You are on page 1of 331

US 2004O103305A1

(19) United States


(12) Patent Application Publication (10) Pub. No.: US 2004/0103305 A1
Ginter et al. (43) Pub. Date: May 27, 2004
(54) SYSTEMS AND METHODS FOR SECURE continuation of application No. 08/388,107, filed on
TRANSACTION MANAGEMENT AND Feb. 13, 1995, now abandoned.
ELECTRONIC RGHTS PROTECTION
Publication Classification
(75) Inventors: Karl L. Ginter, Beltsville, MD (US);
Victor H. Shear, Bethesda, MD (US); (51) Int. Cl. ................................................... H04L 9/00
Francis J. Spahn, El Cerrito, CA (US); (52) U.S. Cl. .............................................................. 713/200
David M. Van Wie, Eugene, OR (US)
(57) ABSTRACT
Correspondence Address: The present invention provides Systems and methods for
FINNEGAN, HENDERSON, FARABOW, Secure transaction management and electronic rights protec
GARRETT & DUNNER
LLP tion. Electronic appliances Such as computers equipped in
1300 ISTREET, NW accordance with the present invention help to ensure that
WASHINGTON, DC 20005 (US) information is accessed and used only in authorized ways,
and maintain the integrity, availability, and/or confidentiality
(73) Assignee: InterTrust Technologies Corp. of the information. Such electronic appliances provide a
distributed virtual distribution environment (VDE) that may
(21) Appl. No.: 10/696,659 enforce a Secure chain of handling and control, for example,
to control and/or meter or otherwise monitor use of elec
(22) Filed: Oct. 28, 2003 tronically Stored or disseminated information. Such a virtual
distribution environment may be used to protect rights of
Related U.S. Application Data various participants in electronic commerce and other elec
tronic or electronic-facilitated transactions. Distributed and
(63) Continuation of application No. 10/106,742, filed on other operating Systems, environments and architectures,
Mar. 25, 2002, now Pat. No. 6,640,304, which is a Such as, for example, those using tamper-resistant hardware
continuation of application No. 09/327,405, filed on based processors, may establish Security at each node. These
Jun. 7, 1999, now Pat. No. 6,363,488, which is a techniques may be used to Support an all-electronic infor
continuation of application No. 08/760,440, filed on mation distribution, for example, utilizing the "electronic
Dec. 4, 1996, now Pat. No. 5,910,987, which is a highway.”
102 Oc

WCONTEN
CREATOR

122
RULES&
CONROLS

WERGTS
DSRIBUTOR REFORS
ELECTRONIC AND
CONT
HIGWAY PAYMENTS

RUES&
CONROS

18
WD CONTENT
SER

REPORS
4

FINANCAL
CEArNGHOUSE
AN)
WEASTRATOR
Patent Application Publication May 27, 2004 Sheet 1 of 146 US 2004/0103305 A1

§3

ÅLIT LT!
Patent Application Publication May 27, 2004 Sheet 2 of 146 US 2004/0103305 A1

60 Z

40 Z
Patent Application Publication May 27, 2004 Sheet 3 of 146 US 2004/0103305 A1

FIG. 2
102 1 OO

|i VDE CONTENT -
CREATOR

i i

108 RULES &


CONTROLS
i

104
con VDE RGHTS
CONTENT DISTRIBUTOR
ELECTRONIC
CONTENT se-- --
REPORTS
AND
HIGHWAY PAYMENTS

i
i 106
i
110 -
RULES &
CONTROLS
i
112

i
1.
i am-on- WDE CONTENT BLLS 118
USER 1- a

REPORTS PAYMENTS
114 116 120

FINANCIAL
CLEARNGHOUSE
AND --
WDEADMINISTRATOR
Patent Application Publication May 27, 2004 Sheet 5 of 146 US 2004/0103305 A1

REOUEST
FIG. 3

USAGE
REPORT

408

- - - - OVER BUDGET
sed
e
St.
se
se

BUDGET

SUPPLY CONTENT TO USER


Patent Application Publication May 27, 2004 Sheet 6 of 146 US 2004/0103305 A1

JOILSNOTI

SET[n}
JELEW©NI? LNOOSTORH
Patent Application Publication May 27, 2004 Sheet 7 of 146 US 2004/0103305 A1

F.G. 5A
300

CONTENT 302
CONTAINER

NFORMATION CONTENT

D- 304
PERMISSIONS RECORD
s
D-E- BUDGETS
308

OTHER METHODS
1000
Patent Application Publication May 27, 2004 Sheet 8 of 146 US 2004/0103305 A1

008
N|OEI
HENIV O H»E0 )lI,SC1OENH.]

EGH©NLIWT}N5IAG)
Patent Application Publication May 27, 2004 Sheet 9 of 146 US 2004/0103305 A1

51 O

APPLIANCE LINK

SPU 500

SECURE PROCESSING ENVIRONMENT 503

FG 6 TAMPER
RESISTAN
BARRIER
Patent Application Publication May 27, 2004 Sheet 10 of 146 US 2004/0103305 A1
Patent Application Publication May 27, 2004 Sheet 11 of 146 US 2004/0103305 A1

600 Y FIG. 8
659
POWER
SUPPLY

653

612,614

KEYBOARD/ BACKUP
DISPLAY STORAGE

O COMMUNICATIONS
CONTROLLER CONTROLLER

SECONDARY STORAGE
APPLICATION PROGRAMS OTHER
608 NFORMATON
WDE OBJECTS 673
VDE AWARE NON-VDE 300
608a AWARE 608b.

RIGHTS OPERATING SYSTEM ("Ros") '


SECURE WDE OTHER
DATABASE FUNCTIONS OPERATING
610 604 SYSTEM
FUNCTIONS 606
Patent Application Publication May 27, 2004 Sheet 12 of 146 US 2004/0103305 A1
Patent Application Publication May 27, 2004 Sheet 13 of 146 US 2004/0103305 A1

||
O
|

999

|NEOCHWO
OEHG(NOH W ÅT8WES\f

7$/|Z69HOLINAS
|380 ES

989
2-BOV-lèJELNI
(„dfi-O)
Patent Application Publication
Patent Application Publication May 27, 2004 Sheet 15 of 146 US 2004/0103305 A1

FIG.E

11OO(3)
FIG. G
Patent Application Publication May 27, 2004 Sheet 16 of 146 US 2004/0103305 A1

12OO (1)

t2O2(1)

FG. H
Patent Application Publication May 27, 2004 Sheet 17 of 146 US 2004/0103305 A1
Patent Application Publication May 27, 2004 Sheet 18 of 146 US 2004/0103305 A1
Patent Application Publication May 27, 2004 Sheet 19 of 146 US 2004/0103305 A1

09/
9
Patent Application Publication May 27, 2004 Sheet 20 of 146 US 2004/0103305 A1

LNOO,„LNB

LOET8O
---
s
Patent Application Publication May 27, 2004 Sheet 21 of 146 US 2004/0103305 A1

\;d(ZHSIEC9]HFXTOE?N)
NTEAOBIT! SEO!/\ S |;
HBTQNW|-|-
H-1- 989

=Hnoas
999‘COG
Patent Application Publication May 27, 2004 Sheet 22 of 146 US 2004/0103305 A1

F.G. 14A
-/\-N
DEVICE FIRM WIRE LOWEVEL TIME BASE MANAGER 554
SERVICES 582
NITIALZATION
ENCRYTIONIDECRYPTION MANAGER 556
PK
POST
DOWNLOAD
CHALLENGE/RESPONSE AND
AUTHENTCATION KEY AND AG MANAGER 558

