System and method for processing and protecting content

• US 8,800,059 B2
• Filed: 08/27/2012
• Issued: 08/05/2014
• Est. Priority Date: 03/19/1999
• Status: Expired due to Fees

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Carr, Jeffrey Douglas
• Primary Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US13/595,035
• Publication Number:
  US 20120324583A1
• Time in Patent Office: 708 Days
• Field of Search: None
• US Class Current: 726/30
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: H04L 2012/2841 Wireless
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04N 2005/91328 the copy protection signal being a copy management signal, e.g. a copy generation management signal [CGMS]
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/23473 by pre-encrypting
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/426 Internal components of the client ; Characteristics thereof H04N5/44 takes precedence
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/443 OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/8193 : dedicated tools, e.g. video decoder software or IPMP tool
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17318 : Direct or substantially direct transmission and handling of requests

Abstract

Systems and methods that process and protect content are provided. In one example, a system may include, for example, a first device coupled to a second device. The first device may include, for example, an integrated circuit that may include a content processing system and a security system. The security system may include, for example, a digital rights manager. The first device and the second device may be part of a network. The network receives content and control information via the first device. The content processing system processes incoming content based upon at least the control information. The integrated circuit protects the content before placing the content on the network.

Claims

1. A computing device for processing and securing content, comprising:

a network interface configured to receive content and control information and to couple to a second device via one or more networks, wherein the control information is provided by a clearinghouse;

a content processing system configured to process the received content based on the received control information; and

a digital rights manager configured to;

secure the content,

determine that the content may be distributed to the second device,

grant rights to the content to the second device based on the control information, and

place the secured content on a first network of the one or more networks.

2. The computing device according to claim 1, further comprising:

a non-volatile memory that includes a set of mode control bits configured to allow secure programming of a device feature of the computing device.

3. The computing device according to claim 2, wherein the non-volatile memory stores one of a cryptographic key and a device identification number of the computing device.

4. The computing device according to claim 1, wherein the first network comprises a wireless network supporting one or more of the following wireless communication protocols:

Bluetooth, IEEE 802.11 and an amendment to IEEE 802.11.

5. The computing device according to claim 1, wherein the digital rights manager is configured to secure the content placed on the first network using a network encryption scheme.

6. The computing device according to claim 1, wherein the digital rights manager supports a first type of digital rights management and a second type of digital rights management.

7. The computing device according to claim 6, wherein the digital rights manager supports interoperability between the first type of digital rights management and the second type of digital rights management.

8. The computing device according to claim 1, wherein the content is provided by a content provider.

9. The computing device according to claim 8, wherein the computing device is configured to receive an access license from the clearinghouse and to request particular content via a second network from a streaming server, a web server, or a video server that is servicing the content provider.

10. The computing device according to claim 9, wherein the digital rights manager is further configured to use the access license to determine whether to distribute the content to the second device.

11. A method of processing and securing content, comprising:

receiving content and control information at a computing device via a first network, wherein the control information is provided by a clearinghouse;

processing the received content based on the received control information;

securing the processed content;

determining that the content may be distributed to a second device;

granting rights to the conent to the second device based on the control information; and

placing the secured content on a second network coupled to the second device.

12. The method according to claim 11, further comprising:

securing the programming of a device feature of the computing device using a non-volatile memory that includes a set of mode control bits.

13. The method according to claim 12, wherein the non-volatile memory stores one of a cryptographic key and a device identification number of the computing device.

14. The method according to claim 11, wherein the second network is a wireless network supporting one or more of the following wireless communication protocols:

Bluetooth, IEEE 802.11 and an amendment to IEEE 802.11.

15. The method according to claim 11, wherein the processed content is secured using a network encryption scheme.

16. The method according to claim 11, wherein the first network is an external broadband network.

17. The method according to claim 11, wherein the content is provided by a content provider and.

18. The method according to claim 17, further comprising:

receiving an access license from the clearinghouse; and

requesting particular content from a streaming server, a web server, or a video server that is servicing the content provider.

19. The method according to claim 18, wherein the placing is conditional based on a determination that the access license allows distribution of the received content to the second device.

20. A non-transitory computer readable medium containing computer instructions that, when executed by a computer processor, cause the processor to perform steps comprising:

receiving content and control information at a computing device via a first network;

processing the received content based on the received control information;

securing the processed content using a digital rights manager;

placing the secured content on a second network coupled to a second device

processing incoming content based upon at least the control information, the incoming content and the control information being received by the computing device from an external broadband network;

storing content in a storage device and providing the stored content to a wireless network; and

wherein the digital rights manager supports a first type of digital rights management and a second type of digital rights management.

21. A computing device for processing and securing content, comprising:

a network interface configured to receive content and control information and to couple to a second device via one or more networks;

a non-volatile memory that includes a set of mode control bits configured to allow secure programming of a device feature of the computing device;

a content processing system configured to process the received content based on the received control information and the mode control bits stored in the non-volatile memory; and

a digital rights manager configured to secure content and to place the secured content on a first network of the one or more networks.

22. A method of processing and securing content, comprising:

receiving content and control information at a computing device via a first network;

securing a programming of a device feature of the computing device using a non-volatile memory that includes a set of mode control bits;

processing the received content based on the received control information and the set of mode control bits;

securing the processed content; and

placing the secured content on a second network coupled to a second device.