PC Secure Video Path

• US 20160350517A1
• Filed: 03/29/2016
• Published: 12/01/2016
• Est. Priority Date: 03/04/2010
• Status: Active Grant

• Current Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Original Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Inventors: Fahrny, James W.
• Granted Patent: US 10,055,553 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04N 21/64715 Protecting content from unauthorized alteration within the network verifying the information received for network security in communication control or processing H04L63/12; integrity in wireless network security H04W12/10

Abstract

A system and method are disclosed for creating a secure video content path, or a protected media content bus, within an unsecure personal computer. A portable security module, or electronic key safe, may be inserted into a personal computer that has different internal components for processing secure and unsecured content. The security module may establish a secure encrypted link with a secure video processor of the personal computer, and may use the personal computer'"'"'s network interface to request authority to receive secured content. The security module may provide content keys to the secure video processor to access secured content received over an external network.

Claims

1. A media method, comprising:

detecting, by a computing device, insertion of a security module and in response thereto establishing a secure tunnel between the security module and a secure video processor of the computing device;

generating, by the computing device and on behalf of the security module, a key request message comprising an identification of the security module and an identification of the secure video processor of the computing device;

receiving an authentication in response to the key request message and supplying the authentication to the security module via the secure tunnel, wherein the authentication comprises a key response message comprising one or more keys associated with an authentication proxy;

sending, by the computing device and to the authentication proxy, a client sign-on request identifying the security module; and

using the security module and the secure video processor to process secured content for presentation to a user.