RECOVERY KEY STORAGE IN EEPROM


EEPROM/FLASH MEMORY KEY LOCATOR
MANAGER
KEY GENERATOR
NTAZAON CONVOLUTION AGORM
ASK MANAGER 576
SUMMARY SERVICES MANAGER 560
(SLEEP/AWAKEFCONTEXT SWAP)
INTERRUPT HANDLER 584 EVEN SUMMARES
(TIMER/BIU/POWER FAIL/WATCHDOG BUDGET SUMMARES
TIMERIENCRYPTION COMPLETED)
DSTRBUTER SUMMARY SERVICES
BU HANDLER 586
MEMORY MANAGER 578 CANNEL SERVICES MANAGER 562
NITIALIZATION (SETTING MMU CHANNE HEAOERS
ABLES CHANNEDEALS
ALOCATE LOAD MODULE EXECUTION SERVICES
568
DELLOCATE AUTHENTICATION MANAGERISECURE
WRUAL MEMORY MANAGER 580 COMMUNICATION MANAGER 564
SWAP BLOCK PAGNG DATABASE MANAGER 566
EXTERNAMODULE PAGNG MANAGEMENT FILE SUPPORT
MEMORY COMPRESS TRANSACTION AND
SEQUENCE NUMBER SUPPORT
RPC AND TABLES 550 SRNA HAS
NITAZATION O
DTO NTERPRETER 590
BRARY ROUTINES 574.
MESSAGING CODE SERVICES
MANAGER I/O CALLS(STRING SEARCH ETC)
SENDIRECEIVE MSC. EMS THAT ARE PROBABY
LIBRARY ROUTINES
STATUS N WD5
RPC DISPATCH TABLE INTERNAM'S 572 FOR BASIC
RPC SERVICE TABLE METHODS
METER LOAD MODULE(S)
BllLING LOAD MODULE(S)
BUDGET LOAD MODULE(S)
AUDIT LOAD MODULE(S)
READ OBJECT LOAD MODULE(S)
WRITE OBJECT LOAD MODULE(S)
OPEN OBJECT LOAD MODULE(S)
CLOSE OBJECT LOAD MODULE(S)
Patent Application Publication May 27, 2004 Sheet 23 of 146 US 2004/0103305 A1

FIG. 14B

PUBLIC KEY AND PRIVATE KEY, SYSTEM ID,


AUTHENTICATION CERTIFICATE.VDE SYSTEMPUBLIC
KEY, PRIVATE DES KEY
TOP LEVEL KEYS FOR OBJECTS
TOP LEVEL BUDGET INFO
METER SUMMATION VALUES
KEY RECORDS FOR BUDGET RECORDS, AUDIT
RECORDS, STATIC MANAGEMENT RECORDS, UPDATED
MANAGEMENT RECORDS, ETC. D

DEVICE DATA TABLE D


STE ID
TIME

TRANSACTIONSEQUENCE #'s
MISCELLANEOUS
MEMORY MAP
LM/UDT TABLE
ASK MANAGER 576
CHANNEL(S)
SUMMARY SERVICES 560
SECURE DAABASE TAGS
SRN ENTRIES
HASH ENTRIES
O
Patent Application Publication May 27, 2004 Sheet 24 of 146 US 2004/0103305 A1

F.G. 14C

CHANNEL SWAP BLOCK


CHANNEL LM
CHANNEL HEADER & D1
CONTROL SWAP BLOCK
CONTROL LM
CONTROL D1
COMMT LM
COMMIT D1, D2, D3

EVENT SWAP BLOCK


EVEN LM
MAP TABLE (SINGLE) D1
METER SWAP BLOCK
METER LM
METER UDE DELTA, DELTA'
METER TRAL LM O
METER TRAILUDE W
DELTA, DELTA
BUDGET SWAP BOCK
METER LM
METER UDE DELTA, DELTA'
METER TRAILM
METER TRA UDE
DELTA, DELTA
BLING SWAP BLOCK
BLLING LM
METER UDE
BUDGET UDE
BLLING TABLE UDE w
BLNG TRAL LM
BLNG TRA UDE DELA
Patent Application Publication May 27, 2004 Sheet 25 of 146 US 2004/0103305 A1

LONE dVNO XT8WEISV/ 9069

–-
6SYNECOÐTI9LJVlEXW|I
Patent Application Publication May 27, 2004 Sheet 26 of 146 US 2004/0103305 A1

YN? N-1N-1N1 - 1597(1)


FIG. 15A NEP 597(2)
OBJECT ID - 597(3)
RIGHT DIREF. - 597(4)

CHANNEL 597(5)
HEADER EVENT OUEUE
596 EVENT CODE 1/PTR. TO CDR(1)
598(1) 1 EVENT CODE 2/PTR TO CDR(2)
5 9 8( 2)

598(N) EVENT CODEN/PTR TO CDR(N)


599 U JUMPIREFERENCE ABLE

CHANNEL DETAIL RECORD (1)


CDR CONTROL METHOD LOAD MODULE REF.
594(1) URT REF
REF TO OTHER DATASTRUCTURE(S)

CHANNEL DETAIL RECORD (2)


LM(1) REF.
CDR2
594(2) REF. TODATA STRUCTURE(S)
LM(2) REF
REF. TODATASTRUCTURE(S)

LM(N) REF.
REF. TODATA STRUCTURE(S)
Patent Application Publication May 27, 2004 Sheet 27 of 146 US 2004/0103305 A1

F.G. 15B (OBJECT, USER, RIGHT)


ALLOCATE
"AVAILABLE" 1125
CHANNEL

ACCESS 1127
"BLUE PRINT"

WRITE TO 1129
CHANNEL HEADER

OBTAN CONTROL
METHOD

"BND" CONTROL
METHOD TO 1133
CHANNEL

PASS "NT"EVENT . 1135


TO CHANNEL

ACCESS 1137
COMPONENTS

"BIND" COMPONENTS TO 1139


CHANNEL BY CONSTRUCTING
CHANNEL DETAL RECORD(S)
FOREACH EVENT
WTHN "RGHT"
Patent Application Publication May 27, 2004 Sheet 28 of 146 US 2004/0103305 A1

C0IS!VEOT[n,lHN
Patent Application Publication May 27, 2004 Sheet 29 of 146 US 2004/0103305 A1

3O2 \- 800
--------------------

PUBLIC HEADER

PRIVATE HEADER 804

PRIVATE BODY 806


(METHODS 1000)
PERMISSIONS RECORDS 808
- 810
DATA BLOCK i 812a

DATA BLOCK 812b


CONTENT
812C

--------------------

F.G. 17
Patent Application Publication May 27, 2004 Sheet 30 of 146 US 2004/0103305 A1

850

PUBLIC HEADER 8O2 CLEAR

COPY OF DENTIFICATION
ELEMENTS FROM PUBLC PRIVATE
PRIVATE HEADER HEADER HEADER
804 KEY
(1 OF MANY)

PRIVATE BODY(OBJECT LOCAL METHODS, PRIVATE BODY


AD MODULES, A
LOAD AND UDEs) KEY (NPERC)
806

CONTENTS
CONTENT 812a DATA BLOCK 1 KEY 1 .
(NPERC)

CONTENTS
DATABL KEY in
ATA BLOCK in (INPERC)

F.G. 18
Patent Application Publication May 27, 2004 Sheet 31 of 146 US 2004/0103305 A1

PUBLIC HEADER 802 CEAR

COPY OF DENTIFICATION
ELEMENTS FROM PUBLIC PRIVATE
PRIVATE HEADER HEADER HEADER
804 KEY
(1 OF MANY)
KEY BLOCKS 810

PRIVATE BODY(OBJECT METHODS, PRIVATE BODY


LOAD MODUs. AND UDEs) KEY (INPERC)

CONTENTS
KEY 1
CONTENT 812a DAA BLOCK 1
(INPERC)

CONTENTS
DATA BLOCK in KEY
(INPERC)

FIG. 19
Patent Application Publication May 27, 2004 Sheet 32 of 146 US 2004/0103305 A1

