FIELD OF THE INVENTION

The present invention relates to limited-accessibility data carriers susceptible to being accessed intentionally only a limited number of times. Moreover, the invention also relates to apparatus operable to read data from such data carriers and to assist them in being accessed intentionally only a limited number of times. Furthermore, the invention also relates to methods of rendering data carriers susceptible to being accessed intentionally only a limited number of times.

BACKGROUND TO THE INVENTION When considering contemporary data products, for example applications software, value is increasingly associated with data provided rather than a cost of physically providing a data carrier for the data. Such a trend is especially apparent with regard to "Portable Blue" which is a proprietary optical disk data carrier technology developed by Philips NV, The Netherlands; this proprietary optical disk data carrier is adapted for high capacity data storage using relatively low cost data carriers. "Portable Blue" data carriers are sufficiently small that corresponding read/write drives for reading and/or writing data from such carriers is of a size suitable for inclusion into portable apparatus such as personal data assistants (PDA's), camcorders, small laptop computers, mobile telephones known also as "cell phones", and electronic books. Such an optical storage media is manufactured to exhibit properties appropriate for provided pre-recorded ROMs, write once (R) data recording and rewritable data recording (RW); these properties will hereinafter be referred to as pre-recorded write once (R) and rewritable (RW) formats. The aforementioned drives are generally able to read data carriers exhibiting properties of these formats, such that the data carriers can be interchanged within the drives without experiencing technical problems associated with reading data therefrom.

The inventors have appreciated that data content providers contemporarily experience considerable loss of revenue on account of unauthorised data copying and data distribution, for example widespread unauthorised distribution of music CD data content via the Internet or similar data communication networks. Similar considerations regarding loss

of revenue also pertain to application software supplied by software vendors on such data carriers where unauthorised distribution of software applications results in considerable loss of revenue to such vendors. The Software Publisher's Association (SPA), an organization which devotes significant resources to tracking and analyzing piracy problems, has determined that in 1994 alone the personal computer (PC) software industry lost in excess of $8 billion due to illegal copying of business application software; in 2004, financial losses due to illegal copying are anticipated to be even greater. The SPA further estimated that virtually half of the business software in use in 1994 was pirated, this estimate not including illegal copying of operating systems, educational, entertainment and personal productivity software.

Many approaches have been implemented by software producers in an effort to combat piracy, such approaches including encryption, special data formatting, complex installation procedures and passwords. However, these approaches are not well disposed to providing functionality such as "try before buy", and the generation of legitimate back-up copies. Moreover, password protection schemes often fail once a password is divulged or discovered, such passwords being readily communicable via communication networks such as the Internet. In consequence, many software producers have simply abandoned adopting these approaches and choose simply to rely on the integrity of their customers to abide by copyright laws. In a published United States patent no. US6,747,930, there is described a method of purposefully modifying the accessibility of information encoded upon an optical data carrier. In one example of the method, the optical data carrier is purposefully damaged when the information is initially accessed so that upon subsequent access attempts of the information on the optical data carrier, a previous access of the information is detected by the purposefully induced errors. Thus, there is provided a technique for limiting illegal duplication and/or use of software, movies and music conveyed on data carriers such as compact disks (CD's) and digital versatile disks (DVD's). As illustrated in Figure 15A and 15B of this published US patent, a sharp point can be used for mechanically and purposefully etching, scratching or otherwise damaging an optical disk data carrier. Alternatively, use of chemicals applied to damage the optical data carrier is also described.

Moreover, the aforesaid published United States patent also describes an optical data carrier whose substrate is fabricated from a selected material, with a surface thereof provided with data. A reactive compound is formed as a coating on at least a portion of the substrate surface. The reactive compound operates to change from an optically

transparent state to an optically opaque state in response to irradiation for an accumulated duration of time by infrared light having desired characteristics, thereby preventing light from an optical scanning machine from penetrating the reactive compound and to render the data undetectable by the optical scanning machine. Such an arrangement is capable of rendering optical data carriers intentionally readable only a limited number of times.

Although the aforesaid approaches to rendering optical data carriers unreadable after a limited number of access sessions are known, these approaches have not found widespread adoption. For example, long term stability of the aforesaid coating is found to be a problem when optical carriers bearing such a coating are stored at elevated temperatures prior to firstly being read using infrared radiation from a laser source, for example using the read head 120. Moreover, reliably achieving the aforementioned mechanical damage is also a technical problem.

The inventors of the present invention have at least partially addressed these problems encountered in the prior art when devising the present invention.

