Method and apparatus for providing audio or video capture functionality according to a security policy
View Patent ↗Systems and methods for providing capture functionality according to a security policy are provided. A request to capture content is received from a requesting application at a capture controller. The request is evaluated based on the security policy of the capture controller. Based on the evaluation, a determination is made as to whether the request is to be granted completely, denied, or granted subject to a constraint. Capture of the requested content is initiated via capture hardware or software if the request is granted completely or granted subject to the constraint.
1. A method for providing capture functionality according to a security policy, the method comprising:
receiving a request to capture content from a requesting application at a capture controller;
evaluating the request based on a security policy of the capture controller, the security policy being based on previous capture requests received by the capture controller, wherein a rate at which the previous capture requests were made or a number of the previous capture requests is considered in the security policy;
based on the evaluation, making a determination as to whether the request is to be granted completely, wherein it is determined that the request is to be granted completely prior to reaching a threshold value associated with the previous capture requests;
based on the evaluation, making a determination as to whether the request is to be granted subject to a constraint, wherein it is determined that the request is to be granted subject to the constraint after reaching the threshold value;
capturing the requested content in a high-quality capture using capture hardware or software based on a determination that the request is to be granted completely;
capturing the requested content in a low-quality capture using the capture hardware or software based on a determination that the request is to be granted subject to the constraint;
storing captured content on a non-transitory computer-readable storage medium that is accessible by the requesting application,
wherein based on the determination that the request is to be granted subject to the constraint, the constraint is applied (i) while the capturing is occurring, and (ii) prior to the storing of the captured content, the constraint causing the captured content to be different from a source from which the captured content is taken.
2. The method of claim 1 , further comprising:
granting the request subject to the constraint, wherein the constraint causes the captured content to be of a lower quality than the source from which the captured content is taken.
3. The method of claim 1 , further comprising:
evaluating the request based on the security policy, wherein the security policy causes the capture controller to make a determination as to whether the request is from a trusted source or an untrusted source,
wherein the trusted source is an application or processor being executed within a trust boundary that includes the capture controller, and
wherein the untrusted source is an application or processor being executed outside of the trust boundary;
granting the request completely if the capture controller makes a determination that the request is from a trusted source; and
evaluating the request based on other aspects of the security policy if the capture controller makes a determination that the request is from an untrusted source.
4. The method of claim 1 , further comprising:
receiving the request to capture the content, wherein the requested content is audio content, and wherein the capture controller is an audio capture controller.
5. The method of claim 1 , further comprising:
receiving the request to capture the content, wherein the requested content is video content, and wherein the capture controller is a video capture controller.
6. The method of claim 5 , further comprising:
granting the request subject to the constraint, wherein the constraint limits a resolution of the captured content, limits a frame rate of the captured content, limits a size of the captured content, limits a color fidelity of the captured content, limits a bit rate of the captured content, or limits a format of the captured content.
7. The method of claim 5 , further comprising:
evaluating the request based on the security policy of the video capture controller, wherein the security policy is based on a digital rights management (DRM) policy of the requested content, a source of the requested content, a source of the request, a status of the requesting application, audio capture requests related to the requested content, meta-data within the requested content, previous video capture requests made by the requesting application, previous video capture requests made by applications other than the requesting application, or repeated fast-forwarding or rewinding of the requested content.
8. A method for providing capture functionality according to a security policy, the method comprising:
receiving a request to capture content from a requesting application at a capture controller;
making a determination at the controller as to whether the request is from a trusted source or an untrusted source, wherein the trusted source is an application or processor being executed within a trust boundary that includes the capture controller, and wherein the untrusted source is an application or processor being executed outside of the trust boundary;
based on a determination that the request is from the trusted source, granting the request completely;
based on a determination that the request is from the untrusted source, evaluating the request based on a security policy of the capture controller, the security policy being based on previous capture requests received by the capture controller, wherein a rate at which the previous capture requests were made or a number of the previous capture requests is considered in the security policy, and the evaluation being used to (i) make a determination as to whether the request is to be granted completely, wherein it is determined that the request is to be granted completely prior to reaching a threshold value associated with the previous capture requests, and (ii) make a determination as to whether the request is to be granted subject to a constraint, wherein it is determined that the request is to be granted subject to the constraint after reaching the threshold value; and
capturing the requested content in a high-quality capture using capture hardware or software based on a determination that the request is to be granted completely;
capturing the requested content in a low-quality capture using the capture hardware or software based on a determination that the request is to be granted subject to the constraint;
storing captured content on a non-transitory computer-readable storage medium that is accessible by the requesting application,
wherein based on the determination that the request is to be granted subject to the constraint, the constraint is applied (i) while the capturing is occurring, and (ii) prior to the storing of the captured content, the constraint causing the captured content to be different from a source from which the captured content is taken.
