APPARATUS AND METHODS FOR DATA TRANSFER BETEWEEN A PLURALITY OF USER DEVICES
Methods and apparatus for transferring data (such as for example media or other content) between devices while maintaining protection of the content. In one embodiment, a first user device causes a network entity to generate a shared encryption key for a second user device which is to receive content. In this manner, when the content (which has been encrypted with a key that is specific to the first device) is re-encrypted using the shared key, then transferred to the second device, the second device also obtains the shared key and uses it to decrypt the content, then the second device re-encrpyts the content with a key that is specific to the second device for storage thereon. For example, within a premises network the entire contents of a first digital video recorder (DVR) may be transferred to a replacement DVR.
1 . A method of providing content from a first subscriber device to a second subscriber device, the content being associated to the first subscriber device, and the method comprising:
based at least on the occurrence of a triggering event, requesting a transfer security element for the transfer of the content from the first to the second subscriber device;
receiving the transfer security element;
decrypting the content using a first security element which is specific to the first subscriber device;
re-encrypting the content using the transfer security element; and
transferring the content to the second subscriber device.
2 . The method of claim 1 , wherein the transfer security element comprises a transfer cryptographic key, the first security element comprises a key, and the second subscriber device is configured to decrypt the content using the transfer cryptographic key, and re-encrypt the content using a second key which is specific to the second subscriber device.
3 . A consumer premises device (CPE) configured to provide protected content to a client device in communication, the CPE comprising:
a first interface configured to receive the protected content from a network;
a storage device;
a second interface capable of data communication with the client device'
a processor in data communication with the storage device and the first and second interfaces and configured to execute at least one computer application thereon, the computer application comprising a plurality of instructions which are configured to, when executed by the processor:
based on satisfying a triggering criterion, request a transfer key from a network entity;
receive the transfer key;
decrypt the content using a first key which is specific to the CPE;
re-encrypt the content using the transfer key; and
transfer the protected content to the client device.
4 . A method of providing content from a first subscriber device to a second subscriber device, the method comprising:
receiving a request to generate a content transfer key from the first subscriber device;
authenticating the first subscriber device;
creating the content transfer key; and
enabling the first subscriber device to access the content transfer key.
5 . The method of claim 4 , wherein the first subscriber device is configured to use the content transfer key to transcrypt the content from a first format that is specific to the first subscriber device, to a second format, the second format comprising a transfer format.
6 . The method of claim 4 , further comprising:
receiving a request to access the content transfer key from the second subscriber device;
authenticating the second subscriber device; and
enabling the second subscriber device to access the content transfer key.
7 . The method of claim 6 , wherein the second subscriber device is configured to use the content transfer key to transcrypt the content from the second format to a third format specific to the second subscriber device.
8 . A content transfer manager apparatus configured to enable content to be transferred from a first device to a second device, the content transfer manager apparatus comprising:
a first interface configured to receive the content from a content source;
a storage device;
a digital processor, the processor in data communication with the storage device and first interface and configured to execute at least one computer program thereon, the computer program comprising a plurality of instructions which are configured to, when executed:
receive a request to generate a content transfer key from the first device;
authenticate the first device;
create the content transfer key; and
enable the first device to access the content transfer key.
9 . The content transfer manager apparatus of claim 8 , wherein the first device is configured to use the content transfer key to transcrypt the content from a first format specific to the first device, to a second format, the second format comprising a transfer format.
10 . The content transfer manager apparatus of claim 8 , wherein the plurality of instructions are further configured to, when executed: enable delivery of information regarding the content transfer key to the first client device.
11 . The content transfer manager apparatus of claim 8 , wherein the plurality of instructions are further configured, to when executed:
receive a request to access the content transfer key from the second client device;
authenticate the second client device; and
enable the second client device to access the content transfer key.
12 . The content transfer manager apparatus of claim 11 , wherein the second client device is configured to use the content transfer key to transcrypt the content from the second format to a third format specific to the second client device.
13 . A method of receiving a plurality of content from a first user device at a second user device, the method comprising:
receiving the plurality of content in a first format, the first format comprising a transfer format;
requesting a transfer key from a network entity;
after authentication of the second user device, receiving the transfer key;
using the transfer key to decrypt the plurality of content; and
re-encrypting the plurality of content using a key which is specific to the second user device.