IP Library › Granted Patent US 7,277,544
Granted Patent B1
US 7,277,544 · App. 10/348,903 · Granted Oct 2, 2007

Local content security system

Assignee: Cinea, Inc.
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,277,544
App. No.
10/348,903
Granted
Oct 2, 2007
Kind
B1
Abstract

The present invention is a system for securing broadcasting content locally at receiving stations that may be remote to a broadcaster. Embodiments of this invention implement controllable and renewable security measures, compatible with many other content processing and display systems. These security measures may include re-encrypting received broadcast content using locally generated keys, watermarking the received broadcast content, and logging both processing and display of broadcast content.

Claims (114)

1. A local content security system comprising:

(a) a broadcast medium reader, capable of reading a broadcast medium containing encrypted broadcast content encrypted using a broadcast encryption key;

(b) a local key generator capable of generating at least one local key set, said local key set containing:

(i) a local encryption key; and

(ii) a local decryption key;

(c) a local content security processor including:

(i) a broadcast receiver capable of receiving said encrypted broadcast content;

(ii) an encrypted content decryptor, capable of generating decrypted content by decrypting said encrypted broadcast content using a broadcast decryption key, said broadcast decryption key capable of decrypting said encrypted broadcast content;

(iii) a local re-encrypter capable of generating local re-encrypted content by re-encrypting said decrypted content using at least one of said local encryption keys; and

(iv) a local re-encrypted content dispatcher;

(d) a trusted destination including:

(i) a local re-encrypted content receiver for receiving said local re-encrypted content from said local re-encrypted content dispatcher;

(ii) a local decryption key receiver for receiving said local decryption key from said local decryption key dispatcher; and

(iii) a local re-encrypted content decrypter, wherein said local re-encrypted content decrypter constructs processed content by decrypting said local re-encrypted content using said local decryption key; and

(e) a local watermarker, capable of applying a local watermark to said decrypted broadcast content.

2. A local content security system according to claim 1 , wherein said local watermark applies said local watermark to said decrypted content.

3. A local content security system according to claim 1 , wherein said local watermark applies said local watermark to said re-encrypted content.

4. A local content security system according to claim 1 , wherein said local watermarker applies said local watermark to said processed content.

5. A local content security system comprising:

(a) a broadcast medium reader, capable of reading a broadcast medium containing encrypted broadcast content encrypted using a broadcast encryption key;

(b) a local key generator capable of generating at least one local key set, said local key set containing:

(i) a local encryption key; and

(ii) a local decryption key;

(c) a local content security processor including:

(i) a broadcast receiver capable of receiving said encrypted broadcast content;

(ii) an encrypted content decryptor, capable of generating decrypted content by decrypting said encrypted broadcast content using a broadcast decryption key, said broadcast decryption key capable of decrypting said encrypted broadcast content;

(iii) a local re-encrypter capable of generating local re-encrypted content by re-encrypting said decrypted content using at least one of said local encryption keys; and

(iv) a local re-encrypted content dispatcher;

(d) a trusted destination including:

(i) a local re-encrypted content receiver for receiving said local re-encrypted content from said local re-encrypted content dispatcher;

(ii) a local decryption key receiver for receiving said local decryption key from said local decryption key dispatcher; and

(iii) a local re-encrypted content decrypter, wherein said local re-encrypted content decrypter constructs processed content by decrypting said local re-encrypted content using said local decryption key; and

(e) a local watermarker, capable of applying a local watermark to said encrypted broadcast content.

6. A local content security system comprising:

(a) a broadcast medium reader, capable of reading a broadcast medium containing encrypted broadcast content encrypted using a broadcast encryption key;

(b) a local key generator capable of generating at least one local key set, said local key set containing:

(i) a local encryption key; and

(ii) a local decryption key;

(c) a local content security processor including:

(i) a broadcast receiver capable of receiving said encrypted broadcast content;

(ii) an encrypted content decryptor, capable of generating decrypted content by decrypting said encrypted broadcast content using a broadcast decryption key, said broadcast decryption key capable of decrypting said encrypted broadcast content;

(iii) a local re-encrypter capable of generating local re-encrypted content by re-encrypting said decrypted content using at least one of said local encryption keys; and

(iv) a local re-encrypted content dispatcher; and

(d) a trusted destination including:

(i) a local re-encrypted content receiver for receiving said local re-encrypted content from said local re-encrypted content dispatcher;

(ii) a local decryption key receiver for receiving said local decryption key from said local decryption key dispatcher; and

(iii) a local re-encrypted content decrypter, wherein said local re-encrypted content decrypter constructs processed content by decrypting said local re-encrypted content using said local decryption key; and

wherein said local content security system further includes a back channel, said back channel capable of communicating with a remote application.

7. A local content security system according to claim 6 , wherein said back channel only communicates with an approved remote application.

8. A local content security system according to claim 6 , wherein said remote application provides at least one feature descriptor.

9. A local content security system according to claim 8 , wherein each of said at least one feature descriptor includes at least one permission rule.

