EXHIBIT 1021
`
`
`
`TO PETITIONER GOOGLE INC.’S
`PETITION FOR COVERED BUSINESS
`METHOD REVIEW OF
`U.S. PATENT NO. 8,794,516
`
`
`
`
`
`
`
`

`
`US008118221B2
`
`(12) United States Patent
`Racz et a].
`
`(10) Patent No.:
`(45) Date of Patent:
`
`US 8,1 18,221 B2
`*Feb. 21, 2012
`
`(54) DATA STORAGE AND ACCESS SYSTEMS
`
`(75) Inventors: Patrick Racz, Saint Heller (JE);
`Hermen-ard Hulst, Amsterdam (NL)
`
`(73) Assignee: Smart?ash Technologies Limited,
`Wickhams’ Cay (VG)
`
`( * ) Notice:
`
`Subject to any disclaimer, the term of this
`patent is extended or adjusted under 35
`U.S.C. 154(b) by 0 days.
`This patent is subject to a terminal dis-
`Clailner~
`
`(21) Appl. No.: 12/943,872
`
`7/ 1993 Moronaga et a1.
`5,226,145 A
`5,367,150 A 11/1994 Kitta et a1.
`2
`S?gf?zzaman et a1‘
`535323466 A
`7/1996 Konno et a1‘
`5,588,146 A 12/1996 Leroux
`5,677,953 A 10/1997 Dolphin
`5,703,951 A 12/1997 Dolphin
`5,740,369 A
`4/1998 Yokozawa et a1.
`5,744,787 A
`4/1998 Telcher
`(Continued)
`
`EP
`
`FOREIGN PATENT DOCUMENTS
`0 195 098
`10/1990
`(Continued)
`
`(22) Filed:
`
`Nov. 10, 2010
`
`Primary Examiner * Thien M Le
`
`(65)
`
`_
`_
`_
`Prior Publication Data
`US 2011/0066525 A1
`Mar. 17, 2011
`
`(74) Attorney, Agent, or Firm * Kilpatrick Townsend &
`Stockton LLP
`
`Related US. Application Data
`
`(57)
`
`ABSTRACT
`
`(63) Continuation of application NO' 12/014558’ _?1ed_ on
`Jan't_15’ t_2008>fn°W1_Pa:; NCItI l?iéglgésvghlglhdls a
`5011 11111912‘
`60 app lga 101131
`O7‘ 334 726
`If _ on
`czllll'tinu’ation O’fILOWHCZi'iOHONO’ 10/1 1 1 ’7 1v; licileésaz
`application NO PIgDT / GB 00 /0 41' 1 0 on O’Ct is 2000
`HOW abandone
`'
`’
`’
`
`'
`
`(51) Int_ CL
`(200601)
`G06]; 5/00
`(52) us. Cl. ...................................... .. 235/380; 235/3 82
`(58) Field of Classi?cation Search ................ .. 235/380,
`235/382’ 492, 451; 711/100’ 101, 103
`See application ?le for Complete Search history
`
`(56)
`
`References Cited
`
`U.S. PATENT DOCUMENTS
`4,341,951 A
`7/1982 Benton
`4,697,073 A
`9/1987 Hara
`
`Data storage and access systems enable downloading and
`paying for data such as audio and video data, text, software,
`games and other types of data. A portable data carrier has an
`interface for sending and receiving data, data memory for
`storing received content data, and payment validation
`memory for providing payment validation data to an external
`device. The carrier may also store a record of access made to
`the stored content, and content use rules for controlling access
`to the stored content. Embodiments store further access con
`‘I01 data and sPpplememary data Such as hot links to Web Sites
`and/Or advemsmg data A Complementary data access Fem“
`nal, data supply computer system, and data access dev1ce are
`also described. The combination of payment data and stored
`content data and use rule data helps reduce the risk of unau
`thoriZed access to data such as compressed music and video
`data, especially over the lntemet.
`
`33 Claims, 17 Drawing Sheets
`
`1026
`
`STORED
`CONTENT
`
`Google Exhibit 1021 Page 00001
`
`

`
`US 8,118,221 B2
`Page 2
`
`US. PATENT DOCUMENTS
`.
`2,333,333‘:
`Z1332 gg?yaet a1~
`5,809,241 A
`9/1998 Hanel 6161.
`5,845,281 A 12/1998 Benson et a1.
`5847 372 A 12/1998 Kr?
`5,889,860 A
`M999 Ellzretal
`’
`’
`'
`gig/gig 2
`21333 gun “31' 1
`5,923,884 A
`M999 peemgtreteilm
`5,933,498 A
`M999 sc?lecket'al
`5,936,220 A
`8/1999 Hoshino e161.
`6,012,634 A
`1/2000 Brqgan eta1~
`6,018,720 A
`1/2000 Fuj1m0t0
`6,078,917 A
`6/2000 Paulsen etal.
`6,119,945 A
`9/2000 Muller et a1.
`6,142,369 A 11/2000 Jonstromer
`6,202,056 B1
`3/2001 Nuttall
`6,385,731 B2
`5/2002 Ananda
`6,415,156 B1
`7/2002 Stadelmann
`6,424,975 B1
`7/2002 Walter etal.
