International Business Machines Corporation

Intel Corporation

Disney Enterprises, Inc.

Warner Bros. Entertainment Inc.

Other

Secure Content Storage Association LLC

Jeffrey Bruce Lotspiech

Hongxia Jin

Florian Pestoni

Dalit Naor

Sigfredo Ismael Nin

Thomas Alexander Bellwood

Matthew Francis Rutkowski

Stefan Nusser

Simeon Naor

Donald E Leake, Jr

Frank Andre Schaffa

Eric M Foster

Wilfred Edmund Plouffe, Jr

Robert Glenn Deen

Alan Edward Bell

Aaron Marking

Kenneth Goeller

Yoshihisa Fukushima

Taku Kato

Scott Frazier Watson

Atsushi Ishihara

Kenneth Louis Milsted

Marco M Hurtado

Michael S Ripley

George Gregory Gruse

Chandler Brendan Stanton Traw

Nimrod Megiddo

Arnaud Robert

Cynthia Dwork

Kevin Snow McCurley

Edgar S Downs

Joseph Y Halpern

Paul R Rettig

Christopher T Lehman

Micheal S Ripley

Wilfred E Plouffe

James M Gasiewski

Peter Hans Westerink

Spencer Stephens

Bradley Collar

William Russell Belknap

Savitha Srinivasan

Ronald Fagin

James C King

Richard L Spagna

Vladimir Zbarsky

Avinash Laxmisha Varna

Ginger Marie Myles

Glenn E Brew

Lara Marie Lewis

Robert John Tasman Morris

Ulrich Kohl

Ray A Larner

Philip Anastasios Zigoris

James Hugh Morgan

Wayne L Wohler

Ariel Virgil Mirles

John W Decker

Michael Joseph Nelson

Robert John Morris

Florian Pesoni

Deirdre Michelle Joy Athaide

Kevin Thomas Driver

Donald Jr Leake

Honxia Jin

Sigfredo Nin

Wilfred Plouffe

A playback device includes a port configured to receive content from an external memory device, a device memory residing in the device, and a controller programmed to execute instructions that cause the controller to read a read data pattern from the defined region in the external memory device and determine if the read data pattern correlates to an expected data pattern to a predetermined level, wherein the expected data pattern is derived at least in part from a defect map of the defined region.

Simple nonautonomous peering media clone detection

A method and apparatus for playing back a media content instance is disclosed. The method permits the use of downloadable variants to upgrade or change cryptographic functions performed by the playback device, thus permitting content protection schemes to be renewed.

Content distribution with renewable content protection

A system, method, and computer program product to renewably prevent traitors in a broadcast encryption system from re-using compromised keys. A license agency assigns individual receivers a set of Sequence Keys preferably at manufacture, and assigns Sequence Key Blocks (SKBs) to protected content files to be distributed. The files may be distributed on prerecorded media and typically include several file modifications. The particular modifications in a pirated version of a file can help identify which traitors contributed to its theft. SKBs assigned to new files distributed after traitors have been identified cannot be usefully processed using the compromised keys employed in previous content piracy. Innocent receivers that happen to have compromised key(s) in common with traitors can use a replacement uncompromised Sequence Key from the set to usefully decrypt content. Traitors will however step through all their Sequence Keys without reaching one that will work.

Renewable traitor tracing

A playback device includes a port configured to receive content from an external memory device, a device memory residing in the device, and a controller programmed to execute instructions that cause the controller to read a read data pattern from the defined region in the external memory device and determine if the read data pattern correlates to an expected data pattern to a predetermined level, wherein the expected data pattern is derived at least in part from a defect map of the defined region. A memory device includes an array of memory cells configured to store at least one bit of data, the array of memory cells being organized into regions, at least one first region of the array of memory cells having stored therein a defect map of the array of memory cells, and at least one second region of the array of memory cells being designated as a defined region having a known defect pattern. A method of validating a memory device includes writing, using a controller in a playback device, a known data pattern to a defined region in the memory device, reading, with the controller, a read data pattern from the defined region, comparing, at the controller, the read data pattern to an expected data pattern, the expected data pattern derived from the known data pattern and a defect map of the defined region, and validating, with the controller, the memory device based upon a correlation result from the comparing.

