Intel Corporation

Other

International Business Machines Corporation

Michael S Ripley

C Brendan S Traw

Jeffrey Bruce Lotspiech

Brendan Traw

Gary L Graunke

Carl M Ellison

Yoshihisa Fukushima

Taku Kato

Atsushi Ishihara

Knut Stener Grimsrud

Spencer Stephens

Bradley Collar

Florian Pestoni

A method, apparatus, and system for proactive forced renewal of content protection implementations in devices. The method includes, on a first substantially periodic basis, automatically pushing a new content protection implementation to a device that contains an existing content protection implementation; wherein the existing content protection implementation comprises (a) existing software for presenting protected content and (b) an existing key to facilitate presentation of protected content; and wherein the new content protection implementation comprises a new key to supersede the existing key for facilitating presentation of protected content. On a second substantially periodic basis, the method includes automatically pushing revocation data to the device, the revocation data to identify a plurality of revoked keys, each revoked key of the plurality of revoked keys comprising a key that has been superseded by the new key of the new content protection implementation.

Proactive forced renewal of content protection implementations

Enhanced multimedia content on physical media interacts with the user through a media player and the Internet. Enhanced multimedia utilizes IDs for pieces of content on the media and a media key block. On the enhanced media is a file with a list of URLs. As the enhanced media plays a title requiring an external permission for decryption, the media player accesses the URL for that title and obtains the permission. The permission may be purchased or provided for free. Secure encryption and transmission of permission is accomplished by broadcast encryption using a media key block. Each media has a unique set of keys that allow the media player to process the media key block; however, each media follows a unique path through the media key block. All legitimate media players obtain the media key; circumvention devices cannot decipher the media key block.

System, method, and service for delivering multimedia content by means of a permission to decrypt titles on a physical media

A system for proactive forced renewal of content protection implementations in devices includes a key generation facility to generate and allocate keys for the devices, and to generate revocation data corresponding to revoked keys in response to at least one of a security compromise and on a periodic basis independent of a security compromise; and a device manufacturer to receive the keys from the key generation facility, to embed the keys in content protection implementations for the devices, to distribute the devices, and to renew the content protection implementations in devices after the devices are distributed, in response to at least one of a security compromise and on a periodic basis independent of a security compromise.

Protected content distribution is accomplished by a first entity generating a set of asymmetric key pairs, creating a plurality of sets of private keys by selecting a combination of private keys from the set of asymmetric key pairs for each created set, and distributing the sets of private keys to playback devices. A second entity produces protected content including encrypted content and a public key media key block, encrypts a symmetric content key with each public key in the set of asymmetric key pairs to form the public key media key block and encrypts a content title with the symmetric content key to form the encrypted content. A playback device stores one set of private keys, receives the protected content, and decrypts and plays the content title stored in the protected content when a selected one of the set of private keys stored by the playback device successfully decrypts the encrypted symmetric content key stored in the public key media key block of the received protected content.

Public key media key block

In one aspect of the invention is a method for discouraging unauthorized redistribution of protected content. Content is bound to a customer I.D. associated with a customer requesting the content, such that the customer I.D. is needed to access the content.

Discouraging unauthorized redistribution of protected content by cryptographically binding the content to individual authorized recipients

Detection of watermarks in digital content by a system having a recording device and a playback device may be accomplished in such as a way as to improve the interoperability of the recording and playback devices. In one embodiment, a recording device having a first watermark detection component of a first sensitivity for detecting the watermark in digital content, interoperates with a playback device having a second watermark detection component of a second sensitivity for detecting the watermark in a digital content recording made by the recording device; such that the first sensitivity is more sensitive than the second sensitivity.

Reducing problems caused by variations in watermark detection results

A method and apparatus to protect unencrypted content or data in a storage media from prohibited use or reproduction by encrypting unprotected content before it is transmitted to another device or software application. A compliant device or software application is capable of decrypting the content, detecting any watermark within the content, and accessing or processing the content according to the restrictions associated with the detected watermark. Non-compliant devices or software are prevented from accessing or processing the content since they are unable to decrypt it.

Method and apparatus for content protection across a source-to-destination interface

The present invention includes a method, system and apparatus for storing, distributing, and protecting content from unauthorized access. The media includes a writeable area, a read only area and the content stored on the writeable area. A first media validation data containing an encrypted preselected value is stored on the read only area.

Method and apparatus for verifying the integrity of a media key block

A method and apparatus to format and process a Media Key Block so as to reduce latencies when processing the Media Key Block. A new record is generated containing header information for the records comprising the Media Key Block. This new record is read just once and allows a device to skip seeking and reading each record header individually. In addition, the records are adjusted so that individual records or individual fields within a record always fit within a single transfer unit.

Method and apparatus for optimally formatting media key blocks stored on media with high transfer latencies

In one aspect of the invention is a method for preventing unauthorized copies of a medium, such as a DVD, from being played by a compliant device by using the validation area (VA) region of a medium to validate keying material. A compliant device is a device that will validate keying material. In one embodiment of the invention, a compliant device validates keying material by using the value in the VA region of the medium. In alternative embodiments, a compliant device will validate keying material by checking correspondence between keying material written to a non-VA region of a medium and validation data written to a VA region of a medium. In the alternative embodiments, if the keying material does not correspond to the validation data, then a compliant device will prevent the contents of the medium from being played.

Validating keying material by using a validation area of read-only media to prevent playback of unauthorized copies of content stored on the media

A method for verifying the integrity of a media key block (MKB) by storing validation data in a validation area of a medium, such as a DVD-R or a DVD-RW. In one embodiment, validation data comprises a hash function on a media key block. In another embodiment, validation data comprises the Verification Data field of an MKB's Verify Media Key Record.

Verifying the integrity of a media key block by storing validation data in the cutting area of media

An apparatus is equipped with a source oriented data move technique. In one embodiment, the apparatus is a computer system and the source oriented data moving technique is incorporated in a disk block relocation engine that relocates disk blocks in accordance with the specifications of a disk block relocation vector. In one embodiment, the disk block relocation vector is destination oriented, and the disk block relocation engine is complemented with an transformation function for annotating the destination oriented disk block relocation vector with data source information. The disk block relocation engine then identifies chains of serial disk block moves among the specified disk block moves, and performs the chains of serial disk block moves, keying off the annotated data source information.

Source oriented data block relocation methodology and applications

An apparatus is equipped with a disk block relocation de-optimization detection function that detects the de-optimization of a disk block relocation of a first disk block relocation optimization methodology by a second disk block relocation optimization methodology, employing a key file of the first disk block relocation optimization methodology. The optimization principles of the two methodologies conflict at least partially with each other. In one embodiment, the function performs the detection by monitoring disk block allocation changes to the key file whose file clusters have been allocated disk blocks in a manner that is inconsistent with one or more optimization principles of the second disk block relocation optimization methodology. In one embodiment, the function also causes the key file to be created by a file subsystem, and then reallocates the file clusters to disk blocks in the inconsistent manner.

Growing community of inventors

Portland, OR, United States of America

Michael S Ripley