System and method for protecting content
A method for protecting content, comprising receiving, from a client device, a request for an encryption key for encrypting the content comprising a reference associated with the client device, identifying a set of supported security capabilities corresponding to the reference associated with the client device, identifying a set of required security capabilities corresponding to the content associated with the key request, determining if the set of supported security capabilities satisfy the set of required security capabilities, and in response to determining that the supported security capabilities satisfy the set of required security capabilities, transmitting the encryption key to the client device.
1. A method for protecting content, comprising:
receiving, from a client device, a request for an encryption key for encrypting the content comprising a reference associated with the client device, the reference comprising an unspoofable session key identification associated with the particular client device;
using the session key identification to identify a set of supported security capabilities corresponding to the client device from a database;
identifying a set of required security capabilities corresponding to the content associated with the request for the encryption key;
determining if the set of supported security capabilities satisfy the set of required security capabilities; and
in response to determining that the supported security capabilities satisfy the set of required security capabilities, transmitting the encryption key to the client device.
2. The method according to claim 1 , further comprising, in response to determining that the supported security capabilities do not satisfy the set of required security capabilities, withholding the encryption key from the client device.
3. The method according to claim 1 , wherein the client device comprises an asset decryptor.
4. The method according to claim 1 , wherein determining if the set of supported security capabilities satisfy the set of required security capabilities comprises determining if the set of supported security capabilities includes at least the set of required security capabilities.
5. The method according to claim 4 , wherein determining if the set of supported security capabilities satisfy the set of required security capabilities comprises determining if the set of supported security capabilities exactly matches the set of required security capabilities.
6. The method according to claim 1 , wherein the content comprises media content comprising at least one of audio content and video content.
7. The method according to claim 6 , wherein the content further comprises a media manifest used by a playing device for retrieving and decrypting the media content to be played on the playing device.
8. The method according to claim 6 , wherein the encryption key comprises a media encryption key.
9. The method according to claim 1 , wherein the set of supported security capabilities are configured to be ordered by increasing security capabilities listed in the set of required security capabilities.
10. The method according to claim 9 , wherein the determining if the set of supported security capabilities satisfy the set of required security capabilities comprises determining if the set of supported security capabilities are equal or greater to the required security capabilities.
11. A digital rights management system comprising:
a processor configured to receive an encryption key request from a client device, the request comprising an unspoofable session key identification of the particular client device;
the processor configured to transmit the encryption key to the client device;
a first database for storing a set of supported security capabilities corresponding to client device;
a second database for storing a set of required security capabilities corresponding to at least one of the encryption key and content associated with the encryption key; and
the processor configured to:
use the session key identification to locate in the first database the set of supported security capabilities corresponding to the client device;
locate, in the second database, the set of required security capabilities corresponding to the content associated with the encryption key;
determine if the set of supported security capabilities satisfy the set of required security capabilities; and
in response to determining that the supported security capabilities satisfy the set of required security capabilities, transmit the encryption key to the client device.
12. The digital rights management system according to claim 11 , wherein the processor is further configured to, in response to determining that the supported security capabilities do not satisfy the set of required security capabilities, withhold the encryption key from the client device.
13. The digital rights management system according to claim 11 , wherein the processor being configured to determine if the set of supported security capabilities satisfy the set of required security capabilities comprises the processor being configured to determine if the set of supported security capabilities exactly matches the set of required security capabilities.
14. The digital rights management system according to claim 11 , wherein the processor being configured to determine if the set of supported security capabilities satisfy the set of required security capabilities comprises the processor being configured to determine if the set of supported security capabilities includes at least the set of required security capabilities.
15. The digital rights management system according to claim 11 , wherein the content comprises media content comprising at least one of audio content and video content.
16. The digital rights management system according to claim 15 , wherein the content further comprises a media manifest used to decrypt the media content to be played on the client device.
17. The digital rights management system according to claim 15 , wherein the encryption key comprises a media encryption key.
18. The digital rights management system according to claim 11 , further comprising a server.
19. The digital rights management system according to claim 18 , wherein at least one of the set of supported security capabilities and the set of required security capabilities is configured in the server.
20. The digital rights management system according to claim 19 , wherein the set of supported security capabilities being configured in the server comprises an administrator specifying which required security capabilities are associated with particular content, and wherein the set of required security capabilities being configured in the server comprises the administrator which supported security capabilities are associated with a particular client device.