Reprogrammable security for controlling piracy and enabling interactive content

• US 8,055,910 B2
• Filed: 07/07/2004
• Issued: 11/08/2011
• Est. Priority Date: 07/07/2003
• Status: Active Grant

• Current Assignee: Irdeto USA Incorporated (MultiChoice Group Ltd.)
• Original Assignee: Rovi Solutions Corporation (Adeia Inc.)
• Inventors: Kocher, Paul C., Lawson, Nathaniel J., Jun, Benjamin C., Pearson, Peter K., Laren, Carter C., Jaffe, Joshua M.
• Primary Examiner(s): Korzuch; William
• Assistant Examiner(s): WRIGHT, BRYAN F
• Application Number:
  US10/563,793
• Publication Number:
  US 20070033419A1
• Time in Patent Office: 2,680 Days
• Field of Search: 713/193, 713/183
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06Q 50/188 Electronic negotiation
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00115 wherein the record carrier stores a unique medium identifier
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00231 wherein the key is obtained from a local external medium, e.g. a card
• CPC Class Codes: G11B 20/00246 wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
• CPC Class Codes: G11B 20/00253 wherein the key is stored on the record carrier
• CPC Class Codes: G11B 20/00449 content scrambling system [CSS]
• CPC Class Codes: G11B 20/00818 wherein the usage restriction limits the signal quality, e.g. by low-pass filtering of audio signals or by reducing the resolution of video signals
• CPC Class Codes: G11B 20/00884 involving a watermark, i.e. a barely perceptible transformation of the original data which can nevertheless be recognised by an algorithm
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04N 2005/91342 : the copy protection signal being an authentication signal
• CPC Class Codes: H04N 2005/91364 : the video signal being scrambled
• CPC Class Codes: H04N 21/4181 : for conditional access
• CPC Class Codes: H04N 21/42646 : for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4325 : by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8193 : dedicated tools, e.g. video decoder software or IPMP tool
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection

Abstract

Technologies to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disk (200) carries an encrypted digital video title combined with data processing operations that implement the title'"'"'s security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations (225), access secure non-volatile storage, submit data to CODECs for output (250), and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies. If pirates compromise a player or title, future content can be mastered with security features that, for example, block the attack, revoke pirated media, or use native code to correct player vulnerabilities.

Claims

1. A computer-implemented method of controlling playback of digital content by a playback device, the method comprising:

receiving data that includes the digital content, first data processing instructions, and second data processing instructions, the first data processing instructions being specific to the digital content and being executable by a computer language interpreter of the playback device to authenticate the second data processing instructions, the second data processing instructions being executable by the computer language interpreter of the playback device to request an access to a memory of the playback device; and

executing the first data processing instructions by using the computer language interpreter, the first data processing instructions configuring the computer language interpreter to;

obtain a cryptographic value of the second data processing instructions;

determine an authenticity of the second data processing instructions by using the cryptographic value;

based on the authenticity, performing a first operation, the first operation being selected from a first group consisting of;

inhibiting playback of at least a portion of the digital content, and

enabling the access by the computer language interpreter to the memory of the playback device, the access being performed by the computer language interpreter pursuant to execution of the second data processing instructions.

2. The computer-implemented method of claim 1, wherein the first data processing instructions, in configuring the computer language interpreter to determine the authenticity, configure the computer language interpreter to perform a second operation selected from a second group consisting of:

comparing the cryptographic value to a reference value stored in the memory, and

verifying a digital signature corresponding to at least one of the first data processing instructions or the second data processing instructions.

3. The computer-implemented method of claim 1, wherein the receiving of the data includes receiving at least some of the data from a media drive or via a network.

4. The computer-implemented method of claim 1 further comprising storing information in the memory, the information representing at least one of:

a payment referencing the digital content,

a history of pay-per-view payments,

a counter value,

a duration of access,

a spending limit,

a pricing discount,

a permission level,

a privilege level,

a security policy,

a software update of the playback device,

third data processing instructions to obtain the software update,

a cryptographic key, or

a digital signature.

