Note: Descriptions are shown in the official language in which they were submitted.
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
RECHARGEABLE MEDIA DISTRIBUTION AND PLAY SYSTEM
BACKGROUND
The present invention relates to electronic media
players, and more particularly to media that is downloadable over
a communication network.
The distribution of software such as computer
programs to be executed and data to be accessed has traditionally
been by means of physical media that is either sold or rented.
For example, computer programs are distributed on magnetic disks,
and more recently on optical compact disks. Audio works such as
musical recordings have been distributed on grooved records,
magnetic tape, and compact disks; and movies have been distributed
on magnetic tape and video disks of various formats. Often it is
desired to restrict operation of the software to authorized users
and/or for authorized uses. U.S. Patent Nos. 5,014,234 to
Edwards, Jr., 5,564,038 to Grantz et al., and 5,715,169 to
Noguchi, for example, disclose various schemes for restricting
copying and use of the software.
More recently, public access communication channels
such as the Internet have been developed to the point that
distribution of large volumes of software is feasible
electronically. However, the protection of the software against
unauthorized use and copying is typically awkward, bothersome, and
ineffective. U.S. Patent No. 5,790,423 to Lau discloses a system
for downloading and playing music wherein certain copyrighted
material may only be used for a specific length of time. The
system of Lau includes a service center having a user accessible
library of selectable programs, a base unit from which user
generated program selections are transmitted to the service
center, and a cassette for storing programs downloaded by the base
unit from the service center. In one implementation, the date and
time of downloading and playing of particular program selections
is stored in memory of the base unit and/or the cassette.
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
2
Copyright information is programmed into a control program of the
cassette to limit the usage of each selected program. U.S. Patent
No. 4,898,736 to Walker discloses downloadable information having
access through a keyed device.
These systems of the prior art exhibit a number of
shortcomings, including one or more of the following:
1. They are difficult to use in that they require
physical delivery of media and/or keys;
2. They are expensive to manage in that uses must be
metered separately for particular works; and
3. They require undesirable compromises between the
number of available works and the cost of obtaining access.
Thus there is a need for an electronic media
distribution system that overcomes the disadvantages of the prior
art.
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
3
SUMMARY
The present invention meets this need by providing a
rechargeable media distribution and play system that is
particularly efficient and easy to use. In one aspect of the
invention, the system includes a service facility having an
electronically accessible library of data files and an associated
catalog, and an interface to a communications network. The system
can transmit the catalog to a requesting user, and set up customer
accounts, process payments from customers for establishing file
access authorizations, and transmit user-selected files by the
network interface to customers. The system also provides a player
program to each customer for metering access to received data
files as limited by the authorization. Optionally, the system is
enabled for transmitting the selected files to the customer only
while the authorization remains established. The system can also
be implemented for receiving the user request and feeding the
catalog to the user via the network interface. Also, or
alternatively, communications with the user for defining the user
account can be through the network interface.
Preferably the system transmits the data files and
the player program in encrypted form, with the player program
decrypting the received data files only while authorization
remains established. Preferably the authorization is independent
of both the selected files and the number of files selected.
Thus customers can freely access all of the files and play any of
selected files, to the extent of a blanket authorization, which
can also be recharged based on further payments.
Authorization can be only for a period of time which
is measured only during the accessing data of the received data
files by the player program. Alternatively, authorization can be
for a collective number of accesses of data of the received data
files, and the numbered accesses can be counted only after a
threshold period of time of accessing the data files.
Another aspect of the invention provides a method for
distributing electronic media, including providing the media
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
4
service facility as an electronically accessible library of data
files; providing a catalog of the library files; defining a
customer account for a user to identify the user as a customer, to
process payments from the customer and to establish authorization
for accessing the library; providing selected data files from the
library to the customer as received data files in response to a
customer order; and providing to the customer a player program for
accessing and metering access to the received data files. The
step of providing a catalog can include enabling access to the
catalog by users of a communication network. The step of
providing selected data files can include transmitting the data
files over the communication network. The step of providing the
player program can include providing a player device having the
player program implemented therein.
