Media player embodiments and secure playlist packaging

• US 8,688,991 B1
• Filed: 06/01/2007
• Issued: 04/01/2014
• Est. Priority Date: 06/01/2007
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Sunil, Agrawal
• Primary Examiner(s): SHAW, BRIAN F
• Application Number:
  US11/757,085
• Time in Patent Office: 2,496 Days
• Field of Search: 713/196, 713/156, 713/176, 705/1, 705/51, 380/30, 709/217, 709/231, 726/4, 725/116
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26258 for generating a list of items to be played back in a given order, e.g. playlist, or scheduling item distribution according to such list retrieval of multimedia data based on playlists G06F16/40
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/812 involving advertisement data advertising per se G06Q30/02

Abstract

A system identifies a playlist comprising at least one reference to content. The system provides a digital signature to the playlist. The digital signature links the playlist to a creator of the playlist. The system authenticates an application rendering the content using the digital signature. The system receives a command to render the playlist using the application.

Claims

1. A method to be executed by a processor in communication with a computer-readable medium, the processor configured to execute the steps comprising:

receiving a playlist comprising a reference to encrypted content, the playlist further comprising a value for verifying the encrypted content and a digital signature for the playlist, the digital signature associating the playlist with a creator of the playlist;

verifying the digital signature authenticates with a credential of the creator of the playlist, and verifying the integrity of the playlist using the digital signature;

transmitting a verification request to a policy server, the verification request including application signature information and an application version for an application accessing the playlist;

initiating communication between a video manager and the policy server to authenticate the application;

receiving, from the policy server, verification of the authentication of the application, the verification based on the application signature and the application version; and

receiving a request to play the playlist by the verified application, and the verified application responsive to receiving the request to play the playlist;

requesting, from the policy server, a decryption key for the encrypted content,

receiving, from the policy server, a decryption key for the encrypted content,

using the decryption key and the value for verifying the encrypted content, verifying the reference to the encrypted content and decrypting the encrypted content, and

responsive to verifying the reference to the encrypted content, playing the decrypted content by the application.

2. The method of claim 1, wherein the content comprises an advertisement.

3. The method of claim 1, further comprising wherein encrypting the first referenced content referenced in the playlist comprises:

responsive to receiving the request to play the content, requesting anonymous user access to the encrypted content.

4. The method of claim 1, wherein decrypting the encrypted content referenced in the playlist comprises:

computing a verified decryption key using a credential provided to a creator of the playlist, the verified decryption key used to decrypt the encrypted content and decrypting the encrypted content using the verified decryption key.

5. The method of claim 1, wherein initiating communication between the video manager and the policy server to authenticate the application comprises:

verifying the application signature by the video manager;

receiving, from the policy server, a first verification that the application is authenticated to render the playlist, the first verification based on a policy requiring authentication of the application before playback of the encrypted content, the policy used to encrypt the first referenced content as specified within the playlist;

receiving, from the policy server, a second verification that a version associated with the video manager matches an acceptable version indicated by the policy used to encrypt the first referenced content within the playlist; and

receiving, from the policy server, an encrypted content decryption key encrypted with the version associated with the video manager.

6. The method of claim 1, wherein verifying the digital signature comprises:

identifying that the encrypted content is available via a network; and

using the value, verifying the reference to the encrypted content.

7. The method of claim 1, wherein verifying the digital signature comprises:

identifying that the first and second referenced content is stored locally; and

using the value, verifying the encrypted content.

8. The method of claim 1, wherein verifying the integrity of the playlist comprises:

determining that the verification of the playlist has failed; and

rejecting the command to playback the encrypted content.

9. The method of claim 1, wherein receiving the request to play the playlist by the verified application comprises:

determining that a video manager has decrypted an encrypted content decryption key received from a policy server; and

processing the content decryption key with a public key associated with the digital signature to obtain the decryption key.

10. The method of claim 1, wherein the verifying the digital signature and transmitting the verification request are performed by a content manager process associated with the application.

11. A computerized device comprising:

a memory;

a processor;

a communications interface;

an interconnection mechanism coupling the memory, the processor and the communications interface;

wherein the memory is encoded with a media managing application that when executed on the processor is capable of managing media in a secure format on the computerized device by performing the operations of;

receiving a playlist comprising a reference to encrypted content, the playlist further comprising a value for verifying the encrypted content and a digital signature for the playlist, the digital signature associating the playlist with a creator of the playlist;

verifying the digital signature authenticates with a credential of the creator of the playlist, and verifying the integrity of the playlist using the digital signature;

transmitting a verification request to a policy server, the verification request including application signature information and an application version for an application accessing the playlist;

initiating communication between a video manager and the policy server to authenticate the application;

receiving, from the policy server, verification of the authentication of the application, the verification based on the application signature and the application version; and

receiving a request to play the playlist by the verified application, and the verified application responsive to receiving the request to play the playlist;

requesting, from the policy server, a decryption key for the encrypted content,

receiving, from the policy server, a decryption key for the encrypted content,

using the decryption key and the value for verifying the encrypted content, verifying the reference to the encrypted content and decrypting the encrypted content, and

responsive to verifying the reference to the encrypted content, playing the decrypted content by the application.

12. The computerized device of claim 11, wherein decrypting the encrypted content comprises computing a verified decryption key using a credential provided to a creator of the playlist, the verified decryption key used to decrypt the encrypted content, and decrypting the encrypted content using the verified decryption key.

13. The computerized device of claim 11, wherein the verifying the digital signature and transmitting the verification request are performed by a content manager process associated with the application.

14. A non-transitory computer readable medium encoded with computer programming logic that when executed on a process in a computerized device provides secure media managing, the medium comprising:

instructions for receiving a playlist comprising a reference to encrypted content, the playlist further comprising a value for verifying the encrypted content and a digital signature for the playlist, the digital signature associating the playlist with a creator of the playlist;

instructions for verifying the digital signature authenticates with a credential of the creator of the playlist, and verifying the integrity of the playlist using the digital signature;

instructions for transmitting a verification request to a policy server, the verification request including application signature information and an application version for an application accessing the playlist;

instructions for initiating communication between a video manager and the policy server to authenticate the application;

instructions for receiving, from the policy server, verification of the authentication of the application, the verification based on the application signature and the application version; and

instructions for receiving a request to play the content in the playlist by the verified application, and the verified application comprising instructions for, responsive to receiving the request to play the content;

requesting, from the policy server, a decryption key for the encrypted content,

receiving, from the policy server, a decryption key for the encrypted content,

using the decryption key and the value for verifying the encrypted content, verifying the reference to the encrypted content and decrypting the encrypted content, and

responsive to verifying the reference to the encrypted content, playing the decrypted content by the application.

15. The non-transitory computer-readable medium of claim 14, wherein the instructions for decrypting the encrypted content comprises instructions for computing a verified decryption key using a credential provided to a creator of the playlist, the verified decryption key used to decrypt the encrypted content, and instructions for decrypting the encrypted content using the verified decryption key.

16. The non-transitory computer-readable medium of claim 14, wherein the instructions for verifying the digital signature and the instructions for transmitting the verification request are part of a content manager process associated with the application.