Secure connected digital media platform

• US 8,601,284 B2
• Filed: 01/27/2010
• Issued: 12/03/2013
• Est. Priority Date: 01/27/2010
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kienzle, Martin G., Ledak, Paul Joseph, Burnett, Scott G.
• Primary Examiner(s): Patel, Nirav B
• Application Number:
  US12/694,934
• Publication Number:
  US 20110182425A1
• Time in Patent Office: 1,406 Days
• Field of Search: 380200-202, 380/278, 380/277, 713/193, 713/156, 713/176, 713168-170, 725/29, 725/30
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/8173 End-user applications, e.g. Web browser, game
• CPC Class Codes: H04N 21/818 OS software
• CPC Class Codes: H04N 21/8193 dedicated tools, e.g. video decoder software or IPMP tool

Abstract

An embodiment of the invention provides a system including a secure media device having one or more security keys stored therein. The secure media device is housed in a device that is connected to a television unit and a network. Secure application environments are housed in the device, wherein each secure application environment is operationally isolated from one another. The secure application environments receive and process information sent over the network only if the information includes a security code corresponding to the security key in the secure media device. The security code is obtained from a clearinghouse when the information satisfies predetermined criteria. More specifically, the clearinghouse receives a copy of the security key from a manufacturer of the secure media device and creates the security code based on the security key.

Claims

1. A system including:

a secure media device housed in a digital media device, the digital media device being connected to a display unit and an information module, the information module including at least one of a network and an electronic storage device, the secure media device having at least one security key stored therein; and

a plurality of secure application environments in the digital media device, said secure application environments configured to receive and process information sent from the information module only if the information includes at least one security code corresponding to the at least one security key, the at least one security code being obtained from a clearinghouse when the information satisfies a predetermined criteria, each secure application environment of said secure application environments being operationally isolated from one another, each of said secure application environments being connected to only one portal, each said portal being connected to the clearinghouse, wherein the clearinghouse is remotely located respective to the digital media device and the display unit.

2. The system according to claim 1, wherein the clearinghouse receives a copy of the at least one security key from a manufacturer of the secure media device and creates the at least one security code based on the at least one security key.

3. The system according to claim 1, wherein the secure media device is on a system-on-a-chip (SoC).

4. The system according to claim 1, wherein the digital media device is housed in the display unit.

5. The system according to claim 1, wherein the secure media device includes a hypervisor for creating said secure application environments.

6. The system according to claim 1, wherein a connected portal has exclusive access to the display unit when the connected portal is connected to the display unit.

7. The system according to claim 1, wherein an entity providing the information is different from an entity operating the clearinghouse.

8. The system according to claim 1, wherein the information includes at least one of multimedia content and computer program instructions for processing the multimedia content, the multimedia content including at least one of an audio file, a visual file, an audio-visual file, a media player, a codec, an instant messaging program, a web page, a local single-player video game, and a networked multiplayer video game.

9. The system according to claim 1, wherein the plurality of secure application environments include at least three secure application environments.

10. A system including:

a secure media device housed in a digital media device, the digital media device being connected to a display unit and an information module, the information module including at least one of a network and an electronic storage device, the secure media device having at least one security key stored therein; and

at least one secure application environment in the digital media device, the at least one secure application environment configured to receive and process information sent from the information module only if the information includes at least one security code corresponding to the at least one security key, the at least one security code being obtained from a clearinghouse when the information satisfies a predetermined criteria, wherein an entity providing the information is different from an entity operating the clearinghouse, each of the at least one secure application environments being connected to at least one portal, wherein the clearinghouse is remotely located respective to the digital media device and the display unit.

11. The system according to claim 10, wherein the secure media device includes a hypervisor for creating the at least one secure application environment.

12. The system according to claim 10, wherein a connected portal has exclusive access to the display unit when the connected portal is connected to the display unit.

13. The system according to claim 10, wherein the information includes at least one of multimedia content and computer program instructions for processing the multimedia content, the multimedia content including at least one of an audio file, a visual file, an audio-visual file, a media player, a codec, an instant messaging program, a web page, a local single-player video game, and a networked multiplayer video game.

14. A system including:

a secure media device housed in a digital media device, the digital media device being connected to a display unit and an information module, the information module including at least one of a network and an electronic storage device, the secure media device having at least one security key stored therein; and

a plurality of secure application environments in the digital media device, said secure application environments configured to receive and process information sent from the information module only if the information includes at least one security code corresponding to the at least one security key, the at least one security code being obtained from a clearinghouse when the information satisfies a predetermined criteria, each secure application environment of said secure application environments being operationally isolated from one another, each of said secure application environments being connected to only one portal, each said portal being connected to the clearinghouse, wherein an entity providing the information is different from an entity operating the clearinghouse, and wherein the clearinghouse receives a copy of the at least one security key from a manufacturer of the secure media device and creates the at least one security code based on the at least one security key.

15. The system according to claim 14, wherein the secure media device includes a hypervisor for creating said secure application environments.

16. The system according to claim 14, wherein a connected portal has exclusive access to the display unit when the connected portal is connected to the display unit.

17. The system according to claim 14, wherein the clearinghouse is remotely located respective to the digital media device and the display unit.

18. The system according to claim 14, wherein the information includes multimedia content and computer program instructions for processing the multimedia content, the multimedia content including an audio file, a visual file, an audio-visual file, a media player, a codec, an instant messaging program, a web page, a local single-player video game, and a networked multiplayer video game.