EXHIBIT 1027
`
`
`
`TO PETITIONER GOOGLE INC.’S
`PETITION FOR COVERED BUSINESS
`METHOD REVIEW OF
`U.S. PATENT NO. 8,794,516
`
`
`
`
`
`
`
`

`
`US007334720B2
`
`(12) United States Patent
`Hulst et a].
`
`(10) Patent N0.:
`(45) Date of Patent:
`
`US 7,334,720 B2
`Feb. 26, 2008
`
`(54) DATA STORAGE AND ACCESS SYSTEMS
`
`(75) Inventors: Hermen-ard Hulst, Amsterdam (NL);
`Patrick Sandor Racz, St. Heller (GB)
`
`_
`~
`_
`_
`(73) Assignee. Smart-Flash Limited, East Sussex
`(GB)
`
`( * ) Notice:
`
`Subject to any disclaimer, the term of this
`patent is extended or adjusted under 35
`USC‘ 1540’) by 0 days‘
`
`(21) Appl. N0.: 11/336,758
`
`(22) Filed:
`
`Jan. 19, 2006
`
`(65)
`
`Prior Publication Data
`Us 2006/0118619 A1
`11111- 8, 2006
`
`Related US. Application Data
`(63) Continuation of application No. 10/ 111,716, ?led as
`application No. PCT/GB00/04110 on Oct. 25, 2000,
`noW abandoned.
`
`.
`.
`.
`.
`.
`D t
`F
`P
`t
`A l
`30
`orelgn PP lea Ion nonty a a
`(
`)
`NOV. 25, 1999 (GB) ............................... .. 99252272
`
`(51) Int- Cl-
`G06K 5/ 00
`
`(2006-01)
`
`(52) US. Cl. .................... .. 230/380; 235/382; 235/492;
`235/451
`(58) Field of Classi?cation Search .............. .. 235/380,
`235/382, 492, 451; 711/100, 101, 103
`See application ?le for complete search history.
`
`(56)
`
`References Cited
`
`US. PATENT DOCUMENTS
`
`7/1993 Moronaga et a1.
`5,226,145 A
`5,367,150 A 11/1994 Kitta et a1.
`5,406,619 A *
`4/1995 Akhteruzzaman
`et a1. ..................... .. 379/9302
`
`5,457,746 A 10/1995 Dolphin
`5,588,146 A 12/1996 LerouX
`5,677,953 A 10/1997 Dolphin
`5,703,951 A 12/1997 Dolphin
`
`5,754,654 A *
`5,794,202 A
`
`5/1998 Hiroya et a1. ............... .. 705/76
`8/1998 Kim
`
`(Continued)
`FOREIGN PATENT DOCUMENTS
`
`EP
`
`0195098
`
`“M990
`
`(Continued)
`Primary ExamineriSteven S. Paik
`(74) Attorney, Agent, or FirmiToWnsend and Townsend
`and Crew LLp
`
`(57)
`
`ABSTRACT
`
`Data storage and access systems are described for doWn
`loading and paying for data such as audio and video data,
`text, software, games and other types Qfdata, Aportable data
`carrier has an interface for sending and receiving data,
`non-volatile data memory for storing received content data
`and non-volatile payment validation memory for providing
`payment validation data to an external device. The carrier
`may also store a record of access made to the stored content,
`and content use rules for controlling access to the stored
`content. Preferred embodiments store further access control
`data and supplementary data such as hot links to Web sites
`and/or advertising data. A complementary data access ter
`minal, data supply computer system and data access device
`are also described. The combination of payment data and
`stored content data and, in preferred embodiments, use rule
`data, helps reduce the risk of unauthorized access to data
`such as compressed music and video data, especially over
`the Internet.
`
`18 Claims, 17 Drawing Sheets
`
`206
`
`205
`
`5mm».
`INTERFACE
`
`TIMINGA
`CONTROL
`LOGIC
`
`2m
`
`ill
`
`PROCESSOR
`
`MEMO.“
`
`STORE) CONTENT 2“
`DATANIEMORY
`(FLASH)
`
`BUS
`
`0
`
`PERMANENT PROGRAM
`MEMORY
`@EHATINB SYSTEM can:
`
`‘ PAVMENT MANAGEMENT c011:
`
`UK" A SEUJRITY CODE
`CRM OODE
`CONTENT SYNTI'ESIS OODE
`
`204
`
`/>
`
`,
`
`NON<VOLATILE DATA MEAORY
`CARD ID DATA
`ACCESS OONTRG. DATA
`PAYMENT DATA
`CARD VAIJJE DATA
`RFM DATA
`CR“ DATA
`DRM 5 ROYALTV DATA
`OW'I'ENT lNDEX AND USE ELM-E8 DATA
`USE REOON DATA
`SUPPLY CHAIN DATA
`MOBILE OOMMUNICATIONS NETWORK
`ACCESS DATA
`
`Google Exhibit 1027 Page 00001
`
`

`
`US 7,334,720 B2
`Page 2
`
`US. PATENT DOCUMENTS
`
`9/1998 Hanel et a1.
`5,809,241 A
`5,847,372 A 12/1998 Kre?
`5,889,860 A
`3/1999 Eller et al.
`5,901,330 A
`5/1999 Sun et al.
