`carrier comprising an interface for reading and writing data
`from and to the carrier; non-volatile data memory, coupled to
`the interface, for storing data on the carrier; non-volatile
`payment data memory, coupled to the interface, for providing
`payment data to an external device.
`These features allow the data carrier to store both payment
`data and content data, thus providing the advantages outlined
`above. Depending upon the payment system used, the pay-
`ment data memory may also store code for validating or
`confirming a payment to an external payment system. The
`payment data will normally be linked to a card or card holder
`identification data for payment by the card holder. The non-
`volatile memory ensures that stored content and payment data
`is retained in the data carrier when the data carrier is not
`
`receiving power from an external source. Thus “non-volatile”
`encompasses, for example, low-power memory whose con-
`tents are retained by a battery back-up system. In one embodi-
`ment the payment data memory comprises EEPROM and the
`content data memory comprises Flash memory, but other
`types of content data memory, such as optical, for example,
`holographic, data memory can also be used. The data carrier
`may also be integrated into other apparatus, such as a mobile
`communications device.
`
`Preferably, the portable data carrier further comprises a
`program store for storing code implementable by a processor;
`and a processor, coupled to the content data memory, the
`payment data memory, the interface and to the program store
`for implementing code in the program store, wherein the code
`comprises code to output payment data from the payment
`data memory to the interface and code to provide external
`access to the data memory.
`Normally, the (content) data memory allows both write and
`read access for both storing and retrieving data, but in some
`embodiments the content data memory may be read-only
`memory (ROM). In such embodiments, content may be pre-
`loaded onto the carrier and payment may then be made for
`permission to access the pre-loaded data.
`Preferably, the data carrier also stores a record of access
`made to the content data and updates this in response to
`external access, preferably read access, made to the data
`memory. The carrier may also store content use rules pertain-
`
`10
`
`15
`
`20
`
`25
`
`30
`
`35
`
`40
`
`45
`
`50
`
`55
`
`60
`
`65
`
`21
`
`21
`
`
`
`US 8,118,221 B2
`
`5
`ing to allowed use of stored data items. These use rules may
`be linked to payments made from the card to provide payment
`options such as access to buy content data outright; rental
`access to content data for a time period or for a specified
`number of access events; and/or rental/purchase, for example
`where rental use is provided together with an option to pur-
`chase content data at the reduced price after rental access has
`expired.
`Thus where the data carrier stores, for example, music, the
`purchase outright option may be equivalent to the purchase of
`a compact disc (CD), preferably with some form of content
`copy protection such as digital watermarking.
`In this
`example, the rental or subscription payment option may be a
`pay-per-play option, and with this option payment may either
`be before or after access to the stored data so that the carrier
`
`may operate in either a debit or credit payment mode.
`The portability ofthe data carrier potentially allows it to be
`used to access content or, in the example, play music without
`the need to be linked to a communications system or to be
`on-line to the internet. By providing a use record memory on
`the data carrier, use of the stored data can be tracked while
`off-line and then any necessary payment can be made when
`the data carrier is next coupled to a communication system.
`This allows the data carrier to operate in a credit mode. In a
`debit mode, the additional storage of use rules facilitates the
`regulation of access to content data stored on the carrier
`without the need for further exchange of payment/use data
`with an external system to validate the use.
`By combining digital rights management with content data
`storage using a single carrier, the stored content data becomes
`mobile and can be accessed anywhere while retaining control
`over the stored data for the data content provider or data
`copyright owner. Preferably,
`the data carrier also stores
`access control data, such as a user ID and a password, as the
`stored data may be valuable. The access control data may be
`combined with access control to the payment data, which is
`typically by means ofa PIN (Personal Identification Number)
`to simplify access to valued content stored on the carrier.
`In one embodiment the stored content data is encrypted and
`a unique password or PIN and/or biometric data is required
`for decryption. The data carrier may be arranged so that the
`content is erased after a predetermined number of incorrect
`access attempts. Additionally or alternatively, a permanently
`stored flag may be set and/or a hardware modification (such as
`a fusable link) may be made to prevent the data carrier from
`functioning for further data storage/retrieval. Preferably,
`however, access to any stored value/payment data is never-
`theless retained.
`
`Supplementary data may also be stored on the carrier in
`association with stored content data. This supplementary data
`may comprise customer reward management data and/or
`advertising data. The supplementary data may comprise a
`pointer to an external data source from which data is down-
`loaded either to the data carrier or to a data access device or
`
`content player, so