Remotely managed trusted execution environment for digital-rights management in a distributed network with thin clients
A client device receives media content from a server remote from the client device. During playback of the media content, the client device transmits, to a player proxy remote from the client device, a play position of the media content. The play position of the media content is used by the player proxy at the application server to continue providing the media content. The play position is transmitted repeatedly to the player proxy while playback of the media content continues. The client device transmits the media content for display at a display device that is coupled to the client device.
1. A method comprising:
at a client device remote from a server:
receiving encrypted media content from the server remote from the client device;
receiving a first key from the server remote from the client device;
receiving, from a player proxy at the server, a media control command to control playback of the received encrypted media content; and
during transmission of the encrypted media content:
transmitting, repeatedly during playback of the encrypted media content, to the player proxy at the server remote from the client device, a play position of the encrypted media content, wherein the play position of the encrypted media content is used by the player proxy at the server to continue providing the encrypted media content; and
transmitting, periodically while transmission of the encrypted media content continues, to the server, a second key from the client device, wherein transmission of the encrypted media content is terminated in accordance with a determination that the second key received by the server does not match the first key transmitted to the client device from the server; and
transmitting the encrypted media content for display at a display device that is coupled to the client device based on the play position received from the client device.
2. The method of claim 1 , wherein the received media control command comprises a command to play, pause, or flush.
3. The method of claim 1 , wherein the encrypted media content is played back in accordance with the media control command received from the player proxy.
4. The method of claim 1 , wherein the received encrypted media content from the server comprises an encrypted elementary stream from the server.
5. The method of claim 4 , further comprising:
decrypting the encrypted elementary stream, including:
providing a decryption command from an elementary-stream player executing on the client device to a digital-rights-management (DRM) agent executing on the client device, the decryption command specifying an unwrapped content key; and
decrypting the encrypted elementary stream using the unwrapped content key at the DRM agent.
6. The method of claim 1 , further comprising:
storing a device key in a secure store of the client device, wherein the device key is provided by a manufacturer of the client device;
wherein the first key is associated with a DRM scheme specified by a content provider of the encrypted media content.
7. The method of claim 6 , wherein the received encrypted media content has DRM header data specifying the DRM scheme.
8. The method of claim 1 , wherein the first key is received from the server in response to a user of the client device launching the encrypted media content.
9. The method of claim 6 , wherein:
the client device is configured to unwrap content keys for a plurality of DRM schemes using the device key.
10. The method of claim 1 , further comprising:
receiving a query from the server for secure data; and
in response to the query, retrieving a device identity of the client device from a secure store and transmitting the device identity to the server.
11. The method of claim 10 , further comprising:
receiving a message from the server specifying a policy corresponding to one or more business rules for access to the encrypted media content by the client device; and
setting the policy in response to the message; and
decrypting the received encrypted media content in accordance with the one or more business rules.
12. The method of claim 11 , further comprising writing data corresponding to the policy to the secure store, in response to the message.
13. The method of claim 11 , wherein the policy corresponds to a license for the client device obtained by the server from a license server.
14. The method of claim 1 , wherein the server is an application server.
15. A client device, comprising:
one or more processors; and
memory storing one or more programs configured to be executed by the one or more processors, the one or more programs including instructions for:
receiving encrypted media content from a server remote from the client device;
receiving a first key from the server remote from the client device;
receiving, from a player proxy at the server, a media control command to control playback of the received encrypted media content; and
during transmission of the encrypted media content:
transmitting, repeatedly during playback of the encrypted media content, to the player proxy at the server remote from the client device, a play position of the encrypted media content, wherein the play position of the encrypted media content is used by the player proxy at the server to continue providing the encrypted media content; and
transmitting, periodically while transmission of the encrypted media content continues, to the server, a second key from the client device,
wherein transmission of the encrypted media content is terminated in accordance with a determination that the second key received by the server does not match the first key transmitted to the client device from the server; and
transmitting the encrypted media content for display at a display device that is coupled to the client device based on the play position received from the client device.
16. A method implemented at a server comprising one or more processors implementing a player proxy remote from a client device, which receives from the server encrypted data comprising media content for display to a viewer, the player proxy sending at least one media control command to the client device to control playback of the media content by the client device, the method comprising:
transmitting a first key to the client device;
periodically receiving at the player proxy, during transmission of the encrypted data, a sequence of respectively current play positions of the encrypted media content, the respective play positions used by the player proxy to continue providing the encrypted media content to the client device;
periodically receiving transmissions comprising a second key from the client device, and comparing the second key to the first key; and
selectively terminating transmission of the encrypted media content to the client device based on the comparison.
17. The method of claim 16 where the first key is associated with a DRM scheme specified by a content provider of the encrypted media content.
18. The method of claim 17 where the encrypted data has DRM header data specifying the DRM scheme.
19. The method of claim 16 where the first key is sent to the client device in response to a user launching the encrypted media content.