SUMMARY OF THE INVENTION

An object of the invention is provide a method of providing a data carrier intentionally exhibiting in use a limited number of sessions of readout of data from the data carrier. According to a first aspect of the present invention, there is provided an apparatus for providing access to data recorded on a data carrier, said access being intentionally limited to a substantially predetermined number of access sessions, said apparatus comprising: (a) a data reading device for reading data from the data carrier; (b) a mechanism through which or past which the data carrier is conveyed when being introduced during operation into the apparatus for reading data therefrom using the data reading device, and through which or past which the data carrier is thereafter conveyed during use and/or when being extracted after use from the apparatus, said mechanism being arranged to convey the data carrier without substantially damaging the data carrier to the reading device, and for at least partially damaging the data carrier during use and/or when the data carrier is extracted from the apparatus, wherein such at least partial damage is arranged to intentionally render data subsequently difficult to read or unreadable from the data carrier.

The invention is of advantage in that data carrier is capable of exhibiting to the user an intentionally limited number of sessions of data readout therefrom.

The present invention is concerned, for example, with apparatus for "use once" reading of data from relatively inexpensive data carriers. These data carriers and data recorded thereon are envisaged to be sold to consumers at a cost in the order of 3 to 5 Euros each, namely at a competitive price relative to rental DVD's. A benefit of pricing data carriers within such a price range is that the data carrier can be purchased from diverse retailers, for example gasoline/fuel stations, gift shops, airports, train stations and so forth. Moreover, a further benefit is that such "use once" data carriers do not need to be returned after use, for example as arises with DVD rental. Optionally, the "use once" data carrier is provided with data for a movie but without extras such as audio enhancements, director's cut, alternative language alternatives that are customary with DVDs.

Optionally, in the apparatus, the mechanism is arranged to be at least part of an essential operable component of the apparatus, such that disablement of the mechanism to circumvent said at least partial damage to the data carrier renders the apparatus unusable to its user. Rendering the mechanism an essential part of the apparatus is of benefit in that such an arrangement is more difficult for users to circumvent when attempting to increase the number of sessions of data readout from the data carrier. More optionally, in the apparatus, the mechanism is included as part of a loading tray for introducing the data carrier into the apparatus to the data reading device and for subsequently extracting the data carrier from the apparatus.

In one embodiment of the invention, the apparatus is optionally arranged such that the mechanism comprises one or more movable members arranged in operation:

(c) to present a soft surface to the data carrier when introduced into the apparatus so as substantially inflict no damage to the data carrier ; and

(d) to present a damaging surface or one or more projections to the data carrier when extracted from the apparatus.

Such an arrangement of the mechanism is capable of being inexpensive to implement and is reliable in inflicting intentional damage to the data carrier. More optionally, in the apparatus, the one or more movable members are pivotally mounted and include one or more knife-like projections for inflicting one or more surface striations or cuts onto the data carrier. Knife-like projections are found by the inventors to be especially effective at intentionally at least partially damaging the data carrier

to impart thereto a limited number of session during which data is accessible from the data carrier.

Optionally, in the apparatus, said at least partial damage is directed at disabling lead-in tracks and/or one or more key- lockers including data code required for accessing data recorded on the data carrier. The inventors have appreciated that lead-in tracks and key- lockers are especially critical parts of the data carrier, such that damaging these parts is capable of effectively disabling the entire data carrier.

Optionally, in the apparatus, the data reading device is arranged to irradiate the data carrier in operation for inflicting damage thereto for rendering subsequent later access to the data carrier unreliable or impossible. At least partial damage to the data carrier is thus beneficially alternatively, or additionally, inflicted on the data carrier by other approaches than solely mechanical contact damage.

Optionally, in the apparatus, said mechanism is arranged so that the data carrier exhibits single-use properties when introduced into the apparatus. Single-use operation of the data carrier is especially useful, for example when distributing pre-purchase samples to entice potential customers.

Optionally, the apparatus further includes a data processor for receiving data read from the data carrier, said processor being operable to determine whether the data carrier is to be of limited access or unlimited access, said processor being operable: (e) to enable the mechanism to inflict at least partial damage to the data carrier on extraction of the data carrier from the apparatus when said data carrier is designated from data read therefrom to be of limited access; and

(f) to disable the mechanism so as not to inflict damage to the data carrier on extraction of the data carrier from the apparatus when said data carrier is designated to be of unlimited access.

