METHOD AND APPARATUS TO USING STORAGE DEVICES TO IMPLEMENT DIGITAL RIGHTS MANAGEMENT PROTECTION

• US 20130276146A1
• Filed: 12/22/2011
• Published: 10/17/2013
• Est. Priority Date: 12/22/2011
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Imtel Corporation
• Inventors: Saxena, Paritosh, Barkatullah, Azam, Khosravi, Hormuzd M., Gilani, Manish, Triantaffillou, Nicholas D.
• Granted Patent: US 9,419,976 B2
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Embodiments of systems, apparatuses, and methods to securely download digital rights managed content with a client are described. In some embodiments, a system establishes a secure root of trust for the client. In addition, the system establishes a secure tunnel between an agent of the client and a storage system of the client. Furthermore, the system securely downloads the digital rights managed content to the storage system via the secure tunnel and securely provides the digital rights managed content from the storage system to a display.

Claims

1. The method to securely download digital rights managed content with a client, comprising:

establishing a secure root of trust for the client;

establishing a secure tunnel between an agent of the client and a storage system of the client;

securely downloading the digital rights managed content to the storage system via the secure tunnel; and

securely providing the digital rights managed content from the storage system to a display.

2. The method of claim 1, wherein the storage system includes secure storage that is used to store the digital rights managed content.

3. The method of claim 1, wherein the secure storage is not accessible to an operating system of the client.

4. The method of claim 1, wherein the digital rights managed content stored in the secure storage is accessible via a private interface.

5. The method of claim 1, wherein establishing of the secure root of trust comprises provisioning a public key into the storage system.

6. The method of claim 1, wherein the securely downloading the digital rights managed content comprises:

authenticating with a service that manages the digital rights managed content;

negotiating a content specific key for the digital rights managed content; and

storing the content specific key in the storage system.

7. The method of claim 6, wherein the securely downloading the digital rights managed content comprises:

receiving the digital rights managed content, the digital rights managed content encrypted using the content specific key; and

storing the digital rights managed content and metadata associated with the digital rights managed content in the storage system.

8. The method of claim 6, further comprising:

receiving a request for the digital rights managed content;

decrypting the digital rights managed content;

re-encrypting the digital rights managed content as per a root of trust protocol; and

providing the re-encrypted digital rights managed content to the agent.

9. The method of claim 8, wherein the agent further provides the re-encrypted digital rights managed content to a display.

10. The method of claim 1, wherein the secure tunnel uses an action and results mailbox.

11. A device to securely download and display digital rights managed content, comprising:

a storage system, including,

an agent to establish a secure root of trust for the device;

a secure storage to establish a secure tunnel with a remote service provider, to securely download the digital rights managed content to the secure storage via the tunnel, and securely provide the digital rights managed content from the storage system.

12. The device of claim 11, wherein the secure storage is not accessible to an operating system of the device.

13. The device of claim 11, wherein the digital rights managed content stored in the secure storage is accessible via a private interface.

14. The device of claim 11, wherein the agent, to securely download the digital rights managed content, is configured to authenticate with the remote service provider that manages the digital rights managed content, negotiate a content specific key for the digital rights managed content, and store the content specific key in the secure storage.

15. The device of claim 14, wherein the agent, to securely download the digital rights managed content, is further configured to receive the digital rights managed content, the digital rights managed content encrypted using the content specific key, and store the digital rights managed content and metadata associated with the digital rights managed content in the storage system.

16. The device of claim 14, the agent further configured to receive a request for the digital rights managed content, decrypt the digital rights managed content, re-encrypt the digital rights managed content as per root of trust protocol, and provide the re-encrypted digital rights managed content to the agent.

17. A system to securely download digital rights managed content, comprising:

a service provider that manages and stores the digital rights managed content; and

a storage system, including,

an agent that establishes a secure root of trust for the device with the service provider, and

a secure storage that establishes a secure tunnel with the service provider, securely downloads the digital rights managed content to the secure storage via a tunnel with the service provider, and securely provides the digital rights managed content to a display.

18. The system of claim 17, wherein the secure storage is not accessible to an operating system of the device.

19. The system of claim 17, wherein digital rights managed content stored in the secure storage is accessible via a private interface.

20. The system of claim 17, wherein the service provider provisions a public key for the agent.

21. A non-transitory machine-readable medium having executable instructions to cause one or more processing units to perform a method to securely download digital rights managed content with a client, the method comprising:

establishing a secure root of trust for the client;

establishing a secure tunnel between an agent of the client and a storage system of the client;

securely downloading the digital rights managed content to the storage system via the secure tunnel; and

securely providing the digital rights managed content from the storage system to a display.