`5,918,213 A
`6/1999 Bernard et al.
`5,923,884 A
`7/1999 Peyret et al.
`6,012,634 A
`1/2000 Brogan et al.
`6,078,917 A
`6/2000 Paulsen et a1.
`6,119,945 A
`9/2000 Muller et al.
`6,202,056 B1
`3/2001 Nuttall
`6,385,731 B2
`5/2002 Ananda
`6,424,975 B1
`7/2002 Walter et al.
`6,442,570 B1
`8/2002 Wu
`6,473,829 B1
`10/2002 Dahman et al.
`6,510,236 B1
`1/2003 Crane et a1.
`6,553,413 B1
`4/2003 Leighton et al.
`6,574,643 B2
`6/2003 Walter et a1.
`6,999,936 B2* 2/2006 Sehr ............................ .. 705/5
`
`7,044,362 B2 *
`7,083,081 B2 *
`
`5/2006 Yu ........................... .. 235/375
`8/2006 McGee et al. ............ .. 235/375
`
`FOREIGN PATENT DOCUMENTS
`
`EP
`EP
`EP
`EP
`EP
`EP
`EP
`EP
`EP
`W0
`W0
`W0
`W0
`
`0713198
`0823694
`0823694 A1
`0542298
`0713198 A2
`0843449
`0843449 A2
`0914001
`0914001 A1
`WO 98/19237
`WO 98/19237 A1
`WO 98/33343
`WO 98/37526
`
`5/1996
`2/1998
`2/1998
`4/1998
`5/1998
`5/1998
`5/1998
`5/1999
`5/1999
`5/1998
`5/1998
`7/1998
`8/1998
`
`* cited by examiner
`
`Page 00002
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 1 0f 17
`
`US 7,334,720 B2
`
`Fig. 1
`
`"'"""'“"'""""‘I
`
`10\
`
`,.
`I
`I
`I
`I
`I
`I
`l
`I
`I
`|
`
`Page 00003
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 2 0f 17
`
`US 7,334,720 B2
`
`Fig. 2
`
`Fig. 3
`
`54
`50
`\
`
`B
`
`56
`,
`
`60
`58
`
`\‘
`.
`‘5% Q
`
`52
`
`A
`
`1.0
`X
`
`[.2
`
`~41.
`
`30
`
`10
`"T
`
`______ 3D
`
`Page 00004
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 3 0f 17
`
`US 7,334,720 B2
`
`Fig. 4
`
`P.V.A.
`
`52
`
`s0__/ 6
`
`80
`
`S.P.
`
`INTERNET
`
`D8.
`
`D_S.
`
`80
`
`U.S.
`
`Page 00005
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 4 0f 17
`
`US 7,334,720 B2
`
`102a
`\
`
`102a
`
`102a
`
`102d
`/
`
`ARTIST
`TERMINAL
`
`ARTIST
`TERMINAL
`
`ARTIST
`TERMINAL
`
`STORED
`CONTENT
`
`348 104a
`\
`cONTENT
`OONTENT
`CREATOR
`\'OREATOR
`1 08K
`CONTENT
`web \ PROVIDER
`CONTENT
`PROVIDER
`
`103d
`f
`CONTENT
`PROVIDER
`
`106*’
`
`1062
`
`CONTENT
`PROVIDER‘
`
`‘01
`
`108B
`
`COMMUNICATIONS
`NETWORK
`
`CONTENT
`PROVIDER
`
`"23
`
`1 108 \
`coNTENT
`PUBLISHER
`
`sTORED
`
`cONTENT
`
`112b
`
`11°b-\
`
`OONTENT
`,
`PUBLISHER
`
`1 14
`\
`GATEWAY
`sERvER
`
`116\
`
`-
`cONTENT
`DISTRIBUTOR
`WAN GATEWAY
`
`sToRED
`OONTENT
`
`/
`10o
`
`Fig. 5
`
`A
`
`I
`
`OONTENT
`ACCESS
`TERMINAL‘
`
`118
`
`1"
`WAN I A
`
`I
`
`I‘
`CONTENT
`ACCESS .
`TERMWAL
`118-}
`
`Page 00006
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 5 0f 17
`
`US 7,334,720 B2
`
`CONTENT
`"88$. ACCESS
`TERMINAL
`
`118!)
`
`CONTENT
`ACCESS
`\“TERMINAL
`
`CONTENT
`ACCESS
`TERMINAL
`
`WEB SERVER
`CODE STORAGE
`
`CONTENT ACCESS
`WEB SERVER
`
`128
`
`PAYMENT
`PROCESSOR
`PAYMENT
`MANAGEMENT
`cooE s‘roRAg
`
`1
`
`. f 32 130\
`‘ DRM
`ACCESS CONTROL
`PROCESSOR
`PROCESSOR
`DRM CODE
`STORAGE
`
`ACCESS CONTROL
`CODE STORAGE
`
`1
`
`134
`
`' CONTENT
`DISTRIBUTION
`PROCESSOR
`CRM & PAYMEN
`DISTRIBUTION
`CODE STORAGE
`/
`134a
`
`\
`130a
`
`132a
`
`Fig.6
`
`120
`
`Page 00007
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 6 0f 17
`
`US 7,334,720 B2
`
`MOBILE COMMS
`NETWORK GATEWAY
`
`C P E m
`
`ENTERNET
`
`o F 2 Mmm s m
`
`C4 8 ‘ .1
`
`m w c‘
`
`b mm m Mk.
