Method and system for a recursive security protocol for digital copyright control
Systems and methods are described which utilize a recursive security protocol for the protection of digital data. These may include encrypting a bit stream with a first encryption algorithm and associating a first decryption algorithm with the encrypted bit stream. The resulting bit stream may then be encrypted with a second encryption algorithm to yield a second bit stream. This second bit stream is then associated with a second decryption algorithm. This second bit stream can then be decrypted by an intended recipient using associated keys.
1. A method for a security protocol for protecting digital content, comprising:
obtaining a first decryption algorithm from a first bit stream;
decrypting the remainder of the first bit stream to yield a first decrypted bit stream, wherein the decryption of the remainder of the first bit stream is done utilizing the first decryption algorithm obtained from the first bit stream;
obtaining a second decryption algorithm from the first decrypted bit stream; and
decrypting the remainder of the second bit stream to yield a second decrypted bit stream, wherein the decryption of the remainder of the second bit stream is done utilizing the second decryption algorithm obtained from the second bit stream.
2. The method of claim 1 , wherein the second decrypted bit stream comprises digital content.
3. The method of claim 2 , wherein the digital content comprises audio or video data.
4. The method of claim 2 , further comprising receiving the first bit stream at a first target unit, wherein the decryption of the remainder of the first bit stream is done utilizing a first key obtained from a server.
5. The method of claim 4 , wherein the first key is a compound key.
6. The method of claim 5 , wherein the first key is encrypted.
7. The method of claim 6 , further comprising decrypting the first key to yield a first decrypted compound key.
8. The method of claim 7 , wherein the first key is decrypted with a target unit specific key.
9. The method of claim 8 , wherein the target unit specific key is associated with a serial number of the target unit at the server.
10. The method of claim 9 , wherein the target unit specific key is resident in hardware of the target unit.
11. The method of claim 10 , wherein the target unit specific key cannot be read by software.
12. The method of claim 7 , further comprising:
encrypting the first decrypted compound key, and
storing the encrypted first decrypted compound key in local storage.
13. The method of claim 12 , further comprising:
encrypting the first decrypted bit stream; and
storing the encrypted first decrypted bit stream in local storage.
14. The method of claim 7 , further comprising decrypting the first decrypted compound key to yield a second decrypted compound key, wherein the second decrypted compound key is utilized to decrypt the remainder of the first bit stream.
15. The method of claim 14 , wherein the second decrypted compound key cannot be read by software.
16. The method of claim 14 , further comprising:
encrypting the second decrypted compound key; and
storing the encrypted second decrypted compound key in local storage.
17. The method of claim 14 , wherein the first decrypted compound key is decrypted with a digital content specific key.
18. The method of claim 4 , wherein the second decrypted bit stream is stored in a cache.
19. The method of claim 18 , wherein the cache is a secured instruction cache.
20. A system for implementing a security protocol for protecting digital content comprising:
a target unit comprising:
a processor operable to execute instructions; and
a memory operable to store instructions operable to perform the steps of:
obtaining a first decryption algorithm from a first bit stream;
decrypting the remainder of the first bit stream to yield a first decrypted bit stream, wherein the decryption of the remainder of the first bit stream is done utilizing the first decryption algorithm obtained from the first bit stream;
obtaining a second decryption algorithm from the first decrypted bit stream; and
decrypting the remainder of the second bit stream to yield a second decrypted bit stream, wherein the decryption of the remainder of the second bit stream is done utilizing the second decryption algorithm obtained from the second bit stream.
21. The system of claim 20 , wherein the second decrypted bit stream comprises digital content.
22. The system of claim 21 , wherein the digital content comprises audio or video data.
23. The system of claim 21 , wherein the decryption of the remainder of the first bit stream is done utilizing a first key obtained from a server.
24. The system of claim 23 , wherein the first key is a compound key.
25. The system of claim 24 , wherein the first key is encrypted.
26. The system of claim 25 , wherein the instructions are operable to perform the step of: decrypting the first key to yield a first decrypted compound key.
27. The system of claim 26 , wherein the first key is decrypted with a target unit specific key.
28. The system of claim 27 , wherein the target unit specific key is associated with a serial number of the target unit at the server.
29. The system of claim 28 , wherein the target unit specific key is resident in hardware of the target unit.
30. The system of claim 29 , wherein the target unit specific key cannot be read by software.
31. The system of claim 26 , wherein the instructions are operable to perform the steps of,
encrypting the first decrypted compound key; and
storing the encrypted first decrypted compound key in local storage.
32. The method of claim 31 , wherein the instructions are operable to perform the steps of:
encrypting the first decrypted bit stream; and
storing the encrypted first decrypted bit stream in local storage.
33. The system of claim 26 , wherein the instructions are operable to perform the step of decrypting the first decrypted compound key to yield a second decrypted compound key, wherein the second decrypted compound key is utilized to decrypt the remainder of the first bit stream.
34. The system of claim 33 , wherein the second decrypted compound key cannot be read by software.
35. The system of claim 33 , wherein the instructions are operable to perform the steps of:
encrypting the second decrypted compound key; and
storing the encrypted second decrypted compound key in local storage.
36. The system of claim 33 , wherein the first decrypted compound key is decrypted with a digital content specific key.
37. The system of claim 23 , wherein the second decrypted bit stream is stored in a cache.
38. The system of claim 37 , wherein the cache is a secured instruction cache.
39. A method for a security protocol for protecting digital content, comprising:
obtaining a first decryption algorithm from a first bit stream;
decrypting the remainder of the first bit stream to yield a first decrypted bit stream, wherein the decryption of the remainder of the first bit stream is done utilizing the first decryption algorithm obtained from the first bit stream;
obtaining a first portion of the first decrypted bit stream; and
determining that the first portion of the first decrypted bit stream is an Indicator signifying that the remainder of the second bit stream is digital content in the clear.
40. The method of claim 39 , wherein the indicator is a unity operator or a flag.
41. A method for a security protocol for protecting digital content, comprising:
obtaining a first decryption algorithm from a first bit stream;
decrypting the remainder of the first bit stream to yield a first decrypted bit stream, wherein the decryption of the remainder of the first bit stream is done utilizing the first decryption algorithm obtained from the first bit stream;
obtaining a first portion of the first decrypted bit stream;
obtaining a second decryption algorithm using the first portion of the first decrypted bit stream; and
decrypting the remainder of the second bit stream to yield a second decrypted bit stream, wherein the decryption of the remainder of the second bit stream is done utilizing the second decryption algorithm.
42. The method of claim 41 , wherein the first portion of the first decrypted bit stream is a location of the second decryption algorithm in memory.