Protected media pipeline

• US 9,363,481 B2
• Filed: 04/27/2005
• Issued: 06/07/2016
• Est. Priority Date: 04/22/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Grigorovitch, Alexandre, Knowlton, Chadd, Debique, Kirt, Alkove, James, Dunbar, Geoffrey T., Barde, Sumedh N.
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Pan, Peiliang
• Application Number:
  US11/116,689
• Publication Number:
  US 20060248594A1
• Time in Patent Office: 4,059 Days
• Field of Search: 709/246, 713/193, 713/200, 713/164, 713/160, 726/26, 726/27, 726/22, 726/12, 707/9, 705/59, 715/716
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/42646 for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/163 by receiver means only

Abstract

A system for processing a media content comprising an application space, a media control mechanism operating in the application space, the media control mechanism controlling the operation of the system, a user interface adapted to provide input to the media control mechanism, a protected space distinct from the application space, and a protected media pipeline operating in the protected space, the protected media pipeline coupled to the media control mechanism, the protected media pipeline adapted to access the media content, process the media content, and output the media content.

Claims

1. A system comprising a computing device and at least one software module that are together configured for processing media content, the system comprising:

a media source having an input and an output, the media source configured for operating in a protected space provided within the computing device, the input of the media source coupled to a first secure connection over which the media content is received via the media source into the protected space;

a plurality of transform mechanisms having an input and an output and configured for operating in the protected space provided within the computing device, the input of the plurality of transform mechanisms coupled to the output of the media source, where the plurality of transform mechanisms are configured for processing the media content;

a media sink having an input and an output, the media sink configured for operating in the protected space provided within the computing device, the input of the media sink coupled to the output of the plurality of transform mechanisms, the output of the media sink coupled to a second secure connection over which the processed media content is transferred via the media source out of the protected space, where the media source, the plurality of transform mechanisms, and the media sink are separate from each other and together form a protected media pipeline that includes an output and an input and that is configured for processing the media content within the protected space of the computing device.

2. The system of claim 1, where one of the plurality of transform mechanisms is a decoder.

3. The system of claim 1 further comprising a plurality of protected media pipelines.

4. The system of claim 1, where two of the plurality of transform mechanisms are coupled in series.

5. The system of claim 1, where two of the plurality of transform mechanisms are coupled in parallel.

6. The system of claim 1, where the protected media pipeline processes digitized audio.

7. The system of claim 1, where the protected media pipeline processes digitized video.

8. The system of claim 1, where the protected media pipeline is configured for resisting unauthorized access to the media content.

9. The system of claim 1 where the media source is configured for accessing the media content via hardware or via software.

18. The system of claim 1, where the output of the protected media pipeline is coupled to the input of another protected media pipeline.

10. A system comprising a computing device and at least one software module that are together configured for processing media content, the system comprising:

a stub portion of a protected media source, where the stub portion includes an input and an output and is configured for operating in a first space provided within the computing device, the input of the stub portion of the protected media source coupled to media content; and

a proxy potion of the protected media source, where the proxy portion includes an input and an output and is configured for operating in a protected space provided within the computing device, the input of the proxy portion of the protected media source coupled to the output of the stub portion of the protected media source, the stub portion further configured for transferring at least a portion of the media content via remote procedure call to the proxy portion;

a plurality of transform mechanisms having an input and an output and configured for operating in the protected space provided within the computing device, the input of the plurality of transform mechanisms coupled to the output of the proxy portion of the protected media source, where the plurality of transform mechanisms are configured for processing the media content;

a media sink having an input and an output, the media sink configured for operating in the protected space provided within the computing device, the input of the media sink coupled to the output of the plurality of transform mechanisms, the output of the media sink coupled to a second secure connection over which the processed media content is transferred via the media source out of the protected space, where the media source, the plurality of transform mechanisms, and the media sink are separate from each other and together form a protected media pipeline that includes an output and an input and that is configured for processing the media content within the protected space of the computing device.

11. The system of claim 10, where the first space is configured as an unprotected application space comprising unprotected elements of the system.

12. The system of claim 10, where the first space is configured as a protected media space distinct from the protected space and distinct from an unprotected application space comprising unprotected elements of the system.

13. The system claim 10, where the protected media source is configured for resisting unauthorized access to the media content transferred between the stub portion of the media source and the proxy portion of the media source.

14. A system comprising a computing device and at least one software module that are together configured for processing media content, the system comprising:

a media control mechanism configured for operating in an application space within the computing device, and for controlling operations of the system;

a protected media pipeline configured for operating in a protected space within the computing device, the protected space distinct from the application space, the protected media pipeline coupled to the media control mechanism, the protected media pipeline including a media source, a media sink, and a plurality of transform mechanisms, an input of the media source coupled to a first secure connection over which the media content is received via the media source into the protected space, an output of the media source coupled to an input of a plurality of transform mechanisms, the protected media pipeline configured for accessing the media content via the media source, decrypting the media content, processing the decrypted media content, and outputting the processed media content via the media sink, an output of the media sink coupled to a second secure connection over which the processed media content is transferred via the media source out of the protected space, where the media source, the plurality of transform mechanisms, and the media sink are separate from each other.

15. The system of claim 14, where the protected media pipeline is configured for resisting unauthorized access to the media content.

16. The system of claim 14 further comprising a digital rights management system communicating with the protected media pipeline.

17. The system of claim 14, where the media content is encrypted.

19. The system of claim 14 where the media source is configured for accessing the media content via hardware or via software.