• owl@infosec.pub
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    4 days ago

    Here is my idea: Everyone makes a private key. When they buy a song they receive the file and a digital signature by the label saying they sold it to your privatepublic key. When you are caught with a bunch of songs, you have to prove ownership using your key. Tadaa provable ownership, no blockchain, You loose the file, but still have the signature? You can download it again and all is good.

    EDIT: Of course, they would sign the public key, sorry.

      • owl@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 days ago

        In this construct the key is the thing, that signifies the owner. If it’s lost, there is no help. Unless the key is tied to you and an authority can vouch for you.

      • bandwidthcrisis@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        5 days ago

        Well if the record label was still around they could make ownership details public, or let you download the signed file again.

        • Allero@lemmy.today
          link
          fedilink
          arrow-up
          2
          ·
          4 days ago

          How would they know the copy legally belongs to you if you lose the key? Would they require some form of ID on top of that?

      • owl@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 days ago

        I don’t think so. There nothing non fungible in my idea and nfts require a blockchain.

    • bandwidthcrisis@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      5 days ago

      A digital signature from the label would be created with their private key.

      What would they be signing? Your public key plus the ID of the song? They can’t sign your private key, it’s private.

      What stops you sharing your private key and a song with a friend. Then when either of you need to provide proof, you can both show that you have the private key that matches the signed file?

      • owl@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        4 days ago

        Well they would sign my public key plus ID of the song. I can prove, it is my public key and everyone can verify the song belongs to me.

        You are right, to ensure noone can “share login” so to say, it needs to be tied to you personally. That would deny privacy sadly.

        EDIT: Didn’t notice I wrote the wrong thing, thanks for notifying me.