88O

PUBLIC HEADER 802 CLEAR

COPY OF DENTIFICATION PRIVATE


ELEMENTS FROM PUBLIC
PRIVATE HEADER HEADER HEADER
804 KEY
(1 OF MANY)

PRIVATE BODY(OBJECT LOCAL METHODS, PRIVATE BODY


LOAD MODULES, AND UDEs) KEY (NPERC)
806

CONTENTS
CONTENT 812a DATA BLOCK 1 KEY 1
(INPERC)
ADMNSTRATIVE
OBJECT
EMBEDDED
De SIONS CONTENT
OBJECT
D RECORD s
SUDGEs
CONTENS
812n DATA BLOCKn KEY in
(IN PERC)

FIG. 20
Patent Application Publication May 27, 2004 Sheet 33 of 146 US 2004/0103305 A1

PUBLIC HEADER 802 CLEAR

COPY OF DENTIFICATION
ELEMENTS FROM PUBLIC PRVATE
HEADER
PRIVATEEADER HEADER KEY
(1 OF MANY)

PRIVATE BODY(OBJECT LOCAL METHODS, PRIVATE BOY


LOAD MODULES, AND UDES) KEY (INPERC)
806

CONTENT 812 CONTENTS


KEY
872a ADMINISTRATIVE INFORMATION (INPERC)

EVENT 1 PARAMETERS
in a a no as as a -------------

EVENT 2 PARAM ETERS DATA

EVENTN

FIG. 21
Patent Application Publication May 27, 2004 Sheet 34 of 146 US 2004/0103305 A1
FIG. 22

Y
PUBLIC HEADER 802 C EAR
TEXT

PRIVATE HEADER 804 COPY OF DENTFcation


ELEMENTS FROM PUBLIC HEADER

EVENT 1 - 1 O12(1)
1014
1012(2)

EVENT 2

SITE
PERC/ SPECIFIC
EVENT 4 LM REF. ETHOD
1006 DATA 1012(4)
EVENT 5 REF 1 1O12(5)

1012(N)
EVENTN

STE
1008
METHOD LOCAL DATA AREA ES5
(MDEs, UDEs, DTDs or PORTIONS THEREOF, KEY
OR REFERENCES THERETO)
Patent Application Publication May 27, 2004 Sheet 35 of 146 US 2004/0103305 A1

FIG. 23
11 OO

PUBLIC HEADER 8O2 CLEAR

copy of iDENTIFICATION
PRIVATE HEADER
EEMENTS FROMPUBC
HEADER
SIESECFC
LM KEY
804

SITE SPECIFIC
ENCRYPTED EXECUTABLE BODY LM KEY
1106

SITE SPECIFC
DTD 1 1108(a) LM KEY

SITE SPECIFIC
DTD n 1108(n) LM KEY
Patent Application Publication May 27, 2004 Sheet 36 of 146 US 2004/0103305 A1

F.G. 24
1200, 1202

PUBLIC HEADER 802 O CLEAR

COPY OF DENTIFICATION
ELEMENTS FROM PUBLIC
PRIVATE HEADER HEADER
804

DATA AREA
SITE SPECIFIC
12O6 UDE KEY

(MAY REFERENCE ONE OR MORE DTDs)


Patent Application Publication May 27, 2004 Sheet 37 of 146 US 2004/0103305 A1

FIG. 25A

ELEMENT REPRESENTING PAST


USAGE BIT MAP USAGE OF ONE ATOMC ELEMENT OF
OBJECT

101 O

FIG. 25B
TIME

Jan. FEB. marapril may gun


10 | 2 | 0 | 1 | 0 | 0
RECORDING | *
NUMBER
MBER so | | | | 7
Patent Application Publication May 27, 2004 Sheet 38 of 146 US 2004/0103305 A1

FIG. 25C

USAGE PAID FOR 5 MONTHS AGO


USAGE PAID FOR 4 MONTHS AGO
USAGE PAD FOR 3 MONTHS AGO
USAGE PAID FOR 2 MONTHS AGO
USAGE PAD FOR IN PRIOR MONTH
USAGE PAID FOR IN CURRENTMONTH

12O6 BILLING METHOD


Patent Application Publication May 27, 2004 Sheet 39 of 146 US 2004/0103305 A1

900 FIG. 26 902 / 808 904


PERC HEADER

RIGHTS RECORD HEADER 1 RIGHT KEYS


908a 912a
906a

920(a)(1)(i) CONTROL SET HEADER 1916(a)(1) CONTROLMETHOD 918(a)(1)

914a(1) REQUIRED METHODHEADER 1922(a)(1)(i)


924(a)(1)(i)(A) 924(a)(1)(1)(B)
METHOD OPTION | METHOD OPTION
920(a)(1)(ii) REQUIRED METHOD HEADER 2922(a)(1)(ii
924(a)(1)(i)(A) 924(a)(1)(i)(B)
METHOD OPTION | METHOD OPTION

CONTROL SET HEADER 2916(a)(2) CONTROLMETHOD 918(a)(2)


920(a)(2)(i
(a)(2)(i) REQUIRED METHOD HEADER 1922(a)(2)(i)
914(a)(2) 924(a)(2)(1)(A) 924(a)(2)(1)(B)
METHOD OPTION METHOD OPTION

REQUIRED METHODHEADER 2922(a)(1)(ii)


920(a)(2)(ii
) 924(a)(2)(i)(A) 924(a)(2)(i)(B) ;
METHOD OPTION METHOD OPTION

RIGHTS RECORD HEADER 2 RIGHT KEYS


906b 908b. 912b

916(b)(1) 916(b)(2)
914(b)(1) CONTROL SET HEADER CONTROL METHOD
Patent Application Publication May 27, 2004 Sheet 40 of 146 US 2004/0103305 A1

FG. 26A
- 808

928 - LENGTH OF PRIVATE BODY KEY Block


930- LENGTH OF THIS RECORD 932

938
940

as His sissions Economistance


FOR RECORD CLASS

... R. 948 944

950
CONTROL SET RECORD O - COMMON TO ALL RIGHTS
LENGTH OF THIS RECORD 952
914 (o) NUMBER OF REQUIRED METHOD RECORDS 954
ACCESS TAG TO CONTROL MODIFICATION OF THIS RECORD 956
REQUIRED METHOD RECORD 1
924(o)(a) 958
NUMBER OF METHOD OPTION RECORDS 96.O

924(o)(a)(1 METHOD OPTION RECORD 1

CORRELATION TAG FOR CORRELATION WITH REQUIRED METHOD 970


ACCESS TAG TO CONTROL MODIFICATION OF THIS RECORD 972
METHOD SPECIFICATRIBUTES 974
DATA AREA 976
924 (o)(a)(2) CHECK VALUE 978
METHOD OFPTION RECORD 2

:E E
920(o)(b) REOURED METHOD RECORD 2

CHECK VALUE
906a RIGHTS RECORD 1
90s RIGHTS RECORD 2
CHECK VALUE 98O
Patent Application Publication May 27, 2004 Sheet 41 of 146 US 2004/0103305 A1

F.G. 26B

906a

908a

982
984
986
988
NUMBER OF CONTROL SETS FOR THIS RIGHT 990

992
THIS RECORD
CONTROL SET FOR RGHT 910
912
914(a)(1)
914(a)(2)
994
CHECK VALUE
Patent Application Publication May 27, 2004 Sheet 42 of 146 US 2004/0103305 A1

