Federated digital rights management scheme including trusted systems
Federated systems for issuing playback certifications granting access to technically protected content are described. One embodiment of the system includes a registration server connected to a network, a content server connected to the network and to a trusted system, a first device including a non-volatile memory that is connected to the network and a second device including a non-volatile memory that is connected to the network. In addition, the registration server is configured to provide the first device with a first set of activation information in a first format, the first device is configured to store the first set of activation information in non-volatile memory, the registration server is configured to provide the second device with a second set of activation information in a second format, and the second device is configured to store the second set of activation information in non-volatile memory.
1. A federated system for distributing encrypted multimedia content for playback comprising:
a trusted registration server system configured to authorize distribution of encrypted content by a plurality of content provider server systems that utilize different digital rights management systems;
wherein the trusted registration server system is configured to:
maintain a set of user accounts;
receive a first set of information for a piece of multimedia content from a first content provider server system from the plurality of content provider server systems, wherein the first content provider server system distributes content utilizing a first protection schema and the first set of information comprises:
rights granted with respect to the piece of multimedia content; and
a user ID associated with a first user account from the set of user accounts; and
authorize distribution of the piece of multimedia content by a second content provider server system from the plurality of content provider server systems based on the first set of information, wherein the second content provider server system distributes content utilizing a different second protection schema;
wherein the second content provider server system is configured to:
store a first encrypted copy of the piece of multimedia content, where the first encrypted copy is encrypted using at least a content key;
receive authorization to distribute the piece of multimedia content from the trusted registration server based on the first set of information;
receive a request for the piece of multimedia content from the first media player; and
provide a first encrypted copy of the piece of multimedia content and a first playback certification to the first media player, where:
the first playback certification is generated according to the second protection schema after receiving authorization from the trusted registration server to distribute the piece of multimedia content and the request for the piece of multimedia content from the first media player; and
the first playback certification enables playback of the first encrypted copy of the piece of multimedia content by the first media player.
2. The federated system of claim 1 , wherein the first playback certification from the second content provider server system cannot be used with a second encrypted copy of the piece of multimedia content from a third content provider server system.
3. The federated system of claim 1 , wherein the rights granted with respect to the piece of multimedia content are associated with the user ID.
4. The federated system of claim 1 , wherein the rights granted with respect to the piece of multimedia content are associated with the first media player.
5. The federated system of claim 1 , wherein the trusted registration server system authorizes distribution of the piece of multimedia content by communicating a second set of information for the piece of multimedia content to the second content provider server system, wherein the second set of information comprises rights associated with the piece of multimedia content for the first user account.
6. The federated system of claim 1 , wherein the trusted registration server system is further configured to:
receive a second set of information for a second piece of multimedia content from the second content provider server system, wherein the second set of information comprises:
rights granted with respect to the second piece of multimedia content; and
a user ID associated with the first user account from the set of user accounts; and
authorize distribution of the second piece of multimedia content by the first content provider server system.
7. The federated system of claim 1 , wherein the first playback certification comprises a set of one or more content encryption keys comprising the at least one content key for decrypting the first encrypted copy of the piece of multimedia content.
8. The federated system of claim 7 , wherein the set of one or more content encryption keys is encrypted using a set of one or more user encryption keys.
9. The federated system of claim 8 , wherein second content provider server system is further configured to maintain the set of user encryption keys.
10. The federated system of claim 7 , wherein the at least one content key is used to generate a frame encryption key.
11. The federated system of claim 1 , wherein the first playback certification is a first of a plurality of playback certifications for the piece of multimedia content, wherein each playback certification of the plurality of playback certifications enables playback of the piece of multimedia content by a different class of devices.
12. The federated system of claim 1 , wherein the trusted registration server system is implemented using secure software that is tamper resistant.
13. The federated system of claim 1 , wherein the trusted registration server system is implemented using secure hardware that is tamper resistant.
14. The federated system of claim 1 , wherein the different digital rights management systems use different types of DRM licenses.
15. A method for distributing encrypted multimedia content for playback comprising:
maintaining a set of user accounts;
receiving a first set of information for a piece of multimedia content from a first content provider server system from a plurality of content provider server systems, wherein the first content provider server system distributes content utilizing a first protection schema and the first set of information comprises:
rights granted with respect to the piece of multimedia content; and
a user ID associated with a first user account from the set of user accounts; and
authorizing distribution of the piece of multimedia content by a second content provider server system based on the first set of information, wherein the second content provider server system is configured to distribute content utilizing a different second protection schema, wherein the second content provider server system:
stores a first encrypted copy of the piece of multimedia content, where the first encrypted copy is encrypted using at least a content key;
receives authorization from a trusted registration server to distribute the piece of multimedia content;
receives a request for the piece of multimedia content from the first media player; and
provides a first encrypted copy of the piece of multimedia content and a first playback certification to the first media player, where:
the first playback certification is generated according to the second protection schema after receiving authorization from the trusted registration server to distribute the piece of multimedia content and a request for the piece of multimedia content from the first media player, and
the first playback certification enables playback of the first encrypted copy of the piece of multimedia content by the first media player.
16. The method of claim 15 , wherein authorizing distribution of the piece of multimedia content comprises communicating a second set of information for the piece of multimedia content to the second content provider server system, wherein the second set of information comprises rights associated with the piece of multimedia content for the first user account.
17. The method of claim 15 further comprising:
receiving a second set of information for a second piece of multimedia content from the second content provider server system, wherein the second set of information comprises:
rights granted with respect to the second piece of multimedia content; and
a user ID associated with the first user account from the set of user accounts; and
authorizing distribution of the second piece of multimedia content by the first content provider server system.
18. The method of claim 17 , wherein the at least one content encryption key is encrypted using a set of one or more user encryption keys.
19. The method of claim 14 , wherein the at least one content key is used to generate a frame encryption key.