Patent Application
20220398202
The present invention relates to a structure and a method for digital data memory card encryption, in particular to a Digital Rights Management (DRM) for loading digital data that can only be accessed by obtaining rights into a memory card and encrypting it.
Since the improvement of the computer and digital technologies, the content of many creations and works (such as movie or music content) are converted into digital audio-visual compressed files. Subsequently, the files may be burned, or recorded, to portable data storage media such as CDs or DVDs, or other audio/video (A/V) carriers for playing back. Other than movies and music, the contents may include speech contents, teaching contents, opera contents, etc. All these contents may be converted into digital A/V compression files (hereinafter referred to as digital data).
However, due to the progress of compression and duplication technologies, all contents can be easily converted into file formats which can be easily copied by various duplication or burning technologies. With the prevalence of networks, digital contents can be widely distributed by being uploaded to networks and downloaded from networks. As the intellectual assets of creators of such contents cannot be well protected due to new duplication technologies, the will for creativity may be suppressed. Therefore, there is an eager demand for a novel technology to prevent the digital contents from being copied when copying is not permitted, so as to protect the intellectual assets of musicians, publishers, actors, and the like, and to match the requirement of intellectual property laws.
In general, currently most portable data storage media for carrying digital data are in the forms of discs such as CDs and DVDs. Other than some less commonly used erasable optical discs which can be burnt many times, most carriers cannot be burnt repeatedly. Since these portable data storage media have large volumes, in many currently available players (such as MP3), the digital data are copied to memory cards (for example, SD cards) for use.
Current memory cards are mainly used to store the digital data and thus have the same use as discs. If a memory card can be used as a digital data carriers having the security features of secured digital (SD) card and small form factor, then it makes a preferable digital data carrier and can be carried easily and widely used with security function for the protection of the data recorded therein. Other than high transmission speed and large capacity, the SD memory cards currently available are relatively inexpensive to be accepted by the market. Thus, the time of memory cards as the choice for digital data carriers has come.
Typically, digital rights management (DRM) in a personal computer (PC), for example, can provide security in data transfer for downloading digital data through a network as the user pays a fee for downloading the digital data without fear of the downloaded data being copied or spread illegally. DRM can also be used to confine the times, identifies, time periods and the number of copies for duplication of the download contents. Nevertheless, current DRM techniques cannot provide data security for the data recorded on portable data storage media (especially in the case of memory cards).
In view of this, the inventor once invented and filed a Taiwanese patent application for “Structure and method for encrypting digital data memory card”, and obtained patent under No. 1507993. Although the anticipated effect could be achieved, many years passed, the cracks are more innovative. The inventor believes that more rigorous steps should be taken for the encryption and decryption of the memory card itself.
In view of the lack of sufficient encryption and protection for memory cards in the prior art, consequently the intellectual property rights and privacy of various digital data that can only be accessed by obtaining rights cannot be fully protected. Therefore, the present invention specifically proposes a structure and a method for memory card encryption for the prior art, and the technical means for solving the prior problem. The present invention relates to a structure and a method for digital data memory card encryption. The memory itself in a memory card is provided with a read controller and a protection area, and is further divided into a hard disk partition table area and a file area. A portable storage identification (PSID) is written into any of the above-mentioned areas by using an application programming interface (API). When the file area in the memory card has recorded a right object (i.e. the digital data that needs to have the right to obtain), and other readers want to read the memory card, the portable storage identification (PSID) can be used as an encryption mechanism for identification and reading, so as to increase the security in the digital rights management (DRM) of the digital data on the memory card. Moreover, before the writing of the portable storage identification (PSID) by the application programming interface (API), a key instruction produced by means of an encryption and decryption logic is provided to the read controller by the application programming interface (API). The read controller first decrypts the key instruction, and transmits the result to the application programming interface (API).
Therefore, there are four areas in the memory card, including the controller area, the protection area, the partition table area, and the file area. The portable storage identification (PSID) may be recorded in the memory card by one of the following ways.
1. If the portable storage identification (PSID) is to be recorded into the read controller in the memory of the memory card, a general memory card reader such as a SD Card Reader, with an application programming interface (API) developed for the read controller in the memory of the memory card may be used. This is a safer way.
2. If the portable storage identification (PSID) is to be recorded into the protection area in the memory of the memory card, a special tool may be used for partitioning the protection area in the memory of the memory card. A general SD Card Reader with an application programming interface (API) developed for the protection area in the memory of the memory card may be used.
3. If the portable storage identification (PSID) is to be recorded into the hard disk partition table area in the memory of the memory card, the user may use the Windows™ operating system of Microsoft Corporation or other OS operating system to format the partition table area.
4. If the portable storage identification (PSID) is to be recorded into the file area in the memory of the memory card, the user may use the Windows™ operating system of Microsoft Corporation or other OS operating system to format the file area.
Moreover, before the writing of the portable storage identification (PSID) by the application programming interface (API), a key instruction produced by means of an encryption and decryption logic is provided to the read controller by the application programming interface (API). The read controller first decrypts the key instruction, and transmits the result to the application programming interface (API). In this way, the difficulty of interception and cracking by hackers and the crypto agility increase, there is no need to be afraid of interception and cracking by hackers.
In order that those skilled in the art can further understand the present invention, a detailed description is provided herewith. However, the description and the appended drawings are not to be used to confine the scope and spirit of the present invention defined in the appended claims.