The invention also provides a process for playing
electronic media using the method described above wherein the
authorization is for a predetermined length of time, the method
further including activating the player program; monitoring
elapsed time only during the accessing of the received data files;
and inhibiting operation of the player program when the elapsed
time reaches the predetermined period. This inhibiting is
suppressed until the end of a currently accessed data file.
Alternatively, the process can have authorization for calendar
time, the method including activating the player program; under
user control, selecting a data file to be played; monitoring a
calendar time; playing a selected file; and inhibiting operation
of the player program when the calendar time reaches termination
of the predetermined period.
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
DRAWINGS
These and other features, aspects, and advantages of
the present invention will become better understood with reference
to the following description, appended claims, and accompanying
5 drawings, where:
Figure 1 is a pictorial block diagram of an
electronic media distribution system according to the present
invention;
Figure 2 is a block diagram of a distribution process
using the system of Fig. 1;
Figure 3 is a computer flow chart of a service
facility distribution program for implementing the process of Fig.
2;
Figure 4 is a flow chart of a customer facility media
player program for implementing the process of Fig. 2;
Figure 5 is a flow chart portion showing an
alternative configuration of the player program of Fig. 4; and
Figure 6 is a flow chart showing another alternative
configuration of the player program of Fig. 4.
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
6
DESCRIPTION
The present invention is directed to a system for
distributing and playing electronic media that is particularly
efficient, easy to use, and effective in accommodating differing
patterns of use. With reference to Figs. 1-5 of the drawings, a
distribution system 10 includes a service facility 11 that can be
implemented as a server computer 12 being connected to an
electronic communicaticn network 14, there being a plurality of
user facilities 15 that can also be connected to the network 14,
one such being designated customer facility 15C and being
implemented as a customer computer 16. Connections to the network
14 are by respective communication lines 18, which can be
telephone utility lines. As shown in Figure 2, the service
computer 12 includes an operator interface 20 having a screen
display 21, a keyboard 22, a mouse 23. The computer 12 also
includes memory 24 and a modem interface 26 for connecting to the
network through an available communication line 18.
The memory 24, at least some of which is typically
non-volatile, has a web server program 28 and a library server
program 30 having access to mass data storage 32 in accordance
with the present invention. The mass data storage 32 is loaded
with a library of data files (one such being designated 33) by an
accession program 34, the accession program also generating a
catalog 35 that is periodically updated and saved in the data
storage 32.
The customer computer 16 includes a counterpart of
the operator interface, designated 20', the memory 24, and the
modem interface 26. In addition to having counterparts of the
screen display 21, keyboard 22, mouse 23, the operator interface
20' includes a pair of audio speakers 25, the computer 16 further
including a media interface 36 for driving the speakers 25. In an
exemplary implementation of the customer computer 16, the memory
24 has a web browser 38 by which data made available by the
service facility 11 is accessed and saved in a suitable device
such as a conventional hard disk drive 40. In further accordance
with the present invention, the memory 24 of the customer computer
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
7
receives a media player program 40 for conditionally accessing
received data as further described below.
With further reference to Figs. 2-4, a distribution
process 50 is provided wherein the accession program 34 maintains
a library of recordings and a user of the customer computer 16
interacts with the library server program 30 of the server
computer 12 over the network 14. It will be understood that the
library server program 30 and the accession program 34 can be
respective modules of an integrated computer program. As shown in
Fig. 3, the accession program 34 is programmed to include a
receive data step 52 in which one or more works to be distributed
are received in computer-readable form such as on a digitally
recorded compact disk. The data is subjected to a first level of
encryption, being stored in the data file 33 in an encrypt and
store step 53. Finally, the catalog 35 is updated in a maintain
catalog step 54 for including the new work(s). It will be
understood that catalog listings for new versions of previously
accessioned works replace previous listings. Once the catalog 35
reflects current status of the data file 33, the library server
program 30 is entered for activating a network web page by which
users can communicate with the distribution system 10, in an
activate web page step 56.
