Systems and methods for performing file distribution and purchase

Abstract

A secure computing module (SCM) is configured for connection with a host device. The SCM includes a processor for performing secure processing operations, a host interface for coupling the processor to the host device, and a memory connected to the processor wherein the processor logically isolates at least some of the memory from access by the host device. The SCM generates a secure digital signature for a financial transaction and enables controlled content received through the host device. File distribution is performed from a content provider to a buyer or from a reseller to a buyer. The file distribution includes a financial transaction using secure digital signatures and possibly message encryption. The digital signatures and transaction details are communicated to appropriate financial organizations to authenticate the transaction parties and complete the transaction. The controlled content is transferred to the buyer from either the content provider or the reseller.

What is claimed is: 
     
         1 . A secure computing module for operable coupling to a host device, comprising:
 a processor for performing secure processing operations;   a host interface for operably coupling the processor to the host device; and   a memory operably coupled to the processor wherein the processor logically isolates at least some of the memory from access by the host device;   wherein the secure computing module is configured to:
 generate a secure digital signature for a message including financial transaction details; 
 direct the host device to communicate the financial transaction details and the secure digital signature to a financial organization associated with a user of the secure computing module; and 
 enable controlled content received through the host device. 
   
     
     
         2 . The secure computing module of  claim 1 , wherein the secure digital signature comprises a secure hash function generated using a secret key on a message comprising the financial transaction details and a transaction number identifier. 
     
     
         3 . The secure computing module of  claim 1 , wherein the secure computing module is further configured to encrypt the financial transaction details, the secure digital signature, or combination thereof in isolation from the host device and prior to directing the host device to communicate the financial transaction details and the secure digital signature. 
     
     
         4 . The secure computing module of  claim 3 , wherein the encryption is performed with a symmetric encryption process using a secret key known by the secure computing module and the financial organization associated with the user. 
     
     
         5 . The secure computing module of  claim 3 , wherein the encryption is performed with an asymmetric encryption process using a public key associated with the financial organization. 
     
     
         6 . The secure computing module of  claim 1 , wherein the host device is selected from the group consisting of cell phones, smartphones, pagers, Personal Digital Assistants, handheld computing platforms, wrist-worn computing systems, mobile computing systems, and desktop computing systems. 
     
     
         7 . The secure computing module of  claim 1 , wherein the secure computing module is further configured to decrypt the controlled content for use by the host device. 
     
     
         8 . The secure computing module of  claim 1 , further comprising a proximate-field wireless communicator operably coupled to the processor and configured for communication with another secure computing module associated with another host device when within a proximate-field range of the other secure computing module. 
     
     
         9 . The secure computing module of  claim 8 , wherein the proximate-field wireless communicator is configured to communicate using available radio frequencies, infrared frequencies, 802.1 a/b/g/n type wireless connections, Bluetooth, RFID, WiFi, WiMax, or combinations thereof. 
     
     
         10 . The secure computing module of  claim 8 , wherein the secure computing module uses the proximate-field wireless communicator to communicate the financial transaction details and the secure digital signature to the other secure computing module. 
     
     
         11 . A method of performing file distribution, comprising:
 selecting controlled content to be received from a reseller;   determining financial transaction details including a transaction amount and a content owner for the controlled content;   sending the financial transaction details for the controlled content to a buyer;   signing the financial transaction details with a buyer's secure digital signature using a buyer's secure computing module;   signing the financial transaction details with a reseller's secure digital signature using a reseller's secure computing module, wherein the financial transaction details, the buyer's secure digital signature, and the reseller's secure digital signature comprise a financial transaction package;   communicating the financial transaction package between the buyer and the reseller;   communicating the financial transaction package to a buyer's financial organization;   communicating the financial transaction package to a content owner's financial organization;   from the content owner's financial organization:
 verifying the financial transaction details and sending a seller approval to the buyer's financial organization 
   from the buyer's financial organization:
 verifying the buyer's secure digital signature and the financial transaction details; 
 sending a buyer approval to the content owner's financial organization; and 
 performing a fund transfer from the buyer's financial organization to the content owner's financial organization; and 
   communicating the controlled content from the reseller's secure computing module to the buyer's secure computing module.   
     
     
         12 . The method of  claim 11 , further comprising:
 communicating the financial transaction package to a reseller's financial organization;   from the reseller's financial organization:
 verifying the reseller's secure digital signature and the financial transaction details; and 
 sending a reseller's approval to the buyer's financial organization; and 
   performing another fund transfer from the buyer's financial organization to the reseller's financial organization.   
     
     
         13 . The method of  claim 11 , further comprising preventing the performing the fund transfer when the verifying the buyer's secure digital signature and the financial transaction details is not successful. 
     
     
         14 . The method of  claim 11 , further comprising encrypting the financial transaction details, the buyer's secure digital signature, the reseller's secure digital signature, or combinations thereof prior to at least one of the communicating acts. 
     
     
         15 . The method of  claim 11 , wherein determining the financial transaction details comprise determining a transaction amount, a buyer's credentials and a reseller's credentials. 
     
     
         16 . The method of  claim 11 , wherein signing the financial transaction details with the buyer's secure digital signature comprises performing a secure hash function using a buyer's secret key on a message comprising the financial transaction details and a buyer's transaction number identifier. 
     
     
         17 . The method of  claim 11 , wherein signing the financial transaction details with the reseller's secure digital signature comprises performing a secure hash function using a reseller's secret key on a message comprising the financial transaction details and a reseller's transaction number identifier. 
     
     
         18 . The method of  claim 11 , wherein communicating the financial transaction package between the buyer and the reseller comprises communicating between the buyer's secure computing module and the reseller's secure computing module via a proximate-field wireless communication channel. 
     
     
         19 . The method of  claim 18 , wherein communicating via the proximate-field wireless communication channel comprises communicating using available radio frequencies, infrared frequencies, 802.1 a/b/g/n type wireless connections, Bluetooth, RFID, WiFi, WiMax, or combinations thereof. 
     
     
         20 . The method of  claim 11 , further comprising communicating a transaction results to at least one of a buyer's host device, a content owner's host device, or a reseller's host device. 
     
     
         21 . The method of  claim 11 , wherein communicating the controlled content comprises communicating an access authorization token. 
     
     
         22 . The method of  claim 21 , further comprising communicating the access authorization token from the buyer's secure computing module to an admittance controller to enable admittance of the buyer. 
     
     
         23 . A system for performing file distribution, comprising:
 a first host device associated with a buyer of controlled content and including a first secure computing module operably coupled thereto, the first secure computing module configured to:
 generate a buyer's secure digital signature for a message including financial transaction details; 
 direct the first host device to communicate the financial transaction details and the secure digital signature to a buyer's financial organization and to a second secure computing module; and 
 communicate the controlled content to the second secure computing module; and 
   a second host device associated with a seller of the controlled content and including the second secure computing module operably coupled thereto, the second secure computing module configured to:
 generate a seller's secure digital signature for the message; 
 direct the second host device to communicate the financial transaction details and the secure digital signature to a seller's financial organization and to the first secure computing module; and 
 receive the controlled content from the second secure computing module.