Methods and apparatus for persistent control and protection of content

• US 7,233,948 B1
• Filed: 03/25/1999
• Issued: 06/19/2007
• Est. Priority Date: 03/16/1998
• Status: Expired due to Term

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Sibert, W. Olin, Van Wie, David M., Shamoon, Talal G., Hwa, John P., Hill, Ralph D., Radcliffe, Chris D.
• Primary Examiner(s): Pardo; Thuy N.
• Application Number:
  US09/276,233
• Time in Patent Office: 3,008 Days
• Field of Search: 709/231, 713/171, 713/189, 719/315, 707/9, 707/10, 707/101, 707/102, 707/103.R, 707/104.1, 705/57
• US Class Current: 1/1
• CPC Class Codes: H04N 21/234318 by decomposing into objects, e.g. MPEG-4 objects
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/43072 of multiple content streams on the same device
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8352 involving content or source identification data, e.g. Unique Material Identifier [UMID]
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99942 Manipulating data structure, e.g. compression, compaction, compilation
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface
• CPC Class Codes: Y10S 707/99944 Object-oriented database structure
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

Systems and methods for protection of streamed media content are disclosed. In one aspect, the system includes control means for governing content streams or objects, decryption means for decrypting content streams or objects, and feedback means for tracking use of content streams or objects. The control means may operate in accordance with rules received in the streamed content or through a side-band channel. The rules may specify allowed uses of the content, including whether the content can be copied or transferred, and whether content may be “checked out” of one device and used in another. The rules may also include budgets, and a requirement that audit information be collected and/or transmitted to server. In another aspect, a media player is disclosed that uses plugins to assist in rendering content. A “trust plugin” is used to enable a media player designed to render unprotected content to render protected content.

Claims

1. A streaming media player providing content protection and digital rights management, including:

a port configured to receive a digital bit stream, the digital bit stream including;

content which is encrypted at least in part, and

a secure container including control information for controlling use of the content, including at least one key suitable for decryption of at least a portion of the content; and

a control arrangement including;

means for opening secure containers and extracting cryptographic keys, and means for decrypting the encrypted portion of the content, and

means for managing access to, or use of, said content in accordance with said control information.

2. The player of claim 1 in which the digital bit stream includes at least two substreams which have been muxed together, at least one of the sub-streams including compressed information, and

wherein the player further includes:

a demux designed to separate and route the sub-streams;

a decompression unit configured to decompress at least one of the sub-streams, the decompression unit and the demux being connected by a pathway for the transmission of information; and

a rendering unit designed to process decompressed content information for rendering.

3. The player of claim 2, further including:

a stream controller operatively connected to the decompression unit, the stream controller including decryption functionality configured to decrypt at least a portion of a sub-stream and pass the decrypted sub-stream to the decompression unit.

4. The player of claim 3, further including:

a path between the control arrangement and the stream controller to enable the control arrangement to pass at least one key to the stream controller for use with the stream controller'"'"'s decryption functionality.

5. The player of claim 4, further including:

a feedback path from the rendering unit to the control arrangement to allow the control arrangement to receive information from the rendering unit regarding the identification of objects which are to be rendered or have been rendered.

6. The player of claim 1, wherein the digital bit stream is encoded in MPEG-4 format.

7. The player of claim 1, wherein the digital bit stream is encoded in MP3 format.

8. The player of claim 1, wherein the control arrangement includes tamper resistance.

9. The player of claim 2, wherein the digital bit stream is encoded in MPEG-4 format.

10. The player of claim 2, wherein the digital bit stream is encoded in MP3 format.

11. The player of claim 8 in which the digital bit stream includes at least two substreams which have been muxed together, at least one of the sub-streams including compressed information, and

wherein the player further includes:

a demux designed to separate and route the sub-streams;

a decompression unit configured to decompress at least one of the sub-streams, the decompression unit and the demux being connected by a pathway for the transmission of information; and

a rendering unit designed to process decompressed content information for rendering.

12. The player of claim 11, further including:

a stream controller operatively connected to the decompression unit, the stream controller including decryption functionality configured to decrypt at least a portion of a sub-stream and pass the decrypted sub-stream to the decompression unit.

13. The player of claim 12, further including:

a path between the control arrangement and the stream controller to enable the control arrangement to pass at least one key to the stream controller for use with the stream controller'"'"'s decryption functionality.

14. The player of claim 13, further including:

a feedback path from the rendering unit to the control arrangement to allow the control arrangement to receive information from the rendering unit regarding the identification of objects which are to be rendered or have been rendered.

15. The player of claim 8, wherein the digital bit stream is encoded in MPEG-4 format.

16. The player of claim 8, wherein the digital bit stream is encoded in MP3 format.

17. The player of claim 1, wherein the control arrangement further includes means for disabling rendering of the content in a first device prior to or during transfer of the content to a second device.

18. The player of claim 17 in which the digital bit stream includes at least two substreams which have been muxed together, at least one of the sub-streams including compressed information, and

wherein the player further includes:

a demux designed to separate and route the sub-streams;

a decompression unit configured to decompress at least one of the sub-streams, the decompression unit and the demux being connected by a pathway for the transmission of information; and

a rendering unit designed to process decompressed content information for rendering.

19. The player of claim 18, further including:

a stream controller operatively connected to the decompression unit, the stream controller including decryption functionality configured to decrypt at least a portion of a sub-stream and pass the decrypted sub-stream to the decompression unit.

20. The player of claim 19, further including:

a path between the control arrangement and the stream controller to enable the control arrangement to pass at least one key to the stream controller for use with the stream controller'"'"'s decryption functionality.

21. The player of claim 20, further including:

a feedback path from the rendering unit to the control arrangement to allow the control arrangement to receive information from the rendering unit regarding the identification of objects which are to be rendered or have been rendered.

22. The player of claim 17, wherein the digital bit stream is encoded in MPEG-4 format.

23. The player of claim 17, wherein the digital bit stream is encoded in MP3 format.

24. The player of claim 17, wherein the control arrangement includes tamper resistance.

25. The player of claim 2, wherein the control arrangement includes tamper resistance.

26. The player of claim 3, wherein the control arrangement includes tamper resistance.