Dual virtual machine and trusted platform module architecture for next generation media players

• US 20050033972A1
• Filed: 06/28/2004
• Published: 02/10/2005
• Est. Priority Date: 06/27/2003
• Status: Abandoned Application

• Current Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Original Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Inventors: Watson, Scott F.
• Application Number:
  US10/880,060
• Publication Number:
  US 20050033972A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/1064 Restricting content processing at operating system level
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

A software computing based environment for providing secured authentication of media downloaded from a network or loaded from a media player includes two peer-mode operating virtual machines. The low-level virtual machine provides decoding and decryption functions whereas the high-level virtual machine provides application level functions such as user interface, input/output.

Claims

1. A dual virtual machine architecture residing in a computing environment, the architecture comprising:

a low-level virtual machine for performing at least one of decoding a media or providing security functions; and

a high-level virtual machine for performing application level functions;

wherein the low-level virtual machine has a peer relationship with the high-level virtual machine.

2. The dual virtual machine architecture of claim 1 wherein the high-level virtual machine includes an application program for interfacing with an user.

3. The dual virtual machine architecture of claim 1 wherein the application level functions include at least one of providing an interface to a user or communicating with a network having the media.

4. The dual virtual machine architecture of claim 1 wherein a security code from the media is delivered by the high-level virtual manager to the low-level virtual manager for decryption.

5. The dual virtual machine architecture of claim 4 wherein the media is available from at least one of a DVD, an optical disk, a network, or a solid state device.

6. The dual virtual machine architecture of claim 1 further including a processing module that includes at least one decryption key.

7. The dual virtual machine architecture of claim 6 wherein the processing module performs secure cryptographic computations.

8. The dual virtual machine architecture of claim 6 wherein the processing module is used for monitoring the computing environment.

9. The dual virtual machine architecture of claim 1 wherein the computing environment includes a central processing unit (CPU).

10. A method of providing procedural copy protection for media players independent of a computing environment, the method comprising the steps of:

providing a low-level virtual machine to perform security functions;

providing a high-level virtual machine to perform user interface and application level functions;

wherein the low-level virtual machine has a peer relationship with the high-level virtual machine.

11. A method of providing procedural copy protection for media players independent of a computing environment of claim 10 further including an application program with the high-level virtual machine for interfacing with an user.

12. A method of providing procedural copy protection for media players independent of a computing environment of claim 10 wherein the application level functions include at least one of providing an interface to a user or communicating with a network having the media.

13. A method of providing procedural copy protection for media players independent of a computing environment of claim 10 further including delivering a security code, available from the media, by the high-level virtual manager to the low-level virtual manager for decryption.

14. A method of providing procedural copy protection for media players independent of a computing environment of claim 13 wherein the media is available from at least one of a DVD, an optical disk, a network, or a solid state device.

15. A method of providing procedural copy protection for media players independent of a computing environment of claim 10 further including a processing module that provides at least one decryption key.

16. A method of providing procedural copy protection for media players independent of a computing environment of claim 15 wherein the processing module performs secure cryptographic computations.

17. A method of providing procedural copy protection for media players independent of a computing environment of claim 15 further including monitoring the computing environment by the processing module.

18. A method of providing procedural copy protection for media players independent of a computing environment of claim 10 wherein the computing environment includes a central processing unit (CPU).