`6,442,570 B1
`8/2002 Wu
`6,473,829 B1
`10/2002 Dahman 6161.
`6,510,236 B1
`1/2003 Crane 6161.
`6,553,413 B1
`4/2003 Leighton e161.
`6,554,192 B2
`4/2003 Tingl
`6,574,643 B2
`6/2003 Walter etal.
`6,658,568 B1
`12/2003 Ginter et a1.
`
`6/2004 Weldon et a1.
`6,747,930 B1
`1/2006 Meyer et a1.
`6,993,507 B2
`2/2006 Sehr_
`6,999,936 B2
`Z5882 iiekl
`982222; E;
`’
`’
`8/2006 McGeeetal.
`7,083,081 B2
`7,334,720 B2* 2/2008 11111316131. .................. .. 235/380
`7,677,446 B2
`3/2010 Wise
`7,942,317 B2* 5/2011 Racz e161. .................. .. 235/380
`2003/0168515 A1
`9/2003 Gnay
`2006/0249570 A1 11/2006 Se_1fe1tetal.
`Zoos/0041938 ‘A1
`20008 W‘Se
`FOREIGN PATENT DOCUMENTS
`
`5/1996
`0713198 A2
`EP
`2/1998
`0 823 694 A1
`EP
`4/1998
`0 542 298
`EP
`5/1998
`0 843 449 A2
`EP
`5/1999
`0914 001 A1
`EP
`10-269291 A 10/1998
`JP
`11-53184 A
`2/1999
`JP
`11412785 A
`8/1999
`JP
`11-213010 A
`8/1999
`JP
`11-272762 A 10/1999
`JP
`WO 98/19237 A1
`5/1998
`W0
`98/33343
`7/1998
`WO
`98/37526
`8/1998
`WO
`* cited by examiner
`
`Page 00002
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 1 0f17
`
`US 8,118,221 B2
`
`Fig. 1
`
`18
`._ _. .. I‘EEJQLJ ::,-'*/
`20
`
`Page 00003
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 2 0f 17
`
`US 8,118,221 B2
`
`Fig. 3
`
`A
`m
`
`B
`5s
`
`60 58
`
`50\ 54
`
`"6 \ '...__......._C'
`
`Ej"7
`
`\\52
`
`Page 00004
`
`

`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 3 of 17
`
`US 8,118,221 B2
`
`Page 00005
`
`Page 00005
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 4 0f 17
`
`US 8,118,221 B2
`
`102a
`'\
`
`1021,
`
`1020
`
`102d
`/
`
`ART‘ST
`TERMiNN.
`
`ARTIST
`TERMiNAL
`
`ARTIST
`TERM‘NAL
`
`ARTIST
`TERMlNAL
`
`108*’
`‘II.’
`STORED
`CONTENT
`
`)0“ 1041)
`CONTENT
`CREATOR
`
`\\ CONTENT _
`"CREATOR
`
`10am-X
`CONTENT
`‘08b \ PROVIDER
`CONTENT
`PROVIDER
`
`108d
`/
`CONTENT
`PROWDER
`
`108a
`CONTENT
`PROvTOER'
`
`COMMUNICATIONS
`NEWVORK
`
`101
`
`108e
`
`OONTENT
`PROVlDER
`
`1 ‘28
`
`4am-
`STORED
`
`CONTENT
`
`112:»
`
`1 108 w
`CONTENT
`PUBLISHER
`
`11°b~\
`
`CONTENT
`PususHER
`
`STORED
`CONTENT
`
`_
`
`/
`10o
`Fig. 5
`
`CONTENT
`118
`ACCESS
`TERMINALK/
`
`1 14
`\
`GATEWAY
`SERVER
`
`116\
`
`CONTENT
`D'STRIBUTOR
`WAN GATEWAY
`
`1 ‘7
`WAN /
`1
`
`'1
`CONTENT
`ACCESS
`TERMWAL
`118/’
`
`Page 00006
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 5 0f 17
`
`US 8,118,221 B2
`
`CONTENT
`ACCESS
`‘TERMINAL
`
`CONTENT
`ACCESS #1156
`TERMtNAL
`
`CONTENT
`118a“
`ACCESS
`TERMINAL
`
`w,
`
`e_PAYMENT
`SYSTEM
`\ma
`
`BANK 122:;
`
`1220
`
`142
`
`INTERNET @
`
`e-PAYMENT
`SYSTEM
`121
`
`nab
`
`134
`\Y
`CONTENT
`DISTRIBUTION
`PROCESSOR
`CRM & PAYMEN
`OlSTRIBUTlON
`cons STORAGE
`
`12a \
`WEB SERVER
`CODE STORAGE
`
`124
`f
`CONTENT ACCESS
`WEB SERVER
`
`128
`
`PAYMENT
`PROCESSOR
`
`123a
`
`132 130
`/ \
`_
`,
`DRM
`ACCESS LONTROL
`PROCESSOR
`PROCESSOR
`DRM CODE
`STORAGE
`\
`130a
`
`ACCESS CONTROL
`cone STORAGE
`
`132a
`
`Page 00007
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 6 0117
`
`US 8,118,221 B2
`
`148
`
`Mobile Comms
`
`MOBILE COMMS
`NETWORK GATEWAY
`
`144
`
`HOME PC
`
`1448
`
`iNTERNET
`
`1,
`
`152a
`
`Video In
`‘ 15421
`154
`/ /""
`STB
`
`154a
`
`155
`
`64
`\
`DVD
`
`RETNLER LAN
`SERVER
`1
`1
`
`166
`I /
`CONTENT
`ACCESS
`"8-551 TERMiNAL
`
`268
`CQNTéNT
`ACCESS
`35a TERMINAL
`
`168a
`
`CDIDVD PLAYER
`SFC"-- 170a
`
`Fig. 7
`
`Page 00008
`
`

`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 7 of 17
`
`US 8,118,221 B2
`
`8,2:we
`
`
`
`Saz.:w<o3.2:at
`
`
`
`zoE8m_mm>mm.mo_>wawo<....m.u:.z_wosmomu<.._mm»z_
`
`2m5>mat.5
`
`
`
`ozcozFz_omé=w.2oa:<Sn.z_<_om2Gzmmtz.
