System and method for content protection in a graphics or video subsystem

Patent metadata

Field	Value
Publication number	US-10915608-B2
Application number	US-201816126060-A
Country	US
Kind code	B2
Filing date	Sep 10, 2018
Priority date	Sep 10, 2018
Publication date	Feb 9, 2021
Grant date	Feb 9, 2021

Abstract

Apparatus and method for scalable content protection. For example, one embodiment of an apparatus comprises: cryptographic management circuitry to securely store one or more keys associated with one or more media apps/applications; a plurality of processing engines, each processing engine comprising circuitry to process media content of the one or more media apps/applications; and a scheduler to schedule processing of the media content by the processing engines; wherein the cryptographic management circuitry is to restore a first cryptographic state including a first key associated with a first media app/application and/or first media content responsive to a request to process the first media content on a first processing engine.

First claim

What is claimed is:

1. An apparatus comprising:
cryptographic management circuitry to securely store one or more keys associated with one or more media apps/applications;
a plurality of processing engines, each processing engine comprising circuitry to process media content of the one or more media apps/applications; and
a scheduler to dynamically schedule processing of the media content by the processing engines;
wherein the cryptographic management circuitry is to restore a first cryptographic state including a first key associated with a first media app/application and/or first media content responsive to a request to process the first media content on a first processing engine; and
wherein the first media app/application is to obtain a key slot from the scheduler, the key slot comprising a unique value associated with the app/application and is to store the first cryptographic state.

2. The apparatus of claim 1 wherein the first processing engine is to identify the first media app/application and/or the first media content to the cryptographic management circuitry using a first identifier associated with the first media app/application and/or first media content.

3. The apparatus of claim 1 further comprising:
a security processor to securely provide the first key to the cryptographic management circuitry responsive to execution of the first media app/application.

4. The apparatus of claim 1 wherein the processing engine is to provide the unique value to the cryptographic management circuitry to cause the cryptographic management circuitry to restore the first cryptographic state including the first key.

5. The apparatus of claim 4 wherein the first processing engine comprises video decode circuitry and the first media content comprises video content protected using Digital Rights Management (DRM) and wherein the first key comprises a DRM key.

6. The apparatus of claim 5 wherein the cryptographic state further comprises counter metadata associated with DRM decryption operations performed by the first processing engine.

7. The apparatus of claim 4 wherein the cryptographic state specifies a level of protection that each media content requires.

8. The apparatus of claim 4 wherein a second cryptographic state is reached after the first processing engine processing at least a portion of the first media content, the first processing engine to provide the second cryptographic state to the cryptographic management circuitry.

9. The apparatus of claim 8 wherein the cryptographic management circuitry is to save the second cryptographic state to a memory after the first processing engine has completed processing.

10. A method comprising:
securely storing one or more keys associated with media content to be processed by one or more media apps/applications;
dynamically scheduling processing of the media content on a plurality of processing engines;
requesting by a first processing engine restoration of a cryptographic state associated with a first media content and/or a first media app/application;
obtaining by the first media app/application a key slot comprising a unique value associated with the first media app/application;
providing by cryptographic management circuitry a first cryptographic state including a first key associated with the first media content and/or the first media app/application; and
storing the first cryptographical state in the key slot.

11. The method of claim 10 wherein the first processing engine is to identify the first media app/application and/or the first media content to the cryptographic management circuitry using a first identifier associated with the first media app/application and/or first media content.

12. The method of claim 10 further comprising:
securely providing the first key by a security processor to the cryptographic management circuitry responsive to execution of the first media app/application.

13. The method of claim 12 wherein the processing engine is to provide the unique value to the cryptographic management circuitry to cause the cryptographic management circuitry to restore the first cryptographic state including the first key.

14. The method of claim 13 wherein the first processing engine comprises video decode circuitry and the first media content comprises video content protected using Digital Rights Management (DRM) and wherein the first key comprises a DRM key.

15. The method of claim 14 wherein the cryptographic state further comprises counter metadata associated with DRM decryption operations performed by the first processing engine.

16. The method of claim 14 wherein the cryptographic state specifies a level of protection that each media content requires.

17. The method of claim 13 wherein a second cryptographic state is reached after the first processing engine processing at least a portion of the first media content, the first processing engine to provide the second cryptographic state to the cryptographic management circuitry.

18. The method of claim 17 wherein the cryptographic management circuitry is to save the second cryptographic state to a memory after the first processing engine has completed processing.

19. A non-transitory machine-readable medium having program code stored thereon which, when executed by a machine, causes the machine to perform operations of:
securely storing one or more keys associated with media content to be processed by one or more media apps/applications;
dynamically scheduling processing of the media content on a plurality of processing engines;
requesting by a first processing engine restoration of a cryptographic state associated with first media content and/or a first media app/application;
obtaining by the first media app/application a key slot comprising a unique value associated with the first media app/application;
providing by cryptographic management circuitry a first cryptographic state including a first key associated with the first media content and/or the first media app/application; and
storing the first cryptographical state in the key slot.

20. The non-transitory machine-readable medium of claim 19 wherein the first processing engine is to identify the first media app/application and/or the first media content to the cryptographic management circuitry using a first identifier associated with the first media app/application and/or first media content.

21. The non-transitory machine-readable medium of claim 19 further comprising program code to cause the machine to perform the operations of:
securely providing the first key by a security processor to the cryptographic management circuitry responsive to execution of the first media app/application.

22. The non-transitory machine-readable medium of claim 21 wherein the processing engine is to provide the unique value to the cryptographic management circuitry to cause the cryptographic management circuitry to restore the first cryptographic state including the first key.

23. The non-transitory machine-readable medium of claim 22 wherein the first processing engine comprises video decode circuitry and the first media content comprises video content protected using Digital Rights Management (DRM) and wherein the first key comprises a DRM key.

24. The non-transitory machine-readable medium of claim 23 wherein the cryptographic state further comprises counter metadata associated with DRM decryption operations performed by the first processing engine.

Assignees

• Intel Corp

Inventors

• Vembu Balaji
• Krishnan Vidhya
• Sodhi Sandeep
• Mavila Sreekanth
• Koker Altug
• Navale Aditya
• Janus Scott
• Wang Changliang

Classifications

• G06F21/12 Primary

  Protecting executable software · CPC title

• H04L2209/603

  Digital right managament [DRM] · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• G06F9/4881

  Scheduling strategies for dispatcher, e.g. round robin, multi-level priority queues · CPC title

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title