FIG. 27
444A(1)
444
SITE RECORD NUMBER
USER (GROUP) D 444A(2)
REF. TO "FIRST" COMPLETED OUTGOING SHPPING RECORD 444A(3)
REF. TO'LAST" COMPLETED OUTGOING SHIPPING RECORD 444A(4)
HEADER REF. TO "FIRST" SCHEDULED OUTGOING SHIPPING RECORD Lu 444A(5)
444A REF. O'LAST" SCHEDULED OUTGONG SHIPPING RECORD 444A(6)
VALIDATION TAG FROM NAME SERVICES RECORD 444A(7)
VALIDATION TAG FOR "FIRST" OUTGOING SHIPPING RECORD(S 444A(8)
CHECK VALUE 444A(9)

SITE RECORD NUMBER 445(1)(A)


FIRST DATE/TIME FORSCHEDULED SHIPMENT 445(1)(B)
LAST DATEITIME FORSCHEDULED SHIPMENT 445(1)(C)

SES 445(1)(1)
445(1) REF. TO "PREVIOUS" OUTGOING SHIPPING RECORD 445(1)(J)
REF. O'NEXT" OUTGOING SHIPPING RECORD 445(1)(K)
VALIDATION TAG FROM HEADER 445(1)(L)
VALIDATION AG TO ADMNSTRATIVE EVENT LOG 445(1)(M)
VALIDATION AG TO NAME SERVICES RECORD 445(1)(N)
VALIDATION TAG FROM PREVIOUS RECORD 445(1)(O)
VALIDATION AG TO NEXT RECORD 445(1)(P)
CHECK VALUE 445(1)(Q)

SHPPING RECORD N 445(1)(R)


Patent Application Publication May 27, 2004 Sheet 43 of 146 US 2004/0103305 A1

FIG. 28
446A(1)
- 446

REF. TO 'FIRST COMPLETED NCOMING RECEIVING RECORD 446A(3)


REF. TO "LAST" COMPLETED INCOMING RECEIVING RECORD 446A(4)
HEADER REF. TO 'FIRST" SCHEDULED INCOMING RECEIVING RECORD 446A(5)
446A REF. TO "LAST' SCHEDULED NCOMING RECEIVING RECORD 446A(6)
VALIDATION AG FROM NAME SERVICES RECORD 446A(7)
VALIDATION TAG FOR "FIRST INCOMING RECEIVING RECORD(S) 446A(8)

T
SITE RECORD NUMBER 447(1)(A)
FIRST DATE/TIME FORSCHEDULED RECEPTION 447(1)(B)
LAST DATE/TIME FORSCHEDULED RECEPTION 447(1)(C)
ACTUAL DATE/IME OF COMPLETED RECEPTION 447(1)(D)
OBJECT ID OF ADMINISTRATIVE OBJECT (TOBE) RECEIVED 447(1)(E)
REF. To ENTRY IN ADMINISTRATIVE EVENT LOG 447(1)(F)
RECEIVING REF. TO NAME SERVICES RECORD NAMING SENDER 447(1)(G)
RECORD
447(1) PURPOSE OF RECEPTION 447(1)(H)
STATUS OF RECEPTION 447(1)(1)
REF. TO "PREVIOUS" NCOMING RECEIVING RECORD 447(1)(J)
REF. TO "NEXT" INCOMING RECEIVING RECORD 447(1)(K)

CHECK VALUE 447(1)(M)

RECEIVING RECORD N 447(2)


Patent Application Publication May 27, 2004 Sheet 44 of 146 US 2004/0103305 A1

442

ADMINISTRATIVE EVENT LOG RECORD 1 -'(1)


ADMINISTRATIVE EVENT LOG RECORD 2 442(2)

443A(1)
443A(2)
ID of ADMINISTRATIVE OBJECT 443A(3)

nuMBER of Events 443A(4)

starvino
RECEIVING TABLE

CHECKVALUE
443A(5)

443A(6)
SUBRECORD LENGTH 442(J)(1)(a)
ADMN
EVENT LOG
DATA AREA LENGTH 442(J)(1)(b)
RECORD EVENT D 442(J)(1)(c)
442(J)
RECORD TYPE 442(J)(1)(d)
RECORD D 442(J)(1)(e)
DATA AREA 442(J)(1)(f)
CHECK VALUE 442(J)(1)(g)
SUBRECORD
442(J)(1)

SUBRECORD N 442(J)(N)

ADMINISTRATIVE EVENT LOG RECORD N 442(N)


Patent Application Publication May 27, 2004 Sheet 45 of 146 US 2004/0103305 A1

SLCJEOHW, 000|| ||
HB
|
W
3 ZLNBAB

8SO0HB8d (LOETG)
|CJHOOBRH
LOET S
Patent Application Publication May 27, 2004 Sheet 46 of 146 US 2004/0103305 A1

460

SITE RECORD NUMBER


466(1)

466(2) OBJECT TYPE -

466(3) CREATOR ID
466(4)
O OBJECT ID O
OBJECT
PONTER INTO SUBJECT TO SUBJECT
466(5) TABLE 462 TABLE RECORD(S)
460(N)
466(6) AT TRIBUTE(S)

466(7) MINIMUM REGISTRATION INTERVAL

466(8) TAG TO SUBJECT TABLE


RECORD

466(9) CHECK VALUE

FIG. 31
Patent Application Publication May 27, 2004 Sheet 47 of 146 US 2004/0103305 A1

FIG. 32
SITE RECORD NUMBER

CREATORD 468(2)
462(M)
ORIGINAL DISTRIBUTORD 468(3)

LAST DISTRIBUTORD 468(4)

OBJECTD 468(5)
"HEADER"
468 REF. TO 'FIRST" SUBJECT
RECORD 470
TAG FROM OBJECT REGISTRATION
TABLE RECORD
TAG TO "FIRST" SUBJECT RECORD

CHECK VALUE

SITE RECORD NUMBER

USER (USER GROUP) ID


USER (USER GROUP)ATTRIBUTES
- TO URT
REF, NTO USERRIGHTS TABLE 472(4) RECORD(S)
REF. TO "NEXT" SUBJECT 472(5)
SUBJECT RECORD
RECORD
47O(1) TAG FROM HEADER 472(6)

TAG TO USERRIGHTS TABLE RECORD 7207)


TAG TO "NEXT" SUBJECT RECORD 472(8)

CHECKVALUE 472(9)
Patent Application Publication May 27, 2004 Sheet 48 of 146 US 2004/0103305 A1

FIG. 33

FROM SITE RECORD NUMBER


SUBJECT
TABLE
URT 464(K)
HEADER 474(4)-
474 474(5)

RIGHTS
RECORD
HEADER RGHT ID

PONTERTO "NEXT" RIGHTS RECORD


POINTERTO "FIRST" SET OF USER
CHOICE RECORDS
476 TAG FROM URT HEADER
TAG TO 'FIRST SET OF USER
CHOICE RECORDS

SET
OF
USER 478(3)
CHOICE
478(4)
478 478(5)
478(6)
480(1)
Patent Application Publication May 27, 2004 Sheet 49 of 146 US 2004/0103305 A1

FIG. 34 A
482 SITE RECORD TABLE
BIES,
REGISTRATION
TABLE
STE RECORD O
SITE RECORD 1
STE RECORD 2
SITE RECORD 3
SITE RECORD 4
STE RECORD 5
SITE RECORD 6
SITE RECORD 7
STE RECORD 8
SITE RECORD 9
STE RECORD 10
STE RECORD 11
SITE RECORD 12

METHODS
1OOO

METER 1
METER 2

EVENT 1
EVENT 2
GROUP RECORD 1

GROUP RECORD 2 BLLING 1


486
AUDT 1
GROUP RECORD N AUDT2

GROUP RECORD
TABLE BUDGE
BUDGET 2
BLNG 2
Patent Application Publication May 27, 2004 Sheet 50 of 146 US 2004/0103305 A1

FIG. 34A
482

482(J)

TYPE OF RECORD
484(1)

OWNER OR CREATOR OF RECORD 484(2)


