Self-protecting digital content
View Patent ↗Technologies are disclosed to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disc carries an encrypted digital video title combined with data processing operations that implement the title's security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations, access secure nonvolatile storage, submit data to CODECs for output, and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies. If pirates compromise a player or title, future content can be mastered with security features that, for example, block the attack, revoke pirated media, or use native code to correct player vulnerabilities.
1. A computer-implemented method comprising:
using a processor in a media player to receive data comprising both digital content and data processing instructions corresponding to the digital content, the received data being received from a source external to the media player, the received data being storable in a memory of the media player;
executing the data processing instructions from the memory by using a computer language interpreter of the media player, the data processing instructions, when executed by the computer language interpreter, configuring the computer language interpreter to:
interrogate a playback environment of the media player, the data processing instructions further configured to perform a security check that interrogates the playback environment of the media player and to verify at least one of: a media player device identifier, including at least one of a player serial number, specific subscriber information, a player model, or a player software version, and a user identity, including at least one of a user name, geographical region, email address, or a web address, the data processing instructions further configured to reduce output quality if a result of the interrogation of the playback environment is uncertain;
query one or more countermeasure routines stored in the memory of the media player, the countermeasure routines collectively mitigating security weaknesses in multiple models of the media player, the countermeasure routines including cryptographic data and executable instructions for performing cryptographic operations, the computer language interpreter not having access to the memory in which the countermeasure routines are stored; and
request execution of a countermeasure routine by the computer language interpreter.
2. The computer-implemented method as claimed in claim 1 wherein the countermeasure routines being from the group: code obfuscation routines, code encryption routines, code rewriting routines, and intermediate result integration routines.
3. The computer-implemented method as claimed in claim 1 wherein the countermeasure routine being configured to perform a plurality of security checks, and the data processing instructions being configured to permit playback of the content provided that the plurality of security checks is successful.
4. The computer-implemented method as claimed in claim 1 wherein the data processing instructions being configured to decrypt the digital content by using a cryptographic key contained in the media player.
5. The computer-implemented method as claimed in claim 1 wherein the countermeasure routine being configured to detect whether security of the media player has been compromised.
6. The computer-implemented method as claimed in claim 1 wherein the countermeasure routine being configured to correct a vulnerability in the media player.
7. The computer-implemented method as claimed in claim 1 including maintaining an audit trail for tracking processing performed on the media player.
8. A media player comprising:
a memory;
a media interface; and
a processor to receive data comprising both digital content and data processing instructions corresponding to the digital content, the received data being received from a source external to the media player via the media interface, the received data being storable in the memory of the media player, the processor being further configured to execute the data processing instructions from the memory by using a computer language interpreter of the media player, the data processing instructions, when executed by the computer language interpreter, configuring the computer language interpreter to:
interrogate a playback environment of the media player, the data processing instructions further configured to perform a security check that interrogates the playback environment of the media player and to verify at least one of: a media player device identifier, including at least one of a player serial number, specific subscriber information, a player model, or a player software version, and a user identity, including at least one of a user name, geographical region, email address, or a web address, the data processing instructions further configured to reduce output quality if a result of the interrogation of the playback environment is uncertain;
query one or more countermeasure routines stored in the memory of the media player, the countermeasure routines collectively mitigating security weaknesses in multiple models of the media player, the countermeasure routines including cryptographic data and executable instructions for performing cryptographic operations, the computer language interpreter not having access to the memory in which the countermeasure routines are stored; and
request execution of a countermeasure routine by the computer language interpreter.
9. The media player as claimed in claim 8 wherein the countermeasure routines being from the group: code obfuscation routines, code encryption routines, code rewriting routines, and intermediate result integration routines.
10. The media player as claimed in claim 8 wherein the countermeasure routine being configured to perform a plurality of security checks, and the data processing instructions being configured to permit playback of the content provided that the plurality of security checks is successful.
11. The media player as claimed in claim 8 wherein the data processing instructions being configured to decrypt the digital content by using a cryptographic key contained in the media player.
12. The media player as claimed in claim 8 wherein the countermeasure routine being configured to detect whether security of the media player has been compromised.
13. The media player as claimed in claim 8 wherein the countermeasure routine being configured to correct a vulnerability in the media player.
14. The media player as claimed in claim 8 including maintaining an audit trail for tracking processing performed on the media player.