A memory card 1 and it contains a memory 11 therein. The memory 11 is provided with a read controller 111 that cooperates with a reader, and a protection area 112, and is further divided into a hard disk partition table area 113 and a file area 114. A portable storage identification (PSID) 115 is written into any of the above-mentioned areas by using an application programming interface (API) 118. When the file area 114 in the memory card 1 has recorded a right object 116 (i.e. the digital data that needs to have the right to obtain), and other readers want to read the memory card, the portable storage identification (PSID) 115 can be used as an encryption mechanism for identification and reading, so as to increase the security in the digital rights management (DRM) of the digital data on the memory card.
Referring to
In one embodiment, to further ensure the security of the PSID 115 in the memory card 1, the memory card 1 is formed as a personal storage disc. Additionally, a universal serial bus (USB) adaptor may be integrated with the memory card 1 so that the user can transfer data through the USB interface of a computing device. This makes it impossible for an unauthorized party to access or decode the data recorded in the memory 11 by detaching the memory card 1.
The memory 11 may be a flash memory in one embodiment, or an electrically-erasable programmable read-only memory (EEPROM) in an alternative embodiment.
The portable storage identification (PSID) 115 may be recorded in one of the four areas of the memory card 1, as described below.
1. In one embodiment, if the portable storage identification (PSID) 115 is to be recorded into the read controller 111 in the memory 11 of the memory card 1, a general memory card reader such as a SD Card Reader, with an application programming interface (API) developed for the read controller in the memory of the memory card may be used for reading and writing data. This is a safer way. Referring to
2. In another embodiment, if the portable storage identification (PSID) 115 is to be recorded into the protection area 112 in the memory 11 of the memory card 1, a special tool may be used for partitioning the protection area 112 in the memory 11 of the memory card 1. A general SD Card Reader with an application programming interface (API) developed for the protection area in the memory of the memory card may be used for reading and writing data.
3. In still another embodiment, if the portable storage identification (PSID) 115 is to be recorded into the hard disk partition table area 113, the user may use the Windows™ operating system of Microsoft Corporation or other OS operating system to format the partition table area 113.
4. In yet another embodiment, if the portable storage identification (PSID) 115 is to be recorded into the file area 114, the user may use the Windows™ operating system of Microsoft Corporation or other OS operating system to format the file area 114.
In one embodiment, regardless of which area the portable storage identification (PSID) 115 is recorded into, the rights object 116 needs to obtain rights to access the digital data. When various devices such as personal computers (PCs), mobile phones or various playback devices (collectively referred to as readers) want to read the files of the corresponding rights object 116, the read controller 111 decrypts the files of the rights object 116 by using controller logic in the read controller 111 or a program in the protection area 112, and obtains the corresponding portable storage identification (PSID) 115 from the decrypted file of the rights object 116 to compare with the portable storage identification (PSID) 115 recorded in the protection area 112. If the portable storage identification (PSID) recorded in the rights object 116 and the portable storage identification (PSID) 115 recorded in the memory 11 are matched, the file of the rights object 116 is provided to the playback device. If they are not matched, the playback device is informed that the reading operation is not permissible.
In one embodiment, only one portable storage identification (PSID) 115 is recorded in the read controller 111 or the protection area 112, no matter what technique (such as a read-only unique device ID or a random number generator with a one-time programming) is used to generate the portable storage identification (PSID) 115, the portable storage identification (PSID) 115 cannot be duplicated. The read controller 111 or the decrypting application programming interface (API) 118 of a playback device will compare the ID recorded in the rights object 116 with the portable storage identification (PSID) 115. When the portable storage identification (PSID) 115 recorded in the rights object 116 is matched to the portable storage identification (PSID) 115 recorded in the memory card, the decryption and playing operations can be performed.
Before the writing of the portable storage identification (PSID) 115 by the application programming interface (API) 118, a key instruction produced by means of an encryption and decryption logic is provided to the read controller 111 by the application programming interface (API) 118. The read controller 111 first decrypts the key instruction, and transmits the result to the application programming interface (API) 118. The data between the read controller 111 in the memory card 1 and the decryption application programming interface (API) 118 of the playback device is encrypted data (that is, the application programming interface (API) 118 wants to read or write to the protection area 112), the application programming interface (API) 118 needs to encrypt the command with the key obtained by agreement between the application programming interface (API) 118 and the read controller 111, and then send it to the read controller 111, and the read controller 111 first decrypts the command, decipher the command, execute the command, and then encrypts the command with the key obtained by agreement between the application programming interface (API) 118 and the read controller 111, and then send the result (command response or data) to the application programming interface (API) 118, and the application programming interface (API) 118 uses the key decryption result (command response or data) obtained by agreement between the application programming interface (API) and the read controller 111. In this way, the difficulty of interception and cracking by hackers and the crypto agility increase, there is no need to be afraid of interception and cracking by hackers.
Only the corresponding read controller 111 in the memory card and the decryption application programming interface (API) 118 of the playback device (as shown in the third figure) can perform the decryption, so as to prevent others from using the memory card reader (SD Card Reader) interface to intercept data.
The present invention provides a digital data protection mechanism. Other than music and image, even video and other digital data, can be protected effectively to assure only the authorized digital data can be used. An illegal invader cannot access the data.
The present invention is thus described. Many variations thereof are not to be regarded as a departure from the spirit and scope of the present disclosure, and all such modifications as would be obvious to one skilled in the art are intended to be included within the scope of the following claims.
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/CN2019/115514 | 11/5/2019 | WO |
