Browser/web apps access to secure surface

• US 10,102,648 B1
• Filed: 12/12/2012
• Issued: 10/16/2018
• Est. Priority Date: 12/12/2011
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Vannier, Eric, Dorwin, David Kimbal
• Primary Examiner(s): Tryder, Gregory J
• Assistant Examiner(s): Sonners, Scott E
• Application Number:
  US13/712,538
• Time in Patent Office: 2,134 Days
• CPC Class Codes: G06F 11/3003 Monitoring arrangements specially adapted to the computing system or computing system component being monitored
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/1062 Editing
• CPC Class Codes: G06F 21/1073 Conversion
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 40/143 Markup, e.g. Standard Generalized Markup Language [SGML] or Document Type Definition [DTD]
• CPC Class Codes: G06T 11/00 2D [Two Dimensional] image generation
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 2463/103 applying security measure for protecting copyright
• CPC Class Codes: H04L 47/801 Real time traffic
• CPC Class Codes: H04L 47/805 QOS or priority aware
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0876 : based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 65/1101 : Session protocols
• CPC Class Codes: H04L 65/1108 : Web based protocols, e.g. webRTC
• CPC Class Codes: H04L 65/613 : for the control of the source by the destination control signals issued by the client directed to the server or network components specially adapted for selective content distribution H04N21/637
• CPC Class Codes: H04L 65/762 : at the source reformatting of additional data in video distribution servers H04N21/2355
• CPC Class Codes: H04L 65/80 : Responding to QoS
• CPC Class Codes: H04L 9/0631 : Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/32 : including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/24 : Monitoring of processes or resources, e.g. monitoring of server load, available bandwidth, upstream requests monitoring of server performance or load G06F11/34; arrangements for observation, testing or troubleshooting for broadcast or for distribution combined with broadcast H04H20/12
• CPC Class Codes: H04N 21/25825 : involving client display capabilities, e.g. screen resolution of a mobile phone optimising the visualisation of content during browsing in the Internet G06F16/9577; processing of terminal status or physical abilities in wireless networks H04W8/22; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/25833 : involving client hardware characteristics, e.g. manufacturer, processing or storage capabilities allocation of resources considering hardware capabilities in multiprogramming arrangements G06F9/5044; allocation of resources considering software capabilities in multiprogramming arrangements G06F9/5055
• CPC Class Codes: H04N 21/41407 : embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4516 : involving client characteristics, e.g. Set-Top-Box type, software version or amount of memory available

Abstract

Embodiments are directed towards generating an image from a plurality of content layers. The content layers may include secure content that overlaps at least one other content layer. When the image is generated, the secure content may be rendered as a layer below the plurality of content layers. Additionally, each area of content layers that is overlapped by an area of the secure content may be modified to be transparent, where the area of the secure content is visible in the image through each transparently modified area. In some embodiments, an alpha channel value of each pixel in each area of content layers that is overlapped by the secure content may be modified. Secure content and unsecure content at a same layer may be split into different layers, where the unsecure content layer may be rendered at a theoretical secure content layer.

Claims

1. A method for managing content with a computing device that is operative to perform actions, comprising:

obtaining one of a key or a license based on a users authorization to access secure content, the key or the license being configured to enable decryption of the secure content;

obtaining a plurality of content layers to combine into an image for display, wherein

a first layer of the plurality of content layers includes an area of secure content and an area of unsecure content, at a theoretical secure content layer;

at least one of the plurality of content layers includes an area of unsecure content that overlaps the area of secure content in the first layer,

the area of secure content includes at least one client application authorized to access the secure content, the at least one client application configured to receive and playback the secure content, and

the secure content includes multimedia content with restricted access received by the at least one client application and from a content provider server configured to stream the multimedia content;

decrypting the secure content using the key or the license;

splitting the secure content and the unsecure content included in the first layer into a split secure content layer and a split unsecure content layer;

rendering the split secure content layer as a new layer below the plurality of content layers and rendering the split unsecure content layer at the theoretical secure content layer,

wherein rendering the split secure content layer as a new layer below the plurality of content layers includes;

determining whether a pixel in the at least one of the plurality of content layers is in the area of unsecure content that overlaps the area of secure content in the first layer; and

in response to determining the pixel is in the area of unsecure content that overlaps the area of secure content in the first layer modifying the pixel to be transparent;

generating the image based on at least combining the plurality of content layers, wherein the area of secure content is visible in the image through each modified pixel; and

enabling the display of the image.

