Client-side protection of broadcast or multicast content for non-real-time playback

• US 8,000,474 B1
• Filed: 12/15/2006
• Issued: 08/16/2011
• Est. Priority Date: 12/15/2006
• Status: Active Grant

• Current Assignee: Qurio Holdings Incorporated
• Original Assignee: Quiro Holdings Incorporated
• Inventors: Evans, Gregory Morgan, Roberts, Thomas A.
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): LEWIS, LISA C
• Application Number:
  US11/611,188
• Time in Patent Office: 1,705 Days
• Field of Search: 380200-217
• US Class Current: 380/205
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4325 by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08

Abstract

A system and method are disclosed for providing client-side protection of broadcast or multicast multimedia content for non-real-time playback. A set-top box function receives a request to record multimedia content and determines whether recording of the multimedia content is restricted. Upon receiving the multimedia content, the set-top box decrypts the multimedia content for real-time playback. If recording of the multimedia content is restricted, the set-top box re-encrypts the multimedia content and generates a packaged file including the re-encrypted multimedia content and one or more of a content identifier, a set-top identifier, a network reference to a copyright policy server, and a record policy of the multimedia content. The packaged file is either stored locally or transferred to remote storage. A remote system having access to the packaged file obtains the packaged file and enforces a copyright policy of the multimedia content before releasing the multimedia content for non-real-time playback.

Claims

1. A system comprising:

a) a control system adapted to;

i) receive a request to record multimedia content; and

ii) determine whether recording of the multimedia content is restricted;

b) a network interface adapted to;

i) receive the multimedia content from a content server; and

ii) receive a plurality of hybrid I-Frames that are low-loss versions of a corresponding subset of I-Frames of the multimedia content;

c) a decryption function adapted to decrypt the multimedia content to provide decrypted multimedia content for real-time playback; and

d) an encryption function adapted to, if recording of the multimedia content is restricted;

i) re-encrypt the decrypted multimedia content to provide re-encrypted multimedia content; and

ii) store the re-encrypted multimedia content, wherein a separate system obtains the re-encrypted multimedia content and enforces a rights policy of the multimedia content before releasing the multimedia content for non-real-time playback.

2. The system of claim 1 wherein if recording of the multimedia content is not restricted, the control system is further adapted to effect storage of the decrypted multimedia content for non-real-time playback.

3. The system of claim 1 further comprising:

a decompression function adapted to decompress the decrypted multimedia content to provide decrypted, decompressed multimedia content; and

a secure digital interface adapted to provide the decrypted, decompressed multimedia content to a compliant playback device for real-time playback.

4. The system of claim 3 wherein the secure digital interface is a High-bandwidth Digital Content Protection (HDCP) compliant High Definition Multimedia Interface (HDMI).

5. The system of claim 3 wherein the decryption function, the encryption function, and the decompression function are implemented on a single integrated circuit.

6. The system of claim 3 wherein the decryption function, the encryption function, the decompression function, and the secure digital interface are implemented on a single integrated circuit.

7. The system of claim 1 wherein if recording of the multimedia content is restricted, the control system is further adapted to:

obtain an encryption key for the multimedia content from a license server; and

provide the encryption key to the encryption function, wherein the encryption function re-encrypts the decrypted multimedia content using the encryption key from the license server.

8. The system of claim 7 wherein the encryption key is unique to one of a group consisting of:

the system, the multimedia content, and a combination of the system and the multimedia content.

9. The system of claim 7 wherein:

the encryption function is further adapted to store identification information comprising at least one of a group consisting of;

information identifying the multimedia content and information identifying the system, and

in order to obtain the encryption key from the license server, the control system is further adapted to provide a request including the identification information to the license server and receive the encryption key from the license server.

10. The system of claim 1 wherein the encryption function is further adapted to generate a packaged file including the re-encrypted multimedia content and associated information comprising at least one of a group consisting of:

information identifying the multimedia content, information identifying the system, and a network reference of a rights policy server hosting the rights policy of the multimedia content, wherein the separate system obtains the packaged file, obtains the rights policy using the associated information, and enforces the rights policy of the multimedia content before releasing the multimedia content for non-real-time playback.

11. The system of claim 10 wherein the packaged file is stored locally by the system.

12. The system of claim 10 wherein the packaged file is stored remotely in remote storage associated with the separate system.

