Architecture, system and method for creating and employing trusted virtual appliances

Patent metadata

Field	Value
Publication number	US-10228965-B2
Application number	US-201715595425-A
Country	US
Kind code	B2
Filing date	May 15, 2017
Priority date	May 15, 2017
Publication date	Mar 12, 2019
Grant date	Mar 12, 2019

Abstract

A system and method to automatically provision a trusted virtual appliance (VA) (which may include one or more virtual machines (VM)) for installation onto a consumer-owned acceptable device (COAD) where the system and method may create a provision the VA for the COAD without human interaction and a COAD may install a received trusted VA without human interaction, and the VM of a VA may operate independently of other applications on the COAD other than a VM supervisory program such as a hypervisor.

First claim

What is claimed is:

1. A secure content system for communicating secure content to consumer owned systems via a network, the system having a secure multi-media processing system (SMPS), comprising:
a secure server comprising hardware memory, the secure server storing a plurality of virtual machines, each virtual machine including unique identity information and logic to enable secure communication within the secure content system and further comprising a central processing unit forwarding via a network the provisioned virtual machine to the consumer owned system for independent execution by a receiving media device (MD); and
a virtual machine generation module implemented in hardware for provisioning one of the plurality of virtual machines for a consumer owned system.

2. The secure content system of claim 1 , wherein the virtual machine generation module provisions one of the plurality of virtual machines for a consumer owned system without human intervention.

3. The secure content system of claim 1 , wherein the virtual machine generation module provisions one of the plurality of virtual machines for a consumer owned system with secured credentials.

4. The secure content system of claim 3 , wherein the secured credentials are related to the consumer owned system.

5. The secure content system of claim 2 , wherein the virtual machine generation module provisions one of the plurality of virtual machines for a consumer owned system upon receipt of a communication from a consumer owned system.

6. The secure content system of claim 5 , further comprising a security module, the security module determining the owner of the consumer owned system.

7. The secure content system of claim 6 , wherein the secured credentials are related to the consumer owned system and the determined owner.

8. The secure content system of claim 6 , wherein the security module determines whether the owner has a second consumer owned system provisioned by the secure content system.

9. The secure content system of claim 1 , wherein at least one of the plurality of virtual machines includes logic to enable secure communication with a commonly owned consumer owned system and the virtual machine generation module provisions the at least one virtual machine for a consumer owned system when the owner has a second consumer owned system provisioned by the secure content system.

10. The secure content system of claim 9 , wherein the at least one of the plurality of virtual machines secure communication logic conforms to the Digital Transmission Content Protection protocol.

11. A method of securely communicating content between a secure content system and consumer owned systems via a network, comprising:
storing a plurality of virtual machines, each virtual machine including unique identity information and logic to enable secure communication with the secure content system;
provisioning one of the plurality of virtual machines for a consumer owned system; and
forwarding via a network the provisioned virtual machine to the consumer owned system for independent execution by a receiving media device (MD).

12. The method of securely communicating content between a secure content system and consumer owned systems via a network of claim 11 , including provisioning one of the plurality of virtual machines for a consumer owned system without human intervention.

13. The method of securely communicating content between a secure content system and consumer owned systems via a network of claim 11 , including provisioning one of the plurality of virtual machines for a consumer owned system with secured credentials.

14. The method of securely communicating content between a secure content system and consumer owned systems via a network of claim 13 , wherein the secured credentials are related to the consumer owned system.

15. The method of securely communicating content between a secure content system and consumer owned systems via a network of claim 12 , including provisioning one of the plurality of virtual machines for a consumer owned system upon receipt of a communication from a consumer owned system.

16. The method of securely communicating content between a secure content system and consumer owned systems via a network of claim 15 , further comprising determining the owner of the consumer owned system.

17. The method of securely communicating content between a secure content system and consumer owned systems via a network of claim 16 , wherein the secured credentials are related to the consumer owned system and the determined owner.

18. The method of securely communicating content between a secure content system and consumer owned systems via a network of claim 16 , further comprising determining whether the owner has a second consumer owned system provisioned by the secure content system.

19. The method of securely communicating content between a secure content system and consumer owned systems via a network of claim 11 , wherein at least one of the plurality of virtual machines includes logic to enable secure communication with a commonly owned consumer owned system and including provisioning the at least one virtual machine for a consumer owned system when the owner has a second consumer owned system provisioned by the secure content system.

20. The method of securely communicating content between a secure content system and consumer owned systems via a network of claim 19 , wherein the least one of the plurality of virtual machines secure communication logic conforms to the Digital Transmission Content Protection protocol.

Assignees

• Synopsys Inc

Inventors

• Borza Michael

Classifications

• H04L12/2818

  from a device located outside both the home and the home network (access arrangements H04L12/2856; for remote control or remote monitoring of applications H04L67/025; arrangements for transmitting signals characterised by the use of a wireless eletrical link G08C17/00; telephonic communication systems adapted for combination with remote control systems H04M11/007) · CPC title

• H04L12/2814

  Exchanging control software or macros for controlling appliance services in a home automation network (arrangements for maintenance or administration involving configuration of the network and network elements H04L41/08) · CPC title

• G06F21/33

  using certificates · CPC title

• G06F9/45558 Primary

  Hypervisor-specific management and integration aspects · CPC title

• H04L2012/2849

  Audio/video appliances · CPC title