CLASS 484(3)
NSTANCE 484(4)
TYPE SPECIFIC DESCRIPTOR (e.g., OBJECTD) ASSOCIATED 484(5)
WITH RECORD

TABLE IN WHICH THE RECORD SOCATED 484(6)

POINTER - OFFSET, WITHIN THE TABLE, TO WHERE 484(7)


THE RECORD BEGINS

RECORD LENGTH | 484(8)


484(9)
VALIDATION AG FOR RECORD

CHECK VALUE 484(10)


Patent Application Publication May 27, 2004 Sheet 51 of 146 US 2004/0103305 A1

FIG. 34B

SITE RECORD NUMBER


- a )
488(1)
NUMBER OF REFERENCE SUBRECORDS 488(2)
VALIDATION TAG FOR GROUP OF RECORDS 488(3)
REFERENCE SUBRECORD 1 488(4)
REF.(SITE RECORD NUMBER 1) FOR 1ST RECORD IN 490(A)
GROUP
WALDATION AG FOR RECORD 490(B)
REFERENCE SUBRECORD 2 488(5)
REF.(SITE RECORD NUMBER2) FOR 1 STRECORD IN 490(C)
GROUP
VALIDATION TAG FOR RECORD 490(D)

CHECKSUM (CRC) 488(6)


Patent Application Publication May 27, 2004 Sheet 52 of 146 US 2004/0103305 A1

te FIG. 35

eruance causcleanerous
APPLIANCE AND CLEARINGHOUSE AUTHENTICATE ONE
ANOTHER AND AGREE ON A MESSAGE KEY

DOES APPLANCE HAVE


(1 AUDIT INFO TO SEND?

1158

APPLIANCE SENDS ADMINISTRATIVE OBJECT(S)


CONTAINING AUDIT INFO

1160

CLEARNGHOUSE SENDS RESPONSIVE ADMIN, OBJECT(S)

1162 APPLIANCE UPDATES SECURE DATABASE


BASED ON OBJECTS RECEIVED

1163 APPLIANCE HAVE


REQUESTS TO SEND
2
1164. Y
APPLIANCE SENDS ADMINISTRATIVE OBJECT(S)
REO UESTING BUDGETS AND/OR PERMISSIONS
1166

CLEARNGHOUSE SENDS RESPONSIVE


ADMINISTRATIVE OBJECT(S)

11.68 APPLIANCE UPDATES SECURE DATABASE BASED


ON OBJECTS RECEIVED

END
Patent Application Publication May 27, 2004 Sheet 53 of 146 US 2004/0103305 A1

080|

9,10|
9/01

VNZIOH]LTIV ESEO|A} E S N O d E H
Patent Application Publication May 27, 2004 Sheet 54 of 146 US 2004/0103305 A1

?790|
090|

|NEW||CNJHBOTE}IB

H|OdBCÅ]

SSEOOVSAEX
Patent Application Publication May 27, 2004 Sheet 55 of 146 US 2004/0103305 A1

FG. 38 STORE ITEM N


SECURE DATABASE

1086
GENERATE NEW KEY

1088
ENCRYPT RECORD
WITH NEW KEY

1090
ROOM. YES
FOR NEW
KEY?

NO
READ AND DECRYPT
1092
OTHER RECORD(S)
FROM SECURE
DATABASE
USING OLD KEY(S
1094
RE-ENCRYPT SAD
OTHER RECORD(S)
USING NEW KEY

1096
DISCARD OLD KEY(S)

SAVE NEW KEY 1097

1098
STORE ENCRYPTED
RECORD(S)
N SECURE DATABASE

END
Patent Application Publication May 27, 2004 Sheet 56 of 146 US 2004/0103305 A1

BACKUP
1250

1252
F G. 39 GENERATE
BACKUP KEY(S)

1254. READ AND DECRYPT


TEM

1256
ENCRYPT TEM WITH
BACKUP KEY(S)
1258 WRITE ENCRYPTED
ITEM TO BACKUP
STORE

1260

1262
ENCRYPT SUMMARY
SERVICES AUD NFO.
WITH BACKUP KEY(S),
WRITE TO n
BACKUP SORE

1264 ENCRYPT BACKUP


KEY(S) AND OTHER ID
NFO.
WITH PUBLIC KEY:
WRITE TO
BACKUP STORE

1266
ENCRYPT BACKUP
KEY(S) WITH ADMIN.
KEY: WRITE TO
BACKUP STORE
Patent Application Publication May 27, 2004 Sheet 57 of 146 US 2004/0103305 A1

START

FG. 40 ESTABLISH 1270


SECURE
COMMUNICATIONS

1268
EXTRACT 1272
Y- "WORK IN PROGRESS"
AND SUMMARY VALUES

1274

REQUEST CURRENT -1
BACKUP FROM SPU

1276
RESET SUMMARY
VALUES AND COUNTERS
CONSSTENT WITH LAST
BACKUP

RESTORE SECURE DB 1278


FROM BACKUP

COMPUTE BILLS BASED


ON RECOVERED
1280
VALUES

1282

PERFORM OTHER
ACTIONS TO RECOVER
FROM SPU DOWNTIME
Patent Application Publication May 27, 2004 Sheet 58 of 146 US 2004/0103305 A1

1452
N Event and
optional information

WDENOOe

F.G. 4 1 a
Patent Application Publication May 27, 2004 Sheet 59 of 146 US 2004/0103305 A1

VDE Node 44
N
N

1469 Event and


optional information
Event and
600A optional information
VDENOde

Request-1
METHOD

F.G. 41b
Patent Application Publication May 27, 2004 Sheet 60 of 146 US 2004/0103305 A1

600C FG. 41 C

1464 Event
Event and
and optional
optional information
600B information

VDE NOde 1454

N Response-3
METHOD 'Response

1469 Event and


optional information
Event and
optional information
WDE NOde

Request-1
Patent Application Publication May 27, 2004 Sheet 61 of 146 US 2004/0103305 A1

102 FG. 41 d
Content object Creator VDE node
484A

1474AB Request
More More
Grant Budget Budget

Content object distributor VDE node


484B

N Request -
A Distribute
1482BC 1482BC
474 BC
More More
Grant Budget Budget
Budget

Content USe VDE node 1476C 1478C


Patent Application Publication May 27, 2004 Sheet 62 of 146 US 2004/0103305 A1

Start BUDGET Method 2250


Use Process
Atomic Element,
Event Count
2254

Prime BUDGET BUDGET Audit


Audit Trail Write Trai UDE

2258

Obtain DTD DTD for


for BUDGET Read BUDGETUDE

2262

Obtain BUDGET Read BUDGETUDE

2266
2268

Audit date expired Yes BUDGET Failure (BUDGET Method


(time)? Audit Record Failed

2272

Update BUDGET BUDGETUDE


using AE and Count

2276

Save BUDGET BUDGET Audit


Use Audit Record Trai UDE

BUDGET Method
Succeeded FG. 42a
Patent Application Publication May 27, 2004 Sheet 63 of 146 US 2004/0103305 A1

Start BUDGET Method


Administrative
Request Process
/ 2250
2282
Prime BUDGET BUDGET
Administrative Write Administrative
Audit Trail Audit Trai

2284
2286
Queue Request
for Administrative BUDGET
Processing Write Administrative
Of BUDGET Request
2288 2290
Save BUDGET BUDGET
Administrative Write Administrative
Audit Trail Audit Trail

Some time later


2292 2294
Prime
communications Write Communications
audit trail audit trail
2298
2296
BUDGETUDE,
Write BUDGET BUDGETAudit
Administrative Trail UDE(s),
Request into Read and BUDGET End BUDGET Method
Administrative Administrative Administrative
Object Request Request Process
Record(s)

Save P
communications Communications
audit trail audit trail

FG. 42b
Patent Application Publication May 27, 2004 Sheet 64 of 146 US 2004/0103305 A1