5. The computer-implemented method of claim 1, wherein the first data processing instructions, in configuring the computer language interpreter to inhibit the playback, configure the computer language interpreter to perform a third operation selected from a third group consisting of:

preventing the playback,

disabling a rendering of the portion of the digital content,

communicating an error message,

communicating a first request to receive authentication data,

communicating a second request to initiate an upgrade of the playback device,

disabling a decryption of the portion of the digital content, and

restricting the playback to a reduced quality level less than a maximum quality level of the digital content.

6. An optical medium comprising:

digital content;

first data processing instructions specific to the digital content and executable by a computer language interpreter of a playback device to authenticate second data processing instructions; and

the second data processing instructions, the second data processing instructions being executable by the computer language interpreter of the playback device to request an access to a memory of the playback device;

the first data processing instructions, when executed by the computer language interpreter of a playback device, configuring the computer language interpreter to;

obtain a cryptographic value of the second data processing instructions;

determine an authenticity of the second data processing instructions by using the cryptographic value;

based on the authenticity, perform a first operation, the first operation being selected from a first group consisting of;

inhibiting playback of at least a portion of the digital content, and

enabling an access by the computer language interpreter to a memory of the playback device, the access being performed by the computer language interpreter pursuant to execution of the second data processing instructions;

the second data processing instructions, when executed by the computer language interpreter of the playback device, configuring the computer language interpreter to request the access to the memory of the playback device.

7. The optical medium of claim 6, wherein the first data processing instructions, in configuring the computer language interpreter to determine the authenticity, configure the computer language interpreter to perform a second operation selected from a second group consisting of:

comparing the cryptographic value to a reference value stored in the memory; and

verifying a digital signature corresponding to at least one of the first data processing instructions or the second data processing instructions.

8. The optical medium of claim 6, wherein the first data processing instructions, in configuring the computer language interpreter to inhibit the playback, configure the computer language interpreter to perform a third operation selected from a third group consisting of:

preventing the playback,

disabling a rendering of the portion of the digital content,

communicating an error message,

communicating a first request to receive authentication data,

communicating a second request to initiate an upgrade of the playback device,

disabling a decryption of the portion of the digital content, and

restricting the playback to a reduced quality level less than a maximum quality level of the digital content.

9. An apparatus to control playback of digital content, the apparatus comprising:

a memory;

a computer language interpreter communicatively coupled to the memory; and

a media interface communicatively coupled to the computer language interpreter, the media interface being configured to receive data that includes the digital content, first data processing instructions, and second data processing instructions, the first data processing instructions being specific to the digital content and being executable by the computer language interpreter to authenticate the second data processing instructions, the second data processing instructions being executable by the computer language interpreter to request an access to the memory, the first data processing instructions, when executed by the computer language interpreter, configuring the computer language interpreter to;

obtain a cryptographic value of the second data processing instructions;

determine an authenticity of the second data processing instructions by using the cryptographic value;

based on the authenticity, perform a first operation selected from a first group consisting of;

inhibiting playback of at least a portion of the digital content, and

enabling the access by the computer language interpreter to the memory, the access being performed by the computer language interpreter pursuant to execution of the second data processing instructions.

10. The apparatus of claim 9, wherein the media interface is to receive at least some of the data from a media drive or via a network.

11. A computer-implemented method of controlling a playback device, the method comprising:

receiving data that includes digital content and first data processing instructions, the first data processing instructions being specific to the digital content and being executable by a computer language interpreter of the playback device to identify second data processing instructions that are executable by the playback device to affect playback of the digital content; and

executing the first data processing instructions by using the computer language interpreter of the playback device, the first data processing instructions configuring the computer language interpreter to;

determine a security risk of the playback device;

identify the second data processing instructions as a software countermeasure associated with the security risk, the identifying being based on the security risk; and

initiate an execution of the second data processing instructions by the playback device to implement the software countermeasure associated with the security risk.

12. The computer-implemented method of claim 11, wherein the second data processing instructions include a specific instruction encoded as native code of the playback device.