`
` 2...29.....moEmm:z_mEon_5%.wofimmzz.
`
`20,1E;
`
`
`
`
`
`
`
`mommmooma.Eozmz_2<mooEoz_xmo.s
`
`xmmaomm
`
`
`mm;maoommmaommmm;
`moonmmzmomoEmmE,._Em>mOEm2
`
`
`
`
`
`
`
`
`
`mooouo<"EwE_mozéuxm<55
`
`mmifim
`
`88
`
`
`
`
`
`
`
`mace4<>w_E.mmEmwzoomz:.&o
`
`
`
`wooom:a:<m._.zw._.200
`
`
`
`mooomo<n_mm.E.mum:
`
`
`
`mmmzmo$25.00$50
`
`m.9...
`
`
`
`
`
`
`
`uoooEw:wm<z<_2wzmzta:96
`
`mm,
`
`Page 00009
`
`Page 00009
`
`
`
`
`
`

`
`U.S. Patent
`
`Feb. 21, 2012
`
`Sheet 8 of 17
`
`US 8,118,221 B2
`
`SN
`
`
`
`EH28owmopm
`
`Eozmz<2o
`
`ozimoa
`
`SN
`
`fw<§
`
`
`
`Eozmzmommmoomm
`
`N5
`
`SN
`
`SN
`
`8...
`
`u
`
`mz_2_»
`
`AOEZOO
`
`0.60..
`
`wo<uEm...z_
`
`.2zmm.cm
`
`Eosmz«:55:.5o>.zoz
`
`<.n<Q0.Qmdd
`
`Eosmz
`
`
`
`zéoomm.Euz§zmn_
`
`
`
`
`
`5.40JOEZOOmmw8<
`
`
`
`
`
`maoo:w.a..,mwzE..mmn_o
`
`
`
`<._.<o._.Zm_2>¢n_
`
`
`
`<._<ow3<>nm<o
`
`<»<oEm
`
`«:525
`
`55t.2>omasin
`
`
`
`88»zmzmo<z¢2Emzé...
`
`
`
`wooorzmaowmaSEO
`
`wooo25
`
`
`
`
`
`maoom.wmEz>m.:,mEoo
`
`
`
`
`
`xmozcmzmzo_.Eo_z:z2oomemo:
`
`
`
`
`
`<._.<n_mm..:mmm:925.52.Empzoo
`
`
`
`3.40omoommmm:
`
`<3522:05&3»
`
`m.mE
`
`
`
`<55.mmwoo<
`
`Page 00010
`
`Page 00010
`
`
`
`
`
`

`
`
`
`
`
`7EozmzH¢omm.u.ooE.2<moOmn_.Ewz<$_mmE
`
`U.S. Patent
`
`eF
`
`2
`
`102
`
`%hS
`
`on5ea
`
`lamum
`
`2
`
`«mm8“
`
`am.
