Multiple content protection systems in a file

• US 10,229,248 B2
• Filed: 11/26/2014
• Issued: 03/12/2019
• Est. Priority Date: 01/21/2009
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Burns, Quintin Swayne, Hughes, Jr., Robert Kilroy, Simmons, John Carl, Fierstein, Scott J.
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US14/555,498
• Publication Number:
  US 20150193599A1
• Time in Patent Office: 1,567 Days
• Field of Search: 713193
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 2212/1052 Security improvement

Abstract

Supporting a plurality of content protection systems in a single container file. The protection systems share an encryption method which is accessible from a sample encryption box in the file. Each of the protection systems stores, in a protection system header box, information for decrypting the content in accordance with the corresponding protection system. In some embodiments, separate protection system header boxes in the file correspond to each of the protection systems. By using the common encryption method and sharing encryption expressions across the protection systems, the multiple content protection systems are supported in the file without creating additional copies of the content. In some embodiments, aspects of the disclosure extend the International Organization for Standardization (ISO) base media file format to support multiple digital rights management (DRM) systems in the single container file.

Claims

1. A system for extending a media file format to support multiple protection systems in a single container file, said system comprising:

a memory area for storing a file containing content and one or more encryption expressions, said content being encrypted by the one or more encryption expressions, said content further having a first protection system and a second protection system applied thereto, the first protection system defining a first protection system header box and the second protection system defining a second protection system header box, said file including the first protection system header box storing one or more data objects used to decrypt encrypted content for the first protection system and said file including a second protection system header box storing one or more data objects used to decrypt encrypted content for the second protection system; and

a computing device comprising a processor programmed to;

receive the file;

determine that the first protection system is supported by the computing device;

based on the determining, select, from the first and second protection systems, the first protection system header box;

obtain, from the one or more data objects stored in the first protection system header box, license information for the first protection system;

decode the content based on the obtained license information and the one or more encryption expressions; and

present the decoded content to a user.

2. The system of claim 1, wherein the obtained license information enabling retrieval of a decryption key to decode the encrypted content.

3. The system of claim 1, wherein the content is encoded according to an encryption algorithm, and wherein the first and second protection systems share the encryption algorithm.

4. The system of claim 1, wherein the file further contains a sample encryption box that identifies an encryption method common to the first and second protection systems.

5. The system of claim 1, wherein the first and second protections systems are digital rights management (DRM) systems.

6. The system of claim 1, wherein the data objects represent opaque metadata to support multiple protection systems in the file, simultaneously.

7. The system of claim 1, further comprising storing the metadata for the plurality of protection systems in a single container file as an extension to the ISO Base Media File Format.

8. A method comprising:

receiving, by a service provider, a file from an encoding provider, the file containing content and one or more encryption expressions, said content being encrypted by the one or more encryption expressions, said content further having first and second protection systems applied thereto, the first protection system defining a first protection system header box and the second protection system defining a second protection system header box, said file including the first protection system header box containing license information that enables decryption of the encrypted content for the first protection system, and said file including the second protection system header box containing license information that enables decryption of the encrypted content for the second protection system;

determining the first protection system is supported by a computing device;

based on the determining, selecting, by the computing device, the first protection system header box;

obtaining, using the data objects stored in the first protection system header box, license information for the first protection system from a licensing server;

decoding the content based on the obtained license information and the one or more encryption expressions; and

presenting the decoded content to a user.

9. The method of claim 8, wherein the received file further contains key mapping information, said content being encrypted using said key mapping information.

10. The method of claim 8, wherein the received file further contains a sample encryption box that identifies an encryption method common to the first and second protection systems.

11. The method of claim 8, wherein selecting, by the computing device from the plurality of protection systems, a protection system that is supported by the computing device comprises examining a scheme information box in the received file to determine whether the content is encoded with the selected protection system.

12. The method of claim 8, wherein the received file conforms to the ISO Base Media File Format.

13. The method of claim 8, wherein the content is encoded according to an encryption algorithm, and wherein the first and second protection systems share the encryption algorithm.

14. The method of claim 8, wherein receiving the file comprises receiving a file corresponding to a movie.

15. The method of claim 8, wherein obtaining license information from the metadata comprises obtaining a license from a license server to decrypt the content.

16. One or more computer-readable storage devices storing computer-executable components, said components comprising:

an interface component that, when executed by at least one processor, causes the at least one processor to receive, by a computing device, a file containing content and one or more encryption expressions, said content being encrypted by the encryption expressions, said content further having first and second protection systems applied thereto, the first protection system defining a first protection system header box storing one or more data objects used to decrypt encrypted content for the first protection system and the second protection system defining a second protection system header box storing one or more data objects used to decrypt encrypted content for the second protection system;

a detection component that, when executed by at least one processor, causes the at least one processor to;

determine the first protection system is supported by the computing device; and

based on the determining, select the first protection system header box;

a parse component that, when executed by at least one processor, causes the at least one processor to obtain, from the one or more data objects stored in the first protection system header box, license information for the first protection system; and

a transform component that, when executed by at least one processor, causes the at least one processor to decode the content based on the license information obtained by the parse component and based on the encryption expressions, wherein the interface component presents the decoded content to a user.

17. The computer-readable storage devices of claim 16, wherein-the transform component decrypts the content.

18. The computer-readable storage devices of claim 16, wherein the obtained license information enabling retrieval of a decryption key to decode the encrypted content.

19. The computer-readable storage devices of claim 16, wherein the content is encoded according to an encryption algorithm, and wherein the first and second protection systems share the encryption algorithm.

20. The computer-readable storage devices of claim 16, wherein the detection component examines a scheme information box in the received file to determine whether the content is encoded with one of the first and second protection systems.