`
`M
`
`1 Gem
`
`/-170
`CDIDVD PLAYER
`5pc - 170a
`
`
`NR //ES| g mam
`MMI‘ mm MSW
`R \mmm
`mg m
`
`W C
`M w
`
`8
`
`D m Tam
`
`‘M?
`
`0
`
`1166a
`
`F
`
`168a
`
`Fig. 7
`
`Page 00008
`
`

`
`U.S. Patent
`
`mb.e
`
`00
`
`S
`
`4
`
`2
`
`2at
`
`
`
`
`
`>mOs_ws__2<mwOmmwz.¥.._o.sm8w2:3.fmooommzmouo<u_mm»z_Em>mo_2ms_Mmommmoomm
`
`
`
`
`
`25225Fmo<"_mmE_mEo._5n_z_mU<u_Km._.Z.H928%.2.2:00So;
`
`
`
`
`
`5%.$58.2:8.at
`
`
`
`
`ZO_._.<0.n__Iw>NmwmO_>mn_mO<u_mm._.Z_mO_>mDmO<n_Kw.—.Z_
`_2Em>w.5
`
`
`
`
`oz<0Z_kZ_On_._<:m_2o_o:<S._z_sous.Ezmm»z_
`8.8.N32..
`
`
`
`
`
`
`
`mnou._<>m_E.mmEmpzoomz:.&o
`
`
`
`
`
`
`
`..zm_2><._:96muaaqnwfimmmiomm...zms_mo<z<_2moooxmmaommmm;Hmm;
`
`
`
`
`
`
`mo<u_mEz_88mooomo<uEmFz_mwz<:oxm<._<o
`
`
`
`M.58m%>..__%mo<u_mm»z_wmmmmmuzmoms__2oo55.0Wmooomo<u_¢w»z_mum:U¢m>_moSNmooo._.zm:mo<z<s_Em_2><.__._w<o
`
`
`
`
`
`
`cum._.zm._2oo
`
`
`
`
`
`mofimmwz.mm._._z<mpzwpzoo8.mooom:._z<m
`
`
`
`
`
`
`
`Bm0.en,w9”.m.
`
`9m
`
`Page 00009
`
`
`
`

`
`U.S. Patent
`
`Feb. 26,2008
`
`Sheet 8 of 17
`
`US 7,334,720 B2
`
`SN
`
`on
`
`
`
`
`
`Eosmz<._.<Dm:E§o>.zoz
`
`<.~.<QD.9.5
`
`Ea
`
`>mos_ms_
`
`
`
`s.<mooE._.zmz<_2mmn.
`
`v—N
`
`
`
`pzmpzooommohm
`
`>mo_2ws_5.3
`
`=._m<....=
`
`
`
`oz_xmoz,._OK.—.zOU
`
`
`
`>¢os_m_2mowwmoomn0.00..
`
`mo<uEm»z_
`
`._<zmm§m
`
`Eu
`
`:3
`
`mom
`
`SN
`
`d02.2....
`
`
`
`
`
`<.—.<D._O¢._.200mmmoo<
`
`
`
`<._.<D»zms_><n_
`
`
`
`(.53u:..<>nz<o
`
`(.53Ex
`
`<._.<o210
`
`
`
`<._.<D>.:<>omasac
`
`
`
`<._.<Omm.Szmm:oz<xmoz_pzmzzoo
`
`
`
`<._.<n_azoommmm:
`
`
`
`
`
`<._.<Dz_<_._o>..&:w
`
`
`
`<._.<Dwmmoo<
`
`
`
`
`
`xmozcmzmzo:<u_z:_22oomemo:
`
`
`
`
`
`mooo_2m=w>moz:.<mmn_o
`
`
`
`
`
`maoo»zm2uo<z<s_»zm_2><._
`
`
`
`moooEmaommaSEQ
`
`
`
`mooozmo
`
`
`
`
`
`wooom_mmEz>mEmfizou
`
`m.2“.
`
`Page 00010
`
`Page 00010
`
`
`
`
`
`
`
`

`
`U.S. Patent
`
`Feb. 26,2008
`
`Sheet 9 of 17
`
`US 7,334,720 B2
`
` moEmm»z_mum...
`
`
`mw><......pzwpzooI33
`
`
`
`82
`
`an
`NN
`
`«R
`
`Bu
`
`own
`
`mum:
`
`
`
`205200>S._m_o
`
`o_o_..<
`
`mo<n_mm»z_
`
`o_o3
`
`SE28aoz_sE
`canQNN
`
`cum
`
`mommmoomn~ 4
`zéoomm.Emz<2mmn_.022:0?~
`
`
`
`
`
`0mo<u_mm»z_
`
`
`
`mo<&m:.z_cumnun
`
`Eozmz
`
`
`
`
`
`mnoomo<uEEz_cum
`
`
`
`
`
`
`
`mnoo._Om:.ZDOmo<“Em»z_«mm:
`
`2.9“.