`
`mum
`
`EN
`
`
`
`m._oEzoo><.:mamo<u_mmE_
`
`woEmm:z_
`
`Em
`
`mo<&m:.z_EmI3.8maoomofimaz.cum
`
`
`
`
`
`mo<..Em_.z_Em:.53886Ez8mofixmtemum:
`
`
`2B122.}8H
`
`
`
` 8,anS//38U88mm><:Eflzoo
`
`
`
`33mooo._oEz8mm:
`
`Page 00011
`
`Page 00011
`
`
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 10 0f 17
`
`US 8,118,221 B2
`
`S10
`SMART FIASH CARD ENSERTED
`INTO CONTENT ACCESS
`TERMINAL CARD INTERFACE
`
`S11
`SCHEME OWNER REGISTRATION
`WEB PAGE LOADED ONTO
`CONTENT ACCESS TERMINAL
`
`II
`512
`USER REGISTRATION DATA
`ENTERED INTO CONTENT ACCESS
`TERMINAL
`
`‘I
`$13
`USER REGISTRATION DATA
`TRANSMITTED TO SCHEME OWNER '
`
`II
`814
`PAYMENT REQUEST RECEIVED
`FROM SCHEME OWNER AT
`CONTENT ACCESS TERMINAL
`
`I
`515
`PAYMENT DATA ENTERED INTO
`CONTENT ACCESS TERMINAL AND
`TRANSMITTED TO SCHEME OWNER
`
`S16
`CARD VALUE DATA AND CARD
`VALUE ACCESS CODE RECEIVED
`BY CONTENT ACCESS TERMINAL
`FROM SCHEME OWNER
`
`S17
`CARD REGISTRATION DATA
`RECEIVED FROM SCHEME OWNER
`AND WRITTEN ONTO CARD
`
`I
`S18
`VALUE DATA AND ACCESS CODE
`WRITTEN ONTO CARD AND
`OUTPUT T0 USER
`
`I
`$19
`CARD AVAILABLE FOR USE
`
`Fig11a
`
`Page 00012
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 11 0f 17
`
`US 8,118,221 B2
`
`S20
`REQUEST FOR CARD
`REGISTRATION WEB PAGE
`RECEIVED FROM CONTENT
`ACCESS DEVICE
`
`S21
`TRANSMIT CARD REGISTRATION
`WEB PAGE TO CONTENT
`ACCESS DEVICE
`
`S22
`RECEIVE USER REGISTRATION
`DATA FROM CONTENT ACCESS
`TERMINAL AND STORE IN ACCESS
`CONTROL DATA STORE
`
`S23
`TRANSMIT PAYMENT REQUEST TO
`CONTENT ACCESS TERMiNAL
`
`I
`$24
`RECEIVE PAYMENT DATA FROM
`CONTENT ACCESS TERMINAL
`
`S25
`PAYMENT PROCESSOR VERIFIES
`PAYMENT DATA WITH PAYMENT
`SYSTEM
`
`S26
`PAYMENT PROCESSOR
`TRANSMITS VALUE DATA AND
`VALUE ACCESS CODE TO
`CONTENT ACCESS TERMINAL
`
`I
`$27
`PAYMENT PROCESSOR UPDATES
`PAYMENT RECORD DATA STORE
`WITH TRANSACTION DATA
`
`$28
`FEAR!) REGISTRATION DATA
`LOADED FROM ACCESS comm.
`DATA STORE AND TRANSMITTED
`TO CONTENT ACCESS TERMINAL
`529
`W
`TRANSACTION COMPLETE
`
`Page 00013
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 12 0f 17
`
`US 8,118,221 B2
`
`S30
`INSERT CARD IN CONTENT
`ACCESS TERM‘NAL
`
`7
`$31
`USER ENTERS PASSWORD INTO
`CONTENT ACCESS TERM iNAL
`
`F
`S32
`CONTENT ACCESS TERMINAL
`TRANSMITS PASSWORD TO CARD
`FOR VERiFICATION
`
`S33
`ACCESS PERM‘ l I ED’?
`
`$40
`LoAD OUTLINE CRM
`DATA FROM CARD
`
`V
`s41
`LOAD RETAILER DATA FROM
`RETAILER LAN I WAN
`
`S42
`DISPLAY MENU, RETAILER DATA
`AND OUTLINE CRM DATA ON
`CONTENT ACCESS TERMINAL
`
`S34
`DISPLAY WARNING AND
`‘ INCREMENT TERMINAL ACCESS
`' DENIED COUNT
`
`1
`$35
`READ CARD THRESHOLD AND
`ToTAL CARD ACCESS DENIED
`COUNT FROM CARD
`
`$36
`ARD COUNT,(CAR
`THRESHOLD 4;)?
`
`83.,
`DISPLAY CONTENT ERASURE
`WARN‘NG
`
`s43
`INPUT MENU OPTiON
`(DOWNLOAD CONTENT:
`ADD MONETARY VALUE;
`CHECK! SPEND CRM VALUE:
`was srre LINKS; Exm
`DOWNLOAD comm
`
`.
`
`$35 TERMMAL
`COUNT>TERMINAL
`THRESHOLD?
`
`$44
`Low SCHEME OWNER CONTENT
`ACCESS was PAGE ONTO
`CONTENT ACCESS TERMINAL
`
`$39
`OUTPUT ACCESS REFUSED
`MESSAGE AND AwArr CARD
`REMOVAL
`
`Fig. 12a
`
`Page 00014
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 13 0117
`
`US 8,118,221 B2
`
`845
`CONTENT SEARCH REQUEST
`DATA INPUT AND TRANSMITTED
`TO SCHEME OWNER CONTENT
`DISTRIBUTION PROCESSOR
`
`$46
`CONTENT SEARCH RESULTS
`RECEIVED FROM CONTENT
`DlSTRIBUTlON PROCESSOR AND
`DISPLAYED ON CONTENT ACCESS
`TERMINAL
`
`s47
`CONTENT ITEM SELECTlON DATA
`INPUT AND TRANSMITTED TO
`SCHEME OWNER
`
`S48
`CONTENT COST DATA, CONTENT
`use RULES AND PURCHASE
`OPTIONS DATA RECENED FROM
`SCHEME OWNER
`
`r
`549
`PURCHASE DPTTCN SELECTION
`EXiT-—- AND PURCHASE REQUEST INPUT
`OR EXiT To MENU SELECTED
`
`S50
`CARD VALUE AND CRM DATA
`READ FROM CARD
`
`_
`1 2 b
`F."
