Systems, methods and apparatuses for the secure transmission of media content
The systems, methods and apparatuses described herein permit encrypted media content to be displayed by a display device under control of a local device. The local device may comprise a computer processor to control playing of the encrypted media content and a first communication interface to transmit an association encryption envelope and, according to the control, the encrypted media content. The display device may comprise a second communication interface coupled to the first interface to receive the encrypted media content and the association encryption envelope, a decryption engine to decrypt the association encryption envelope using a private key of the display device to recover a symmetric encryption key used to encrypt the encrypted media content and decrypt the encrypted media content using the recovered symmetric encryption key, and a decoder to decode the decrypted media content for display on a display screen according to the control.
1. A system for displaying encrypted media content comprising:
a local device, comprising:
a computer processor configured to control playing of the encrypted media content including performing a navigation control operation using unencrypted media meta data;
a first communication interface configured to transmit an association encryption envelope and, according to the navigation control operation, the encrypted media content; and
a display device, comprising:
a second communication interface coupled to the first interface configured to receive the encrypted media content and the association encryption envelope transmitted by the local device;
a decryption engine configured to decrypt, using a private key of the display device, the association encryption envelope to recover a symmetric encryption key used to encrypt the encrypted media content and decrypt the encrypted media content using the recovered symmetric encryption key; and
a decoder configured to decode the decrypted media content for display on a display screen according to the navigation control operation.
2. The system of claim 1 , further comprising:
a source device, comprising:
a processor configured to:
generate the symmetric key;
retrieve a public key of the display device based on a display device identifier identifying the display device, wherein the public and private keys of the display device are a pair of asymmetric keys assigned to the display device; and
generate the association encryption envelope; and
an encryption engine configured to encrypt the media content using the symmetric key and encrypt the association encryption envelope using the retrieved public key of the display device.
3. The system of claim 2 , wherein the source device is configured to access a key database to retrieve the public key of the display device.
4. The system of claim 2 , wherein the public and private keys of the display device are generated when the display device is manufactured.
5. The system of claim 2 , wherein the display device stores the private key in a tamper-resistant or tamper-evident nonvolatile memory of the display device not accessible by the local device.
6. The system of claim 1 , wherein the navigation control operation is performed in response to user actions.
7. The system of claim 1 , wherein performing the navigation control operation includes performing one of play, seek, fast forward, or backward operations.
8. The system of claim 1 , wherein the encrypted media content includes a digital water mark.
9. The system of claim 1 , wherein the display device further comprises an image processor and a z-order processor to display a still image over the decrypted media content on the display screen.
10. The system of claim 1 , wherein the local and display devices are packaged together in a combined device, wherein the combined device comprises a mixer that allows an appropriate area of the display screen to display the decrypted media content generated by the description engine and rest of the display screen under direct control of the operating system, wherein the mixer prohibits the operating system from accessing a buffer storing the decrypted media content.
11. The system of claim 1 , wherein the encrypted media content includes a plurality of encrypted video and/or audio chunks.
12. The system of claim 1 , wherein the local device is a desktop computer, a laptop, or a set-top box and the display device is a television set or a monitor.
13. A display device for receipt and display of encrypted media content comprising:
a non-volatile memory storing a private key of the display device;
a communication interface coupled to a controlling device and configured to receive from the controlling device the encrypted media content and an association encryption envelope;
a decryption engine configured to decrypt, using the private key of the display device, the association encryption envelope to recover a symmetric encryption key used to encrypt the encrypted media content and decrypt the encrypted media content using the recovered symmetric encryption key; and
a decoder configured to decode the decrypted media content for display on a display screen according to a navigation control operation performed by the controlling device using unencrypted media meta data.
14. The display device of claim 13 , wherein the association encryption envelope is generated at the source device and encrypted using a public key of the display device located according to a display device identifier identifying the display device, wherein the public and private keys of the display device are a pair of asymmetric keys assigned to the display device.
15. The display device of claim 14 , wherein the public and private keys of the display device are generated when the display device is manufactured.
16. The display device of claim 13 , wherein the display device stores the private key in a tamper-resistant or tamper-evident nonvolatile memory of the display device not accessible by the controlling device.
17. The display device of claim 13 , wherein the navigation control operation is performed in response to user actions.
18. The display device of claim 13 , wherein the navigation control operation performed by the controlling device includes one of play, seek, fast forward, or backward operations.
19. The display device of claim 13 , wherein the encrypted media content includes a digital water mark.
20. The display device of claim 13 , wherein the display device further comprises an image processor and a z-order processor to display a still image over the decrypted media content on the display screen.
21. The display device of claim 13 , wherein the controlling device and display device are packaged together in a combined device, wherein the combined device comprises a mixer that allows an appropriate area of the display screen to display the decrypted media content generated by the description engine and rest of the display screen under direct control of an operating system of the controlling device, wherein the mixer prohibits the operating system from accessing a buffer storing the decrypted media content.
22. The display device of claim 13 , wherein the encrypted media content includes a plurality of encrypted video and/or audio chunks.
23. The display device of claim 13 , wherein the controlling device is a desktop computer, a laptop, or a set-top box and the display device is a television set or a monitor.
24. A method for displaying encrypted media content on a display device, comprising:
receiving, from a controlling device, the encrypted media content and an association encryption envelope;
decrypting, using a private key of the display device, the association encryption envelope to recover a symmetric encryption key used to encrypt the encrypted media content and decrypt the encrypted media content using the recovered symmetric encryption key; and
decoding the decrypted media content for display on a display screen according to a navigation control operation performed by the controlling device using unencrypted media meta data.
25. The method of claim 24 , wherein the association encryption envelope is generated at the source device and encrypted using a public key of the display device located according to a display device identifier identifying the display device, wherein the public and private keys of the display device are a pair of asymmetric keys assigned to the display device.
26. The method of claim 25 , wherein the public and private keys of the display device are generated when the display device is manufactured.
27. The method of claim 24 , wherein the display device stores the private key in a tamper-resistant or tamper-evident nonvolatile memory of the display device not accessible by the controlling device.
28. The method of claim 24 , wherein the navigation control operation is performed in response to user actions.
29. The method of claim 24 , wherein the navigation control operation performed by the controlling device includes one of play, seek, fast forward, or backward operations.
30. The method of claim 24 , wherein the encrypted media content includes a digital water mark.
31. The method of claim 24 , wherein the display device further comprises an image processor and a z-order processor to display a still image over the decrypted media content on the display screen.
32. The method of claim 24 , wherein the controlling device and display device are packaged together in a combined device, wherein the combined device comprises a mixer that allows an appropriate area of the display screen to display the decrypted media content generated by the description engine and rest of the display screen under direct control of an operating system of the controlling device, wherein the mixer prohibits the operating system from accessing a buffer storing the decrypted media content.
33. The method of claim 24 , wherein the encrypted media content includes a plurality of encrypted video and/or audio chunks.
34. The method of claim 24 , wherein the controlling device is a desktop computer, a laptop, or a set-top box and the display device is a television set or a monitor.