`
`
`
`moooJOEZOOmm:
`
`moonmm><#_wzmpzoo
`
`
`3.ova
`
`Page 00011
`
`>mos_m_2
`
`emu
`
`Page 00011
`
`
`
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 10 0f 17
`
`US 7,334,720 B2
`
`S10
`SMART FLASH CARD INSERTED
`INTO CONTENT ACCESS
`TERMINAL CARD INTERFACE
`
`I'
`$11
`SCHEME OWNER REGISTRATION
`WEB PAGE LOADED ONTO
`CONTENT ACCESS TERMINAL
`
`S12
`USER REGISTRATION DATA
`ENTERED INTO CONTENT ACCESS
`TERMINAL
`
`I
`$13
`USER REGISTRATION DATA
`TRANSMITTED TO SCHEME OWNER
`
`II
`514
`PAYMENT REQUEST RECEIVED
`FROM SCHEME OWNER AT
`CONTENT ACCESS TERMINAL
`
`I
`$15
`PAYMENT DATA ENTERED INTO
`CONTENT ACCESS TERMINAL AND
`TRANSMITTED TO SCHEME OWNER
`
`II
`S16
`CARD VALUE DATA AND CARD
`VALUE ACCESS CODE RECEIVED
`BY CONTENT ACCESS TERMINAL
`FROM SCHEME OWNER
`
`II
`817
`CARD REGISTRATION DATA
`RECEIVED FROM SCHEME OWNER
`AND WRITTEN ONTO CARD
`
`I
`$18
`VALUE DATA AND ACCESS CODE
`WRITTEN ONTO CARD AND
`OUTPUT TO USER
`
`I
`S19
`CARD AVAILABLE FOR USE
`
`Fig11a
`
`Page 00012
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 11 0f 17
`
`US 7,334,720 B2
`
`S20
`REQUEST FOR CARD
`REGISTRATION WEB PAGE
`RECEIVED FROM CONTENT
`ACCESS DEVICE
`
`S21
`TRANSMIT CARD REGISTRATION
`WEB PAGE TO CONTENT
`ACCESS DEVICE
`$22
`I
`RECEIVE USER REGISTRATION
`DATA FROM CONTENT ACCESS
`TERMINAL AND STORE IN ACCESS
`CONTROL DATA STORE
`$23
`I
`TRANSMIT PAYMENT REQUEST TO
`CONTENT ACCESS TERMINAL
`
`S24
`RECEIVE PAYMENT DATA FROM
`CONTENT ACCESS TERMINAL
`$25
`I
`PAYMENT PROCESSOR VERIFIES
`PAYMENT DATA WITH PAYMENT
`SYSTEM
`I
`826
`PAYMENT PROCESSOR
`TRANSMITS VALUE DATA AND
`VALUE ACCESS CODE TO
`CONTENT ACCESS TERMINAL
`$21
`I
`PAYMENT PROCESSOR UPDATES
`PAYMENT RECORD DATA STORE
`WITH TRANSACTION DATA
`$28
`I
`CARD REGISTRATION DATA
`LOADED FROM ACCESS CONTROL
`DATA STORE AND TRANSMITTED
`TO CONTENT ACCESS TERMINAL
`$29
`I
`TRANSACTION COMPLETE
`
`Page 00013
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 12 0f 17
`
`US 7,334,720 B2
`
`s30
`INsERT cARD IN CONTENT
`AccEss TERMINAL
`
`s31
`usER ENTERS PAsswoRD INTD
`coNTENT AccEss TERMINAL
`
`I
`$32
`coNTENT ACCESS TERMINAL
`TRANsMITs PAsswoRD To cARD
`FOR vERIFIcATIDN
`
`$33
`
`No
`
`YES
`
`$40
`LDAD ouTLINE cRM
`DATA FROM cARD
`
`I
`$41
`LoAD RETAILER DATA FROM
`RETAILER IAN I wAN
`
`I
`$42
`DISPLAY MENu. RETAILER DATA
`AND ouTLINE cRM DATA ON
`cDNTENT AccEss TERMINAL
`
`$34
`DIsPLAY WARNING AND
`INCREMENT TERMINAL AccEss
`DENIED couNT
`
`$35
`READ cARD THRESHOLD AND
`TDTAL cARD AccEss DENIED
`couNT FROM cARD
`
`$35
`, . D COUNNCAR
`THRESHOLD -a)?
`
`837
`
`DISPLAY CONTENT ERASURE
`WARNING
`
`I
`$43
`INPUT MENu OPTION
`(DDwNLoAD CONTENT;
`ADD MONETARY VALUE;
`CHECK I SPEND CRM VALUE:
`WEB SITE LINKS: EXIT)
`DowNLoAD coNTENT
`
`I
`s44
`LDAD SCHEME OWNER CONTENT
`AccEss WEB PAGE oNTD
`coNTENT AccEss TERMINAL
`
`538 TERMINAL
`COUNT>TERM|NAL
`THRESHOLD?