Start BUDGET Method


Administrative
-1 2250
Response Process
2306 2308
Prime BUDGET Communications
Communications and Write and Response
Response Audit Trail Audit Trail

2310
Unpack Admin. BUDGET
Objeg grieve Write
Administrative 72312
Request, Budget
request(s), audit records, and
trail(s) and record(s) audit information

Retrieve request and 2314


determine the response Administrative 2316
method to run to Read Request
process the request

Send event(s) 238


Contained in
Request record(s)
to the Response BUDGET Request 2320
Method and Read/Write and Response
generate records
Response records
and Response
request

Write BUDGET BUDGETUDE


Administrative and BUDGET
Administrative End BUDGET Method
Response records Response Administrative
into Administrative
Record(s) Response. Process

Save Communications Communications


and response and response
processing audit trail processing
audit trail

FIG. 42c
Patent Application Publication May 27, 2004 Sheet 65 of 146 US 2004/0103305 A1

2250
Start BUDGET Method
Administrative
Reply Process
2332
Prime BUDGET BUDGET 2334
Administrative and Administrative
Write -- Communications and
Communications
Audit Trail Audit Trail

2336
Extract Response Records
and Requests from BUDGET Reply I-2338
Administrative Object and Write Records and
Write Reply records to Requests
the Secure database

2355
Save BUDGET 2340 BUDGET 234
Communications Write E. Audit Trai UDE
Audit Trail Audit Trail

Some time later Write


2342
2343
Prime audit trail Write Audit Trai UDE Prime audit trail
(if required) (if required)

2346
Retrieve Reply record
and determine method Read BUDGET Reply
required to process it Record(s) End BUDGET
Method
Administrative
Reply Process
Send event(s)
contained in Reply 2348 2350
record(s) to the 2356
Reply Method Read/Write BUDGET Records
and
generate/update
database records

Delete Reply record(s) BUDGET Reply


from database Record(s)
FG. 42d
Patent Application Publication May 27, 2004 Sheet 66 of 146 US 2004/0103305 A1

Start REGISTER
Method USe Process - 2400 FG 43a
REGISTEREvent
t 2402
REGISTER 2404
Prime REGISTER
Audit Trail Write Trail UDE

24.08
Object
Already Yes REGISTER Method
Registered completed

NO
2412
Extract REGISTER PERC and/or
record Set from PERC Read - REGISTERMDE
or REGISTER MDE (Catalog)
242O
2416
Al REGISTER
required pieces NO Oueue REGISTER Read Request
available request record Record

2418 2432
REGISTER Method
Suspended
Write REGISTER
24.24 Audit Record
User Selects
registration options 2434 Write
from method
options in PERC REGISTER
Trai UDE

Validate user Selected


NO registration options
REGISTER
Method
Completed
All Write URT
selections containing user
validated Selections to
database
Patent Application Publication May 27, 2004 Sheet 67 of 146 US 2004/0103305 A1

FIG. 43b
Start REGISTER 2400
Method Administrative
Request Process
2440 2442

Prime Communications Communications


audit trail Write audit trail

2446 2444
Determine site
Configuration
permitted byas Read Stored data
privacy filter

2448 2450
Write REGISTER
Administrative AER
Request into
Administrative
Read E. rave
equeS
Object Record(s)

2452 2.454

Save communications Communications


audit trail Write audit trail

2456
End REGISTER
Method Administrative
Request Process
Patent Application Publication May 27, 2004 Sheet 68 of 146 US 2004/0103305 A1

Start REGISTER 2400


Method Administrative
Response Process - FG. 43C
2460
Prime REGISTER Communications 24.62
Communications and Write and Response
Response Audit Trail Audit Trai
2464

Unpack Admin. REGISTER


Object and retrieve Administrative -2466
REGISTER Write Requests and
request(s) configuration
information
2468
Retrieve request
and determine the 2470
response method to Read - Administrative
run to process Request
the request
24.72 2474
User
provided Write failure
enough information NO response record
to register the to database
object?
2476 :
2478
Send event(s)
contained in Request REGISTER
record(s) to the Request and
Response Method Read/Write -- Response records
and generate (response records,
Response records
and Response PERC, UDE(s))
Request

Write REGISTER 2488


PERC, UDE(s)
Administrative Methods and
Response records Read REGISTER End REGISTER
into Administrative Administrative Method Administration
Object Response Records Response Process

save communications Communications


and response and response
processing audit trail processing
audit trail
Patent Application Publication May 27, 2004 Sheet 69 of 146 US 2004/0103305 A1

Start REGISTER 2400


Method Administrative
Reply Process
2490
- FG. 43d
Prime REGISTER REGISTER 2492
Administrative and Write Administrative and
Communications Communications
Audit Trail Audit Trail
24.94
Extract Response
Records and Requests REGISTER 2496
from Administrative Write Reply Records
Object and write and Requests
Reply records to
the Secure database
2498
Save REGISTER REGISTER
Administrative and Administrative and 2500 2513
Write
Communications Communications
Audit Trail Audit Trail
Audit trail records
Some time later

Prime Audit Trail


/ 250 2502
Write Audit trail records
(if required)
2503 2504
Retrieve Reply record
and EAEPE Read I REGISTER Reply Write Audit Trail
required to process it records (if required)

Send event(s) REGISTER Secure


contained in Reply database records End REGISTER
record(s) to the (Methods, Load Method Administration
Reply method and Modules, MDE, Reply Process
generate/update UDE)
database records

Delete Reply record(s) Delete


REGISTER 251
from database Reply Record(s)
Patent Application Publication May 27, 2004 Sheet 70 of 146 US 2004/0103305 A1

Start AUDIT Method 2520 FG. 44 a


Administrative
Request Process
/ 2522
Prime AUDIT AUDIT 2524
Administrative Write Administrative
Audit Trail Audit Trail

Queue Request for


Administrative s AUDIT 2528
Processing of AUDIT Write Administrative
Request
25.30
Save AUDIT AUDIT 2532
Administrative Write Administrative
Audit Trai Audit Trail

Some time later


2534 2536
Prime
Communications Write Communications
audit trail audit trait

2540
Write AUDT Specific UDE, End AUDIT Method
Administrative Audit Trail UDE(s), Administration
Request(s) into and Administrative
Administrative Request Request Process
Object Record(s)

Save communications Communications


audit trail Write audit trail
Patent Application Publication May 27, 2004 Sheet 71 of 146 US 2004/0103305 A1

Start AUDIT Method F.G. 44b


Administrative
Response Process

Prime AUDIT
2550
--
Communications 2552
Communications and Write and Response
Response Audit Trail Audit Trail

2554
Unpack Admin, AUDT
Object and retrieve Administrative 2556
AUDIT request(s) Write Request, Budget
audit trail(s) and records, and audit
record(s) information

2558
Retrieve request and 2560
determine the Read Administrative
response method to Request
run to process
the request
2562
Send event(s) 2564
Contained in
Request record(s) AUDIT Request
to the Response Read/Write and Response
Method and generate records
Response records
and Response
request
2566 2568 2574
Write AUDIT AUDITUDE(s), End AUDIT Method
Administrative and Administrative Administration
Response records Read
Response Response Process
into Administrative Record(s)
Object

Communications
Save Communications and response
and response processing
processing audit trail audit trail
Patent Application Publication May 27, 2004 Sheet 72 of 146 US 2004/0103305 A1

Start AUDIT Method F.G. 44C


Administrative 2520
Reply Process
2580
Prime AUDIT AUDIT 2582
Administrative and Write Administrative
COmmunications Communications
Audit Trail Audit Trail
2584
Extract Response
Records and AUDIT Reply 2586
Requests from Write Records and
Administrative Object Requests
and write Reply to
the Secure database
2588
Save AUDIT Save AUDIT 2590
Administrative and Administrative and
Communications Write Communications
Audit Trail Audit rail

