IP Library Granted Patent US 12,052,343
Granted Patent B2
US 12,052,343 · App. 18/326,095 · Granted Jul 30, 2024

Systems and methods for content security

Inventor: Kyong Park (Philadelphia, PA)
Assignee: COMCAST CABLE COMMUNICATIONS, LLC
H04L9/0819G06F21/105H04L63/062H04L63/10G06F21/1062H04L2463/101
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,052,343
App. No.
18/326,095
Granted
Jul 30, 2024
Kind
B2
Abstract

Systems and methods are for content security may comprise transmitting a request for authorization to access secured content. A content key for the secured content may be received and stored to a restricted region of a memory. A device security module may have access to the restricted region and may decrypt, based on satisfaction of a use condition and using the content key, the secured content. An encryption key associated with a secure media system authorized to access the secured content may be received. The device security module may encrypt, using the encryption key, the secured content and route the secured content to the secure media system.

Claims (47)

1. A system comprising:

an authorization device; and

a computing device configured to:

transmit, to the authorization device, a request for authorization for a secure media system to access secured content;

receive a key container associated with copying the secured content, wherein the key container comprises an encryption key associated with the secure media system and an indication of a permission for the secure media system to access the secured content;

decrypt, by a device security module of the computing device and based on the indication of the permission, the secured content using a content key, wherein the content key is isolated to the device security module;

encrypt, by the device security module and using the encryption key, the secured content; and

route, by the device security module and to the secure media system, the secured content.

2. The system of claim 1 , wherein the secure media system comprises at least one of a playback device, a digital video recorder (DVR) device, a white box device, and a content management system.

3. The system of claim 1 , wherein the key container is encrypted, and wherein the computing device is further configured to decrypt, by the device security module and using a decryption key isolated to the device security module, the encrypted key container.

4. The system of claim 1 , wherein the content key isolated to the device security module comprises the content key stored to a restricted memory, wherein the device security module has access to the restricted memory.

5. The system of claim 1 , wherein the key container further comprises one or more conditions for accessing the secured content; and

wherein the computing device is further configured to determine, by the device security module, compliance with the one or more conditions for accessing the secured content.

6. The system of claim 5 , wherein the encrypting the secured content is based at least in part on the determination of the compliance with the one or more conditions for copying the secured content.

7. A non-transitory computer-readable medium storing instructions that, when executed, cause:

transmitting, by a computing device and to an authorization device, a request for authorization for a secure media system to access secured content;

receiving a key container associated with copying the secured content, wherein the key container comprises an encryption key associated with the secure media system and an indication of a permission for the secure media system to access the secured content;

decrypting, by a device security module of the computing device and based on the indication of the permission, the secured content using a content key, wherein the content key is isolated to the device security module;

encrypting, by the device security module and using the encryption key, the secured content; and

routing, by the device security module and to the secure media system, the secured content.

8. The non-transitory computer-readable medium of claim 7 , wherein the secure media system comprises at least one of a playback device, a digital video recorder (DVR) device, a white box device, and a content management system.

9. The non-transitory computer-readable medium of claim 7 , wherein the key container is encrypted, and wherein the instructions, when executed, further cause decrypting, by the device security module and using a decryption key isolated to the device security module, the encrypted key container.

10. The non-transitory computer-readable medium of claim 7 , wherein the content key isolated to the device security module comprises the content key stored to a restricted memory, wherein the device security module has access to the restricted memory.

11. The non-transitory computer-readable medium of claim 7 , wherein the key container further comprises one or more conditions for accessing the secured content, and wherein the instructions, when executed, further cause determining, by the device security module, compliance with the one or more conditions for accessing the secured content.

12. The non-transitory computer-readable medium of claim 11 , wherein the encrypting the secured content is based at least on the determination of the compliance with the one or more conditions for copying the secured content.

13. A system comprising:

a user device; and

a computing device configured to:

receive, from the user device, a request to copy secured content using a secure media system;

determine that the secure media system is authenticated to access the secured content;

generate, based on the determining that the secure media system is authenticated, a key container, wherein the key container comprises an encryption key associated with the secure media system and an indication of a right of the secure media system to access the secured content; and

transmit, to the user device, the key container.

14. The system of claim 13 , wherein the request comprises an indication of a device security module of the computing device; and wherein the computing device is further configured to generate the key container based on a determination that the device security module complies with content security criteria.

15. The system of claim 13 , wherein the computing device comprises a device security module, and wherein the generating the key container comprises encrypting, using a key associated with the device security module, at least a portion of the key container.

16. The system of claim 13 , wherein the request comprises an indication of a content security protocol of the secure media system, and wherein the determining that the secure media system is authenticated is based at least on the content security protocol of the secure media system.

17. The system of claim 13 , wherein the request comprises at least one of a token, a digital signature, or a digital certificate of the secure media system, and wherein the determining that the secure media system is authenticated to access the secured content is based on authentication of the at least one of the token, the digital signature, or the digital certificate.

18. The system of claim 13 , wherein the determining that the secure media system is authenticated to access the secured content is based on a database of authenticated secure media systems.

19. A non-transitory computer-readable medium storing instructions that, when executed, cause:

receiving, by a computing device and from a user device, a request to copy secured content using a secure media system;

determining that the secure media system is authenticated to access the secured content;

generating, based on the determining that the secure media system is authenticated, a key container, wherein the key container comprises an encryption key associated with the secure media system and an indication of a right of the secure media system to access the secured content; and

transmitting, to the user device, the key container.

20. The non-transitory computer-readable medium of claim 19 , wherein the request comprises an indication of a device security module of the computing device, and wherein the instructions, when executed, further cause generating the key container based on a determination that the device security module complies with content security criteria.

21. The non-transitory computer-readable medium of claim 19 , wherein the computing device comprises a device security module, and wherein the instructions that, when executed, further cause generating the key container based on encrypting, using a key associated with the device security module, at least a portion of the key container.

22. The non-transitory computer-readable medium of claim 19 , wherein the request comprises an indication of a content security protocol of the secure media system, and wherein the instructions that, when executed, further cause determining that the secure media system is authenticated based at least on the content security protocol of the secure media system.

23. The non-transitory computer-readable medium of claim 19 , wherein the request comprises at least one of a token, a digital signature, or a digital certificate of the secure media system, and wherein the instructions that, when executed, further cause determining that the secure media system is authenticated to access the secured content based on authentication of the at least one of the token, the digital signature, or the digital certificate.

24. The non-transitory computer-readable medium of claim 19 , wherein the instructions that, when executed, cause determining that the secure media system is authenticated to access the secured content is based on a database of authenticated secure media systems.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 25, 2023
From: PARK, KYONG
To: COMCAST CABLE COMMUNICATIONS, LLC
Reel/Frame 064711/0684 →
Continuity (2)
Continuation 15901491 · Feb 21, 2018
Related Publication 20230306089A1 · Sep 28, 2023
Cited By (2)
US 12,634,121 US 12,659,173