`
`s39
`OUTPUT ACCESS REFUSED‘
`MESSAGE AND AwArr cARD
`REMOVAL
`
`Fig. 12a
`
`Page 00014
`
`

`
`U.S. Patent
`
`Fe b. 26, 2008
`
`Sheet 13 0f 17
`
`US 7,334,720 B2
`
`$45
`CONTENT SEARCH REQUEST
`DATA INPUT AND TRANSMITI'ED
`TO SCHEME OWNER CONTENT
`DISTRIBUTION PROCESSOR
`
`S46
`CONTENT SEARCH RESULTS
`RECEIVED FROM CONTENT
`DISTRIBUTION PROCESSOR AND
`DISPLAYED ON CONTENT ACCESS
`TERMINAL
`
`S47
`CONTENT ITEM SELECTION DATA
`INPUT AND TRANSMITTED TO
`SCHEME OWNER
`
`S48
`CONTENT COST DATA. CONTENT
`USE RULES AND PURCHASE
`OPTIONS DATA RECENED FROM
`SCHEME OWNER
`
`S49
`PURCHASE OPTION SELECTION
`@— EXIT——
`AND PURCHASE REQUEST INPUT
`OR EXIT TO MENU SELECTED
`
`I
`$50
`CARD VALUE AND CRM DATA
`READ FROM CARD
`
`Fig.12b
`
`S51
`CARD VALUE SUFFICIENT?
`
`S52
`DISPLAY INSUFFICIENT
`VALUE WARNING
`
`PAYMENT REQUEST
`TRANSMITTED TO CARD
`
`Page 00015
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 14 0f 17
`
`US 7,334,720 B2
`
`854
`PAYMENT FOR SCHEME OWNER
`RECEIVED FROM CARD BY
`CONTENT ACCESS TERMINAL AND
`FORWARDED TO e-PAYMENT
`SYSTEM
`I
`555
`PAYMENT RECORD DATA
`RECEIVED FROM e-PAYMENT
`SYSTEM BY CONTENT ACCESS
`TERMINAL AND FORWARDED TO
`CARD
`
`u
`S56
`PAYMENT RECORD DATA,
`PURCHASE REQUEST AND CARD
`REGISTRATION DATA
`TRANSMI'I'I'ED To SCHEME
`OWNER
`I
`$51
`CONTENT AND CONTENT ACCESS
`RULES DOWNLOADED TO CARD
`ass
`I
`RECEIVE’ CRM DATA FROM
`CONTENT DISTRIBUTION
`PROCESSOR
`$59
`I
`WRITE AUDIT TRAIL TO CARD
`AND UPDATE CARD CRM DATA
`
`-
`I: I9 - 1 2C
`
`Page 00016
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 15 0f 17
`
`US 7,334,720 B2
`
`S60
`CONTENT ACCESS WEB PAGE
`REQUESTED AND TRANSMITTED
`TO CONTENT ACCESS TERMINAL
`$61
`I
`CONTENT SEARCH REQUEST
`RECEIVED FROM CONTENT
`ACCESS TERMINAL
`
`I
`S62
`CONTENT DISTRIBUTION
`PROCESSOR SEARCHES
`CONTENT ACCESS DATA STORE
`AND TRANSMITS SEARCH
`RESULTS TO CONTENT ACCESS
`TERMINAL
`I
`$63
`CONTENT ITEM SELECTION
`RECEIVED FROM CONTENT
`ACCESS TERMINAL
`$64
`I
`CONTENT ITEM PURCHASE DATA
`RETRIEVED FROM CONTENT
`ACCESS DATA STORE
`
`Fig. 12d
`
`S65
`CONTENT PURCHASE DATA
`TRANSMITTED To CONTENT
`ACCESS TERMINAL
`
`si5____I_____?.
`
`PAYMENT RECORD DATA.
`PURCHASE REQUEST DATA AND
`CARD REGISTRATION DATA
`RECEIVED FROM CONTENT
`ACCESS TERMINAL
`$67
`I
`PAYMENT RECORD DATA
`VALIDATED WITH e-PAYMENT
`SYSTEM
`7
`
`Page 00017
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 16 0f 17
`
`US 7,334,720 B2
`
`S68
`PAYMENT DISTRIBUTION DATA
`READ FROM CONTENT ACCESS
`DATA STORE
`
`S69
`PAYMENT DISTRIBUTION
`INSTRUCTION TRANSMITTED TO
`B—PAYMENT SYSTEM
`
`I
`S70
`CONTENT ACCESS RULES FOR
`PURCHASED LEVEL OF SERVICE,
`CRM DATA AND CONTENT
`PROVIDER ID DATA READ FROM
`CONTENT ACCESS DATA STORE
`
`II
`S71
`CONTENT ACCESS RULES
`TRANSMITTED TO CONTENT
`ACCESS TERMINAL
`
`II
`7
`S72
`DRM PROCESSOR TRANSMITS
`TRANSACTION REQUEST AND
`AUTHENTICATION TO CONTENT
`PROVIDER
`I
`$13
`CONTENT ACCESS WEB SERVER
`RECEIVES PROTECTED CONTENT
`FROM CONTENT PROVIDER AND
`TRANSMITS CONTENT TO
`CONTENT ACCESS TERMINAL
`
`v
`s14
`PURCHASE DATA AND CONTENT
`ACCESS RECORD WRITTEN TO
`PAYMENT RECORD DATA STORE
`
`II
`S75
`USING STORED RULES UPDATED
`CRM DATA WRITTEN TO CONTENT
`ACCESS DATA STORE AND
`TRANSMI'ITED TO CONTENT
`ACCESS TERMINAL
`
`S76
`II
`I PROCESS ENDSI
`
`Fig. 12e
`
`Page 00018
`
`

`
`U.S. Patent
`
`Feb. 26, 2008
`
`Sheet 17 0f 17
`
`US 7,334,720 B2
`
`S77
`CARD INSERTED INTO PLAYER
`
`S78
`USER PASSWORD ENTERED INTO
`PLAYER AND T'RANSMITTED TO
`CARD FOR VALIDATION
`CONTENT ACCESS PERMITTED
`
`T
`579
`STORED CONTENT INDEX LOADED
`FROM CARD AND DISPLAYED WITH
`MENU (ACCESS CONTENT; CHECK
`VALUE; CHECK CRM; PLAY OPTIONS)
`
`Fig. 13
`
`SELECTION OF coNTENT ITEMS '
`FOR ACCESS ENTERED INTO
`r PLAYER
`
`S81
`CONTENT USE STATUS AND
`CONTENT USE RULES LOADED
`FROM CARD
`
`S82
`USE RULES AND USE STATUS
`COMPARED AND DISPLAYED WITH
`CONTENT PLAY MENU
`
`IS CONTENT USE
`PERMITTED?
