Systems and methods for content security
Systems and methods are for content security may comprise transmitting a request for authorization to access secured content. A content key for the secured content may be received and stored to a restricted region of a memory. A device security module may have access to the restricted region and may decrypt, based on satisfaction of a use condition and using the content key, the secured content. An encryption key associated with a secure media system authorized to access the secured content may be received. The device security module may encrypt, using the encryption key, the secured content and route the secured content to the secure media system.
1 . A method comprising:
receiving, by a computing device and based on a request for authorization for a first secure media system to access secured content, a key container associated with the secured content, wherein the key container comprises an indication of a permission for the computing device to access the secured content;
decrypting, by a device security module of the computing device and based on the indication of the permission, the secured content using a content key, wherein the content key is stored at the device security module;
encrypting, by the device security module and using an encryption key associated with a second secure media system, the secured content; and
routing, by the device security module and to the second secure media system, the secured content.
2 . The method of claim 1 , wherein the first secure media system is associated with a first communication protocol and wherein the second secure media system is associated with a second, different communication protocol.
3 . The method of claim 1 , wherein the first secure media system and the second secure media system each comprise at least one of a playback device, a digital video recorder (DVR) device, a white box device, or a content management system.
4 . The method of claim 1 , wherein the key container is encrypted, further comprising decrypting, by the device security module and using a decryption key stored at the device security module, the encrypted key container.
5 . The method of claim 1 , wherein the content key stored at the device security module comprises the content key stored to a restricted memory, wherein the device security module has access to the restricted memory.
6 . The method of claim 1 , wherein the key container further comprises one or more conditions for accessing the secured content, further comprising determining, by the device security module, compliance with the one or more conditions for accessing the secured content, and wherein the encrypting the secured content is based at least in part on the determination of the compliance with the one or more conditions for accessing the secured content.
7 . The method of claim 6 , wherein the encryption key is a public key of the second secure media system and wherein the encrypting the secured content using the encryption key comprises retrieving the public key from the second secure media system.
8 . A system comprising:
an authorization device; and
a computing device configured to:
receive, from the authorization device and based on a request for authorization for a first secure media system associated with the computing device to access secured content, a key container associated with the secured content, wherein the key container comprises an indication of a permission to access the secured content;
decrypt, by a device security module of the computing device and based on the indication of the permission, the secured content using a content key, wherein the content key is stored at the device security module;
encrypt, by the device security module and using an encryption key associated with a second secure media system, the secured content; and
route, by the device security module and to the second secure media system, the secured content.
9 . The system of claim 8 , wherein the first secure media system is associated with a first communication protocol and wherein the second secure media system is associated with a second, different communication protocol.
10 . The system of claim 8 , wherein the first secure media system and the second secure media system each comprise at least one of a playback device, a digital video recorder (DVR) device, a white box device, or a content management system.
11 . The system of claim 8 , wherein the key container is encrypted, and wherein the computing device is further configured to decrypt, by the device security module and using a decryption key stored at the device security module, the encrypted key container.
12 . The system of claim 8 , wherein the content key stored at the device security module comprises the content key stored to a restricted memory, wherein the device security module has access to the restricted memory.
13 . The system of claim 8 , wherein the key container further comprises one or more conditions for accessing the secured content, and wherein the device security module is configured to determine compliance with the one or more conditions for accessing the secured content, and wherein the encrypting the secured content is based at least in part on the determination of the compliance with the one or more conditions for accessing the secured content.
14 . The system of claim 13 , wherein the encryption key is a public key of the second secure media system and wherein the computing device is configured to retrieve the public key from the second secure media system.
15 . A non-transitory computer-readable medium storing instructions that, when executed, cause:
receiving, by a computing device and based on a request for authorization for a first secure media system to access secured content, a key container associated with the secured content, wherein the key container comprises an indication of a permission for the computing device to access the secured content;
decrypting, by a device security module of the computing device and based on the indication of the permission, the secured content using a content key, wherein the content key is stored at the device security module;
encrypting, by the device security module and using an encryption key associated with a second secure media system, the secured content; and
routing, by the device security module and to the second secure media system, the secured content.
16 . The non-transitory computer-readable medium of claim 15 , wherein the first secure media system is associated with a first communication protocol and wherein the second secure media system is associated with a second, different communication protocol.
17 . The non-transitory computer-readable medium of claim 15 , wherein the first secure media system and the second secure media system each comprise at least one of a playback device, a digital video recorder (DVR) device, a white box device, or a content management system.
18 . The non-transitory computer-readable medium of claim 15 , wherein the key container is encrypted, and wherein the instructions, when executed, further cause decrypting, by the device security module and using a decryption key stored at the device security module, the encrypted key container.
19 . The non-transitory computer-readable medium of claim 15 , wherein the content key stored at the device security module comprises the content key stored to a restricted memory, wherein the device security module has access to the restricted memory.
20 . The non-transitory computer-readable medium of claim 15 , wherein the encryption key is a public key of the second secure media system and wherein the instructions, when executed, further cause retrieving the public key from the second secure media system.
21 . A device comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the device to:
receive, based on a request for authorization for a first secure media system associated with the device to access secured content, a key container associated with the secured content, wherein the key container comprises an indication of a permission to access the secured content;
decrypt, by a device security module of the device and based on the indication of the permission, the secured content using a content key, wherein the content key is stored at the device security module;
encrypt, by the device security module and using an encryption key associated with a second secure media system, the secured content; and
route, by the device security module and to the second secure media system, the secured content.
22 . The device of claim 21 , wherein the first secure media system is associated with a first communication protocol and wherein the second secure media system is associated with a second, different communication protocol.
23 . The device of claim 21 , wherein the first secure media system and the second secure media system each comprise at least one of a playback device, a digital video recorder (DVR) device, a white box device, or a content management system.
24 . The device of claim 21 , wherein the key container is encrypted, and wherein the device is further configured to decrypt, by the device security module and using a decryption key stored at the device security module, the encrypted key container.
25 . The device of claim 21 , wherein the content key stored at the device security module comprises the content key stored to a restricted memory, wherein the device security module has access to the restricted memory.
26 . The device of claim 21 , wherein the key container further comprises one or more conditions for accessing the secured content, and wherein the device security module is configured to determine compliance with the one or more conditions for accessing the secured content, and wherein the encrypting the secured content is based at least in part on the determination of the compliance with the one or more conditions for accessing the secured content.
27 . The device of claim 26 , wherein the encryption key is a public key of the second secure media system and wherein the device is configured to retrieve the public key from the second secure media system.