CONTENT PROTECTION MANAGEMENT SYSTEM

• US 20100287609A1
• Filed: 07/20/2010
• Published: 11/11/2010
• Est. Priority Date: 01/16/2009
• Status: Active Grant

• Current Assignee: Cox Communications Incorporated (Cox Enterprises Incorporated)
• Original Assignee: Cox Communications Incorporated (Cox Enterprises Incorporated)
• Inventors: Gonzalez, Francisco, Shrum, Edgar V. JR.
• Granted Patent: US 9,003,512 B2
• Time in Patent Office: Days
• US Class Current: 726/14
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/64322 IP
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed

Abstract

A content protection management system that enables interoperability with other Content Protection and DRM technologies. A managed security domain provides a simple, consistent and reliable experience to whole-home network subscribers. The architectural concept for the whole-home network includes an underlying control plane with an overlaying content security control plane running a particular DRM technology.

Claims

1. A system providing content delivery to devices over a managed multimedia home network, comprising:

a domain manager for receiving content, wherein the domain manager includes a firs and second conditional access device and a security application; and

a managed client device, coupled to and registered with the domain manager, the managed client device running a security application, the managed client device communicates with the security application in the domain manager;

wherein the security application of the domain manager and the security application of the managed client instantiate device authentication and content usage rules as an overlay on top of any other content protection scheme.

2. The system of claim 1, wherein the domain manager further comprises a hard disk drive (HDD) for storing content therein.

3. The system of claim 1, wherein the security application of the domain manger includes an encryption engine and provides metadata to describe the content and a set of security rules.

4. The system of claim 1, wherein the security application of the domain manger is configured to provide a single managed content protection infrastructure with a common set of policies.

5. The system of claim 1, wherein the domain manager and the managed client device implement a DTCP protocol for providing protection of content in a home network.

6. The system of claim 1, wherein the first conditional access device re-encrypts and maps rights into the domain of the security application.

7. The system of claim 1, wherein the security application protects content according to usage rules provided with content.

8. The system of claim 1, wherein the domain manager determines whether the managed client device is a DTCP enabled device and, when the managed client device is a DTCP enabled device provide link protection between the domain manager and the managed client device.

9. The system of claim 1, wherein the domain manager verifies that the managed client device is a member of the managed domain and that the usage rules allow the content to be consumed by the managed client device.

10. The system of claim 1, wherein the domain manager provides a key to the managed client device for descrambling content provided to the managed client device.

11. The system of claim 1, wherein the domain manager descrambles and rescrambles the content for distribution to the managed client device and provides the usage rules to the managed client device when the content is acquired from the conditional access device.

12. The system of claim 1 further comprising a non-managed device, the non-managed device implements DTCP but does not run a security application.

13. A method for providing content delivery to devices over a managed multimedia home network, comprising:

receiving content at a domain manager, wherein the domain manager includes a first and second conditional access component and a security application;

requesting content from the domain manager by a managed client device that is coupled to and registered with the domain manager, wherein the managed client device runs a security application, the managed client device communicates with the security application in the domain manager; and

instantiating device authentication and content usage rules as an overlay on top of any other content protection using the security application of the domain manager and the security DRM application client of the managed client.

14. The method of claim 13, wherein the receiving content at the domain manager further comprises receiving content from a content provider configured with content usage information.

15. The method of claim 13, wherein the requesting content from the domain manager by a managed client device that is coupled to and registered with the domain manager further comprises:

negotiating between the domain manager and the managed client at the DTCP level;

authenticating between the security application of the managed client and the security application of the domain manger;

providing only non-managed content and content based on CCI authorization to a non-managed client device; and

providing managed content to a managed client device that passes the authentication between the security application of the managed client and the security application of the domain manger.

16. The method of claim 13, wherein instantiating device authentication and content usage rules as an overlay on top of any other content protection further comprises verifying that the managed client device is a member of the managed domain and that the usage rules allow the content to be consumed by the managed client device.

17. A computer readable medium including executable instructions which, when executed by a processor, provides content delivery to devices over a managed multimedia home network, by:

receiving content at a domain manager, wherein the domain manager includes a first and second conditional access component and a security application;

requesting content from the domain manager by a managed client device that is coupled to and registered with the domain manager, wherein the managed client device runs a security application, the managed client device communicates with the security application in the domain manager; and

instantiating device authentication and content usage rules as an overlay on top of any other content protection using the security application of the domain manager and the security DRM application client of the managed client.

18. The computer readable medium of claim 17, wherein the receiving content at the domain manager further comprises receiving content from a content provider configured with content usage information.

19. The computer readable medium of claim 17, wherein the requesting content from the domain manager by a managed client device that is coupled to and registered with the domain manager further comprises:

negotiating between the domain manager and the managed client at the DTCP level;

authenticating between the security application of the managed client and the security application of the domain manger;

providing only non-managed content and content based on CCI authorization to a non-managed client device; and

providing managed content to a managed client device that passes the authentication between the security application of the managed client and the security application of the domain manger.

20. The computer readable medium of claim 17, wherein instantiating device authentication and content usage rules as an overlay on top of any other content protection further comprises verifying that the managed client device is a member of the managed domain and that the usage rules allow the content to be consumed by the managed client device.