International Business Machines Corporation

Matt Francis Rutkowski

Thomas Alexander Bellwood

Robert Bryant Chumbley

Michael Richard Cooper

Mark Joseph Hamzy

Mark W Vanderwiele

Alexander Tarpinian

Julian A Cerruti

An apparatus and a method are provided for selectively accessing digital content carried on a distribution medium such as a physical medium or a broadcast medium. In one embodiment, a plurality of digital content items are encrypted under a plurality of different key management blocks, wherein each key management block is associated with a different set of device keys. The plurality of content items may be provided together on a single distribution medium to devices having assigned device keys, so that devices may selectively access content as determined by the different key management block used to encrypt the various content items and by the device keys assigned to the devices. Depending on the association between the device key and the key management blocks, the decoding device may decode all of the content items, some of the content items, or none of the content items. To provide greater security, each content item may be multiple encrypted using multiple key management blocks per content item.

Method for controlling access to encrypted content using multiple broadcast encryption based control blocks

The present invention provides a means for managing title keys by establishing logical partitions of title keys encrypted with the same binding information. The invention supports delayed and background processing of title keys when binding information changes. This invention supports proper accounting for devices required to recover rebinding processing when devices fail or go offline unexpectedly during processing. The invention uses binding context which represents a set of data that can be used to determine if the binding information used to encrypt a set of title keys is outdated and allow for rebinding to the current cluster binding information level.

System and method for managing encrypted content using logical partitions

Provided is a method for enabling a device without a secure clock to make a determination on the expiration of encrypted content. When the device receives content, the device also receives the content provider's policy on access. This information provides an ATI in UTI units which is to be associated with the content for the purpose of managing the content's expiration. The ATI is converted to the device's DTI units and the DTI is then used to control the availability of the content for decryption and use. The claimed subject matter permits the existence of tolerance, determined by content policy, in the conversion between UTI and the DTI, as well as in the depletion of the ATI. To move or copy content which has an associated remaining ATI, the device converts the ATI into UTI units and provides converted ATI to the target device in conjunction with the associated content.

Method for tracking the expiration of encrypted content using device relative time intervals

A data processing system that is capable of providing dynamically adjusted renderings of images is disclosed. The data processing system uses an operating system that provides a graphical user interface (GUI) displayable in a first color scheme. The data processing system further includes a least one, preferably more, device drivers supporting a second color scheme. More particularly, the system performs dynamically adjusted rendering from the first color scheme to the second color scheme. To perform such rendering, the system renders a graphic primitive in the first color scheme to a second color scheme and stores the rendered graphic primitive as a new second color scheme surface. This is repeated iteratively until such a time as the rendered surface has been completed. Preferably, the second color scheme is CYAN, MAGENTA, and YELLOW (CMY) and may further include BLACK (K).

Growing community of inventors

Pflugerville, TX, United States of America

Matt Francis Rutkowski