`
`YES
`PLAY
`
`S85
`S84
`PAUSE
`WRITE/READ CARDS
`CONTENT AND SUPPLEMENTARY
`DATA MADE AVAILABLE TO USER T‘—._ PLAY STATUS DATA
`CONT
`I
`PLAY
`COMPLETE
`
`S85
`UPDATED CONTENT USE DATA
`WRITTEN TO CARD
`
`CRM DATA AND CRM REWARD
`RULES LOADED FROM THE CARD
`AND UPDATED
`._..____.___T
`
`Page 00019
`
`

`
`US 7,334,720 B2
`
`1
`DATA STORAGE AND ACCESS SYSTEMS
`
`BACKGROUND OF THE INVENTION
`
`This invention is generally concerned With data storage
`and access systems. More particularly, it relates to a portable
`data carrier for storing and paying for data and to computer
`systems for providing access to data to be stored. The
`invention also includes corresponding methods and com
`puter programs. The invention is particularly useful for
`managing stored audio and video data, but may also be
`applied to storage and access of text and softWare, including
`games, as Well as other types of data.
`One problem associated With the increasingly Wide use of
`the intemet is the groWing prevalence of so-called data
`pirates. Such pirates obtain data either by unauthorized or
`legitimate means and then make this data available essen
`tially World-Wide over the internet Without authorization.
`Data can be a very valuable commodity, but once it has been
`published on the intemet it is di?icult to police access to and
`use of it by Internet users Who may not even realize that it
`is pirated. This is a particular problem With audio recordings,
`and, once the bandWidth becomes available, is also likely to
`be evident With video.
`Over the past three or four years compressed audio
`sources have become increasingly Widely available on Web
`pages. One Widely used audio data compression format is
`MP3 (MPEGiAudio Layer 3 of the MPEG1 compression
`algorithm), Which is an internationally de?ned standard
`including a de?nition of compressed audio information such
`as speech or music. It relies on psycho-acoustic properties of
`human hearing to achieve very large data compression
`factors. It is thus feasible to doWnload usefully long pas
`sages of music in a practically convenient short time. Pirate
`data suppliers have not been sloW to realize the potential of
`this, and many unauthorized Websites have sprung up offer
`ing popular music, including recent releases by World
`famous bands. This has caused the recording industry con
`siderable concern and there is an urgent need to ?nd a Way
`to address the problem of data piracy.
`
`SUMMARY OF THE INVENTION
`
`According to the present invention there is therefore
`provided a method of providing portable data comprising
`providing a portable data storage device comprising doWn
`loaded data storage means and payment validation means;
`providing a terminal for internet access; coupling the por
`table data storage device to the terminal; reading payment
`information from the payment validation means using the
`terminal; validating the payment information; and doWn
`loading data into the portable storage device from a data
`supplier.
`Another aspect of the invention provides a corresponding
`mobile data retrieval device for retrieving and outputting
`data such as stored music and/or noise from the data storage
`device.
`The payment validation means is, for example, means to
`validate payment With an external authority such as a bank
`or building society. The combination of the payment vali
`dation means With the data storage means alloWs the access
`to the doWnloaded data Which is to be stored by the data
`storage means, to be made conditional upon checked and
`validated payment being made for the data. Binding the data
`access and payment together alloWs the legitimate oWners of
`
`20
`
`25
`
`30
`
`35
`
`40
`
`45
`
`50
`
`55
`
`60
`
`65
`
`2
`the data to make the data available themselves over the
`internet Without fear of loss of revenue, thus undermining
`the position of data pirates.
`A further advantage of the system is that it alloWs users
`under the age of 18 to make intemet purchases. Currently
`internet users pay for goods and/or services by credit card.
`Since credit cards cannot legitimately be used by persons
`under the age of 18 (at least in the UK), a signi?cant fraction
`of adventurous internet users are excluded from e-com
`merce, one of the most signi?cant predicted uses of the
`internet. In one embodiment of the invention, hoWever, the
`payment validation means comprises e-cash; that is, the
`payment validation means stores transaction value informa
`tion on a cash value of transactions validatable by the data
`storage means. In simple terms, the data storage means can
`be a card Which is charged up to a desired cash value (if
`necessary limited to a maximum value) at a suitable termi
`nal. This might be an internet access terminal but could,
`more simply, be a device to accept the data storage card and
`to receive and count money deposited by the user to charge
`the card, Writing update cash value information onto the
`card. More sophisticated Ways of updating the cash value on
`the card are also possible, such as direct bank transfer. Since,
`With this type of embodiment, the data storage means is,
`essentially, precharged With cash rather than acting as a
`credit card, it can be used by young people Without the risk
`of their incurring large debts.
