Systems, methods and apparatuses for the secure transmission of media content

• US 9,559,845 B2
• Filed: 02/25/2013
• Issued: 01/31/2017
• Est. Priority Date: 03/01/2012
• Status: Active Grant

• Current Assignee: OLogN Technologies AG
• Original Assignee: OLogN Technologies AG
• Inventors: Ignatchenko, Sergey, Ivanchykhin, Dmytro
• Primary Examiner(s): Jeudy, Josnel
• Application Number:
  US13/775,696
• Publication Number:
  US 20130232339A1
• Time in Patent Office: 1,436 Days
• Field of Search: 380 42- 44, 713169-171, 726 27- 30
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10

Abstract

The systems, methods and apparatuses described herein permit encrypted media content to be displayed by a display device under control of a local device. The local device may comprise a computer processor to control playing of the encrypted media content and a first communication interface to transmit an association encryption envelope and, according to the control, the encrypted media content. The display device may comprise a second communication interface coupled to the first interface to receive the encrypted media content and the association encryption envelope, a decryption engine to decrypt the association encryption envelope using a private key of the display device to recover a symmetric encryption key used to encrypt the encrypted media content and decrypt the encrypted media content using the recovered symmetric encryption key, and a decoder to decode the decrypted media content for display on a display screen according to the control.

Claims

1. A system for displaying encrypted media content comprising:

a local device, comprising;

a computer processor configured to control playing of the encrypted media content including performing a navigation control operation using unencrypted media meta data;

a first communication interface configured to transmit an association encryption envelope and, according to the navigation control operation, the encrypted media content; and

a display device, comprising;

a second communication interface coupled to the first interface configured to receive the encrypted media content and the association encryption envelope transmitted by the local device;

a decryption engine configured to decrypt, using a private key of the display device, the association encryption envelope to recover a symmetric encryption key used to encrypt the encrypted media content and decrypt the encrypted media content using the recovered symmetric encryption key; and

a decoder configured to decode the decrypted media content for display on a display screen according to the navigation control operation.

2. The system of claim 1, further comprising:

a source device, comprising;

a processor configured to;

generate the symmetric key;

retrieve a public key of the display device based on a display device identifier identifying the display device, wherein the public and private keys of the display device are a pair of asymmetric keys assigned to the display device; and

generate the association encryption envelope; and

an encryption engine configured to encrypt the media content using the symmetric key and encrypt the association encryption envelope using the retrieved public key of the display device.

3. The system of claim 2, wherein the source device is configured to access a key database to retrieve the public key of the display device.

4. The system of claim 2, wherein the public and private keys of the display device are generated when the display device is manufactured.

5. The system of claim 2, wherein the display device stores the private key in a tamper-resistant or tamper-evident nonvolatile memory of the display device not accessible by the local device.

6. The system of claim 1, wherein the navigation control operation is performed in response to user actions.

7. The system of claim 1, wherein performing the navigation control operation includes performing one of play, seek, fast forward, or backward operations.

8. The system of claim 1, wherein the encrypted media content includes a digital water mark.

9. The system of claim 1, wherein the display device further comprises an image processor and a z-order processor to display a still image over the decrypted media content on the display screen.

10. The system of claim 1, wherein the local and display devices are packaged together in a combined device, wherein the combined device comprises a mixer that allows an appropriate area of the display screen to display the decrypted media content generated by the description engine and rest of the display screen under direct control of the operating system, wherein the mixer prohibits the operating system from accessing a buffer storing the decrypted media content.

11. The system of claim 1, wherein the encrypted media content includes a plurality of encrypted video and/or audio chunks.

12. The system of claim 1, wherein the local device is a desktop computer, a laptop, or a set-top box and the display device is a television set or a monitor.

13. A display device for receipt and display of encrypted media content comprising:

a non-volatile memory storing a private key of the display device;

a communication interface coupled to a controlling device and configured to receive from the controlling device the encrypted media content and an association encryption envelope;

a decryption engine configured to decrypt, using the private key of the display device, the association encryption envelope to recover a symmetric encryption key used to encrypt the encrypted media content and decrypt the encrypted media content using the recovered symmetric encryption key; and

a decoder configured to decode the decrypted media content for display on a display screen according to a navigation control operation performed by the controlling device using unencrypted media meta data.

14. The display device of claim 13, wherein the association encryption envelope is generated at the source device and encrypted using a public key of the display device located according to a display device identifier identifying the display device, wherein the public and private keys of the display device are a pair of asymmetric keys assigned to the display device.

15. The display device of claim 14, wherein the public and private keys of the display device are generated when the display device is manufactured.

16. The display device of claim 13, wherein the display device stores the private key in a tamper-resistant or tamper-evident nonvolatile memory of the display device not accessible by the controlling device.

17. The display device of claim 13, wherein the navigation control operation is performed in response to user actions.

18. The display device of claim 13, wherein the navigation control operation performed by the controlling device includes one of play, seek, fast forward, or backward operations.

19. The display device of claim 13, wherein the encrypted media content includes a digital water mark.

20. The display device of claim 13, wherein the display device further comprises an image processor and a z-order processor to display a still image over the decrypted media content on the display screen.

21. The display device of claim 13, wherein the controlling device and display device are packaged together in a combined device, wherein the combined device comprises a mixer that allows an appropriate area of the display screen to display the decrypted media content generated by the description engine and rest of the display screen under direct control of an operating system of the controlling device, wherein the mixer prohibits the operating system from accessing a buffer storing the decrypted media content.

22. The display device of claim 13, wherein the encrypted media content includes a plurality of encrypted video and/or audio chunks.

23. The display device of claim 13, wherein the controlling device is a desktop computer, a laptop, or a set-top box and the display device is a television set or a monitor.

24. A method for displaying encrypted media content on a display device, comprising:

receiving, from a controlling device, the encrypted media content and an association encryption envelope;

decrypting, using a private key of the display device, the association encryption envelope to recover a symmetric encryption key used to encrypt the encrypted media content and decrypt the encrypted media content using the recovered symmetric encryption key; and

decoding the decrypted media content for display on a display screen according to a navigation control operation performed by the controlling device using unencrypted media meta data.

25. The method of claim 24, wherein the association encryption envelope is generated at the source device and encrypted using a public key of the display device located according to a display device identifier identifying the display device, wherein the public and private keys of the display device are a pair of asymmetric keys assigned to the display device.

26. The method of claim 25, wherein the public and private keys of the display device are generated when the display device is manufactured.

27. The method of claim 24, wherein the display device stores the private key in a tamper-resistant or tamper-evident nonvolatile memory of the display device not accessible by the controlling device.

28. The method of claim 24, wherein the navigation control operation is performed in response to user actions.

29. The method of claim 24, wherein the navigation control operation performed by the controlling device includes one of play, seek, fast forward, or backward operations.

30. The method of claim 24, wherein the encrypted media content includes a digital water mark.

31. The method of claim 24, wherein the display device further comprises an image processor and a z-order processor to display a still image over the decrypted media content on the display screen.

32. The method of claim 24, wherein the controlling device and display device are packaged together in a combined device, wherein the combined device comprises a mixer that allows an appropriate area of the display screen to display the decrypted media content generated by the description engine and rest of the display screen under direct control of an operating system of the controlling device, wherein the mixer prohibits the operating system from accessing a buffer storing the decrypted media content.

33. The method of claim 24, wherein the encrypted media content includes a plurality of encrypted video and/or audio chunks.

34. The method of claim 24, wherein the controlling device is a desktop computer, a laptop, or a set-top box and the display device is a television set or a monitor.