13. The system of claim 1 wherein the encryption function is further adapted to store information identifying the multimedia content in association with the re-encrypted multimedia content, and the separate system is adapted to:

obtain the re-encrypted multimedia content;

obtain the rights policy for the multimedia content from a rights policy server based on the information identifying the multimedia content; and

effect enforcement of the rights policy of the multimedia content before releasing the multimedia content for non-real-time playback.

14. The system of claim 13 wherein the rights policy requires watermarking of the multimedia content, and the separate system enforces the rights policy by effecting watermarking of the multimedia content with at least one of a group consisting of the information identifying the multimedia content, information identifying the system, and information identifying an associated user.

15. The system of claim 13 wherein the rights policy requires watermarking of the multimedia content, and in order to effect enforcement of the rights policy, the separate system is further adapted to:

effect watermarking of the multimedia content with a content specific watermark comprising the information identifying the multimedia content and a user specific watermark to provide watermarked multimedia content; and

obtain a digital certificate comprising content specific watermark information corresponding to the content specific watermark and user specific watermark information corresponding to the user specific watermark from the rights policy server;

wherein access to the watermarked multimedia content is controlled based on a comparison of the content specific and user specific watermarks to the content specific and user specific watermark information in the digital certificate.

16. The system of claim 13 wherein the rights policy requires watermarking of the multimedia content, and in order to effect enforcement of the rights policy, the separate system is further adapted to:

obtain a watermarking application from a remote source; and

execute the watermarking application to effect watermarking of the multimedia content with at least one of a group consisting of;

the information identifying the multimedia content, information identifying the system, and information identifying an associated user.

17. The system of claim 16 wherein the executable watermarking application instructs the separate system to obtain a decryption key for the re-encrypted multimedia content from the rights policy server, decrypt the re-encrypted multimedia content using the decryption key, and watermark the multimedia content.

18. The system of claim 16 wherein the executable watermarking application has a decryption key for decrypting the re-encrypted multimedia content embedded therein and instructs the separate system to decrypt the re-encrypted multimedia content using the decryption key and watermark the multimedia content.

19. The system of claim 13 wherein the rights policy requires watermarking of the multimedia content, and in order to effect enforcement of the rights policy, the separate system is further adapted to:

provide the re-encrypted multimedia content to the rights policy server; and

in response, receive an executable package having the re-encrypted multimedia content embedded therein, the executable package forcing watermarking of the multimedia content with at least one of a group consisting of;

the information identifying the multimedia content, information identifying the system, and information identifying an associated user.

20. The system of claim 19 wherein upon execution, the executable package instructs the separate system to obtain a decryption key for the re-encrypted multimedia content from the rights policy server, decrypt the re-encrypted multimedia content using the decryption key, and watermark the multimedia content.

21. The system of claim 19 wherein the executable package further includes a decryption key for decrypting the re-encrypted multimedia content and instructs the separate system to decrypt the re-encrypted multimedia content using the decryption key and watermark the multimedia content.

22. The system of claim 13 wherein the rights policy requires purchase of the multimedia content, and the separate system enforces the rights policy by effecting an e-commerce transaction during which the multimedia content is purchased by an associated user.

23. The system of claim 13 wherein the rights policy requires payment of a fee for non-real-time playback of the multimedia content, and the separate system enforces the rights policy by effecting an e-commerce transaction during which the fee is paid by an associated user.

24. The system of claim 13 wherein the rights policy is a Digital Rights Management (DRM) policy, and the separate system enforces the DRM policy when releasing the multimedia content for non-real-time playback.

25. The system of claim 13 wherein the associated information further comprises a network reference to the rights policy server.

26. The system of claim 1 wherein the multimedia content is broadcast from the content server to a plurality of systems including the system.

27. The system of claim 1 wherein the multimedia content is multicast from the content server to a plurality of systems including the system.

28. The system of claim 1 wherein the system is a set-top box function.

29. A method comprising:

receiving a request to record multimedia content;

determining whether recording of the multimedia content is restricted;

receiving the multimedia content from a content server;

receiving a plurality of hybrid I-Frames that are low-loss versions of a corresponding subset of I-Frames of the multimedia content;

decrypting the multimedia content to provide decrypted multimedia content for real-time playback; and

if recording of the multimedia content is restricted, re-encrypting the decrypted multimedia content to provide re-encrypted multimedia content and storing the re-encrypted multimedia content;

wherein a separate system obtains the re-encrypted multimedia content and enforces a rights policy of the multimedia content before releasing the multimedia content for non-real-time playback.