Federated digital rights management scheme including trusted systems
Federated systems for issuing playback certifications granting access to technically protected content are described. One embodiment of the system includes a registration server connected to a network, a content server connected to the network and to a trusted system, a first device including a non-volatile memory that is connected to the network and a second device including a non-volatile memory that is connected to the network. In addition, the registration server is configured to provide the first device with a first set of activation information in a first format, the first device is configured to store the first set of activation information in non-volatile memory, the registration server is configured to provide the second device with a second set of activation information in a second format, and the second device is configured to store the second set of activation information in non-volatile memory.
1. A content distribution network, comprising:
a registration server connected to a network;
a content server connected to the network and to a trusted system;
a first client device including a non-volatile memory that is connected to the network; and
a second client device including a non-volatile memory that is connected to the network;
wherein the registration server is configured to provide the first client device with a first set of activation information in a first format;
wherein the first device is configured to store the first set of activation information in non-volatile memory;
wherein the registration server is configured to provide the second client device with a second set of activation information in a second format;
wherein the second client device is configured to store the second set of activation information in non-volatile memory; and
wherein the content server is configured to:
encrypts a set of video content using a set of content keys that are encrypted using a set of one or more user encryption keys associated with the first client device;
provides the set of content keys for the set of video content to the trusted system;
receives a first request from the first client device for the set of video content;
sends a second request associated with the set of video content to the trusted server system;
receives a playback certification based on the second request and the set of content keys, wherein the playback certification comprises an encrypted copy of the set of content keys, wherein the encrypted copy of the set of content keys are encrypted using at least one user encryption key specific to a unique user account of the client device, wherein the at least one user encryption key specific to the unique user account is known to one or more playback devices associated with the user account and the trusted server system; and
provides the requested set of video content and the playback certification to the first client device.
2. A content provider system comprising:
a set of one or more processors; and
a memory, wherein the memory comprises an application for causing the set of processors to perform the steps of:
encrypting a set of content using a set of content keys;
providing the set of content keys for the set of content from the content provider system to a trusted server system;
receiving a first request from a client device for the set of content;
sending a second request associated with the set of content from the content provider system to the trusted server system;
receiving a playback certification based on the second request and the set of content keys, wherein the playback certification comprises an encrypted copy of the set of content keys, wherein the encrypted copy of the set of content keys are encrypted using at least one user encryption key specific to a unique user account of the client device, wherein the at least one user encryption key specific to the unique user account is known to one or more playback devices associated with the user account and the trusted server system; and
providing the requested set of content and the playback certification to the client device.
3. The content provider system of claim 2 , wherein the encrypted copy of the set of content keys are encrypted using a set of one or more user encryption keys associated with the client device.
4. The content provider system of claim 3 , wherein the set of user encryption keys are unique to the client device.
5. The content provider system of claim 2 , wherein the application is further for causing the set of processors to perform the step of revoking the set of user encryption keys.
6. The content provider system of claim 5 , wherein the step of revoking the set of user encryption keys comprises denying a request from the client device.
7. The content provider system of claim 6 , wherein the step of denying a request from the client device is further based on a class of the client device.
8. The content provider system of claim 2 , wherein the set of content includes at least one video sequence.
9. The content provider system of claim 2 , wherein the application is further for causing the set of processors to perform the step of registering playback devices.
10. The content provider system of claim 2 , wherein the playback certification grants access to the set of content for a fixed period of time.
11. The content provider system of claim 2 , wherein the trusted server system is located local to the content provider system.
12. The content provider system of claim 2 , wherein the set of content keys are provided to the trusted server system in the clear.
13. The content provider system of claim 2 , wherein the application is further for causing the set of processors to perform the step of generating an audit log of transactions performed by the trusted server system.
14. The content provider system of claim 2 , wherein the application is further for causing the set of processors to perform the step of maintaining information concerning devices registered by a user of the client device.
15. A method for providing content from a content provider system, the method comprising:
encrypting a set of content using a set of content keys;
providing the set of content keys for the set of content from the content provider system to a trusted server system;
receiving a first request from a client device for the set of content;
sending a second request associated with the set of content from the content provider system to the trusted server system;
receiving a playback certification based on the second request and the set of content keys, wherein the playback certification comprises an encrypted copy of the set of content keys, wherein the encrypted copy of the set of content keys are encrypted using at least one user encryption key specific to a unique user account of the client device, wherein the at least one user encryption key specific to the unique user account is known to one or more playback devices associated with the user account and the trusted server system; and
providing the requested set of content and the playback certification to the client device.
16. The method of claim 15 , wherein the encrypted copy of the set of content keys are encrypted using a set of one or more user encryption keys associated with the client device.
17. The method of claim 16 , wherein the set of user encryption keys are unique to the client device.
18. The method of claim 15 further comprising revoking the set of user encryption keys.
19. The method of claim 18 , wherein revoking the set of user encryption keys comprises denying a request from the client device.
20. The method of claim 19 , wherein denying a request from the client device is further based on a class of the client device.
21. The method of claim 15 , wherein the set of content includes at least one video sequence.
22. The method of claim 15 further comprising registering playback devices.
23. The method of claim 15 , wherein the playback certification grants access to the set of content for a fixed period of time.
24. The method of claim 15 , wherein the trusted server system is located local to the content provider system.
25. The method of claim 15 , wherein the set of content keys are provided to the trusted server system in the clear.
26. The method of claim 15 further comprising generating an audit log of transactions performed by the trusted server system.
27. The method of claim 15 further comprising maintaining information concerning devices registered by a user of the client device.
28. A content provider system comprising:
a set of one or more processors; and
a memory, wherein the memory comprises an application for causing the set of processors to perform the steps of:
encrypting a set of video content using a set of content keys that are encrypted using a set of one or more user encryption keys associated with a client device;
providing the set of content keys for the set of video content from the content provider system to a trusted server system;
receiving a first request from a client device for the set of video content;
sending a second request associated with the set of video content from the content provider system to the trusted server system;
receiving a playback certification based on the second request and the set of content keys, wherein the playback certification comprises an encrypted copy of the set of content keys, wherein the encrypted copy of the set of content keys are encrypted using at least one user encryption key specific to a unique user account of the client device, wherein the at least one user encryption key specific to the unique user account is known to one or more playback devices associated with the user account and the trusted server system; and
providing the requested set of video content and the playback certification to the client device.