Secure and efficient content screening in a networked environment

• US 9,607,131 B2
• Filed: 04/05/2011
• Issued: 03/28/2017
• Est. Priority Date: 09/16/2010
• Status: Expired due to Fees

• Current Assignee: Verance Corporation
• Original Assignee: Verance Corporation
• Inventors: Winograd, Joseph M., Petrovic, Rade, Zhao, Jian
• Primary Examiner(s): Korsak, Oleg
• Application Number:
  US13/080,605
• Publication Number:
  US 20120072731A1
• Time in Patent Office: 2,184 Days
• Field of Search: 713168-176, 726 10- 14
• US Class Current: 1/1
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/1078 Logging; Metering
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 2463/103 applying security measure for protecting copyright
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

Methods, devices, and computer program products facilitate the application of a content use policy based on watermarks that are embedded in a content. Watermark extraction and content screening operations, which can include the application of content usage enforcement actions, may be organized such that some or all of the operations can be conducted at different times by different devices. These operations can be conducted by one or more trusted devices that reside in a networked environment. The authenticity of various devices can be verified through the exchange of certificates that can further enable such devices to ascertain capabilities of one another. Based on the ascertained capabilities, an operational configuration for conducting watermark extraction and content screening can be determined.

Claims

1. A method, comprising:

receiving a device authentication certificate at a first device from a second device;

verifying an authenticity of the certificate;

ascertaining capabilities of the second device; and

based on at least the ascertained capabilities of the second device, determining by the first device an operational configuration among one or more of the first device, the second device, a trusted delegated device and a trusted slave device for conducting watermark extraction and content screening operations associated with a content, the operational configuration providing an allocation of resources needed to perform the watermark extraction and content screening operations and for fulfillment of a content use policy associated with an extracted watermark payload.

2. The method of claim 1, wherein the certificate comprises information indicative of at least a portion of the capabilities of the second device.

3. The method of claim 2, wherein

the certificate is a digital transmission content protection over Internet protocol (DTCP-IP) certificate;

and

information regarding the capabilities of the second device is carried as part of the DCTP-IP certificate.

4. The method of claim 1, wherein at least a portion of the capabilities of the second device is ascertained from a source other than the certificate.

5. The method of claim 4, wherein the at least a portion of the capabilities of the second device is received through an additional communication with the second device.

6. The method of claim 1, wherein the ascertained capabilities of the second device comprises a capability to conduct some or all of the watermark extraction and content screening operations.

7. The method of claim 6, wherein the operational configuration designates the second device to perform at least one of the watermark extraction and content screening operations.

8. The method of claim 1, wherein the ascertained capabilities of the second device comprises a capability to grant computational and memory resources to other devices.

9. The method of claim 1, further comprising:

receiving a device authentication certificate at the second device from the first device;

verifying an authenticity of the certificate received from the first device; and

ascertaining capabilities of the first device by the second device.

10. The method of claim 9, wherein the certificate received from the first device comprises information indicative of at least a portion of the capabilities of the first device.

11. The method of claim 10, wherein

the certificate received from the first device is a digital transmission content protection over Internet protocol (DTCP-IP) certificate;

and

information regarding the capabilities of the first device is carried as part of the DCTP-IP certificate.

12. The method of claim 9, wherein at least a portion of the capabilities of the first device is ascertained from a source other than the certificate.

13. The method of claim 12, wherein the at least a portion of the capabilities of the first device is received through an additional communication with the first device.

14. The method of claim 9, wherein the ascertained capabilities of the first device comprises a capability to conduct some or all of the watermark extraction and/or content screening operations.

15. The method of claim 9, wherein the ascertained capabilities of the first device comprises a capability to grant computational and memory resources to other devices.

16. The method of claim 9, wherein the operational configuration designates the first device to perform at least one of the watermark extraction and content screening operations.

17. The method of claim 9, wherein the operational configuration designates the first and the second devices to collaboratively perform the watermark extraction and content screening operation.

