Scalable and extensible secure rendering of digital content
View Patent ↗A number of digital content rendering modules are equipped such that selective subsets of the modules may be employed to render digital content of different media, and of different format types. The modules are organized into a hierarchy, with a selected one occupying a root position of the hierarchy, to exclusively receive the digital contents to be rendered, and that each module is further responsible for verifying the integrity of its immediate downstream modules, to collectively protect the digital contents being rendered. Additionally, in accordance with another aspect, a tamper resistant module is employed to recover digital contents provided in a protected state, obfuscating the recovery. Further, the modules may be of different application domains.
1. A method comprising:
with a tamper resistant digital content recovery module, recovering a first protected digital content of a first type in an obfuscated manner;
with said tamper resistant digital content recovery module, verifying that a root module of a plurality of hierarchically organized plain text digital content rendering modules has not been compromised;
with said root module, verifying that at least one other module of said plurality of hierarchically organized plain text digital content rendering modules has not been compromised, wherein the at least one other module occupies an immediate downstream position in the hierarchy of modules from said root module; and
rendering with said root module and at least said one other module said first digital content.
2. The method of claim 1 , wherein verifying that a root module of plurality of hierarchically organized plain text digital content rendering modules has not been compromised comprises verifying a signature of said root module.
3. The method of claim 1 , wherein verifying that at least one other module of said plurality of hierarchically organized plain text digital content rendering modules has not been compromised comprises verifying a signature of said one other module.
4. The method of claim 1 , and further comprising: with said root module, verifying that a plurality of other modules occupying an immediate downstream position in the hierarchy of modules from said root module have not been compromised during an initialization.
5. An apparatus comprising:
a plurality of digital content rendering modules organized in a hierarchical manner;
a root module of said plurality of digital content rendering modules operable to verify that an immediate downstream module in the hierarchy of said plurality of digital content rendering modules has not been compromised;
a tamper resistant content recovery module operable to recover digital content of various types from a ciphered state in an obfuscated manner, and further operable to verify that said root module has not been compromised; and
wherein said root module along with at least said immediate downstream module are operable to render a plain text version of the recovered digital content.
6. The apparatus of claim 5 , and further comprising a non-leaf module occupying a nonleaf position in the hierarchy, wherein said non-leaf module is operable to verify that a module occupying a downstream position of the non-leaf module in said hierarchy has not been compromised, at least during initialization.
7. The apparatus of claim 5 , and further comprising a non-leaf module occupying a nonleaf position in the hierarchy, wherein said non-leaf module is operable to verify that a module occupying a downstream position of the non-leaf module in said hierarchy has not been compromised before each transfer of the recovered digital content to said module occupying a downstream position.
8. The apparatus of claim 5 , and further comprising and further comprising a non-leaf module occupying a non-leaf position in the hierarchy, wherein said non-leaf module is operable to verify that a module occupying a downstream position of the non-leaf module in said hierarchy has not been compromised by a verifying a signature of said module occupying a downstream position.
9. The apparatus of claim 5 , wherein said digital content of various types comprises streaming media contents of a plurality of media types, and of a plurality of format types.