2. The method of claim 1, wherein modifying the pixel to be transparent, further comprises:

modifying an alpha channel of the pixel to transparent.

3. The method of claim 1, wherein the plurality of content layers are positioned in a z-order stack.

4. The method of claim 1, wherein at least one of the plurality of content layers is below a determined theoretical z-order position of the first layer within a z-order stack of the plurality of content layers.

5. The method of claim 1, wherein at least one of the plurality of content layers overlaps the area of the secure content in the first layer.

6. The method of claim 1, wherein at least one of the plurality of content layers other than the first layer includes unsecure content.

7. A computing device for managing content, comprising:

a memory for storing data and instructions; and

a processor that executes the instructions to enable actions, including;

obtaining one of a key or a license based on a users authorization to access secure content, the key or the license being configured to enable decryption of the secure content;

obtaining a plurality of content layers to combine into an image for display, wherein

a first layer of the plurality of content layers includes an area of secure content and an area of unsecure content, at a theoretical secure content layer;

at least one of the plurality of content layers includes an area of unsecure content that overlaps the area of secure content in the first layer,

the area of secure content includes at least one client application authorized to access the secure content, the at least one client application configured to receive and playback the secure content, and

the secure content includes multimedia content with restricted access received by the at least one client application and from a content provider server configured to stream the multimedia content;

decrypting the secure content using the key or the license;

splitting the secure content and the unsecure content included in the first layer into a split secure content layer and a split unsecure content layer;

rendering the split secure content layer as a new layer below the plurality of content layers and rendering the split unsecure content layer at the theoretical secure content layer,

wherein rendering the split secure content layer as a new layer below the plurality of content layers includes;

determining whether a pixel in the at least one of the plurality of content layers is in the area of unsecure content that overlaps the area of secure content in the first layer; and

in response to determining the pixel is in the area of unsecure content that overlaps the area of secure content in the first layer modifying the pixel to be transparent;

generating the image based on at least combining the plurality of content layers, wherein the area of secure content is visible in the image through each modified pixel; and

enabling the display of the image.

8. The computing device of claim 7, modifying the pixel to be transparent, further comprises:

modifying an alpha channel of the pixel to transparent.

9. The computing device of claim 7, wherein the plurality of content layers are positioned in a z-order stack.

10. The computing device of claim 7, wherein at least one of the plurality of content layers is below a determined theoretical z-order position of the first layer within a z-order stack of the plurality of content layers.

11. The computing device of claim 7, wherein at least one of the plurality of content layers overlaps the area of the secure content in the first layer and includes unmodified transparency.

12. The computing device of claim 7, wherein at least one of the plurality of content layers other than the first layer includes unsecure content.

13. A processor readable non-transitory storage media that includes instructions for managing content, where in the execution of the instructions by a process enables actions, comprising:

obtaining one of a key or a license based on a users authorization to access secure content, the key or the license being configured to enable decryption of the secure content;

obtaining a plurality of content layers to combine into an image for display, wherein

a first layer of the plurality of content layers includes an area of secure content and an area of unsecure content, at a theoretical secure content layer;

at least one of the plurality of content layers includes an area of unsecure content that overlaps the area of secure content in the first layer,

the area of secure content includes at least one client application authorized to access the secure content, the at least one client application configured to receive and playback the secure content, and

the secure content includes multimedia content with restricted access received by the at least one client application and from a content provider server configured to stream the multimedia content;

decrypting the secure content using the key or the license;

splitting the secure content and the unsecure content included in the first layer into a split secure content layer and a split unsecure content layer;

rendering the split secure content layer as a new layer below the plurality of content layers and rendering the split unsecure content layer at the theoretical secure content layer,

wherein rendering the split secure content layer as a new layer below the plurality of content layers includes;

determining whether a pixel in the at least one of the plurality of content layers is in the area of unsecure content that overlaps the area of secure content in the first layer; and

in response to determining the pixel is in the area of unsecure content that overlaps the area of secure content in the first layer modifying the pixel to be transparent;

generating the image based on at least combining the plurality of content layers, wherein the area of secure content is visible in the image through each modified pixel; and

enabling the display of the image.

14. The media of claim 13, wherein modifying the pixel to be transparent, further comprises:

modifying an alpha channel of the pixel to transparent.

15. The media of claim 13, wherein the plurality of content layers are positioned in a z-order stack.

16. The media of claim 13, wherein at least one of the plurality of content layers is below a determined theoretical z-order position of the first layer within a z-order stack of the plurality of content layers.

17. The media of claim 13, wherein at least one of the plurality of content layers includes unmodified transparency.