Some time later


2592 2594
Retrieve Reply record
and determine method Read AUDIT Reply
required to process it records
2595
Send event(s) 2596
contained in Reply End AUDIT Method
record(s) to the Read/Write Secure database Administration
Reply method and records Reply Process
generate/update
database records

Delete Reply record(s) AUDIT Reply


from database Record(s)
May 27, 2004 Sheet 73 of 146 US 2004/0103305 A1

| | | | | |} | |
Patent Application Publication May 27, 2004 Sheet 74 of 146 US 2004/0103305 A1

FIG. 46

SYSTEM EVENT
OCCURS

CONTROL SET CONTROL


FROMPERC METHOD

BUDGET
f DECREMENTED
/, BY
EVENT //Y BLED
TAR
TOMIC
/EVENT METERED
AMOUNT
ELEMENT MAPPED
TO ATOMC
ELEMENT
in

EVENT EVENT BILLING


OR
DISCARDED 408

EVENT METER BELLING BUDGET


METHOD METHOD METHOD METHOD

METER UDE BLNG BUDGE


TRA

METER TRAI BUDGET UDE Y


BUDGET TRAL
UDE METER UDE UDE
BLLING UDE
Patent Application Publication May 27, 2004 Sheet 75 of 146 US 2004/0103305 A1

ELOVRHI0€)N\/|
| | | | | |
| | | | |

|JOI_WNELVBTE
Patent Application Publication May 27, 2004 Sheet 76 of 146 US 2004/0103305 A1

||NC]ELTAEC|JŒWNBE
Patent Application Publication May 27, 2004 Sheet 77 of 146 US 2004/0103305 A1

Start of OPEN
Method Process 500

OPEN Event
1504
OPEN EVent
EVENT
Atomic Element and Count Method
Atomic Element and Count
Meter Value
1592 CONTROL Method Meter Value
9te Wa
Create Read Channel Billing Amount
and establish read/
use Controls Billing Value
Budget Value

1506

BUDGET BLLING METER


Method Method Method
Read Channel

End of OPEN \
Method PrOCeSS

Secure
Database

FIG. 49
Patent Application Publication May 27, 2004 Sheet 78 of 146 US 2004/0103305 A1

1500 Start of OPEN


Method Process 1502

Open Event

Determine
identification
of object and user
to be opened.
Open Event, Object ID, User ID
Call the
REGISTER
s Method for
URT, PERC for the Object the Object.
(object, user) Read registered for this No Restart the
user? OPEN Method
Once the
registration
is complete.

s
the Object
already open for
this user?

OPEN Method Create channel and


(Rose bindlements
OPEN Control
to it
LM, UDE, MDE) eteentS O
Open Event, Object ID, User ID, Channel ID
1534
Prime Audit
Audit UDE Write (if required)

CONTROL Method
Patent Application Publication May 27, 2004 Sheet 79 of 146 US 2004/0103305 A1

Prime EVENT EVENT Method


(ifAudit Trail
required) Audit Trail UDE

Map OPEN
Event to Atomic
Element # and EVENT Method
event Count using Map MDE
Map MDE

Event, Event Count, Atomic Element #, Object ID, User ID


t
Write EVENT
Audit Trail EVENT Method
(if required) Audit Trail UDE

Atomic Element it, Event Count


1550
Atomic Element
Selected?

No, Fai EVENT Method EVENT Meth00

Roll back Secure


EYENTMeld database OPEN Method Failed
Succeeded transaction

CONTROL Method (cont'd)

r (B)--> FIG. 49b


Patent Application Publication May 27, 2004 Sheet 80 of 146 US 2004/0103305 A1

Prime METER METER Method


(ifAudit Trail
required) Audit Trail UDE

Add EVENT METER


Count to ReadWrite - Method UDE
Meter Value (the Meter)

Write METER METER Method


Audit Trail Audit Trai UDE
(if required)

MEER Value

Meter
Yes, Pass increment
Succeeded?

No, Fail METER Method METER Method

Roll back Secure


METER Method database OPEN Method Failed
Succeeded transaction

CONTROL Method (cont'd)

--- () r F.G. 49C


Patent Application Publication May 27, 2004 Sheet 81 of 146 US 2004/0103305 A1

Prime BILLING BLLING


Audit Trail Method Audit
(if required) Trai UDE

Map Atomic
Element #, Count, BILLING
and Meter Value to Method Map
Billing Amount MDE (Price list)
using Map MDE

Billing Amount

Write BELLING BLING


Audit Trail Method Audit
(if required) Trail UDE

Billing Amount
1590

Billing Amount
Selected?

No, Fail BiLLING Method BILLING Method

Roll back secure


BILLING Melpg database OPEN Method Failed
Succeeded transaction

CONTROL Method (cont'd)


FG. 49 d
Patent Application Publication May 27, 2004 Sheet 82 of 146 US 2004/0103305 A1

-- -- --->
\ / 1502
a a 510

1600
1598
Prime BUDGET BUDGET
Audit Trail Write Method Audit
(if required) Trail UDE

1604

1602 Add Billing BUDGET


Amount to Read/Write Method UDE
Budget Value (the Budget)

1608

Write BUDGET BUDGET


606 Audit Trail Write Method Audit
(if required) Trai UDE

1610
BUDGET
Yes, FAILS value out of
range?

--No, PASS BUDGET Method

1612 1614 1616


BUDGET Roll back Secure
Method returns No database OPEN Method Failed
OK? transaction

Yes CONTROL Method (cont'd)

- (E) r FIG. 49e


Patent Application Publication May 27, 2004 Sheet 83 of 146 US 2004/0103305 A1

N- - -1 15O2

1620

1618 Write OPEN Audit


Trail (if required) Write Audit UDE

1624

Establish channe
1622 for READ Event -- Read URT, PERC for
Processing (object, user)

Channel ID
1628
1630
1626
Roll back secure OPEN Method
READ Channel No database
Established Failed
transaction

Yes

1632 Commit secure


database
transaction

Tear down
1634 channel for open
processing
(optional)
CONTROL Method (cont'd)
1636
OPEN Method Process
FIG. 49f
Completed
Patent Application Publication May 27, 2004 Sheet 84 of 146 US 2004/0103305 A1

Start of READ
Method Process 1650

READ Event
1654
READ Event
Atomic Element and Count

Atomic Element and Count


Meter Value
1652
CONTROL Method MeterAmount
Billing Value
Decrypt, fingerprint
and obscure Content Billing Value
Budget Value

1660 658 1656

BUDGET BILLING METER


Decrypted Content Method Method Method

End of READ
Method Process

610
Secure
Database

FIG. 50
Patent Application Publication May 27, 2004 Sheet 85 of 146 US 2004/0103305 A1

1650 Start of READ


Method Process 1652

READ Event
t 1662
Determine
identification of
object and userID
for read

READ Event, Object D, User ID Call the


1664 OPEN
ls Method for
the Object the Object.
open for this NO Restart the
user? READ Method
Once the
registration
YeS is Complete.
1672

Prime Audit
Audit UDE Write (if required)

Start Secure
Database Transaction
CONTROL Method
Patent Application Publication May 27, 2004 Sheet 86 of 146 US 2004/0103305 A1

Prime EVENT EVENT Method


Audit Trail Audit Trai UDE
(if required)

Map READ
Event to Atomic
Element if and EVENT Method
event count using Map MDE
Map MDE
Event, Event Count, Atomic Element #, Object ID, User D
V
Write EVENT EVENT Method
Audit Trail AUdit Trail UDE
(if required)

Atomic Element if, Event Count


1686
Atomic Element
Selected?

No, Fail EVENT Method EVENT Method

Roll back Secure


EVENT Method database OPEN Method Failed
Succeeded? transaction

CONTROL Method (cont'd)


F.G. 5Ob
Patent Application Publication May 27, 2004 Sheet 87 of 146 US 2004/0103305 A1

Prime METER METER Method


Audit Trail Audit Trail UDE
(if required)

Add EVENT METER


Count to Read/Write Method UDE
Meter Value (the Meter)

Write METER METER Method


Audit Trail Audit Trai UDE
(if required)

METER Value

- Yes, Pass Meter increment


Succeeded

No, Fail METER Method METER Method

Roll back Secure


METER Method
Succeeded? database READ Method Failed
transaction

CONTROL Method (cont'd)


FIG. 50C
Patent Application Publication May 27, 2004 Sheet 88 of 146 US 2004/0103305 A1

Prime BLLING BILLING


Audit Trail Method Audit
(if required) Trail UDE

Map Atomic
Element i, Count, BILLING
and Meter Value to Method Map
Billing Amount MDE (Price list)
using Map MDE

Billing Amount

Write BLING BELLING


Audit Trail Method Audit
(if required) Trail UDE

Billing Amount
t 1726
Billing Amount
Selected?