9. A system for providing capture functionality according to a security policy, the system comprising:
a non-transitory computer-readable storage medium; and
a capture controller, the capture controller being configured to:
receive a request to capture content from a requesting application,
evaluate the request based on the security policy, the security policy being based on previous capture requests received by the capture controller, wherein a rate at which the previous capture requests were made or a number of the previous capture requests is considered in the security policy,
based on the evaluation, make a determination as to whether the request is to be granted completely, wherein it is determined that the request is to be granted completely prior to reaching a threshold value associated with the previous capture requests,
based on the evaluation, make a determination as to whether the request is to be granted subject to a constraint, wherein it is determined that the request is to be granted subject to the constraint after reaching the threshold value,
capture the requested content in a high-quality capture using capture hardware or software based on a determination that the request is to be granted completely;
capture the requested content in a low-quality capture using the capture hardware or software based on a determination that the request is to be granted subject to the constraint;
store captured content on the non-transitory computer-readable storage medium that is accessible by the requesting application,
wherein based on the determination that the request is to be granted subject to the constraint, the constraint is applied (i) while the capturing is occurring, and (ii) prior to the storing of the captured content, the constraint causing the captured content to be different from a source from which the captured content is taken.
10. The system of claim 9 , wherein the constraint causes the captured content to be of a lower quality than the source from which the captured content is taken.
11. The system of claim 9 , wherein the capture controller is configured to:
evaluate the request based on the security policy, wherein the security policy causes the capture controller to make a determination as to whether the request is from a trusted source or an untrusted source,
wherein the trusted source is an application or processor being executed within a trust boundary that includes the capture controller, and
wherein the untrusted source is an application or processor being executed outside of the trust boundary;
grant the request completely if the capture controller makes a determination that the request is from a trusted source; and
evaluate the request based on other aspects of the security policy if the capture controller makes a determination that the request is from an untrusted source.
12. The system of claim 9 , wherein the threshold value is a particular rate at which the previous capture requests were made or a particular number of the previous capture requests.
13. The system of claim 9 , wherein the requested content is audio content, and wherein the capture controller is an audio capture controller.
14. The system of claim 9 , wherein the requested content is video content, and wherein the capture controller is a video capture controller.
15. The system of claim 14 , wherein the constraint limits a resolution of the captured content, limits a frame rate of the captured content, limits a size of the captured content, limits a color fidelity of the captured content, limits a bit rate of the captured content, or limits a format of the captured content.
16. The system of claim 14 , wherein the security policy is based on a digital rights management (DRM) policy of the requested content, a source of the requested content, a source of the request, a status of the requesting application, audio capture requests related to the requested content, meta-data within the requested content, previous video capture requests made by the requesting application, previous video capture requests made by applications other than the requesting application, or repeated fast-forwarding or rewinding of the requested content.
17. The method of claim 3 , wherein the application or processor being executed within the trust boundary has access to a portion of the non-transitory computer-readable storage medium that is secure, and wherein the application or processor being executed outside of the trust boundary does not have access to the portion of the non-transitory computer-readable storage medium that is secure.
18. The method of claim 8 , wherein the application or processor being executed within the trust boundary has access to a portion of the non-transitory computer-readable storage medium that is secure, and wherein the application or processor being executed outside of the trust boundary does not have access to the portion of the non-transitory computer-readable storage medium that is secure.
19. The system of claim 11 , wherein the application or processor being executed within the trust boundary has access to a portion of the non-transitory computer-readable storage medium that is secure, and wherein the application or processor being executed outside of the trust boundary does not have access to the portion of the non-transitory computer-readable storage medium that is secure.