10. A local content security system according to claim 8 , wherein each of said at least one feature descriptor includes at least one capabilities rule.

11. A local content security system according to claim 8 , wherein each of said at least one feature descriptor includes at least one content access map.

12. A local content security system according to claim 6 , wherein said local content security system further includes a feature descriptor storage.

13. A local content security system according to claim 8 , wherein:

(a) said encrypted broadcast content is a plurality of encrypted broadcast content;

(b) at least one of said plurality of encrypted broadcast content has an identifier; and

(c) at least one feature descriptor is associated by said identifier to at least one of said plurality of encrypted broadcast content.

14. A local content security system according to claim 6 , wherein said local content security system enables and disables system features according to said feature descriptor.

15. A method for providing local content security including the steps of:

(a) receiving encrypted broadcast content from a broadcast medium, said encrypted broadcast content encrypted using a broadcast encryption key;

(b) generating decrypted content by decrypting said encrypted broadcast content, using a broadcast decryption key;

(c) generating at least one local key, said local key including:

(i) a local encryption key;

(ii) a local decryption key;

(d) generating re-encrypted content by re-encrypting said decrypted content using at least one of said local encryption keys;

(e) associating at least one of said local key sets with said re-encrypted content;

(f) dispatching said local decryption key to a trusted device;

(g) dispatching said local re-encrypted content to said trusted device; and

(h) generating processed content in said trusted device by decrypting said local re-encrypted content using said local decryption key; and

(i) applying a local watermark to said decrypted broadcast content.

16. A method for providing local content security including the steps of:

(a) receiving encrypted broadcast content from a broadcast medium, said encrypted broadcast content encrypted using a broadcast encryption key;

(b) generating decrypted content by decrypting said encrypted broadcast content, using a broadcast decryption key;

(c) generating at least one local key, said local key including:

(i) a local encryption key;

(ii) a local decryption key;

(d) generating re-encrypted content by re-encrypting said decrypted content using at least one of said local encryption keys;

(e) associating at least one of said local key sets with said re-encrypted content;

(f) dispatching said local decryption key to a trusted device;

(g) dispatching said local re-encrypted content to said trusted device; and

(h) generating processed content in said trusted device by decrypting said local re-encrypted content using said local decryption key; and

(i) applying a local watermark to said re-encrypted content.

17. A method for providing local content security including the steps of:

(a) receiving encrypted broadcast content from a broadcast medium, said encrypted broadcast content encrypted using a broadcast encryption key;

(b) generating decrypted content by decrypting said encrypted broadcast content, using a broadcast decryption key;

(c) generating at least one local key, said local key including:

(i) a local encryption key;

(ii) a local decryption key;

(d) generating re-encrypted content by re-encrypting said decrypted content using at least one of said local encryption keys;

(e) associating at least one of said local key sets with said re-encrypted content;

(f) dispatching said local decryption key to a trusted device;

(g) dispatching said local re-encrypted content to said trusted device; and

(h) generating processed content in said trusted device by decrypting said local re-encrypted content using said local decryption key; and

(i) applying a watermark to said processed content.

18. A method for providing local content security including the steps of:

(a) receiving encrypted broadcast content from a broadcast medium, said encrypted broadcast content encrypted using a broadcast encryption key;

(b) generating decrypted content by decrypting said encrypted broadcast content, using a broadcast decryption key;

(c) generating at least one local key, said local key including:

(i) a local encryption key;

(ii) a local decryption key;

(d) generating re-encrypted content by re-encrypting said decrypted content using at least one of said local encryption keys;

(e) associating at least one of said local key sets with said re-encrypted content;

(f) dispatching said local decryption key to a trusted device;

(g) dispatching said local re-encrypted content to said trusted device; and

(h) generating processed content in said trusted device by decrypting said local re-encrypted content using said local decryption key; and

(i) communicating with a remote application through a back channel.

19. A method according to claim 18 , further including the step of receiving at least one feature descriptor.

20. A method according to claim 18 , further including the step of associating said broadcast content with said feature descriptor using an identifier.

21. A method according to claim 18 , further including the step of associating said local content security system with said feature descriptor using an identifier.

22. A method according to claim 19 , wherein at least one of said feature descriptor includes at least one permission rule.

23. A method according to claim 19 , wherein at least one of said feature descriptor includes at least one capabilities rule.

24. A method according to claim 19 , wherein at least one of said feature descriptor includes at least one content access map.

25. A method according to claim 19 , further including the step of-enabling and disabling system capabilities according to said feature descriptor.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 21, 2010
From: CINEA, INC.
To: DOLBY LABORATORIES LICENSING CORPORATION
Reel/Frame 025017/0399 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 28, 2007
From: EYE, RANDAL; SINER, THOMAS; SEGAL, JEFFREY; GOLDSCHLAG, DAVID MOSHE; SCHUMANN, ROBERT WILHELM
To: CINEA, INC.
Reel/Frame 019757/0845 →
Continuity (1)
Provisional Application 6037798500 · May 7, 2002