Data copyright management system

Abstract

A data copyright management system in one embodiment includes a database for storing original data, a key control center for managing crypt keys, copyright management center for managing data copyrights, and a communication network for connecting these sections. Data supplied from the database to users is encrypted and distributed. The user decrypts the encrypted data by crypt keys obtained from the key control center or copyright management center. When a user stores, copies, or transfers data, the data is encrypted by a different crypt key. This disclosure can be applied to a data copyright management system for using not only single data but also a plurality of data supplied from a single database or a plurality of data supplied from a plurality of databases.

1 . (canceled) 
     
     
         2 . An apparatus, comprising:
 at least one processor; and   a memory storing program instructions executable by the at least one processor to implement a data management control program that causes the apparatus to:
 in response to a request to utilize data, decrypt an encrypted version of the data using a first secret key, wherein the data management control program causes the apparatus to permit use of the decrypted data at the apparatus; 
 in response to a request to transmit the data external to the apparatus, re-encrypt the decrypted data using a second secret key, wherein, upon external transmission of the re-encrypted data, subsequent use of the data on the apparatus is not permitted until a request for reutilization of the data is granted. 
   
     
     
         3 . The apparatus of  claim 2 , wherein the request to utilize the data is made over a communication network to a location configured to supply the first and second secret keys to the apparatus responsive to the first request. 
     
     
         4 . The apparatus of  claim 2 , wherein transmission external to the apparatus includes copying to an external medium or transmission via a communication network coupled to the apparatus. 
     
     
         5 . The apparatus of  claim 2 , wherein the first secret key is generated external to the apparatus. 
     
     
         6 . The apparatus of  claim 5 , wherein the second secret key is generated by the apparatus. 
     
     
         7 . The apparatus of  claim 2 , wherein the first and second secret keys are received from a management center configured to distribute copyrighted data in response to a request to utilize the data. 
     
     
         8 . The apparatus of  claim 7 , wherein the second secret key is generated by the data management control program. 
     
     
         9 . The apparatus of  claim 2 , wherein the second secret key is different from the first secret key, and wherein the first and second secret keys and the data management control program are supplied to the apparatus from a remote location in response to the request to utilize the data. 
     
     
         10 . A method, comprising:
 receiving, at a first computing device, a request for access to data, wherein an encrypted version of the data is accessible to the first computing device;   in response to the request, the first computing device:
 decrypting the encrypted version of the data using a first secret key; and 
 permitting use of the decrypted data at the first computing device; 
   in response to a request to transmit the data to a second computing device, the first computing device:
 re-encrypting the decrypted data using a second secret key, wherein subsequent use of the data at the first computing device is not permitted until a request for reutilization of the data is granted. 
   
     
     
         11 . The method of  claim 10 , further comprising permitting displaying of the decrypted data at the first computing device. 
     
     
         12 . The method of  claim 10 , further comprising permitting editing of the decrypted data at the first computing device. 
     
     
         13 . The method of  claim 10 , wherein the encrypted data includes associated copyright data. 
     
     
         14 . The method of  claim 13 , wherein the copyright data includes secondary copyright information arising from editing of the data. 
     
     
         15 . A computer-readable medium with instructions encoded thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising:
 receiving a request for access to data, wherein an encrypted version of the data is accessible by the at least one computing device;   decrypting the encrypted version of the data using a first encryption key;   permitting access to the decrypted data at a first location;   receiving a request to transmit the data to a second location;   re-encrypting the decrypted data using a second encryption key; and   preventing continued access to the data prior to the at least one computing device granting a subsequent request for access to the data.   
     
     
         16 . The computer-readable medium of  claim 15 , wherein the operations further comprise transmitting the data to the second location in response to the request to transmit the data to the second location. 
     
     
         17 . The computer-readable medium of  claim 15 , wherein the re-encrypting the decrypted data using a second encryption key further includes adding data associated with a user of the decrypted data to the decrypted data before re-encrypting the decrypted data. 
     
     
         18 . The computer-readable medium of  claim 15 , wherein the re-encrypting the decrypted data using a second encryption key further includes adding data associated with a user of the decrypted data to the decrypted data after re-encrypting the decrypted data. 
     
     
         19 . A system, comprising:
 a first computing device implementing a data management control program, wherein the data management control program is configured to:
 receive a request to utilize data; 
 decrypt an encrypted version of the data using a first secret key, wherein the data management control program causes the first computing device to permit use of the decrypted data at the first computing device; 
 receive a request to transmit the data to a third computing device; 
 re-encrypt the decrypted data using a second secret key, wherein, upon transmission of the re-encrypted data to the third computing device, subsequent use of the data at the first computing device is not permitted until a request for reutilization of the data is granted; and 
   a second computing device connectable to the first computing device via a computer network connection and implementing a key management control program, wherein the key management control program is configured to provide the first secret key to the first computing device in response to the first computing device receiving the request to utilize the data.   
     
     
         20 . The system of  claim 19 , wherein the key management control program is further configured to provide the second secret key to the first computing device in response to the first computing device receiving the request to transmit the data to the third computing device. 
     
     
         21 . The system of  claim 19 , wherein the key management control program is further configured to provide a third secret key to the third computing device.