13. The computer-implemented method of claim 11, wherein the first data processing instructions, when executed by the computer language interpreter, configure the computer language interpreter to determine an authenticity of the second data processing instructions.

14. The computer-implemented method of claim 11, wherein the first data processing instructions, in configuring the computer language interpreter to determine the security risk, configure the computer language interpreter to detect a presence of unauthorized software on the playback device.

15. The computer-implemented method of claim 11, wherein the first data processing instructions, when executed by the computer language interpreter, configure the computer language interpreter to initiate a reception of at least some of the second data processing instructions from a media drive or via a network.

16. The computer-implemented method of claim 11, wherein the second data processing instructions, when executed on the playback device, configure the playback device to modify at least some of the digital content with a forensic mark.

17. An optical medium comprising:

digital content; and

first data processing instructions specific to the digital content and executable by a computer language interpreter of a playback device to identify second data processing instructions that are executable by the playback device to affect playback of the digital content, the first data processing instructions, when executed by the computer language interpreter of the playback device, configuring the computer language interpreter to;

determine a security risk of the playback device;

identify the second data processing instructions as a software countermeasure associated with the security risk, the identifying being based on the security risk; and

initiate execution of the second data processing instructions by the playback device to implement the software countermeasure associated with the security risk.

18. The optical medium of claim 17, wherein the second data processing instructions include a specific instruction encoded as native code of the playback device.

19. The optical medium of claim 17, wherein the first data processing instructions, when executed by the computer language interpreter, configure the computer language interpreter to determine an authenticity of the second data processing instructions.

20. The optical medium of claim 17, wherein the first data processing instructions, in configuring the computer language interpreter to determine the security risk, configure the computer language interpreter to detect a presence of unauthorized software on the playback device.

21. The optical medium of claim 17, wherein the second data processing instructions, when executed on the playback device, configure the playback device to modify at least some of the digital content with a forensic mark.

22. An apparatus comprising:

a media interface to receive data that includes digital content and first data processing instructions, the first data processing instructions being specific to the digital content and being executable by a computer language interpreter of the apparatus to identify second data processing instructions that are executable by the apparatus to affect playback of the digital content; and

the computer language interpreter, the computer language interpreter being communicatively coupled to the media interface, the computer language interpreter being configured to execute the first data processing instructions, the first data processing instructions, when executed by the computer language interpreter, configuring the computer language interpreter to;

determine a security risk of the apparatus;

identify the second data processing instructions as a software countermeasure associated with the security risk, the identifying being based on the security risk; and

initiate an execution of the second data processing instructions by the apparatus to implement the software countermeasure associated with the security risk.

23. A non-transitory machine-readable storage medium comprising a set of instructions that, when executed by one or more processors of a machine, cause the machine to perform operations comprising:

receiving data that includes digital content and first data processing instructions, the first data processing instructions being specific to the digital content and being executable by the one or more processors of the machine to identify second data processing instructions that are executable by the machine to affect playback of the digital content; and

executing the first data processing instructions by using the one or more processors, the first data processing instructions configuring the one or more processors to;

determine a security risk of the machine;

identify the second data processing instructions as a software countermeasure associated with the security risk, the identifying being based on the security risk; and

initiate an execution of the second data processing instructions by the machine to implement the software countermeasure associated with the security risk.

24. A system to control playback of digital content, the system comprising:

a memory;

means for receiving data that includes the digital content, first data processing instructions, and second data processing instructions, the first data processing instructions being specific to the digital content and being executable to authenticate the second data processing instructions, the second data processing instructions being executable to request an access to the memory; and

means for executing the first data processing instructions, the first data processing instructions to;

obtain a cryptographic value of the second data processing instructions;

determine an authenticity of the second data processing instructions by using the cryptographic value;

based on the authenticity, perform an operation selected from a group consisting of;

inhibiting playback of at least a portion of the digital content, and

enabling the access to the memory of the playback device, the access being performed pursuant to execution of the second data processing instructions.