A user accessing the web page will be presented with
an election to receive a listing of the catalog 35. Accordingly,
the process 50 includes a test catalog request step 58 for
determining such user request, in which case the catalog is
provided in a return catalog step 59. It will be understood that
the return catalog step 59 can be performed by simply transmitting
a listing of the catalog 35 over the computer network 14 to the
requesting user, the browser 38 automatically opening and
displaying a file containing the listing in a conventional manner.
Alternatively, an option can be provided for the user to request a
hard copy of the catalog 35 to be mailed, in which case the
process 50 proceeds to obtain appropriate mailing information from
the user. Program control is passed from the return catalog step
59 to the test catalog request step 58 for handling further
catalog requests by the user, if any, and as further described
herein. A user accessing the web page will also be presented with
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
8
an election to place new order. Accordingly, the process 50
includes a test order step 60 for determining such user request,
which is processed as described below. The user will further be
presented with an election to open a new account. Accordingly,
the process 50 includes a test account step 62 for determining
such user request. If the user has not requested any of the
three, control is returned to the request catalog step 58, the
process 50 thus looping and waiting for a user request.
When the user has requested a new account, control is
passed to a get user data step 64 in which the user provides
identification data and payment authorization in a conventional
manner. Once the user's account is established, a customer flag
for that user is set in a set cflag step 65 with control passing
to the test catalog request step 58 for further processing of that
user's transactions. In the case that the user requests a new
order, control is passed from the test new order step 60 to a test
cflag step 66. If the customer flag for that user has not yet
been set, control passes to a logon step 68 in which the user
enters a customer identifier and password which are compared in a
test logon step 69 with data previously received in the get user
data step 64. If the logon is unsuccessful, control is passed to
the get user data step 64, it being assumed that the user had not
previously established an account. In case the user had
previously established an account yet failed to properly logon,
the process 50 can include an appropriate recovery procedure
according to methods known in the art. Once logon is successfully
completed, control is passed from the test logon step 69 to the
set cflag step 65 in which the customer flag is set for that user.
As described above, control is returned from the set cflag step 65
to the test catalog request step 58 as before in anticipation of
the user requesting to place a new order, control being passed
successively by the new order step 60 to the test cflag step 66
which, in the case of the customer flag having been set, control
is passed to a get list step 70 wherein the user selects items
from the catalog 35 to be downloaded over the computer network 14
to the mass storage device 40 of the customer computer 16. The
user is invited to approve of his selections in a test list step
71 from which control is returned to the get list step 70 incase
the user is dissatisfied with his previous selection; otherwise,
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
9
control is passed to a :et authorization level step 72 in which an
authorization variable .s set in accordance with previously
established payment autl-:orizations as determined in the get user
data step 64. Next, cord-_-ol is passed to a do transaction step 74
in which selected files are copied from the data file 33. The
selected data files are then further encrypted, preferably in a
manner that permits decryption only by the particular user, such
as by public-private key encryption or other suitable means, ~in a
second level encrypt step 76. The files as thus encrypted are
then transmitted over the computer network 14 in a output files
step 78.
It will be understood that in implementations
integrating the library accession and server programs 30 and 34,
when the outcome of the test account step 62 is negative control
may be returned to the receive data step 52 instead of the test
request step 58, with provision for an interrupt redirection to
the return catalog step 59, the user data step 64, and the test
cflag step 66 for servicing corresponding user requests being
offered on the web page.
With particular reference to Fig. 4, the player
program 42 is implemented for permitting the user to freely play
whatever files of the catalog 35 he has downloaded from the server
computer 12, until a composite authorization for play is expended.
In the exemplary implementation of Fig. 4, the authorization is in
the form of a total elapsed time of play. Accordingly, the player
program 42 includes a display collection list step 80 in which all
files previously downloaded from the server computer 12 are
displayed on the screen display 21 of the customer computer 16.
Next, the program 42 verifies current authorization to play a
selected file in a test authorization step 82. If authorization
is not current, control is passed to a test server contact step 84
wherein the user is invited to establish network contact with the
server computer 12, in which case the program 42 waits in an
obtain authorization step 85 for authorization to be obtained;
otherwise, the player program 42 is terminated. From the obtain
authorization step 85 control is returned to the test
authorization step 82 for verification of the authorization, in
which case control is passed to a select file step 86 for
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
determining which of the listed files the user wishes to have
played. Once the selection is made, control passes to a set meter
step 88, which in the case of the exemplary implementation of Fig.
