Multi virtual machine architecture for media devices

• US 9,003,539 B2
• Filed: 10/21/2008
• Issued: 04/07/2015
• Est. Priority Date: 06/27/2003
• Status: Active Grant

• Current Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Original Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Inventors: Watson, Scott F.
• Primary Examiner(s): HENNING, MATTHEW T
• Application Number:
  US12/288,714
• Publication Number:
  US 20090172820A1
• Time in Patent Office: 2,359 Days
• Field of Search: 713/150, 713/193, 380/201, 718/1, 717/148
• US Class Current: 726/26
• CPC Class Codes: G06F 21/1064 Restricting content processing at operating system level
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 9/45504 Abstract machines for programme code execution, e.g. Java virtual machine [JVM], interpreters, emulators

Abstract

A software computing based environment for providing secured authentication of media downloaded from a network or loaded from a media player includes two peer-mode operating virtual machines. The low-level virtual machine provides decoding and decryption functions whereas the high-level virtual machine provides application level functions such as user interface, input/output.

Claims

1. A media player for providing media security protection to a medium, the media player comprising:

a security virtual machine configured to perform security decryption and decoding functions for the media player;

an application virtual machine configured to perform application level functions for the media player; and

a processing unit configured to run the security virtual machine and the application virtual machine;

wherein the security virtual machine is further configured to use a security instruction set for performing the security decryption and decoding functions, and the application virtual machine is further configured to use an application instruction set for performing the application level functions, wherein the security instruction set for performing the security decryption and decoding functions is different than the application instruction set for performing the application level functions, wherein the security virtual machine is a different type of virtual machine than the application virtual machine, and wherein the application virtual machine is a JAVA-based virtual machine, and the security virtual machine is not a JAVA-based virtual machine.

2. The media player of claim 1 further comprising:

an application program interface (API) permitting the security virtual machine and the application virtual machine to communicate with each other through the API.

3. The media player of claim 1, wherein the medium includes security codes for use by the security virtual machine.

4. The media player of claim 3, wherein the application virtual machine is configured to deliver the security codes to the security virtual machine.

5. The media player of claim 1, wherein the medium includes a boot code, and wherein the security virtual machine is configured to decrypt the boot code.

6. The media player of claim 1, wherein the security virtual machine is configured to deliver information related to synchronization events to the application virtual machine.

7. The media player of claim 1, wherein the application virtual machine is a high level virtual machine and the security virtual machine is a low level virtual machine.

8. The media player of claim 1, wherein the security virtual machine does not include an exception handling capability, and wherein the application virtual machine includes the exception handling capability.

9. The media player of claim 1, wherein the security virtual machine utilizes a copy protection algorithm.

10. A method of providing media security protection to a medium, the method comprising:

performing security decryption and decoding functions for the media player using a security virtual machine running on a processing unit, the security virtual machine using a security instruction set for performing the security decryption and decoding functions;

performing application level functions for the media player using the application virtual machine running on the processing unit, the application virtual machine using an application instruction set for performing the application level functions;

wherein the security instruction set for performing the security decryption and decoding functions is different than the application instruction set for performing the application level functions, wherein the security virtual machine is a different type of virtual machine than the application virtual machine, and wherein the application virtual machine is a JAVA-based virtual machine, and the security virtual machine is not a JAVA-based virtual machine.

11. The method of claim 10 further comprising:

permitting the security virtual machine and the application virtual machine to communicate with each other through an application program interface (API).

12. The method of claim 10, wherein the medium includes security codes for use by the security virtual machine.

13. The method of claim 12 further comprising:

the application virtual machine delivering the security codes to the security virtual machine.

14. The method of claim 10, wherein the medium includes a hoot code, and wherein the method further comprising:

the security virtual machine decrypting the boot code.

15. The method of claim 10 further comprising:

the security virtual machine delivering information related to synchronization events to the application virtual machine.

16. The method of claim 10, wherein the application virtual machine is a high level virtual machine and the security virtual machine is a low level virtual machine.

17. The method of claim 10, wherein the security virtual machine does not include an exception handling capability, and wherein the application virtual machine includes the exception handling capability.

18. The method of claim 10 further comprising:

the security virtual machine utilizing a copy protection algorithm.