A system and method is disclosed for performing unified broadcast encryption and traitor tracing for digital content. In one embodiment a media key tree is divided into S subtrees, the media key tree including media keys and initial values, which may be random values. The digital content is divided into a plurality of segments and at least some of the segments are converted into a plurality of variations. The random values are transformed into media key variations and a separate media key variant is assigned to each of the subdivided subtrees. A unified media key block including the media key tree is stored on the media.

Unified broadcast encryption system

Provided are techniques to enable, using broadcast encryption, a device to locate a service offered by a server with the knowledge that the service offered by the server is a trusted service. A signed enhanced Management Key Block (eMKB) includes a trusted service locator (TSL) that includes one or more records, or 'trusted service data records' (TSDRs), each identifying a particular service and a corresponding location of the service is generated and transmitted over a network. Devices authorized to access a particular service parse the eMKB for the end point of the service, connect to the appropriate server and transmit a request.

Identifying and locating authenticated services using broadcast encryption

Embodiments of the present invention relate to providing encrypted content to authorized content consumers while providing robust traitor tracing. In some embodiments, at least one device key is read. A key block is read. A media key precursor is determined from the key block and the at least one device key. At least one encrypted block key is read. A block master key is determined from the media key precursor. A security program is executed to determine a decrypted block key from the media key precursor, the block master key, and the encrypted block key. The decrypted block key is provided for application to the encrypted content to obtain decrypted content.

Countering server-based attacks on encrypted content

The present invention provides a method performed on a computer of preventing re-use of compromised keys in a broadcast encryption system. In an exemplary embodiment, the method includes (1) incorporating a particular set of Sequence Keys assigned by a license agency into individual receivers, (2) assigning a Sequence Key Block (SKB) by the license agency to at least one distributed protected file, (3) performing incremental cryptographic testing by the individual receivers to determine if a selected Sequence Key from the set of Sequence Keys is compromised, (4) if the selected Sequence Key is not compromised, decrypting the file, and (5) if the selected Sequence Key is compromised and if a subsequent Sequence Key from the set of Sequence Keys is available, selecting the subsequent Sequence Key.

A method and system for attaching a title key to encrypted content for synchronized transmission to, or storage by, a recipient is provided. Specifically, under the present invention, an elementary media stream is parceled into content units that each include a content packet and a header. The content packets are encrypted with one or more title keys. Once the content packets have been encrypted, the title keys are themselves encrypted with a key encrypting key. The encrypted title keys are then attached to the corresponding encrypted content packets for synchronized transmission to a recipient.

Method, system and program product for attaching a title key to encrypted content for synchronized transmission to a recipient

Embodiments of the present invention relate to providing encrypted content to authorized content consumers while providing robust traitor tracing. In one embodiment, a key bundle comprising at least one device key is read. A key block is read. A media key precursor is determined from the key block and the at least one device key. A security program is read. At least one encrypted block key is read. The security program is executed to determine a decrypted block key from the media key precursor and the encrypted block key. Encrypted content is read. The decrypted block key is applied to the encrypted content to obtain decrypted content.

Provided are techniques for the creation and storage of an archive for binding IDs corresponding to a cluster of devices that render content protected by a broadcast encryption scheme. When two or more clusters are merged, a binding ID corresponding to one of the clusters is selected and a new management key is generated. Binding IDs associated with the clusters other than the cluster associated with the selected binding ID are encrypted using the new management key and stored on a cluster-authorized device in a binding ID archive. Content stored in conformity with an outdated binding ID is retrieved by decrypting the binding ID archive with the management key, recalculating an old management key and decrypting the stored content.

Device archiving of past cluster binding information on a broadcast encryption-based network

Provided are techniques to enable a device that provides a service to authorize a second device for receiving the service and the delivery of the service to the second device and other devices within a trusted network. A signed Management Key Block (MKB) is generated and transmitted over a network. Devices authorized to access a particular service parse the MKB and transmit a request. A server associated with the service determines whether or not the device is authorized to access the service based upon data included in the request. The first device may issue a challenge to the second device for authentication purposes. If service is approved, service is initiated, either from the first device or another authorized device. Devices may be organized into classes such that devices of a specific class are authorized to access the service.

Authentication and authorization of a device by a service using broadcast encryption

Growing community of inventors

Henderson, NV, United States of America

Jeffrey Bruce Lotspiech