`9 -
`
`S51
`CARD VALUE SUFFTCIENT?
`
`S52
`DISPLAY INSUFFICIENT
`' VALUE WARNING
`
`*
`s53
`PAYMENT REQUEST
`TRANSMITTED TO CARD
`
`0
`
`Page 00015
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 14 0f 17
`
`US 8,118,221 B2
`
`554
`PAYMENT FOR SCHEME OWNER
`RECEIVED FROM CARD BY
`CONTENT ACCESS TERMINAL AND
`FORWARDED TO e-PAYMENT
`SYSTEM
`
`1!
`855
`PAYMENT RECORD DATA
`RECEIVED FROM e-PAYMENT
`SYSTEM BY CONTENT ACCESS
`TERMINAL AND FORWARDED TO
`CARD
`
`f
`856
`PAYMENT RECORD DATA
`PURCHASE REQUEST AND CARD
`REGISTRATION DATA
`TRANSMITTED TO SCHEME
`OWNER
`
`I
`85'?
`CONTENT AND CONTENT ACCESS
`RULES DOWNLOADED TU CARD
`S58
`}
`RECEIVE CHM DATA FROM
`CONTENT DISTFUBUTION
`PROCESSOR
`s59
`;
`WRITE AUDIT TRAIL TO CARD
`AND UPDATE CARD CRM DATA
`
`F I 1 2 C
`
`Page 00016
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 15 0117
`
`US 8,118,221 B2
`
`850
`CONTENT ACCESS WEB PAGE
`REQUESTED AND TRANSMTTTED
`TO CONTENT ACCESS TERMINAL
`
`1
`S61
`CONTENT SEARCH REQUEST
`RECEIVED FROM CONTENT
`ACCESS TERMINAL
`S62
`‘
`CONTENT DESTRIBUTION
`PROCESSOR SEARCHES
`CONTENT ACCESS OATA STORE
`AND TRANSMlTS SEARCH
`RESULTS TO CONTENT ACCESS
`TERMINAL
`
`1r
`563
`
`CONTENT ITEM SELEC‘HON RECEIVED FROM CONTENT
`ACCESS TERMiNAL
`
`comm ITEM PURCHASE DATA
`RETRIEVED FROM comm"
`ACCESS DATA STORE
`
`1F
`S65
`CONTENT PURCHASE DATA
`TRANSMSTTED TO CONTENT
`ACCESS TERMINAL
`
`1!
`S66
`‘PAYMENT RECORD DATA.
`PURCHASE REQUEST DATA AND
`CARD REGESTRATTON DATA
`RECEIVED FROM CONTENT
`ACCESS TERMiNAL
`
`1!
`S67
`PAYMENT RECORD DATA
`VALSDATED WiTH e-PAYMENT
`SYSTEM
`7
`
`.
`F lg _ 1
`
`Page 00017
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 16 0117
`
`US 8,118,221 B2
`
`PAYMENT DISTRIBUTION DATA
`READ FROM CONTENT ACCESS
`DATA STORE
`
`$69
`PAYMENT DISTRTBUTION
`INSTRUCTION TRANSMII TED TO
`B~PAYMENT SYSTELVI
`
`S70
`CONTENT ACCESS RULES FOR
`PURCHASED LEVEL OF SERVICE,
`CRM DATA AND CONTENT
`PROVIDER ID DATA READ FROM
`CONTENT ACCESS DATA STORE
`
`11
`s11
`CONTENT ACCESS RULES
`TRANSMITTED TO comaw'r
`ACCESS TERMINAL
`
`I
`872
`ORM PROCESSOR TRANSMITS
`TRANSACTION REQUEST AND
`AUTHENTICATEON TO CONTENT
`PROVIDER
`
`1
`S73
`CONTENT ACCESS WEB SERVER
`RECEIVES PROTECTED CONTENT
`FROM CONTENT PROVIDER AND
`TRANSMITS CONTENT TO
`CONTENT ACCESS TERMINAL
`
`1
`S74
`PURCHASE DATA AND CONTENT
`ACCESS RECORD WRITTEN TO
`PAYMENT RECORD DATA STORE
`
`‘I
`875
`USING STORED RULES UPDATED
`CRM DATA WRITTEN TO CONTENT
`ACCESS DATA STORE AND
`TRANSMITTED TO CONTENT
`ACCESS TERMINAL
`
`S76
`II
`I PROCESS ENDS’
`
`F _ 1 2e
`
`Page 00018
`
`

`
`US. Patent
`
`Feb. 21, 2012
`
`Sheet 17 0117
`
`US 8,118,221 B2
`
`577
`CARD INSERTED QNTO PLAYER
`
`S78
`USER PASSWORD ENTERED INTO
`PLAYER AND TRANSMHTED TO
`CARD FOR VALIDATION
`CONTENT ACCESS PERMITTED
`
`E
`879
`STORED CONTENT INDEX LOADED
`FROM CARD AND DISPLAYED W‘ITH
`MENU (ACCESS CONTENT; CHECK
`VALUE; CHECK CRM; PLAY OPTTONS)
`
`S80
`SELECTTON OF CONTENT ITEMS
`FOR ACCESS ENTERED INTO
`PLAYER
`
`S81
`
`comm use STATUS AND
`comm use nuuzs LOADED
`FROM CARD
`
`S82
`USE RULES AND USE STATUS
`COMPARED AND DISPLAYED WTTH
`CONTENT PLAY MENU
`
`S83
`IS CONTENT USE
`PERMTTTED?
