Auto-negotiation of content formats using a secure component model
View Patent ↗In accordance with one embodiment of the present invention, secure content objects are transcoded from an input format to an output format based upon identified capabilities of a receiving device. In one embodiment, a plurality of trusted processing components are identified to collectively transcode the secure content object from the identified input format to the determined output format. In one embodiment, each of the trusted processing components are authenticated prior to operating on the secure content object.
1. In a content playback device capable of locally playing back content and equipped with a digital rights management agent, a method of acting on a secure content object, the method comprising:
obtaining, by the content playback device, a digital certificate identifying an action to be performed on the secure content object, said digital certificate including a plurality of unique identifiers corresponding respectively to a plurality of trusted processing components for collectively performing the action on the secure content object;
selecting, by the content playback device using said digital certificate, said plurality of trusted processing components to collectively perform the action identified by said digital certificate on the secure content object;
authenticating, by the content playback device, each of the trusted processing components using said associated corresponding unique identifiers prior to the respective processing component operating on the secure content object;
causing a change in a memory of the content playback device to indicate that each of the trusted components has been authenticated; and
performing the action identified by said digital certificate on the secure content object.
2. The method of claim 1 , further comprising validating a digital signature of the digital rights management agent programming code.
3. The method of claim 2 , wherein authenticating each of the trusted processing components comprises validating a digital signature of programming code associated with implementation of each respective processing component.
4. The method of claim 3 , further comprising the digital rights management agent authenticating itself and a decryptor processing component.
5. The method of claim 1 , wherein said digital certificate further identifies an execution order in which said plurality of trusted processing components are to be executed for collectively performing the action on the secure content object.
6. The method of claim 5 , wherein performing the action on the secure content object comprises executing each of said identified plurality of trusted processing components according to said identified execution order.
7. The method of claim 1 , wherein obtaining said digital certificate comprises:
receiving an indication of the action to be performed on the secure content object; and
identifying said digital certificate according to said received indication.
8. A content playback device capable of locally playing back content and equipped with a digital rights management agent, the content playback device comprising a processor and a memory containing instructions that when executed by the processor, configure the content playback device to perform a method of acting on a secure content object, the method comprising:
obtaining a digital certificate identifying an action to be performed on the secure content object, said digital certificate including a plurality of unique identifiers corresponding respectively to a plurality of trusted processing components for collectively performing the action on the secure content object;
selecting, using said digital certificate, said plurality of trusted processing components to collectively perform the action identified by said digital certificate on the secure content object;
authenticating each of the trusted processing components using said associated corresponding unique identifiers prior to the respective processing component operating on the secure content object;
causing a change in a memory of the content playback device to indicate that each of the trusted components has been authenticated; and
performing the action identified by said digital certificate on the secure content object.
9. The content playback device of claim 8 , wherein the method further comprises validating a digital signature of the digital rights management agent programming code.
10. The content playback device of claim 9 , wherein authenticating each of the trusted processing components comprises validating a digital signature of programming code associated with implementation of each respective processing component.
11. The content playback device of claim 10 , wherein the method further comprises the digital rights management agent authenticating itself and a decryptor processing component.
12. The content playback device of claim 8 , wherein said digital certificate further identifies an execution order in which said plurality of trusted processing components are to be executed for collectively performing the action on the secure content object.
13. The content playback device of claim 12 , wherein performing the action on the secure content object comprises executing each of said identified plurality of trusted processing components according to said identified execution order.
14. The content playback device of claim 8 , wherein obtaining said digital certificate comprises:
receiving an indication of the action to be performed on the secure content object; and
identifying said digital certificate according to said received indication.
15. A non-transient machine-readable storage medium containing instructions that, when executed by a processor of a content playback device capable of locally playing back content and equipped with a digital rights management agent, configure the content playback device to perform a method of acting on a secure content object, the method comprising:
obtaining a digital certificate identifying an action to be performed on the secure content object, said digital certificate including a plurality of unique identifiers corresponding respectively to a plurality of trusted processing components for collectively performing the action on the secure content object;
selecting, using said digital certificate, said plurality of trusted processing components to collectively perform the action identified by said digital certificate on the secure content object;
authenticating each of the trusted processing components using said associated corresponding unique identifiers prior to the respective processing component operating on the secure content object;
causing a change in a memory of the content playback device to indicate that each of the trusted components has been authenticated; and
performing the action identified by said digital certificate on the secure content object.
16. The machine-readable storage medium of claim 15 , wherein the method further comprises validating a digital signature of the digital rights management agent programming code.
17. The machine-readable storage medium of claim 16 , wherein authenticating each of the trusted processing components comprises validating a digital signature of programming code associated with implementation of each respective processing component.
18. The machine-readable storage medium of claim 17 , wherein the method further comprises the digital rights management agent authenticating itself and a decryptor processing component.
19. The machine-readable storage medium of claim 15 , wherein said digital certificate further identifies an execution order in which said plurality of trusted processing components are to be executed for collectively performing the action on the secure content object.
20. The machine-readable storage medium of claim 19 , wherein performing the action on the secure content object comprises executing each of said identified plurality of trusted processing components according to said identified execution order.
21. The machine-readable storage medium of claim 15 , wherein obtaining said digital certificate comprises:
receiving an indication of the action to be performed on the secure content object; and
identifying said digital certificate according to said received indication.