`In one embodiment the data storage means is poWered by
`the retrieved device When it is connected to the device and
`retains a memory of the doWnloaded data When it is unpoW
`ered. This can be achieved by the use of Flash RAM or, more
`generally, any form of programmable read-only memory.
`Alternatively the data storage means may incorporate a
`rechargeable cell or capacitor and store information in
`battery backed-up static RAM.
`The doWnloaded data may be entered into the data storage
`device by means of an interface such as a magnetically or
`capacitatively coupled connection or an optical connection,
`but preferably the interface comprises contacts for direct
`electrical connection to the storage means. The payment
`validation means may likeWise have one of a variety of
`interfaces but again preferably comprises a set of electrical
`contacts. The payment validation means could, hoWever,
`comprise a magnetic or holographic data-strip such as is
`knoWn for use With credit cards and phone cards. The
`interface to receive the doWnloaded data may be separate
`from the interface to the payment validation means, to
`facilitate separate and simultaneous access to both these
`systems. In other embodiments a single interface may serve
`for both data storage and payment. Advantageously the
`payment validation means includes a memory storing infor
`mation to identify the person Who is paying for the doWn
`loaded data.
`For additional security the doWnloaded data may be
`encrypted. In this case data decryption may be necessary at
`some stage, either in the data storage means or in the
`retrieval device or in an information delivering apparatus
`such as a data access terminal. Alternatively the data decryp
`tion function can be shared amongst one or more of these
`devices. The skilled person Will be aWare of a range of
`suitable encryption/decryption techniques, including Pretty
`Good Privacy (Registered Trade Mark) and PKI (Public Key
`Infrastructure). Normally When the doWnloaded data is
`encrypted a decryption key must be supplied. This can be
`generated automatically by the data access terminal or data
`
`Page 00020
`
`

`
`US 7,334,720 B2
`
`3
`access service provider or it can be entered by the user into
`the data access terminal or into the mobile data retrieval
`device.
`
`The data storage means and/or the retrieval device can be
`provided with access control means to prevent unauthorized
`access to the downloaded data. Additionally or alternatively,
`use control means can be provided to stop or provide only
`limited access of the user to the downloaded data in accor-
`
`dance with the amount paid. These access and use control
`functions may in some embodiments be combined, permit-
`ted use controlling access or permitted access controlling
`use. Thus, for example, a complete set of data information
`relating to a particular topic, a particular music track, or a
`particular software package might be downloaded, although
`access to part of the data set might thereafter be controlled
`by payments made by a user at a later stage. In this way, a
`user could pay to enable an extra level on a game or to
`enable further tracks of an album.
`In embodiments where the access or use control means is
`
`responsive to the payment validation means, access or use
`control information may be stored with the downloaded data
`or in a separate storage area, for example in the payment
`validation means. The user’s access to the downloaded data
`
`could advantageously be responsive to the payment valida-
`tion means, for example, by means of a control line coupling
`the payment validation means with a memory access or
`decryption control element.
`In one embodiment the data storage means comprises an
`electronic memory card or smart card and the mobile data
`retrieval device is provided with a slot to receive the card.
`Preferably the card is a push-fit within the retrieval device,
`and retention of the card may be effected by pressure from
`electrical interface connections and/or resilience of the hous-
`
`ing, or by using a resilient retaining means. In a preferred
`embodiment the retrieval device includes an audio output
`and a display,
`to play a downloaded track and to show
`information about the track and/or an accompanying video.
`To download data onto the data storage means the user
`can employ a data access terminal coupled to the intemet.
`The terminal can directly validate payment; for example in
`the case of a smart card charged with electronic cash it can
`deduct a cash value from the card. Alternatively it can
`communicate with a bank or other financial services pro-
`vider to control payment. In a preferred embodiment, how-
`ever, the terminal connects to a data access service provider
`which provides a portal to other sites and which validates
`payment and then forwards data from a data supplier to the
`user’s local access terminal. The data access service pro-
`vider may alternatively forward payment validation infor-
`mation and/or information from the payment validation
`authority to the data supplier for control by the supplier of
`the data supplied. Thus, access to the payment validation
`system and/or data for downloading may be entirely con-
`trolled by the data supplier.
`Data held on the data storage means may advantageously
`include data relating to the user’s or payer’s usage of the
`system. This information may include, for example, infor-
`mation on a user’s spending pattern, information on data
`suppliers used and information on the downloaded data. This
`information may be accessed by the data supplier and/or
`data access service provider and can be used for targeted
`marketing or loyalty-based incentive schemes such as air
`miles or the like.
