Method and system for providing secure CODECS

• US 20060069649A1
• Filed: 09/19/2005
• Published: 03/30/2006
• Est. Priority Date: 09/24/2004
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Widevine Technologies Incorporated (Alphabet Inc.)
• Inventors: Morten, Glenn A., MacLean, Charles D., Palmer, Tomas E.
• Granted Patent: US 9,609,279 B2
• Time in Patent Office: Days
• US Class Current: 705/57
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 21/43637 involving a wireless protocol, e.g. Bluetooth, RF or wireless LAN [IEEE 802.11] arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/173 with two-way working, e.g. subscriber sending a programme selection signal

Abstract

A system and method is arranged to provide compression and decompression of digital content in a secure manner. The system is configured to authenticate a source of the digital content, and to further determine a consumer'"'"'s entitlements and rights for access to the digital content. Based upon the determined entitlements and rights for access, the system is directed to decrypt, and decompress the digital content. In one embodiment, a component of the system is enabled to establish a trust relationship with at least one other component of the system, to minimize an opportunity for piracy of the digital content. In another embodiment, a secure clock is directed to provide protection against hackers that may employ an in-circuit emulator, or the like.

Claims

1. An apparatus for securely providing digital content, comprising:

a communications interface that is configured to receive digital content;

an authentication component in communication with the communications interface, and that is arranged to perform actions, including;

determining if a source of the digital content is authentic;

determining if access to the digital content is authorized, based on a digital right and an entitlement; and

if the source is authentic and access to the digital content is authorized, enabling the digital content to be securely decompressed.

2. The apparatus of claim 1, further comprising a secure store configured to include at least one of an encryption key, a trust key, a source identifier, the entitlement, or the digital right.

3. The apparatus of claim 1, further comprising a communications interface that is configured to receiving the digital content over a network and to send the digital content towards the authentication component through a trust link.

4. The apparatus of claim 1, further comprising:

a secure compression/decompression (CODEC) that is configured to securely receive the digital content from the communications interface and to decompress the digital content.

5. The apparatus of claim 4, wherein the secure CODEC employs a secure trust relationship with the communications interface to receive the digital content.

6. The apparatus of claim 1, wherein the received digital content is encrypted.

7. The apparatus of claim 1, wherein the apparatus resides within at least one of a television, a digital recorder, set-top box, mobile device, or a jukebox.

8. The apparatus of claim 1, further comprising:

a secure clock that is configured to provide secure timing signals using a secure communications mechanism; and

a client side security component that is in communications with the secure clock and is configured to perform actions, including;

receiving a system timing signal;

receiving the secure clock'"'"'s timing signal;

if a comparison of the system timing signal and the secure clock'"'"'s timing signal indicate tampering, sending a message indicating detection of tampering.

9. A method of providing digital content, comprising:

receiving digital content;

authenticating a source of the digital content; and

if access to the digital content is allowed based, in part, on a right and an entitlement associated with a user, and authentication of the source, then decrypting the digital content, and securely decompressing the decrypted digital content using a secure Compresser/DECompresser (CODEC).

10. The method of claim 9, wherein the secure CODEC recevies the digital content using a secure trust link.

11. The method of claim 9, wherein authenticating the source further comprises:

determining a validity of at least one of a digital signature associated with the source of the digital content, a digital certificate, or a key.

12. The method of claim 9, further comprising:

receiving a timing signal;

receiving a secure timing signal;

if the timing signal and secure timing signal indicate tampering, providing a message indicating detection of tampering.

13. The method of claim 9, further comprising:

receiving the right or entitlement in an encrypted format.

14. The method of claim 9, further comprising:

if the source is unauthenticated, inhibiting decryption and decompression of the digital content.

15. A system for use in providing digital content, comprising:

a parser that is configured to perform actions, including;

receiving digital content;

if the received digital content is unencrypted, providing the unencrypted digital content to a clear content CODEC to be decompressed; and

if the received digital content is encrypted, providing the encrypted digital content to a secure CODEC;

the secure CODEC being in communication with the parser, and configured to perform action, including;

receiving the encrypted digital content securely through a trust link;

authenticating a source of the encrypted digital content;

determining a right and an entitlement associated with the digital content; and

if the source is determined to be authentic and the right and the entitlement enables access to the digital content, then decrypting the digital content and decompressing the unencrypted digital content.

16. The system of claim 15, wherein authenticating the source further comprises:

determining a validity of at least one of a digital signature associated with the source of the digital content, a digital certificate, or a key.

17. The system of claim 15, wherein establishing the trust link further comprises employing at least one of a digital encryption/encryption key, a hash, or a digital certificate.

18. The system of claim 15, wherein the secure CODEC further comprises:

an authentication component configured to determine authentication of a source and access to the digital content based, in part, on the right and entitlement; and

an at least one cryptographic component configured to receive and to decrypt encrypted digital content.

19. A device for use in providing digital content, comprising:

a transceiver that is configured to receive digital content;

means for securely determining authentication of a source of the digital content;

means for securely determining a right or entitlement associated with a use of the digital content; and

means for enabling the digital content to be securely decrypted and decompressed, if it is determined that the source of the digital content is authentic and the right or entitlement enables the use of the digital content.

20. The device of claim 19, wherein the means for enabling the digital content to be securely decrypted and decompressed further comprises a means for establishing a trusted relationship with at least one other component of the device.

21. The device of claim 19, further comprising:

means for securely detecting tampering of a timing signal; and

means for providing a message, if tampering is detected.