STORING INFORMATION IN CLOSED COMPUTING DEVICES
Mechanisms for securely storing unsigned information in closed computing devices are disclosed. Unsigned media entities, such as independently developed games, can be stored in a closed computing device, such as a gaming console. The storing of media entities can include preventing any content, whether residing on the closed console or remotely, from accessing the unsigned media entities. In this aspect, unsigned media entities can be isolated from such content on a per unsigned media entity basis (the media entity being the unit of isolation). Moreover, the media entities can be stored in directory structures that logically isolate the unsigned media entities from any other content. The closed computing device can also use a directory structure to guarantee that a specified signed loader can load unsigned media entities. Once stored, the media entities can also be secured from tampering by using a unique hardware key associated with the closed computing device.
1 . A system for securely storing unsigned information in a closed computing device, comprising:
a subsystem that stores at least one unsigned game in memory of said closed computing device, wherein said storing further comprises:
preventing any content from accessing said at least one unsigned game;
preventing said at least one unsigned game from accessing any of said content;
isolating said at least one unsigned game from external tampering; and
isolating said at least one unsigned game from said content on a per unsigned game basis;
2 . The system according to claim 1 , wherein said storing further comprises storing said at least one unsigned game in a directory structure that logically isolates said at least one unsigned game from said content.
3 . The system according to claim 1 , wherein said closed computing device uses a directory structure to guarantee that only a specified signed loader can load said at least one unsigned game that persists in a given directory or subdirectory of said directory structure.
4 . The system according to claim 1 , wherein said at least one unsigned game in said closed computing device is secured from tampering by signing a certificate with a unique hardware key associated with said closed computing device.
5 . The system according to claim 1 , wherein said at least one unsigned game contains hierarchical isolation information within its own content, thereby allowing for isolation of said at least one unsigned game.
6 . The system according to claim 1 , wherein said content is one of (a) stored on a computing device remote from said closed computing device, (b) stored on said closed computing device, and (c) stored as a combination of (a) and (b).
7 . The system according to claim 1 , wherein said closed computing device is a device distributed over a network.
8 . A method for securely storing unsigned information in a closed computing device, comprising:
storing at least one unsigned media entity in memory of said closed computing device, wherein said storing further comprises:
preventing any content from accessing said at least one unsigned media entity;
isolating said at least one unsigned media entity from external tampering; and
isolating said at least one unsigned media entity from said content on a per unsigned media entity basis.
9 . The method according to claim 8 , wherein said storing further comprises storing said at least one unsigned media entity in a directory structure that logically isolates said at least one unsigned media entity from said content.
10 . The method according to claim 8 , wherein said closed computing device uses a directory structure to guarantee that a specified signed loader can load said at least one unsigned media entity that persists in a given directory or subdirectory of said directory structure.
11 . The method according to claim 8 , wherein said at least one unsigned media entity in said closed computing device is secured from tampering via a unique hardware key associated with said closed computing device.
12 . The method according to claim 8 , wherein said at least one unsigned game contains hierarchical isolation information within its own content, thereby allowing for isolation of said at least one unsigned game.
13 . The method according to claim 8 , wherein said content is one of (a) stored on a computing device remote from said closed computing device, (b) stored on said closed computing device, and (c) stored as a combination of (a) and (b).
14 . The method according to claim 8 , wherein said closed computing device is a device distributed over a network.
15 . A computer readable medium storing thereon computer executable instructions for securely storing unsigned information in a closed computing device, comprising:
an instruction that stores at least one unsigned media entity in memory of said closed computing device, wherein said instruction further also prevents one of (a) any content from accessing said at least one unsigned media entity, and (b) said unsigned media entity from accessing said content.
16 . The computer readable medium according to claim 15 , wherein said storing further comprises storing said at least one unsigned media entity in a directory structure that logically isolates said at least one unsigned media entity from said content.
17 . The computer readable medium according to claim 15 , wherein said closed computing device uses a directory structure to guarantee that a specified signed loader can load said at least one unsigned media entity that persists in a given directory or subdirectory of said directory structure.
18 . The computer readable medium according to claim 15 , wherein said at least one unsigned media entity in said closed computing device is secured from tampering via a unique hardware key associated with said closed computing device.
19 . The computer readable medium according to claim 15 , said at least one unsigned game contains hierarchical isolation information within its own content, thereby allowing for isolation of said at least one unsigned game.
20 . The computer readable medium according to claim 15 , wherein said content is one of (a) stored on a computing device remote from said closed computing device, (b) stored on said closed computing device, and (c) stored as a combination of (a) and (b).