Method and apparatus for providing a border guard between security domains

• US 20060150252A1
• Filed: 12/30/2004
• Published: 07/06/2006
• Est. Priority Date: 12/30/2004
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Inventors: Kimball, Bridget D., Tang, Lawrence W., Okimoto, John I., Petty, Douglas M., Habrat, Michael T., Sprunk, Eric, Chen, Annie O.
• Granted Patent: US 8,156,560 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04N 21/4147 PVR [Personal Video Recorder] H04N5/76 takes precedence ; arrangements for broadcast with accumulation-type receivers H04H20/40
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The present invention discloses an apparatus and method for defining and enforcing rules of transition between two security domains, e.g., a transport domain and a persistent security domain. In turn, a border guard, e.g., a security device, is provided between these two domains that enforce rules for transition between the two security domains. This novel approach of defining a transport domain and a persistent security domain simplifies the classification of the digital content and its movement through the system. Namely, the border guard once established between the two systems can enforce DRM rules associated with how contents are moved between the two domains.

Claims

1. A method for providing a border guard in a receiver device, comprising:

providing a first security domain;

providing a second security domain; and

employing said border guard for enforcing at least one rule for transition between said first and second security domains.

2. The method of claim 1, wherein said at least one rule comprises at least one digital rights management (DRM) rule.

3. The method of claim 1, wherein said first security domain is a transport domain.

4. The method of claim 3, wherein said second security domain is a persistent security domain.

5. The method of claim 1, wherein said border guard is a security device.

6. The method of claim 5, wherein said security device is an application specific integrated circuit (ASIC).

7. The method of claim 2, wherein said border guard enforces said at least one DRM rules associated with how an associated content is moved between said first and second domains.

8. The method of claim 7, wherein said at least one DRM rule is specified by a source of said associated content and is enforced by said border guard.

9. The method of claim 1, further comprising:

employing a portable renewable security card, where said border guard operates cooperatively with said portable renewable security card for enforcing said at least one rule for transition between said first and second security domains.

10. A computer-readable carrier having stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by a processor, cause the processor to perform the steps of a method for providing a border guard in a receiver device, comprising of:

providing a first security domain;

providing a second security domain; and

employing said border guard for enforcing at least one rule for transition between said first and second security domains.

11. The computer-readable carrier of claim 10, wherein said at least one rule comprises at least one digital rights management (DRM) rule.

12. The computer-readable carrier of claim 10, wherein said first security domain is a transport domain.

13. The computer-readable carrier of claim 12, wherein said second security domain is a persistent security domain.

14. The computer-readable carrier of claim 10, wherein said border guard is a security device.

15. The computer-readable carrier of claim 14, wherein said security device is an application specific integrated circuit (ASIC).

16. The computer-readable carrier of claim 11, wherein said border guard enforces said at least one DRM rules associated with how an associated content is moved between said first and second domains.

17. The computer-readable carrier of claim 16, wherein said at least one DRM rule is specified by a source of said associated content and is enforced by said border guard.

18. The computer-readable carrier of claim 10, further comprising:

employing a portable renewable security card, where said border guard operates cooperatively with said portable renewable security card for enforcing said at least one rule for transition between said first and second security domains.

19. An apparatus for providing a border guard in a receiver device, comprising:

means for providing a first security domain;

means for providing a second security domain; and

means for employing said border guard for enforcing at least one rule for transition between said first and second security domains.

20. The apparatus of claim 19, wherein said apparatus is at least one of:

a set top box, and an integrated receiver/decoder.