3, transfers a currently available play time as authorized to a
5 clock register that is maintained by the player program 42. In
this implementation an appropriate setting is the number of
minutes of play authorization currently available to the user.
The selected file is then accessed and played, with decryption, in
a start play step 90 and a timer is activated in a start clock
10 step 91, with control passing to a test end step 92 for testing
whether play of the selected file has run to completion, in which
case termination of play is processed in a stop play step 93 (the
clock is deactivated), with the user's currently remaining play
authorization being updated, control being returned to the test
authorization step 82 at which point the user is invited to select
another file, etc. until he either terminates the program or runs
out of authorization as described below.
The user is also provided with an option to terminate
play prior to the end of the file in a test user stop step 94, in
which case control is transferred to the stop play step 93. As
play continues, with negative outcomes of the test end step 92 and
the test user stop step 94, a test tick step 95 determines whether
the clock has run for a predetermined time (one minute in the
current example), in which case the meter that was previously set
in the set meter step 88 is decremented in a decrement meter step
96. Otherwise, control is returned to the test end step 92.
Following the decrement meter step 96, the meter is tested for
underflow in a test timeout step 97. If not, control is returned
to the test end step 92; otherwise, control is passed to the stop
play step 93 for termination of the play.
With further reference to Fig. 5, an alternative
implementation of the player program, designated 42', provides a
predetermined number of plays (25, for example) rather than a
predetermined play time. In this implementation, the meter is set
in the set meter step 88 to the current available number of plays.
The program 42' proceeds as described above in connection with
Fig. 4 through the start clock step 91, the test end step 92, the
test user stop step 94 to the test tick step 95 for testing
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
11
whether a threshold period of time has elapsed from the start
clock step 91 for avoiding debiting of the user's authorizations
until play has proceeded for an introductory period of time. Once
that introductory time has elapsed, the test tick step 95 reaches
an affirmative result, with control passing to the decrement meter
step 96 in which the play authorization is decremented by one. In
the alternative implementation of Fig. 5, control passes from the
decrement meter step 96 to a stop clock step 98 for stopping the
clock so as to limit the decrementing of the meter to a single
unit for each file played.
In another alternative, the play authorization is for
a period of time as in the implementation of Fig. 4, but with play
continuing to the end of a file being played when timeout occurs.
In this case, the test timeout step 97 is omitted from the
implementation of Fig. 4, control returning directly from the
decrement meter step 96 to the test end step 92.
The player program 82 can utilize a conventional
clock of the customer computer 16C in the start clock step 91 and
the test tick step 95, for example by storing a counterpart of the
system time in the start clock step 91, and comparing that
counterpart with current system time in the test tick step 95,
finding a positive outcome when the time difference reaches a
predetermined interval (one minute in the example described
previously). In connection with the positive outcome, the stored
counterpart of the system time can be incremented by one minute
for subsequent comparisons in a next tick interval. Of course,
the stored counterpart can alternatively be initially set in the
start clock step 91 to one minute ahead of the system time for
facilitating the comparison by detecting a change in sign of the
difference between the values in the test tick step 95. This
approach is impervious to errors or intentional offsetting of the
system time from actual time that may be present in the customer
computer 16C prior to execution of the start clock step 91. To
guard against unauthorized resetting of system time during playing
time, there are several alternatives. For example:
1. Use a separate software clock that is responsive
to a system timer interrupt;
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
12
2. The above in combination with a periodic
integrity check of the software clock program instructions;
3. Either of the above in combination with
periodically relocating the software clock program instructions
and registers;
4. Any of the above in combination with downloading
of new encrypted timer software in each activation of the output
files step of the library server program 30; and
4. P~equiring use of a clock or system time of the
server computer 12 during operation of the player program 42.
