Rights enforcement and usage reporting on a client device

Abstract

An integrity hash is obtained of rights information stored at a client device. The rights information is associated with content stored at the client device. The integrity hash is encrypted using a client device key to generate an encrypted hash. The client device key is externally inaccessible from the client device. The encrypted hash is stored on the client device.

1 - 33 . (canceled) 
     
     
         34 . A client device comprising:
 hash circuitry to generate a validation hash from at least stored clear rights information associated with content stored on a client device;   encryption circuitry to decrypt an encrypted hash to recover an integrity hash using a client device key that is externally inaccessible from the client device, said integrity hash having been previously generated from at least the stored clear form rights information associated with the content; and   a comparator to compare the validation hash to the integrity hash to detect tampering with the rights information.   
     
     
         35 - 42 . (canceled) 
     
     
         43 . The client device of  claim 34  further comprising:
 a content controller to disable the content on the client device if tampering is detected. 
 
     
     
         44 . The client device of  claim 43  wherein the content controller only permits usage of content stored in memory of the client device if the content is not disabled on the client device. 
     
     
         45 - 61 . (canceled) 
     
     
         62 . One or more non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by one or more processors, cause the one or more processors to perform a method, the method comprising:
 generating a validation hash from at least stored clear form rights information associated with content stored on a client device;   decrypting an encrypted hash to recover an integrity hash using a client device key that is externally inaccessible from the client device, said integrity hash having been previously generated from at least the stored clear form rights information associated with the content; and   comparing the validation hash to the integrity hash to detect tampering with the clear form rights information.   
     
     
         63 . The one or more non-transitory computer readable medium of  claim 62 , wherein the method further comprises disabling the content on the client device if tampering is detected. 
     
     
         64 . The one or more non-transitory computer readable medium of  claim 62 , wherein the method further comprises
 receiving a usage request, by the client device, for the content stored at the client device, said usage request to initiate generation of the validation hash and comparison to the integrity hash; and   permitting usage only if the content is not disabled on the client device.   
     
     
         65 . A tampering detection system for electronic content, comprising:
 one or more processors; and   one or more non-transitory computer readable medium having a plurality of instructions stored thereon, which, when executed by the one or more processors, cause the system to perform a method, the method comprising:   generating a validation hash from at least stored clear form rights information associated with content stored on a client device;   decrypting an encrypted hash to recover an integrity hash using a client device key that is externally inaccessible from the client device, said integrity hash having been previously generated from at least the stored clear form rights information associated with the content; and   comparing the validation hash to the integrity hash to detect tampering with the clear form rights information.   
     
     
         66 . The tampering detection system of  claim 65 , wherein the method further comprises disabling the content on the client device if tampering is detected. 
     
     
         67 . The tampering detection system of  claim 65 , wherein the method further comprises
 receiving a usage request, by the client device, for the content stored at the client device, said usage request to initiate generation of the validation hash and comparison to the integrity hash; and   permitting usage only if the content is not disabled on the client device.