18. The method of claim 1, wherein the operational configuration designates at least one of the first and the second devices to conduct the watermark extraction and content screening operations in accordance with a factor selected from the group consisting of:

availability of computational resources;

availability of watermark extraction and screening capabilities;

an integration complexity for a device manufacturer;

a consumer experience;

a processing performance; and

an overall preference ranking.

19. The method of claim 1, wherein at least one of the first and second devices is configured to operate in a home network.

20. A device, comprising:

a processor; and

a memory, including processor executable code, the processor executable code when executed by the processor configures the device to;

receive a device authentication certificate from a second device;

verify an authenticity of the certificate;

ascertain capabilities of the second device; and

based on at least the ascertained capabilities of the second device, determine an operational configuration among one or more of the device, the second device, a trusted delegated device and a trusted slave device for conducting watermark extraction and content screening operations associated with a content, the operational configuration providing an allocation of resources needed to perform the watermark extraction and content screening operations and for fulfillment of a content use policy associated with an extracted watermark payload.

21. The device of claim 20, wherein the certificate comprises information indicative of at least a portion of the capabilities of the second device.

22. The device of claim 21, wherein

the certificate is a digital transmission content protection over Internet protocol (DTCP-IP) certificate;

and

information regarding the capabilities of the second device is carried as part of the DCTP-IP certificate.

23. The device of claim 20, wherein at least a portion of the capabilities of the second device is ascertained from a source other than the certificate.

24. The device of claim 23, wherein the at least a portion of the capabilities of the second device is received through an additional communication with the second device.

25. The device of claim 20, wherein the ascertained capabilities of the second device comprises a capability to conduct some or all of the watermark extraction and content screening operations.

26. The device of claim 25, wherein the operational configuration designates the second device to perform at least one of the watermark extraction and content screening operations.

27. The device of claim 20, wherein the ascertained capabilities of the second device comprises a capability to grant computational and memory resources to other devices.

28. The device of claim 20, wherein the processor executable code when executed by the processor further configures the device to:

transmit a device authentication certificate to the second device, wherein the second device can ascertain capabilities of the device from the device authentication certificate.

29. The device of claim 28, wherein the certificate transmitted by the device comprises information indicative of at least a portion of the capabilities of the device.

30. The device of claim 29, wherein

the certificate transmitted by the device is a digital transmission content protection over Internet protocol (DTCP-IP) certificate;

and

information regarding the capabilities of the device is carried as part of the DCTP-IP certificate.

31. The device of claim 28, wherein at least a portion of the capabilities of the device is ascertained from a source other than the certificate.

32. The device of claim 31, wherein the processor executable code when executed by the processor further configures the device to conduct an additional communication with the second to provide at least a portion of the capabilities of the to the second device.

33. The device of claim 28, wherein the capabilities of the device ascertained by the second device comprises a capability to conduct some or all of the watermark extraction and/or content screening operations.

34. The device of claim 28, wherein the capabilities of the device ascertained by the second device comprises a capability to grant computational and memory resources to other devices.

35. The device of claim 28, wherein the operational configuration designates the device to perform at least one of the watermark extraction and content screening operations.

36. The device of claim 28, wherein the operational configuration designates the device and the second device to collaboratively perform the watermark extraction and content screening operation.

37. The device of claim 20, wherein the operational configuration designates at least one of the device and the second device to conduct the watermark extraction and content screening operations in accordance with a factor selected from the group consisting of:

availability of computational resources;

availability of watermark extraction and screening capabilities;

an integration complexity for a device manufacturer;

a consumer experience;

a processing performance; and

an overall preference ranking.

38. The device of claim 20, wherein at least one of the device and second device is configured to operate in a home network.

39. A computer program product, embodied on a non-transitory computer readable medium, comprising:

program code for receiving a device authentication certificate at a first device from a second device;

program code for verifying an authenticity of the certificate;

program code for ascertaining capabilities of the second device; and

program code for, based on at least the ascertained capabilities of the second device, determining by the first device an operational configuration among one or more of the device, the second device, a trusted delegated device and a trusted slave device for conducting watermark extraction and content screening operations associated with a content, the operational configuration providing an allocation of resources needed to perform the watermark extraction and content screening operations and for fulfillment of a content use policy associated with an extracted watermark payload.