Secure Connected Digital Media Platform

• US 20110182425A1
• Filed: 01/27/2010
• Published: 07/28/2011
• Est. Priority Date: 01/27/2010
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kienzle, Martin G., Burnett, Scott, Ledak, Paul Joseph
• Granted Patent: US 8,601,284 B2
• Time in Patent Office: Days
• US Class Current: 380/200
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/8173 End-user applications, e.g. Web browser, game
• CPC Class Codes: H04N 21/818 OS software
• CPC Class Codes: H04N 21/8193 dedicated tools, e.g. video decoder software or IPMP tool

Abstract

An embodiment of the invention provides a system including a secure media device having one or more security keys stored therein. The secure media device is housed in a device that is connected to a television unit and a network. Secure application environments are housed in the device, wherein each secure application environment is operationally isolated from one another. The secure application environments receive and process information sent over the network only if the information includes a security code corresponding to the security key in the secure media device. The security code is obtained from a clearinghouse when the information satisfies predetermined criteria. More specifically, the clearinghouse receives a copy of the security key from a manufacturer of the secure media device and creates the security code based on the security key.

Claims

1. A method comprising:

receiving a request to create a secure partition for accessing a content provider in a digital media device;

receiving a security code from the content provider; and

invoking a hypervisor at the digital media device, wherein at least part of the hypervisor is comprised of a hardware circuit, wherein the hypervisor performs the following;

comparing the received security code with a key value that is burned into a memory unit at the hardware circuit to determine if the security code is from an authorized content provider and, if the content provider is determined to be authorized, creating a secure partition at the digital media device, wherein the creation of the secure partition comprises creating a memory partition that corresponds to the secure partition in a non-volatile memory at the digital media device, wherein the memory partition can only be accessed by the content provider having the security code,

receiving software from the content provider and storing the software in the secure partition, and

receiving content from the content provider and storing the content in the secure partition.

2. The method according to claim 1, further including maintaining the secure partition in the digital media device when the digital media device is powered down.

3. The method according to claim 1, wherein the content provider receives the security code from a clearinghouse, the security code corresponding to the key value received from the clearinghouse from a manufacturer of the hardware circuit.

4. A system including:

a secure media device housed in a digital media device, the digital media device being connected to a display unit and an information module, the information module including at least one of a network and an electronic storage device, the secure media device having at least one security key stored therein; and

at least one secure application environment in the digital media device, the at least one secure application environment configured to receive and process information sent from the information module only if the information includes at least one security code corresponding to the at least one security key, the at least one security code being obtained from a clearinghouse when the information satisfies a predetermined criteria, each of the at least one secure application environments being connected to at least one portal.

5. The system according to claim 4, wherein the clearinghouse receives a copy of the at least one security key from a manufacturer of the secure media device and creates the at least one security code based on the at least one security key.

6. The system according to claim 4, wherein the secure media device is on a system-on-a-chip (SoC).

7. The system according to claim 4, wherein the digital media device is housed in the display unit.

8. The system according to claim 4, wherein each secure application environment of the at least one secure application environment is operationally isolated from one another.

9. The system according to claim 4, wherein the secure media device includes a hypervisor for creating the at least one secure application environment.

10. The system according to claim 4, wherein a connected portal has exclusive access to the display unit when the connected portal is connected to the display unit.

11. The system according to claim 4, wherein the clearinghouse is remotely located respective to the digital media device and the display unit.

12. The system according to claim 4, wherein an entity providing the information is different from an entity operating the clearinghouse.

13. The system according to claim 4, wherein the information includes at least one of multimedia content and computer program instructions for processing the multimedia content, the multimedia content including at least one of an audio file, a visual file, an audio-visual file, a media player, a codec, an instant messaging program, a web page, a local single-player video game, and a networked multiplayer video game.

14. A method including:

receiving a copy of at least one security key via a security key module, the at least one security key being received from a manufacturer of a secure media device, the secure media device being housed in a digital media device connected to a television unit and a network;

creating at least one security code based on the at least one security key via a security code module; and

providing the at least one security code to information sent over the network when the information satisfies a predetermined criteria, the at least one security code corresponding to the at least one security key, the information being received and processed by at least one secure application environment in the digital media device only if the information includes the at least one security code, each of the at least one secure application environment being directly connected to at least one portal.

15. The method according to claim 14, wherein an entity providing the information is different from an entity operating the clearinghouse.

16. The method according to claim 14, wherein the information includes at least one of multimedia content and computer program instructions for processing the multimedia content, the multimedia content including at least one of an audio file, a visual file, an audio-visual file, a media player, a codec, an instant messaging program, a web page, a local single-player video game, and a networked multiplayer video game.

17. A method including:

accessing a portal pursuant to instructions from a digital media device;

identifying the digital media device to the portal to enable the portal to obtain a security code;

receiving information having the security code;

confirming that the security code corresponds to a security key stored in the digital media device; and

providing the information to a secure application environment in the digital media device if the security code corresponds to the security key.

18. The method according to claim 17, further including:

sending a copy of the security key to a clearinghouse; and

receiving the security code from the clearinghouse

19. The method according to claim 17, further including sending the security code to a provider of the information if the information satisfies a predetermined criteria.

20. A computer program product for performing a method, the computer program product comprising:

a computer readable storage medium;

first program instructions to access a portal pursuant to instructions from a secure media device;

second program instructions to identify the secure media device to the portal to enable the portal to obtain a security code;

third program instructions to receive information having the security code;

fourth program instructions to confirm that the security code corresponds to a security key stored in the secure media device; and

fifth program instructions to provide the information to the user if the security code corresponds to the security key,

the first program instructions, the second program instructions, the third program instructions, the fourth program instructions, and the fifth program instructions are stored on the computer readable storage medium.