Acer Cloud Technology, Inc.

Broadon Communications Corp.

Igware, Inc.

Samsung Electronics Co., Ltd.

Pramila Srinivasan

John Princen

Wei Yen

David R Blythe

Raymond W Lo

Wilson Ho

William Alan Saperstein

Craig Anderson

Frank Berndt

Andy Chan

Paul Mielke

Rob Wheeler

William Saperstein

A game identifier of an encrypted streaming electronic game to be streamed to a playback device may be received. The game identifier may comprise a title of the encrypted streaming electronic game. An electronic ticket for access by the playback device to a secured portion of the encrypted streaming electronic game may be gathered. The electronic ticket may specify a first gameplay state. The electronic ticket may be used to access the secured portion of the encrypted streaming electronic game at the first gameplay state. One or more gameplay actions to transform the encrypted streaming electronic game to a second gameplay state may be received. The second gameplay state may be provided to a state server, where the state server configured to instruct a license server to modify the electronic ticket to specify the second gameplay state for the encrypted streaming electronic game.

Systems and methods for facilitating secure streaming of electronic gaming content

A technique for content management involves storing runtime state of content externally. A system created according to the technique may include a state server that receives runtime state of content from a playback device, and provides the runtime state to that or another playback device upon request. A playback device constructed according to the technique may include a content state recovery engine for recovering runtime state that was previously stored externally to the playback device. A method according to the technique may include generating the runtime state locally, storing the runtime state externally, and re-acquiring the runtime state.

Virtual vault of licensed content

A technique for maintaining encrypted content received over a network in a secure processor without exposing a key used to decrypt the content in the clear is disclosed.

Ensuring authenticity in a closed content distribution system

A method may be executed by a secure processor having secure cryptography hardware implemented thereon. The method may be executed in a security kernel of a secure on-chip non-volatile (NV) memory coupled to the secure processor. The method may include: storing a rewritable state and a device private key based at least in part on a programmed secret seed and the rewritable state, the device private key being part of a cryptographic key pair comprising a public key associated with the device private key, and the rewritable state being a state of a secure application encrypted with the public key; providing one or more instructions to gather the device private key and from the private key datastore; and using the device private key to generate a device certificate, the device certificate providing the device with access to the secure application.

Programming on-chip non-volatile memory in a secure processor using a sequence number

An improved secure programming technique involves reducing the size of bits programmed in on-chip secret non-volatile memory, at the same time enabling the typical secure applications supported by secure devices. A technique for secure programming involves de-coupling chip manufacture from the later process of connecting to ticket servers to obtain tickets. A method according to the technique may involve sending a (manufacturing) server signed certificate from the device prior to any communication to receive tickets. A device according to the technique may include chip-internal non-volatile memory to store the certificate along with the private key, in the manufacturing process.

Certificate verification

Programming non-volatile memory in a secure processor

A technique for securing a flash memory block in a secure device system involves cryptographic techniques including the generation of a Message Authentication Code (MAC). The MAC may be generated each time a file is saved to one or more data blocks of a flash memory device and stored with the file's metadata and to each of the data blocks. A technique for reading and storing versioned files may be employed when applications utilize versioning.

Securing a flash memory block in a secure device system and method

Dynamic assignment of rights to content, such as in a closed distribution system. Noting state information generated by an item of current content, and modifying state or rights of new content in response. Pre-loading or dynamically sending new content to the owner of the current content, with rights being enabled only at a later time, in the playback device, with predetermined conditions. In response to current state information, dynamically sending a license for new content from a server. Conditional or dynamic licenses to new content, including a set of rights associated with a class of possible sets of state information. Assignment of limited rights to a content, with support in a secure player to enforce them; for purposes of rental, bonus content, trials and other business models.

Static-or-dynamic and limited-or-unlimited content rights

A technique for security and authentication on block-based media includes involves the use of protected keys, providing authentication and encryption primitives. A system according to the technique may include a secure device having a security kernel with protected keys. A disk drive security mechanism may support authentication of data, secrecy, and ticket validation using the security kernel and, for example, a ticket services module (e.g., a shared service that may or may not be used by other storage devices like flash).

Block-based media content authentication

Delivery of licenses in a closed distribution system including a playback device and secure processor. The secure processor allows only use of authorized content, and the playback device is authorized to execute content. A user requests a license to selected content using a communication link, without the playback device, outside the closed content system to a license server. The user requests licenses using SMS, sending small amounts of information, possibly including proofs of purchase. The server responds using SMS, providing the user with a code representing information interpretable as a license, such as an encrypted content key or a shared secret known to the user. The user, using a keypad or other device, inputs that code to the playback device, which determines if it authorizes use of the content. The playback device authenticates the license, determining whether that license authorizes the user for the content, and enforces the licensed rights.

Growing community of inventors

Palo Alto, CA, United States of America

Pramila Srinivasan