PC Secure Video Path

• US 20110219239A1
• Filed: 03/04/2010
• Published: 09/08/2011
• Est. Priority Date: 03/04/2010
• Status: Active Grant

• Current Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Original Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Inventors: Fahrny, James William
• Granted Patent: US 8,424,099 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04N 21/64715 Protecting content from unauthorized alteration within the network verifying the information received for network security in communication control or processing H04L63/12; integrity in wireless network security H04W12/10

Abstract

A system and method are disclosed for creating a secure video content path, or a protected media content bus, within an unsecure personal computer. A portable security module, or electronic key safe, may be inserted into a personal computer that has different internal components for processing secure and unsecured content. The security module may establish a secure encrypted link with a secure video processor of the personal computer, and may use the personal computer'"'"'s network interface to request authority to receive secured content. The security module may provide content keys to the secure video processor to access secured content received over an external network.

Claims

7. A computer, comprising:

an electronic key safe interface, configured to connect to an external electronic key safe;

a secure media processor, configured to process secured media content for display;

a processor, configured to receive a content key from the external key safe via the key safe interface, and supply the content key to the secure media processor, wherein the secure media processor is configured to decrypt secure media content received from an external network using the content key.

1. A secure media content delivery method, comprising:

using an electronic key safe to create a protected media bus within a computer, wherein the protected media bus is parallel to an unsecured media content path in the computer;

receiving secured and unsecured content at the computer from an external network;

routing the secured content to the protected media bus; and

routing the unsecured content to the unsecured media content path.

2. The method of claim 1, wherein using the electronic key safe to create the protected media bus further comprises the key safe generating for transmitting an authentication request containing identification values of both the key safe and a secure processor in the computer.

3. The method of claim 2, further comprising the key safe receiving a new encryption key in response to the binding request.

4. The method of claim 1, further comprising the key safe supplying a different decryption key to an element of the protected media bus for each of a plurality of different pieces of secured media content received by the computer via the external network.

5. The method of claim 1, further comprising the computer receiving a request for secured content, obtaining a content key from the key safe;

and using the content key to decrypt the secured content after it is received via the external network.

6. The method of claim 5, further comprising establishing a secure tunnel between the key safe and a secure video content processor of the computer, and transmitting the content key from the key safe to the secure video content processor via the secure tunnel.

8. The computer of claim 7, further comprising a local wireless network interface circuit, coupled to the processor, and configured to access a local wireless network.

9. The computer of claim 7, further comprising an unsecured video processor, configured to process unsecured video content for display, and wherein the processor is configured to forward unsecured video content to the unsecured video processor for processing and display, and divert secured video content to the secure video processor for processing and display.

10. The computer of claim 7, wherein the processor is further configured to automatically transmit, to an external network, an authentication request containing identification information for the key safe and the secure video processor.

8-1. The computer of claim 7, wherein the key safe interface is a universal serial bus (USB) interface.

11. An electronic key safe, comprising:

an interface configured to attach to a computer interface;

a processor, configured to;

identify a secure video processor of a computer after the portable key safe is attached to a computer;

determine a content key needed by the secure video processor to decrypt secure content; and

transmit the content key to the secure video processor in response to a request to access the secure content.

12. The portable key safe of claim 11, wherein the processor is further configured to establish an encryption key with the secure video processor of the computer, and to use the encryption key when transmitting the content key to the secure video processor.

13. The portable security module of claim 11, wherein the processor is further configured to supply the secure video processor with configuration information for accessing secured content.

14. One or more computer readable media, storing computer-executable instructions that, when executed on a computer, cause the following to occur:

detecting insertion of a portable electronic key safe on a computer coupled to an external network;

using the portable key safe to create a protected media bus within the computer;

receiving secured and unsecured content at the computer from the external network;

routing the secured content to the protected media bus; and

routing the unsecured content to a media content path in the computer different from the protected media bus.

15. The one or more computer readable media of claim 14, wherein using the portable key safe to create the secure content path further comprises transmitting an authentication request containing identification values of both the key safe and a secure processor in the computer.

16. The one or more computer readable media of claim 15, wherein using the portable key safe to create the secure content path further comprises receiving a new encryption key in response to the authentication request.

17. The one or more computer readable media of claim 14, further storing instructions for receiving a request for secured content, obtaining a content key from the key safe;

and using the content key to decrypt the secured content after it is received via the external network.

18. The one or more computer readable media of claim 17, further storing instructions to establish a secure tunnel between the key safe and a secure video content processor of the computer, and forwarding the content key from the key safe to the secure video content processor via the secure tunnel.