`
`The data access terminal may be a conventional computer
`or, alternatively, it may be a mobile phone. Wireless Appli-
`cation Protocol (WAP) and i-mode allow mobile phones to
`efficiently access the intemet and this allows a mobile phone
`
`10
`
`15
`
`20
`
`25
`
`30
`
`35
`
`40
`
`45
`
`50
`
`55
`
`60
`
`65
`
`4
`
`to be used to download data to the data storage means,
`advantageously, directly. The data storage means can, if
`desired, incorporate the functionality of a mobile phone SIM
`(Subscriber Identity Module) card, which cards already
`include a user identification means, to allow user billing
`through the phone network operator.
`In a preferred embodiment the downloaded data is MP3 or
`other encoded audio data, but the system finds more general
`application for other data types. For example, download data
`can include software, and particularly games, share price
`information, current news information, transport timetable
`information, weather information and catalog shopping
`information. The downloaded information may also include
`compressed video data. The storage capacity of the data
`storage means is adaptable to suit the type of data intended
`to be downloaded; for example, 32 megabytes is sufficient
`for CD quality music, but for video it is preferable that the
`data storage means has a capacity of 128 megabytes or
`greater.
`In another aspect, the invention provides a portable data
`carrier comprising an interface for reading and writing data
`from and to the carrier; non-volatile data memory, coupled
`to the interface, for storing data on the carrier, non-volatile
`payment data memory, coupled to the interface, for provid-
`ing payment data to an external device.
`These features allow the data carrier to store both pay-
`ment data and content data, thus providing the advantages
`outlined above. Depending upon the payment system used,
`the payment data memory may also store code for validating
`or confirming a payment to an external payment system. The
`payment data will normally be linked to a card or card holder
`identification data for payment by the card holder. The
`non-volatile memory ensures that stored content and pay-
`ment data is retained in the data carrier when the data carrier
`
`is not receiving power from an external source. Thus “non-
`volatile” encompasses, for example,
`low-power memory
`whose contents are retained by a battery back-up system. In
`one embodiment
`the payment data memory comprises
`EEPROM and the content data memory comprises Flash
`memory, but other types of content data memory, such as
`optical, for example, holographic, data memory can also be
`used. The data carrier may also be integrated into other
`apparatus, such as a mobile communications device.
`Preferably, the portable data carrier further comprises a
`program store for storing code implementable by a proces-
`sor, and a processor, coupled to the content data memory, the
`payment data memory, the interface and to the program store
`for implementing code in the program store, wherein the
`code comprises code to output payment data from the
`payment data memory to the interface and code to provide
`external access to the data memory.
`Normally, the (content) data memory allows both write
`and read access for both storing and retrieving data, but in
`some embodiments the content data memory may be read-
`only memory (ROM). In such embodiments, content may be
`pre-loaded onto the carrier and payment may then be made
`for permission to access the pre-loaded data.
`Preferably, the data carrier also stores a record of access
`made to the content data and updates this in response to
`external access, preferably read access, made to the data
`memory. The carrier may also store content use rules per-
`taining to allowed use of stored data items. These use rules
`may be linked to payments made from the card to provide
`payment options such as access to buy content data outright;
`rental access to content data for a time period or for a
`specified number of access events; and/or rental/purchase,
`
`Page 00021
`
`Page 00021
`
`

`
`US 7,334,720 B2
`
`5
`for example where rental use is provided together with an
`option to purchase content data at the reduced price after
`rental access has expired.
`Thus where the data carrier stores, for example, music, the
`purchase outright option may be equivalent to the purchase
`of a compact disc (CD), preferably with some form of
`content copy protection such as digital watermarking. In this
`example, the rental or subscription payment option may be
`a pay-per-play option, and with this option payment may
`either be before or after access to the stored data so that the
`
`5
`
`10
`
`carrier may operate in either a debit or credit payment mode.
`The portability of the data carrier potentially allows it to
`be used to access content or, in the example, play music
`without the need to be linked to a communications system or
`to be on-line to the internet. By providing a use record
`memory on the data carrier, use of the stored data can be
`tracked while off-line and then any necessary payment can
`be made when the data carrier is next coupled to a commu-
`nication system. This allows the data carrier to operate in a
`credit mode. In a debit mode, the additional storage of use
`rules facilitates the regulation of access to content data
`stored on the carrier without the need for further exchange
`of payment/use data with an external system to validate the
`use.
`
`By combining digital rights management with content
`data storage using a single carrier, the stored content data
`becomes mobile and can be accessed anywhere while retain-
`ing control over the stored data for the data content provider
`or data copyright owner. Preferably, the data carrier also
`stores access control data, such as a user ID and a password,
`as the stored data may be valuable. The access control data
`may be combined with access control to the payment data,
`which is typically by means of a PIN (Personal Identification
`Number) to simplify access to valued content stored on the
`carrier.
`
`In one embodiment the stored content data is encrypted
`and a unique password or PIN and/or biometric data is
`required for decryption. The data carrier may be arranged so
`that the content is erased after a predetermined number of
`incorrect access attempts. Additionally or alternatively, a
`permanently stored flag may be set and/or a hardware
`modification (such as a fusable link) may be made to prevent
`the data carrier from functioning for further data storage/
`retrieval. Preferably, however, access to any stored value/
`payment data is nevertheless retained.
`Supplementary data may also be stored on the carrier in
`association with stored content data. This supplementary
`data may comprise customer reward management data and/
`or advertising data. The supplementary data may comprise a
`p