By rendering the mechanism selectively deployable to inflict at least partial damage to the data carrier, the apparatus is capable of not only operating with data carriers of intentionally- limited number of session of data readout therefrom, but also data carriers whose session of data readout therefrom are not intentionally limited. According to a second aspect of the present invention, there is provided a method of intentionally limiting access to data recorded on a data carrier, said access being intentionally limited to a substantially predetermined number of access sessions, said method comprising steps of:

(a) providing an apparatus including a data reading device for reading data from the data carrier and a mechanism arranged to convey the data carrier without substantially damaging the data carrier to the reading device, and for at least partially damaging the data carrier during use and/or when the data carrier is extracted from the apparatus, (b) introducing the data carrier into the apparatus, said introduction conveying the data carrier through or past the mechanism without inflicting damage to the data carrier; and (c) extracting the data carrier from the apparatus, said extraction conveying the data carrier through or past the mechanism and inflicting said at least partial damage onto the data carrier. wherein such at least partial damage is arranged to intentionally render data subsequently difficult to read or unreadable from the data carrier.

According to a third aspect of the present invention, there is provided a data carrier for use in the apparatus according to the first aspect of the invention, or for use in the method according to the second aspect of the invention, said data carrier being provided with a surface coating which is intentionally vulnerable to being damaged when extracted from said apparatus or used in said method.

It will be appreciated that features of the invention are susceptible to being combined in any combination without departing from the scope of the invention.

DESCRIPTION OF THE DIAGRAMS

Embodiments of the invention will now be described, by way of example only, with reference to the following diagrams wherein:

Figure 1 is a schematic illustration of a optical data carrier being inserted in a forward direction into an apparatus operable to read data and/or write data to the data carrier; Figure 2 is an illustration of a pivotally-mounted pair of cutting blades operable to permit the data carrier of Figure 1 to pass in the forward direction therethrough without suffering damage, and in a reverse direction therethrough for suffering damage;

Figure 3 is an illustration of the data carrier of Figure 1 being removed from the apparatus of Figure 1 in the reverse direction for suffering damage; and Figure 4 is an illustration of the data carrier of Figure 1 after insertion and subsequent removal from the apparatus of Figure 1, the removed data carrier having formed thereon surface striations resulting in the data carrier being in an unreadable damaged state.

DESCRIPTION OF EMBODIMENTS OF THE INVENTION

Referring to Figure 1, there are shown three steps Sl, S2 and S3 of a method of introducing a data carrier indicated generally by 20 into an apparatus indicated by 10 capable of reading data content from the data carrier 20. The data carrier 20 is preferably implemented as an optical disk, for example a contemporary compact disk (CD), as a digital versatile disk (DVD) or a miniature optical carrier such as a smaller format optical disk. The smaller optical disk is beneficially arranged to be interrogated using relatively shorter wavelength radiation, for example radiation corresponding to blue colour. The data carrier 20 comprises a planar data-carrrying region 30 with a circular periphery and a central circular mounting hole 40 provided concentrically to the periphery. Moreover, the data carrier 20 optionally has a diameter smaller than 80 mm, more optionally less than 50 mm in diameter.

The apparatus 10 comprises a processor 100 and a slot-like cavity 110 for receiving the data carrier 20. The apparatus 10 further includes an optical read head 120 coupled to the processor 100 and capable of being actuated in a radial manner as represented by an arrow 130. A servomotor 140 is included substantially centrally in the cavity 110 and is operable to provide a rotational motion as depicted to an arrow 150 are rotating the data carrier 20 when received inside the apparatus 10. At an entrance region of the cavity 110, there is included an access mechanism as shown in greater detail in Figure 2. The mechanism includes two elongate members 160, each member having a first wider end and a second narrower end. The members 160 are pivotally mounted substantially towards their first wider ends at points 170 as illustrated and are operable to rotate in directions denoted by arrows 190. The members 160 are arranged to substantially mutually abut at their second narrow ends as illustrated. Moreover, the members 160 have smooth laterally rounded external surfaces 188 presented outwardly from the cavity 110 towards a front region of the apparatus 10 whereat the cavity 110 appears to a user of the apparatus 10 as a slot for receiving the data carrier 20. Furthermore, the members 160 are each also provided on a lateral sides thereof remote from the rounded surface 188 an associated sharp knife-like projection 180 as illustrated having one or more cutting edges capable of damaging exterior surfaces of the data carrier 20 to render the carrier 20 unreadable. In the first step Sl, the data carrier 20 is offered in a direction denoted by an arrow 200 in Figure 2 into the aforementioned slot presented by the cavity 110. In the step S2, a front edge of the data carrier 20 contacts onto the second ends of the members 160, especially at the aforementioned rounded surfaces 188. As the data carrier 20 is advanced further into the cavity 110, the members 160 pivotally rotate as illustrated to enable the data