Instead of having the authorizations be for a
predetermined amount of playing time, it is also contemplated,
even preferred, to have authorizations based on calendar time, in
which case there is a need to guard against resetting of system
time whether or not the player program 42 is in operation. For
this purpose, the library server program can be implemented to
provide an encoded counterpart of the system time (and date) of
the server computer 12, as well as an expiration time, in the
output files step 78 (whether for downloading data files or just
for recharging). The player program 42 can then make comparisons
between the system times, taking appropriate action in the event
that there is a significant change in the difference. It will be
understood that in implementations based on calendar time there is
no need to monitor elapsed playing time as described above in
connection with Figs. 4 and 5.
With further reference to Fig. 6, another counterpart
of the player program, designated 42", has a timer module 100
associated therewith, the timer module 100 being implemented to
run when the customer computer 16C is operating, notwithstanding
the player program 42" being inactive. As shown in Fig. 6, upon
starting the player program 42", a determination is made of
whether the program is being run for the first time by the
customer computer 16C in a test first play step 102, in which case
a launch timer module step 104 generates and stores appropriate
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
13
files for implementing ;end running the timer module 100, using
programming elements th,~t are known to those having skill in the
art. Accordingly, the ~~ime_r_ module 100 is restarted whenever the
computer 16C is subsequf~nvly booted-up or restarted, the module
100 monitoring a system date and time of the computer 16C as well
as separately maintaining a timer calendar date and time. The
timer calendar date and time is automatically advanced by a
difference between the system date and time and a corresponding
date and time last saved in a previous period of running of the
timer module 100.
V~Ihen the test first play step 102 has a negative
outcome (on a subsequent starting of the player program 42")
control passes to a test timer step 106, wherein the presence and
operation of the timer module 100 is verified, and an appropriate
match of the timer date and time with the system date and time is
determined, in which case control is passed to the display list
collection step 80, described above in connection with Fig. 4;
otherwise, the player program 42" is terminated based on
unauthorized tampering with calendar/time settings. The player
program 42" of Fig. 6 is implemented for operation with
authorizations based on calendar time, with the set meter, start
clock, test tick, and decrement meter steps 88, 91, 95, and 96 of
Fig. 4 being omitted. Thus control passes directly from the
select file step 86 to the start play step 90; from the start play
step 90 to the test end stop 92; and from a negative outcome of
the test user stop step 94 to a counterpart of the timeout test
step, designated 97'. In the timeout test step 97', the calendar
date and time of the timer module 100 is compared with termination
date and time as currently authorized, with control returning to
the test end step 92 or the stop play step 93 as described above
in connection with Fig. 4. It will be understood the timeout test
step 97' (as well as the test user stop step 94) can be omitted
when it is desired that play continue to the end of a particular
data file, control passing from a negative result of the test user
stop step 94 to the test end step 92.
Thus the player program 42" as shown in Fig. 6
provides additional protection against unauthorized tampering with
calendar and time settings of the customer computer 16C. Further
CA 02397717 2002-07-17
WO 01/54022 PCT/USO1/01586
14
protection can be provided by including, in the obtain
authorization step 85, a comparison of the calendar date and time
of the timer module 100 and/or the system time of the customer
computer 16C with the system time and date of the server computer
12, with termination in the event that tampering is detected.
Similarly, the above comparison would be performed in the get list
step 70, the set authorization step 72 and/or the do transaction
step 74 of the distribution process 50, with the process being
terminated as to customers that are determined to have attempted
to misuse the process.
It is further contemplated that a standalone device
can be provided for implementing all or appropriate functions of
the customer computer 16C, in which case a battery powered system
clock can be implemented in a secure manner for setting only in
accordance with the system time of the server computer 12. (Such
device in implementations according to Figs. 4 and 5 would not
require the clock to be settable to date and time of day.)
Although the present invention has been described in
considerable detail with reference to certain preferred versions
thereof, other versions are possible. For example, kiosks can be
provided for dispensing and/or recharging standalone devices that
serve in place of at lease some of the customer computer 16C.
Also, the data files, suitably encrypted, can be provided from the
service facility 11 in the form of a CD or other form of removable
drive medium, for play on the standalone devices and/or customer
computers 16C. Therefore, the spirit and scope of the appended
claims should not necessarily be limited to the description of the
preferred versions contained herein.