`YES
`PLAY
`
`.
`
`F lg . 1 3
`
`S85
`S84
`CONTENT AND SUPPLEMENTARY PAUSE’ WRTTEIREAD CARDS
`DATA MADE AVAILABLE TO USER _ CONT PLAY STATUS DATA
`I
`PLAY
`COMPLETE
`
`S85
`UPDATED CONTENT USE DATA
`WRITTEN TO CARD
`
`T
`885
`ORM DATA AND CRM REWARD
`RULES LOADED FROM THE CARD
`AND UPDATED
`T
`
`Page 00019
`
`

`
`US 8,118,221 B2
`
`1
`DATA STORAGE AND ACCESS SYSTEMS
`
`CROSS-REFERENCES TO RELATED
`APPLICATIONS
`
`This application is a continuation of US. patent applica
`tion Ser. No. 12/014,558, ?led on Jan. 15, 2008, Which is a
`continuation of US. patent application Ser. No. 11/336,758,
`?led on Jan. 19, 2006, noW issued US. Pat. No. 7,334,720;
`Which is a continuation of US. patent application Ser. No.
`10/111,716, ?led on Sep. 17, 2002, Which application is a
`national stage application under 35 U.S.C. 371, claiming the
`priority of international PCT Application No. GB001041 10,
`?led on Oct. 25, 2000; Which claims priority to UK Applica
`tion No. 99252272, ?led on Oct. 25, 1999, each ofWhich is
`incorporated by reference in its entirety for all purposes.
`
`BACKGROUND OF THE INVENTION
`
`This invention is generally concerned With data storage and
`access systems. More particularly, it relates to a portable data
`carrier for storing and paying for data and to computer sys
`tems for providing access to data to be stored. The invention
`also includes corresponding methods and computer pro
`grams. The invention is particularly useful for managing
`stored audio and video data, but may also be applied to stor
`age and access of text and software, including games, as Well
`as other types of data.
`One problem associated With the increasingly Wide use of
`the internet is the groWing prevalence of so-called data
`pirates. Such pirates obtain data either by unauthorized or
`legitimate means and then make this data available essentially
`World-Wide over the internet Without authorization. Data can
`be a very valuable commodity, but once it has been published
`on the internet it is dif?cult to police access to and use of it by
`internet users Who may not even realiZe that it is pirated. This
`is a particular problem With audio recordings, and, once the
`bandWidth becomes available, is also likely to be evident With
`video.
`Over the past three or four years compressed audio sources
`have become increasingly Widely available on Web pages.
`One Widely used audio data compression format is MP3
`(MPEGiAudio Layer 3 of the MPEG1 compression algo
`rithm), Which is an internationally de?ned standard including
`a de?nition of compressed audio information such as speech
`or music. It relies on psycho-acoustic properties of human
`hearing to achieve very large data compression factors. It is
`thus feasible to doWnload usefully long passages of music in
`a practically convenient short time. Pirate data suppliers have
`not been sloW to realiZe the potential of this, and many unau
`thoriZed Websites have sprung up offering popular music,
`including recent releases by World-famous bands. This has
`caused the recording industry considerable concern and there
`is an urgent need to ?nd a Way to address the problem of data
`prracy.
`
`20
`
`25
`
`30
`
`35
`
`40
`
`45
`
`50
`
`55
`
`SUMMARY OF THE INVENTION
`
`According to the present invention there is therefore pro
`vided a method of providing portable data comprising pro
`viding a portable data storage device comprising doWnloaded
`data storage means and payment validation means; providing
`a terminal for internet access; coupling the portable data
`storage device to the terminal; reading payment information
`from the payment validation means using the terminal; vali
`dating the payment information; and doWnloading data into
`the portable storage device from a data supplier.
`
`60
`
`65
`
`2
`Another aspect of the invention provides a corresponding
`mobile data retrieval device for retrieving and outputting data
`such as stored music and/or noise from the data storage
`device.
`The payment validation means is, for example, means to
`validate payment With an external authority such as a bank or
`building society. The combination of the payment validation
`means With the data storage means alloWs the access to the
`doWnloaded data Which is to be stored by the data storage
`means, to be made conditional upon checked and validated
`payment being made for the data. Binding the data access and
`payment together alloWs the legitimate oWners of the data to
`make the data available themselves over the internet Without
`fear of loss of revenue, thus undermining the position of data
`pirates.
`A further advantage of the system is that it alloWs users
`under the age of 18 to make internet purchases. Currently
`internet users pay for goods and/or services by credit card.