carrier 20 without experiencing any surface damage to be advanced into the cavity 110 until its central hole 40 aligns to the servomotor 140 as illustrated in the step S3. In the step S3, the processor 100 is operable to energize the servomotor 140 to rotate the data carrier 20 and to actuate the optical read head 120 over the data-carrying region 30 of the carrier 20 to extract data from the carrier 20, for example music data content and/or video data content and/or applications software. The data carrier 20 preferably includes a lead-in track adjacent to the central hole 40 and a key- locker area whereat essential key- locker data for enabling access to data-content conveyed on the carrier 20 is stored. On account of inclusion of the members 160 and their associated knife-like projections 180, the apparatus 10 is capable in operation of providing a user of the apparatus 10 with a "single use" access to the data carrier 20.

In Figure 3, there are shown three steps S4, S5 and S6 of a method of removing the data carrier 20 after it has been earlier inserted into the apparatus 10. In the step S4, the user of the apparatus 10 has completed accessing the data carrier 20; for example, the data carrier 20 can be supplied to the user on a basis that data can be accessed from the data carrier 20 using the apparatus 10 for a limited period of time, for example 2 hours which is sufficient time for watching a movie. Thereafter, in the step S5, the apparatus 10, optionally with mechanical assistance from the user, ejects the data carrier 20 towards the members 160 in a direction indicated by an arrow 220. Such ejection causes the members 160 to pivot outwardly from the cavity 110 thereby engaging the knife-like edges 180 onto the area 30 of the data carrier 20 to cause one of more surface striations or cuts 250 on the data carrier 20 rendering it subsequently unreliable or impossible to read using the apparatus 10. The striation or cuts 250 preferably extend to render unreadable lead-in tracks and/or the aforementioned key- locker area or areas of the data carrier 20. In the step S6, the data carrier 20 has been fully removed and includes at least one surface striation and/or cut 250 as depicted in Figure 4.

Optionally, the apparatus 10 is provided with several sets of members 160 so as to provide multiple striations and/or cuts as depicted in Figure 4 for ensuring that the data carrier 20 is damaged thoroughly and reliably. When the data carrier 20 is interrogated at a lower surface of the data region 30 when inserted in the apparatus 10, only a lower member 160 of each pair of members 160 illustrated needs to be included in the apparatus 10. As a further option, the members 160 can be provided with actuators for selectively pivoting them away from the data carrier 20 when the carrier 20 is removed from the cavity 110, such selective pivoting being dependent upon data read by the apparatus 10 from the data carrier

20 in the step S3, thereby rendering the apparatus 10 capable of not only accepting "single use" data carriers such as the data carrier 20 which is intentionally damaged after use but also multiple-use data carriers wherein intentional damage within the apparatus 10 is not intended. By using a non- volatile memory within the apparatus 10 for recording a number of reads executed by the apparatus 10 from the carrier 10, the apparatus 10 can be operable to intentionally damage the carrier 20 after two or more read sessions using the apparatus 10. The number of read sessions is preferably defined by access data recorded on the data carrier 20, the apparatus 10 being operable to read this access data.

It is to be appreciated that the data carrier 20 when removed at the step S6 from the apparatus 10 is potentially susceptible to being surface polished and then reinserted into the apparatus 10 for reuse. Moreover, damaging the data carrier 20 in the step S5 to provide the carrier 20 with its "single use" properties does not prevent data being copied during the single use from the data carrier 20 onto another recordable data carrier or distribution via a communication network such as the Internet. However, such data interrogation of the data carrier 20 requires special user knowledge and/or special user equipment which is often not available to many potential layman users of the apparatus 10, such users often not being experienced with internal operations of complex technical apparatus.

It will be appreciated that the knife-like projection 180 can be implemented in several different ways; for example, the projection 180 can optionally be implemented as a series of cutters, a grinding body, and similar sharp and/or rough projections. The lead-in of the data carrier 20 can be fabricated so that it is especially susceptible to being scratched, for example by including a surface layer susceptible to being easily damaged by just a pin or similar sharp object, such a layer is preferably sufficiently soft to prevent the data carrier 20 being polished to enable unauthorised reuse thereof. The surface layer is beneficially fabricated from a soft substantially opically-transparent plastics material having a composition such as polymethyl methacrylate (PMMA). Optionally, dye materials can be selectively used to damage the data carrier 20.

