Auto-negotiation of content formats using a secure component model

• US 10,152,578 B2
• Filed: 04/11/2016
• Issued: 12/11/2018
• Est. Priority Date: 12/14/2003
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Hug, Joshua D., Fu, Xiaodong
• Primary Examiner(s): Wang, Harris C
• Application Number:
  US15/096,269
• Publication Number:
  US 20170046505A1
• Time in Patent Office: 974 Days
• Field of Search: 726 7
• CPC Class Codes: G06F 21/1077 Recurrent authorisation
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

In accordance with one embodiment of the present invention, secure content objects are transcoded from an input format to an output format based upon identified capabilities of a receiving device. In one embodiment, a plurality of trusted processing components are identified to collectively transcode the secure content object from the identified input format to the determined output format. In one embodiment, each of the trusted processing components are authenticated prior to operating on the secure content object.

Claims

1. In a client device equipped with a digital rights management agent, a method of transcoding a secure content object, the method comprising:

identifying an input format of the secure content object;

identifying capabilities of a receiving device to which the secure content object is to be transferred;

determining an output format for the secure content object based upon the identified capabilities;

dynamically identifying a plurality of trusted processing components to collectively transcode the secure content object from the identified input format to the determined output format;

obtaining a digital certificate identifying an action to be performed on the secure content object, said digital certificate including a plurality of unique identifiers corresponding respectively to the dynamically identified plurality of trusted processing components for collectively performing the action on the secure content object; and

performing the action identified by said digital certificate on the secure content object.

2. The method of claim 1, further comprising authenticating each of the trusted processing components prior to the respective processing component operating on the secure content object.

3. The method of claim 2, wherein the authenticating of each of the trusted processing components includes using said associated corresponding unique identifiers to validate corresponding digital signatures associated with each of the trusted processing components.

4. The method of claim 2, wherein the performing the action includes passing, in a secure manner, non-encrypted data through a series of the trusted components by verifying the authenticity of each trusted processing component.

5. One or more non-transitory machine-readable storage medium having a plurality of instructions stored thereon which, when executed by one or more processors of a system equipped with a digital rights management agent, cause the system to:

identify an input format of the secure content object;

identify capabilities of a receiving device to which the secure content object is to be transferred;

determine an output format for the secure content object based upon the identified capabilities;

dynamically identify a plurality of trusted processing components to collectively transcode the secure content object from the identified input format to the determined output format;

obtain a digital certificate identifying an action to be performed on the secure content object, said digital certificate including a plurality of unique identifiers corresponding respectively to the dynamically identified plurality of trusted processing components for collectively performing the action on the secure content object; and

perform the action identified by said digital certificate on the secure content object.

6. The one or more non-transitory machine-readable storage medium of claim 5, wherein the plurality of instructions, when executed by the one or more processors of the system, further cause the system to authenticate each of the trusted processing components prior to the respective processing component operating on the secure content object.

7. The one or more non-transitory machine-readable storage medium of claim 6, wherein the authentication of each of the trusted processing components includes the use of said associated corresponding unique identifiers to validate corresponding digital signatures associated with each of the trusted processing components.

8. The one or more non-transitory machine-readable storage medium of claim 6, wherein to perform the action includes to pass, in a secure manner, non-encrypted data through a series of the trusted components by verifying the authenticity of each trusted processing component.

9. A system to transcode a secure content object, the system comprising

one or more processors;

and

one or more storage devices having stored therein a plurality of instructions that, when executed by the one or more processors, cause the system to;

identify an input format of the secure content object;

identify capabilities of a receiving device to which the secure content object is to be transferred;

determine an output format for the secure content object based upon the identified capabilities;

dynamically identify a plurality of trusted processing components to collectively transcode the secure content object from the identified input format to the determined output format;

obtain a digital certificate identifying an action to be performed on the secure content object, said digital certificate including a plurality of unique identifiers corresponding respectively to the dynamically identified plurality of trusted processing components for collectively performing the action on the secure content object; and

perform the action identified by said digital certificate on the secure content object.

10. The system of claim 9, wherein the plurality of instructions, when executed by the one or more processors, further cause the system to authenticate each of the trusted processing components prior to the respective processing component operating on the secure content object.

11. The system of claim 10, wherein the authentication of each of the trusted processing components includes the use of said associated corresponding unique identifiers to validate corresponding digital signatures associated with each of the trusted processing components.

12. The system of claim 10, wherein to perform the action includes to pass, in a secure manner, non-encrypted data through a series of the trusted components by verifying the authenticity of each trusted processing component.