`Since credit cards cannot legitimately be used by persons
`under the age of 18 (at least in the UK), a signi?cant fraction
`of adventurous internet users are excluded from e-commerce,
`one of the most signi?cant predicted uses of the internet. In
`one embodiment of the invention, hoWever, the payment vali
`dation means comprises e-cash; that is, the payment valida
`tion means stores transaction value information on a cash
`value of transactions validatable by the data storage means. In
`simple terms, the data storage means can be a card Which is
`charged up to a desired cash value (if necessary limited to a
`maximum value) at a suitable terminal. This might be an
`interne access terminal but could, more simply, be a device to
`accept the data storage card and to receive and count money
`deposited by the user to charge the card, Writing update cash
`value information onto the card. More sophisticated Ways of
`updating the cash value on the card are also possible, such as
`direct bank transfer. Since, With this type of embodiment, the
`data storage means is, essentially, precharged With cash rather
`than acting as a credit card, it can be used by young people
`Without the risk of their incurring large debts.
`In one embodiment the data storage means is poWered by
`the retrieval device When it is connected to the device and
`retains a memory of the doWnloaded data When it is unpoW
`ered. This can be achieved by the use of Flash RAM or, more
`generally, any form of programmable read-only memory.
`Alternatively the data storage means may incorporate a
`rechargeable cell or capacitor and store information in battery
`backed-up static RAM.
`The doWnloaded data may be entered into the data storage
`device by means of an interface such as a magnetically or
`capacitatively coupled connection or an optical connection,
`but preferably the interface comprises contacts for direct elec
`trical connection to the storage means. The payment valida
`tion means may likeWise have one of a variety of interfaces
`but again preferably comprises a set of electrical contacts.
`The payment validation means could, hoWever, comprise a
`magnetic or holographic data-strip such as is knoWn for use
`With credit cards and phone cards. The interface to receive the
`doWnloaded data may be separate from the interface to the
`payment validation means, to facilitate separate and simulta
`neous access to both these systems. In other embodiments a
`single interface may serve for both data storage and payment.
`Advantageously the payment validation means includes
`memory storing information to identify the person Who is
`paying for the doWnloaded data.
`For additional security the doWnloaded data may be
`encrypted. In this case data decryption may be necessary at
`some stage, either in the data storage means or in the retrieval
`device or in an information delivering apparatus such as a data
`
`Page 00020
`
`

`
`US 8,118,221 B2
`
`3
`access terminal Alternatively the data decryption function can
`be shared amongst one or more of these devices. The skilled
`person will be aware of a range of suitable encryption/decryp-
`tion techniques, including Pretty Good Privacy (Registered
`Trade Mark) and PKI (Public Key Infrastructure). Normally,
`when the downloaded data is encrypted, a decryption key
`must be supplied. This can be generated automatically by the
`data access terminal or data access service provider or it can
`be entered by the user into the data access terminal or into the
`mobile data retrieval device.
`
`The data storage means and/or the retrieval device can be
`provided with access control means to prevent unauthorized
`access to the downloaded data. Additionally or alternatively,
`use control means can be provided to stop or provide only
`limited access of the user to the downloaded data in accor-
`
`dance with the amount paid. These access and use control
`functions may in some embodiments be combined, permitted
`use controlling access or permitted access controlling use.
`Thus, for example, a complete set of data information relating
`to a particular topic, a particular music track, or a particular
`software package might be downloaded, although access to
`part ofthe data set might thereafter be controlled by payments
`made by a user at a later stage. In this way, a user could pay to
`enable an extra level on a game or to enable further tracks of
`an album.
`In embodiments where the access or use control means is
`
`responsive to the payment validation means, access or use
`control information may be stored with the downloaded data
`or in a separate storage area, for example in the payment
`validation means. The user’s access to the downloaded data
`
`could advantageously be responsive to the payment valida-
`tion means, for example, by means of a control line coupling
`the payment validation means with a memory access or
`decryption control element.
`In one embodiment the data storage means comprises an
`electronic memory card or smart card and the mobile data
`retrieval device is provided with a slot to receive the card.
`Preferably the card is a push-fit within the retrieval device,
`and retention of the card may be effected by pressure from
`electrical interface connections and/or resilience of the hous-
`
`ing, or by using a resilient retaining means. In a preferred
`embodiment the retrieval device includes an audio output and
`a display, to play a downloaded track and to show information
`about the track and/or an accompanying video.
`To download data onto the data storage means the user can
`employ a data access terminal coupled to the intemet. The
`terminal can directly validate payment; for example in the
`case of a smart card charged with electronic cash it can deduct
`a cash value from the card. Alternatively it can communicate
`with a bank or other financial services provider to control
`payment. In a preferred embodiment, however, the terminal
`connects to a data access service provider which provides a
`portal to other sites and which validates payment and then
`forwards data from a data supplier to the user’s local access
`terminal. The data access service provider may alternatively
`forward payment validation information and/or information
`from the payment validation authority to the data supplier for
`control by the supplier of the data supplied. Thus, access to
`the payment validation system and/or data for downloading
`may be entirely controlled by the data supplier.
`Data held on the data storage means may advantageously
`include data relating to the user’s or payer’s usage of the
`system. This information may include, for example, informa-
`tion on a user’ s spending pattern, information on data suppli-
`ers used and information on the downloaded data. This infor-
`
`mation may be accessed by the data supplier and/or data
`
`10
`
`15
`
`20
`
`25
`
`30
`
`35
`
`40
`
`45
`
`50
`
`55
`
`60
`
`65
`
`4
`
`access service provider and can be used for targeted market-
`ing or loyalty-based incentive schemes such as air miles or the
`like.
