Method and apparatus for key distribution for secure digital cinema presentations
View Patent ↗Key distribution within a digital cinema presentation facility ( 140 ) occurs according to a retrieval process ( 200, 300 ) that provides for automatic retrieval at a scheduled time. The process further includes redundant mechanisms to transfer the necessary keys, in different ways to enable theater personnel to obtain the required key in a variety of different ways.
1. A method for key management at a digital cinema presentation facility that exhibits digital cinema presentations at scheduled show times, comprising:
(a) evaluating whether at least one key distribution message having a key for decrypting a digital cinema presentation, is present at a digital cinema presentation system to decrypt the digital cinema presentation, and if so
(b) testing whether the key distribution message determined to be available to decrypt the digital cinema presentation has a validity interval encompassing a scheduled show time for the digital cinema presentation; and if so
(c) initiating exhibition of the digital cinema presentation at the scheduled show time show time using the key to decrypt the presentation, otherwise
(d) obtaining an alternate key distribution message,
(e) checking for expiration of the alternate key distribution message; and
(f) retaining the alternate key distribution message when not expired.
2. The method according to claim 1 wherein the alternate key distribution message is checked for expiration by determining if it has a validity interval that encompasses a scheduled show time for the digital cinema presentation; and if the alternative key distribution message is not expired, then exhibiting digital cinema presentation at the scheduled show time show time using the alternative key distribution message to decrypt the presentation.
3. The method according to claim 2 further comprising the step of consolidating the alternate key distribution message with the key distribution message that is present.
4. The method according to claim 3 wherein the consolidating step further comprises the steps of:
checking the alternate key distribution message for duplication with the key distribution message determined to be present; and
retaining the alternate key distribution message when not duplicative.
5. The method according to claim 4 further comprising the step of discarding the alternate key distribution message if duplicated or expired.
6. The method according to claim 1 wherein the alternate key distribution message is obtained by accessing a store of key distribution messages.
7. The method according to claim 6 wherein the access of the store of key distribution messages occurs in advance of the scheduled show time for the digital cinema presentation.
8. A key management method for use by a digital cinema presentation system, comprising the steps of:
checking prior to the scheduled show time for the digital cinema presentation whether the digital cinema presentation system possesses a key distribution message for decrypting the digital cinema presentation, and if so:
testing whether the key distribution message possessed by the digital cinema presentation system has a validity interval encompassing the scheduled show time for the digital cinema presentation; otherwise,
obtaining an alternate key distribution message for decrypting the digital cinema presentation from an available source;
checking for expiration of the alternate key distribution message; and
retaining the alternate key distribution message when not expired.
9. The method according to claim 8 wherein the step of checking whether the digital cinema presentation system possesses a key distribution message for decrypting the digital cinema presentation occurs repeatedly.
10. The method according to claim 8 wherein the step of obtaining the alternate key distribution message further comprises the step of accessing a store of key distribution messages to retrieve at least one key distribution message for decrypting the digital cinema presentation.
11. The method according to claim 8 wherein the step of obtaining the alternate key distribution message further comprises the step of retrieving the key distribution message from a manually provided removable media.
12. The method according to claim 11 wherein the step of obtaining the alternate key distribution message further comprises the step of manually saving the key distribution message to the removable media with a remote terminal able to obtain the key distribution message from a key message distributor.
13. The method according to claim 8 further comprising the step of generating an alarm in the event the key distribution message has not been obtained following an urgent retrieval time in advance of the scheduled show time.
14. A key management system, comprising:
a key distribution storage unit; and
a secure media block configured to (1) evaluate whether at least one key distribution message for decrypting a digital cinema presentation is present at a digital cinema presentation system to decrypt the digital cinema presentation, (2) test whether the at least one key distribution determined to be present has a validity interval encompassing a show time for the digital cinema presentation; (3) initiate exhibition digital cinema presentation at the scheduled show time show time using the key distribution message to decrypt the presentation, but if the key distribution message is not present or if the key distribution message does not have not a validity interval encompassing the show time for the digital cinema presentation, (4) obtain from the key distribution store an alternate key distribution message for evaluation and testing, (5) check for expiration of the alternate key distribution message; and (6) retain the alternate key distribution message when not expired.
15. The system method according to claim 14 wherein the key distribution storage unit comprises a removable storage media.
16. The system according to claim 14 wherein the secure media block generates an alarm in the event the alternate key distribution message has not been obtained.
17. The system according to claim 14 wherein the secure media block checks whether the alternate key distribution message is expired by determining whether the alternate key distribution message has a validity interval encompassing the scheduled show time for the digital cinema presentation in order to initiate exhibiting the digital cinema presentation at the scheduled show time show time using the alternative key distribution message to decrypt the presentation.
18. A key management system, comprising: means for storing key distribution messages; and security means for (1) evaluating whether at least one key distribution message for decrypting a digital cinema presentation is present at a digital cinema presentation system to decrypt the digital cinema presentation, (2) testing whether the at least one key distribution determined to be present has a validity interval encompassing a show time for the digital cinema presentation; (3) initiating exhibition digital cinema presentation at the scheduled show time show time using the key distribution message to decrypt the presentation, but if the key distribution message is not present or if the key distribution message does not have not a validity interval encompassing the show time for the digital cinema presentation, (4) obtaining from the key distribution store an alternate key distribution message, (5) checking for expiration of the alternate key distribution message; and (6) retaining the alternate key distribution message when not expired.
19. The key management system of aim 18 wherein the security means comprises a secure media block.
20. The key management system according to claim 18 wherein the security means checks whether the alternate key distribution message is expired by determining whether the alternate key distribution message has a validity interval encompassing the scheduled show time for the digital cinema presentation in order to initiate exhibiting the digital cinema presentation at the scheduled show time show time using the alternative key distribution message to decrypt the presentation.