Efficient key hierarchy for delivery of multimedia content
A Digital Rights Management (DRM) system provides a lightweight layering of encryption and decryption of keys that allows efficient use of different cryptographic techniques to effect the secure delivery of multimedia content. Asymmetric cryptography, where a public key is used to encrypt information that can only be decrypted by a matched private key, is used by the DRM system to deliver symmetric keys securely.
1. An apparatus that facilitates data rights management of multimedia content, comprising:
means for generating, by a hardware processor, a public key and a private key;
means for communicating the public key to a subscription server with a request for a license file;
means for receiving the requested license file; and
means for decrypting a multimedia content based in part on header information contained in the license file, the header information including a User Identification and an Epoch Identification, wherein the Epoch Identification defines a time period for which the license file is valid.
2. The apparatus of claim 1 , further comprising means for storing a service key contained in the license file.
3. The apparatus of claim 1 , further comprising means for rendering a media on a display screen at substantially a same time as the multimedia content is decrypted.
4. A non-transitory computer-readable medium having stored thereon computer executable instructions for digital rights management, the instructions comprising:
generating an asymmetric key pair;
sending at least a first portion of the asymmetric key pair and a request for access to multimedia content to a server;
receiving a license file that includes symmetric keys relating to the multimedia content and header information including a User Identification and an Epoch Identification, wherein the Epoch Identification defines a time period for which the license file is valid; and
decrypting the multimedia content based in part on the header information contained in the license file.
5. The computer-readable medium of claim 4 , the instructions further comprising maintaining a second portion of the asymmetric key pair in a storage media.
6. The computer-readable medium of claim 4 , the first portion of the asymmetric key pair is a public key and the second portion of the asymmetric key pair is a private key.
7. A processor that executes computer-executable instructions from a non-transitory computer medium for key hierarchy for delivery of multimedia content, the instructions comprising:
generating a key pair that comprises a public key and a private key;
transmitting the public key to fetch a license file from a subscription server;
receiving license file information that includes header information and at least one symmetric key, the header information including a User Identification and an Epoch Identification, wherein the Epoch Identification defines a time period for which the license file is valid; and
decrypting a program based in part on the header information.
8. The processor of claim 7 , generating a key pair is associated with an activation process.
9. The processor of claim 7 , the public key is a Client Encryption key and the private key is a Client Decryption key.
10. The processor of claim 7 , further comprising storing a service key contained in the license file on a client.
11. The processor of claim 7 , decrypting the program is performed at substantially a same time as media is rendered on a display.
12. The processor of claim 7 , the license file comprises an encrypted session key and at least one service.
13. The apparatus of claim 1 , wherein the means for generating the public key and the private key is associated with an activation process.
14. The apparatus of claim 1 , wherein the public key is a Client Encryption key and the private key is a Client Decryption key.
15. The apparatus of claim 1 , wherein the license file comprises an encrypted session key and at least one service key.
16. The computer-readable medium of claim 4 , wherein generating an asymmetric key pair is associated with an activation process.
17. The computer-readable medium of claim 4 , wherein the instructions further comprise:
storing a service key contained in the license file on a client.
18. The computer-readable medium of claim 4 , wherein the license file comprises an encrypted session key and at least one service key.
19. The computer-readable medium of claim 6 , wherein the public key is a Client Encryption key and the private key is a Client Decryption key.