`
`The data access terminal may be a conventional computer
`or, alternatively, it may be a mobile phone. Wireless Applica-
`tion Protocol (WAP) and i-mode allow mobile phones to
`efiiciently access the intemet and this allows a mobile phone
`to be used to download data to the data storage means, advan-
`tageously, directly. The data storage means can, if desired,
`incorporate the functionality of a mobile phone SIM (Sub-
`scriber Identity Module) card, which cards already include a
`user identification means, to allow user billing through the
`phone network operator.
`In a preferred embodiment the downloaded data is MP3 or
`other encoded audio data, but the system finds more general
`application for other data types. For example, download data
`can include software, and particularly games, share price
`information, current news information, transport timetable
`information, weather information and catalog shopping
`information. The downloaded information may also include
`compressed video data. The storage capacity of the data stor-
`age means is adaptable to suit the type of data intended to be
`downloaded; for example, 32 megabytes is sufficient for CD
`quality music, but for video it is preferable that the data
`storage means has a capacity of 128 megabytes or greater.
`In another aspect, the invention provides a portable data
`carrier comprising an interface for reading and writing data
`from and to the carrier; non-volatile data memory, coupled to
`the interface, for storing data on the carrier; non-volatile
`payment data memory, coupled to the interface, for providing
`payment data to an external device.
`These features allow the data carrier to store both payment
`data and content data, thus providing the advantages outlined
`above. Depending upon the payment system used, the pay-
`ment data memory may also store code for validating or
`confirming a payment to an external payment system. The
`payment data will normally be linked to a card or card holder
`identification data for payment by the card holder. The non-
`volatile memory ensures that stored content and payment data
`is retained in the data carrier when the data carrier is not
`
`receiving power from an external source. Thus “non-volatile”
`encompasses, for example, low-power memory whose con-
`tents are retained by a battery back-up system. In one embodi-
`ment the payment data memory comprises EEPROM and the
`content data memory comprises Flash memory, but other
`types of content data memory, such as optical, for example,
`holographic, data memory can also be used. The data carrier
`may also be integrated into other apparatus, such as a mobile
`communications device.
`
`Preferably, the portable data carrier further comprises a
`program store for storing code implementable by a processor;
`and a processor, coupled to the content data memory, the
`payment data memory, the interface and to the program store
`for implementing code in the program store, wherein the code
`comprises code to output payment data from the payment
`data memory to the interface and code to provide external
`access to the data memory.
`Normally, the (content) data memory allows both write and
`read access for both storing and retrieving data, but in some
`embodiments the content data memory may be read-only
`memory (ROM). In such embodiments, content may be pre-
`loaded onto the carrier and payment may then be made for
`permission to access the pre-loaded data.
`Preferably, the data carrier also stores a record of access
`made to the content data and updates this in response to
`external access, preferably read access, made to the data
`memory. The carrier may also store content use rules pertain-
`
`Page 00021
`
`Page 00021
`
`

`
`US 8,118,221 B2
`
`5
`ing to allowed use of stored data items. These use rules may
`be linked to payments made from the card to provide payment
`options such as access to buy content data outright; rental
`access to content data for a time period or for a specified
`number of access events; and/or rental/purchase, for example
`where rental use is provided together with an option to pur-
`chase content data at the reduced price after rental access has
`expired.
`Thus where the data carrier stores, for example, music, the
`purchase outright option may be equivalent to the purchase of
`a compact disc (CD), preferably with some form of content
`copy protection such as digital watermarking.
`In this
`example, the rental or subscription payment option may be a
`pay-per-play option, and with this option payment may either
`be before or after access to the stored data so that the carrier
`
`may operate in either a debit or credit payment mode.
`The portability ofthe data carrier potentially allows it to be
`used to access content or, in the example, play music without
`the need to be linked to a communications system or to be
`on-line to the internet. By providing a use record memory on
`the data carrier, use of the stored data can be tracked while
`off-line and then any necessary payment can be made when
`the data carrier is next coupled to a communication system.
`This allows the data carrier to operate in a credit mode. In a
`debit mode, the additional storage of use rules facilitates the
`regulation of access to content data stored on the carrier
`without the need for further exchange of payment/use data
`with an external system to validate the use.
`By combining digital rights management with content data
`storage using a single carrier, the stored content data becomes
`mobile and can be accessed anywhere while retaining control
`over the stored data for the data content provider or data
`copyright owner. Preferably,
`the data carrier also stores
`access control data, such as a user ID and a password, as the
`stored data may be valuable. The access control data may be
`combined with access control to the payment data, which is
`typically by means ofa PIN (Personal Identification Number)
`to simplify access to valued content stored on the carrier.
`In one embodiment the stored content data is encrypted and
`a unique password or PIN and/or biometric data is required
`for decryption. The data carrier may be arranged so that the
`content is erased after a predetermined number of incorrect
`access attempts. Additionally or alternatively, a permanently
`stored flag may be set and/or a hardware modification (such as
`a fusable link) may be made to prevent the data carrier from
`functioning for further data storage/retrieval. Pre