Optionally, the members 160 and their associated knife-like projections 180 are arranged to damage the data carrier 20 in a distinct pattern in the step S5. If required, the members 160 can be mounted closer to the servomotor 140 so that, in an event of the processor 100 detecting completion of a single play session for the data carrier 20, having identified that the carrier 20 is a single play item, the processor 100 is operable to actuate the members 160 and their knife-like projections 180 onto the carrier 20 whilst the data carrier

20 is rotated by the servomotor 140. In such an embodiment, further projections at the entrance of the cavity 110 as depicted in Figure 1 can additionally be provided; in other words, the apparatus 10 is beneficially provided with multiple sets of mutually different features for selectively damaging the data carrier 20 to render it once playable or intentionally playable only a relatively limited number of times. For example, cutters implemented using the members 160 can be supplemented by one or more of: dye damage, heat damage and head 120 radiation damage.

Optionally, when the apparatus 10 is provided with a slot loader for loading the data carrier 20 into the cavity 110, the members 160 can be mounted on the slot loader, for example a loader tray, so that users will experience difficulty when attempting to disable operation of the members 160 to circumvent the single use or intentionally limited reuse of the data carrier 20. Optionally, the members 160 can be provided with one or more sensors, for example microswitches or proximity sensors, so that any unauthorised attempt by users to disable operation of the members 160 and their knife-like projections 180 renders the apparatus 10 unusable and/or disabled and therefore unable to function. More optionally, the members 160 are arranged to form an essential operating part of a drive mechanism for the apparatus 10 mounted in the vicinity of the cavity 110.

Optionally, as an alternative or an addition to embodiments of the invention described in the foregoing, the optical read head 120 itself can be provided with a cutting and/or grinding device so that the data carrier 20 is progressively damaged as data is read therefrom when arranged to provide single-use properties. Beneficially, damage is done to a key locker of the data carrier 20 by performing tracking following on the carrier 20. Additionally, or alternatively, the data carrier 20 can be provided with a surface coating, for example as elucidated in the foregoing, which is exceptionally soft and therefore easily scratched by at least one of the members 160 and the optical read head 120.

Optionally, damage inflicted to the data carrier 20 in the step S5 can be further enhanced by the members have additional damaging features, for example a heated wire for contacting onto and melting a data-bearing surface and/or data accessing surface of the data carrier 20 when removed from the apparatus 10. Furthermore, damage is optionally further enhanced by the apparatus 10 depositing a denaturing chemical agent onto the data carrier 20 after data has been read therefrom in the steps S3 and S4. Such a denaturing chemical agent can be a dye and the data carrier 20 can be provided with a surface coating which effectively absorbs the dye, beneficially to considerable depth, so that after damage, polishing the data region 30 of the data carrier 20 is not capable of rendering the carrier 20 reusable. The

surface layer optionally is of chemical composition such that irradiation of the surface layer in the steps S3 and S4 from the optical read head 120 renders the data carrier 20 especially vulnerable to damage in the step S5, thereby rendering the data carrier 20 generally robust except immediately after single-use data interrogation therefrom. It will be appreciated that embodiments of the invention described in the foregoing are susceptible to being modified without departing from the scope of the invention as defined by the accompanying claims.

Although embodiments of the invention are described in the foregoing with respect to optical data carriers with limited access, the inventors envisage that the present invention is also applicable to other types of data carrier, for example magnetic data carriers that are erased or physically damaged after one or more intentional data reading session, data cards, solid state data carriers where fusible links or conductor tracks are intentionally damaged to provided limited access to data stored therein. Damage in such case may be implemented by demagnetization and/or heating above a Curie temperature to cause magnetic erasure. In the embodiment of solid state data carriers, intentional over- voltage stressing of the solid state data carriers can be employed to inflict intentional damage.

Apparatus for implementing the present invention is not limited to embodiments described in the foregoing. Such apparatus includes brick loaders, for example as used in contemporary lap-top portable computers, as well as flop-top loaders more conventionally associated with Minidisks.

In the accompanying claims, numerals and other symbols included within brackets are included to assist understanding of the claims and are not intended to limit the scope of the claims in any way.

Expressions such as "comprise", "include", "incorporate", "contain", "is" and "have" are to be construed in a non-exclusive manner when interpreting the description and its associated claims, namely construed to allow for other items or components which are not explicitly defined also to be present. Reference to the singular is also to be construed to be a reference to the plural and vice versa.