System, method, and apparatus for securely providing content viewable on a secure device

• US 20060101287A1
• Filed: 12/27/2005
• Published: 05/11/2006
• Est. Priority Date: 03/18/2003
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Widevine Technologies Incorporated (Alphabet Inc.)
• Inventors: Morten, Glenn A.
• Granted Patent: US 7,640,435 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: H04N 21/23473 by pre-encrypting
• CPC Class Codes: H04N 21/23476 by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4182 for identification purposes, e.g. storing user identification data, preferences, personal settings or data restricting access to computer systems by authenticating users using a predetermined code in combination with an additional device, e.g. dongle or smart card G06F21/123
• CPC Class Codes: H04N 21/44055 by partially decrypting, e.g. decrypting a video stream that has been partially encrypted
• CPC Class Codes: H04N 21/44236 Monitoring of piracy processes or activities protecting computer platforms against harmful, malicious or unexpected behaviour or activities using intrusion detection and counter measures G06F21/566; computer virus detection and handling G06F21/56
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/8352 involving content or source identification data, e.g. Unique Material Identifier [UMID]
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A system, apparatus, and method are directed to providing and securely viewing secure content. In one embodiment, a secure player provides secure screening/previewing of secure content, such as a motion picture, by a member of an awards organization. A content key is employed to selectively encrypt at least a portion of a content stream. The content key is encrypted with a screener key. The encrypted content key is embedded into the secure content. The screener key is encrypted using public/private key pair that is bound to the secure player. The secure content may be distributed on a medium, such as a DVD, high definition DVD, and the like. The secure player is configured to receive the medium, screener key, and a screener identity. The screener identity and screener key are employed by the secure player to decrypt and enable secure viewing of the content.

Claims

1. An apparatus for providing a secure content stream for use in a player, the apparatus comprising:

a receiver component that is arranged to receive an unencrypted content stream; and

a processor component that is arranged to perform actions, including;

selectively encrypting at least a portion of the unencrypted content stream using a content key;

generating a key package comprising the content key;

encrypting the key package using a screener key;

encrypting the screener key employing a public key bound to the player such that the public key is unique to the player; and

embedding the encrypted key package into the selectively encrypted content stream.

2. The apparatus of claim 1, wherein the selectively encrypted content stream is further configured for delivery to another apparatus using a delivery content media technology.

3. The apparatus of claim 2, where the delivery content media technology further comprises a network.

4. The apparatus of claim 1, wherein the encrypted screener key is further configured for delivery over a network.

5. The apparatus of claim 1, wherein selectively encrypting at least a portion of a content stream further comprises:

selectively encrypting at least a portion of a video component or an audio component of the unencrypted content stream; and

enabling at least another portion of the video component or the audio component of the content stream to remain unencrypted.

6. The apparatus of claim 1, wherein the player is in communications with a cellular phone that is configured to receive at least one of the selectively encrypted content stream or the encrypted screener key.

7. The apparatus of claim 1, wherein the player is configured to employ an identity module to enable access to the encrypted screener key.

8. The apparatus of claim 7, wherein the identity module further comprises enabling access using at least one of a biometric mechanism, a smart card, a user name/password, or a touch-pad code entry mechanism.

9. A computer-readable medium having computer-executable components for use in playing a content stream, the computer-executable components comprising:

a content media sub-system that is configured to receive selectively encrypted content that is encrypted using a content key, the content key being subsequently encrypted using a screener key that is in turn subsequently encrypted using a public key; and

a decryption engine that is operative to perform actions, including;

receiving the selectively encrypted content stream from the content media sub-system;

receiving the encrypted screener key;

decrypting the screener key using a private key associated with the public key, the private key being constrained to the apparatus; and

employing the decrypted screener key to decrypt the content key; and

employing the content key to decrypt the selectively encrypted content stream.

10. The computer-readable medium of claim 9, further comprising:

an identity module that is configured to enable access to the screener key.

11. The computer-readable medium of claim 10, wherein the identity module employs at least one of biometry, a smart card, or a user name/password to enable access.

12. The computer-readable medium of claim 9, wherein receiving the encrypted screener key further comprises receiving the encrypted screener key over a network.

13. The computer-readable medium of claim 9, wherein the selectively encrypted content is received over a network.

14. The computer-readable medium of claim 9, wherein the computer-executable components are at least one of within or coupled to a cellular phone.

15. The computer-readable medium of claim 9, wherein the selectively encrypted content stream further comprises at least a portion of an elementary stream that is encrypted and another portion of the elementary stream that is unencrypted.

16. A method for securely playing a content stream, comprising:

selectively encrypting at least a portion of the content stream using a content key;

encrypting the content key using a screener key; and

encrypting the screener key using a public key that is associated with a private key, the public key and the private key being bound to a player such that the public key and the private key are unique to the player.

17. The method of claim 16, wherein the selectively encrypted content stream is further configured for delivery to another apparatus using a delivery content media technology, wherein the delivery content media technology includes at least one of a DVD, CD, or a network.

18. The method of claim 16, wherein the encrypted screener key is further configured for delivery over a network.

19. The method of claim 16, wherein the encrypted screener key is further configured for delivery using a smart card.

20. The method of claim 16, wherein selectively encrypting at least a portion of a content stream further comprises:

selectively encrypting at least a portion of the unencrypted content stream, while at least another portion of the content stream remains unencrypted.

21. The method of claim 16, wherein the player is in communications with a cellular phone, the cellular phone being configured to receive at least one of the selectively encrypted content stream, an identity module useable to enable access to the screener key, or the encrypted screener key.