No, Fail BILLING Method BLLING Method

Roll back SeCure


BLLING Method database READ Method Failed
Succeeded? transaction

CONTROL Method (cont'd)


--- - V w
1 N. F.G. 50C
N Y
N Y
Patent Application Publication May 27, 2004 Sheet 89 of 146 US 2004/0103305 A1

Prime BUDGET BUDGET


Audit Trail Method Audit
(if required) Trai UDE

Add Billing BUDGET


Amount to Read/Write Method UDE
Budget Value (the Budget)

Write BUDGET BUDGET


Audit Trail Method Audit
(if required) Trai UDE

BUDGET
Yes, FAILS value out of
range?

BUDGET Method

BUDGET Roll back Secure


Method returns database READ Method Failed
OK? transaction

CONTROL Method (cont'd)


Patent Application Publication May 27, 2004 Sheet 90 of 146 US 2004/0103305 A1

F.G. 5Of
1652

Write OPEN Audit 1756


TAFE. Write Audit UDE

Determine key to PERC for 1760


use to decrypt -- Read (object, user)
Content

Obtain encrypted
content using
ACCESS
Method

Decrypt Content
using DECRYPT CONTROL Method (Cont'd)
method
768

Call 1774
Fingerprint FINGERPRINT
desired Method Commit
SeCure
database
transaction

Ca
Obscure OBSCURE
desired Method

776

READ Method
Process Completed
Patent Application Publication May 27, 2004 Sheet 91 of 146 US 2004/0103305 A1

Start of WRITE
Method Process 780

WRITE Event
1784
WRITE Event
Atomic Element and Count

Atomic Element and Count


Meter Value
1782
CONTROL Method MeterAmount
Billing Value
Encrypt content and
update event Billing Value
Budget Value

1790 1788 1786


/
BUDGET BLLNG METER
Encrypted Content Method Method Method

End of WRITE
Method Process

610
Secure
Database

FIG 51
Patent Application Publication May 27, 2004 Sheet 92 of 146 US 2004/0103305 A1

1792
Start of WRITE
Method Process

1780 WRITE Event 1782

Determine
identification of
object and user D
for read

WRITE Event, Object ID, User ID


Call the
OPEN
ls Method for
the Object the Object.
open for this NO Restart the
user? WRITE Method
Once the
registration
YeS is Complete.
1804
1802
Prime Audit
Audit UDE Write (if required)

800
Start Secure
Database Transaction
CONTROL Method
Patent Application Publication May 27, 2004 Sheet 93 of 146 US 2004/0103305 A1

Prime EVENT EVENT Method


(ifAudit Trail
required) Audit Trail UDE

Map WRITE
Event to Atomic
Element # and EVENT Method
event count using Map MDE
Map MDE
Event, Event Count, Atomic Element #, Object ID, User D

Write EVENT EVENT Method


Audit Trail
(if required) Audit Trail UDE

Atomic Element #, Event Count

t 1818 Update EVENT


Method Map
Atomic Element MDE to reflect
Selected? new data

PASS if update succeeded, FAIL otherwise


EVENT Method

Roll back Secure


EYENTMega database WRITE Method Failed
Succeeded transaction

Yes
CONTROL Method (Cont'd)

W
(B) - N FIG. 51 b
/
Patent Application Publication May 27, 2004 Sheet 94 of 146 US 2004/0103305 A1

Prime METER METER Method


Audit Trail Audit rail UDE
(if required)

Add EVENT METER


Count to Read/Write Method UDE
Meter Value (the Meter)

Write METER METER Method


Audit Trail Audit Trai UDE
(if required)

METER Value

l
Meter
increment
Succeeded

No, Fail METER Method METER Method

Roll back Secure


METER
S Method
ded? database WRITE Method Failed
LCCeeCeC transaction

CONTROL Method (Cont'd)

---, (C) - N FIG. 51c


Patent Application Publication May 27, 2004 Sheet 95 of 146 US 2004/0103305 A1

Prime BLING BILLING


Audit Trail Method Audit
(if required) Trai UDE

Map Atomic
Element i, Count, BILLING
and Meter Value to Method Map
Billing Amount MDE (Price list)
using Map MDE

Billing Amount

Write BILLING BLLING


Audit Trail Method Audit
(if required) Trail UDE

Billing Amount
t 1862

Yes, Pass Billing Amount


Selected?

No, Fail BILLING Method BILLING Method

Roll back secure


BILLING Method database WRITE Method Failed
Succeeded? transaction

CONTROL Method (cont'd)


F.G. 5d
Patent Application Publication May 27, 2004 Sheet 96 of 146 US 2004/0103305 A1

Prime BUDGE BUDGET


Audit Trail Method Audit
(if required) Trai UDE

Add Billing BUDGET


Amount to Read/Write Method UDE
Budget Value (the Budget)

Write BUDGET BUDGET


Audit Trail Method Audit
(if required) Trai UDE

BUDGE
Yes, FAILS value out of
range?

BUDGET Method

BUDGET Roll back Secure


Method returns database - WRITE Method Failed
OK? transaction

CONTROL Method (cont'd)


Patent Application Publication May 27, 2004 Sheet 97 of 146 US 2004/0103305 A1

1782

Write 892
WRITE Audit Write Audit UDE
Trail (if required)

Determine key to PERC for 1896


use to encrypt Read (object, user)
COntent

Encrypt content
using ENCRYPT
method
CONTROL Method (cont'd)
Write content to
object using
ACCESS
method
Commit Secure
database transaction
Update container
TOC and related
information

WRITE Method
FIG. 5f Process Completed
Patent Application Publication May 27, 2004 Sheet 98 of 146 US 2004/0103305 A1

1920
Start CLOSE Method
Process

1922 1924

Prime Audit Trail Write -- Audit UDE


(if required)

1926
Destroy channel
and
release resources

1928 1930

Write Audit Trail Write Audit UDE


(if required)

End CLOSE Method


F.G. 52
Patent Application Publication May 27, 2004 Sheet 99 of 146 US 2004/0103305 A1

EVENT Method Start


1940

EVENT. Event Count,


Event Parameters
-
1942
Prime EVENT EVENT Method
Audit Trail Audit Trail UDE
(if required)

1948

EVENT Method
Load MAP MDE DTD Read Map DTD

1952

Map Event to Atomic EVENT Method


Element # and event Read
Count using Map MDE Map MDE

Event, Event Count, Atomic Element #,


Object ID, User ID
t 1970

Write EVENT Audit EVENT Method


Trail (if required) Audit Trait UDE

Atomic Element i,
Event Count

1974 1976

Atomic Element NO EVENT Method


Selected? failed

1978
EVENT Method
Succeeded
FIG. 5.3a

You might also like