Systems and methods for securing cryptographic data using timestamps

Patent metadata

Field	Value
Publication number	US-8938625-B2
Application number	US-201213436930-A
Country	US
Kind code	B2
Filing date	Mar 31, 2012
Priority date	Jun 29, 2011
Publication date	Jan 20, 2015
Grant date	Jan 20, 2015

Abstract

Systems and methods for authenticating playback devices using timestamp validation in accordance with embodiments of the invention are disclosed. One embodiment includes securely storing at least one timestamp in memory within a playback device in response to the occurrence of at least one predetermined event, where a stored timestamp is based on the current time of a system clock when an event occurs, generating a cryptographic key using the at least one timestamp, securing cryptographic data using the cryptographic key, receiving a request to playback encrypted content, where the encrypted content is accessible using the cryptographic data, accessing the at least one timestamp, generating the cryptographic key, accessing the cryptographic data using at least the cryptographic key, and playing back the content using the playback device.

First claim

What is claimed is:

1. A method of securing cryptographic data used to playback encrypted content on a playback device, the method comprising:
securely storing at least one timestamp in memory within a playback device in response to the occurrence of at least one predetermined event, where a stored timestamp is based on the current time of a system clock within the playback device when a predetermined event occurs, where the at least one timestamp is secured using at least a product key derived from product provisioning characteristics, and where the predetermined event arises from a playback event of a specific piece of content by the playback device;
generating a cryptographic key using information including the at least one time stamp;
securing cryptographic data used to playback encrypted content on the playback device using the cryptographic key;
receiving a request to playback encrypted content via a user interface on the playback device, where the encrypted content is accessible using the cryptographic data securely stored in the memory of the playback device;
accessing the at least one timestamp securely stored in memory using the playback device;
deleting the cryptographic data from memory, when the system clock is invalid;
generating the cryptographic key using information including the at least one retrieved time stamp;
decrypting the cryptographic data using at least the cryptographic key generated using information including the at least one retrieved timestamp;
decrypting at least a portion of the encrypted content using the cryptographic data;
and
playing back the content using the playback device.

2. The method of claim 1 , wherein the cryptographic data is further secured using device match data.

3. The method of claim 1 , further comprising validating the system clock of the playback device using the at least one timestamp.

4. A playback device, comprising:
a processor;
memory containing a client application; and
a system clock;
wherein the processor is configured by the client application to:
securely store at least one timestamp in memory in response to the occurrence of a predetermined event, where a stored timestamp is based on the current time of a system clock when the predetermined event occurred, where the at least one timestamp is secured using at least a product key derived from product provisioning characteristics, and where the predetermined event arises from a playback event of a specific piece of content by the playback device;
generate a cryptographic key using information including the at least one time stamp;
secure cryptographic data used to play back encrypted content on the playback device using the cryptographic key;
receive a request to playback encrypted content via a user interface, where the encrypted content is accessible using the cryptographic data securely stored in the memory of the playback device;
delete the cryptographic data from memory, when the system clock is invalid;
regenerate the cryptographic key;
decrypt the cryptographic data using at least the cryptographic key;
decrypt at least a portion of the encrypted content using the cryptographic data;
and play back the content.

5. The playback device of claim 4 , wherein the client application configures the processor to regenerate the cryptographic key by configuring the processor to:
access the at least one timestamp securely stored in memory; and
generate the cryptographic key using information including the at least one retrieved timestamp.

6. The playback device of claim 4 , wherein the cryptographic data is further secured using device match data.

7. The playback device of claim 6 , wherein the client application further configures the processor to retrieve device match data and generate a device protection key that can be used in the generation and regeneration of the cryptographic key.

8. The playback device of claim 4 , wherein:
the requested to playback encrypted content refers to a piece of content that is subject to a time-limiting rule; and
the client application further configures the processor to determine whether the current time of the system clock of the playback device is consistent with the time-limiting rule associated with the piece of content.

9. The playback device of claim 8 , wherein the client application further configures the processor to validate the system clock of the playback device using the at least one timestamp stored in the memory of the playback device.

10. The playback device of claim 9 , wherein the at least one timestamp includes a last program run timestamp indicating the last time the client application was run and the client application configures the processor to validate the system clock based upon the last program run timestamp.

11. The playback device of claim 9 , wherein the at least one timestamp includes a last file played timestamp indicating the last time the client application played a file on the device and the client application configures the processor to validate the system clock based upon the last file played timestamp.

12. The playback device of claim 9 , wherein the at least one timestamp includes a last server connection timestamp indicating the last time the device connected to a server and the client application configures the processor to validate the system clock based upon the last server connection timestamp.

13. A non-transitory machine readable medium containing processor instructions, where execution of the instructions by a processor causes the processor to perform a process comprising:
securely storing at least one timestamp in memory within a playback device in response to the occurrence of at least one predetermined event, where a stored timestamp is based on the current time of a system clock within the playback device when a predetermined event occurs generating a cryptographic key using information including the at least one timestamp, where the at least one timestamp is secured using at least a product key derived from product provisioning characteristics, and where the predetermined event arises from a playback event of a specific piece of content by the playback device;
securing cryptographic data used to playback encrypted content on the playback device using the cryptographic key;
receiving a request to playback encrypted content via a user interface on the playback device, where the encrypted content is accessible using the cryptographic data securely stored in the memory of the playback device;
accessing the at least one timestamp securely stored in memory using the playback device;
deleting the cryptographic data from memory, when the system clock is invalid;
generating the cryptographic key using information including the at least one retrieved timestamp, when the system clock is valid;
decrypting the cryptographic data using at least the cryptographic key generated using information including the at least one retrieved timestamp;
decrypting at least a portion of the encrypted content using the cryptographic data; and
playing back the content using the playback device.

Assignees

• Grab Eric William
• Chan Francis Yee-Dug
• Kiefer Michael George
• Sonic Ip Inc

Inventors

• Grab Eric William
• Chan Francis Yee-Dug
• Kiefer Michael George

Classifications

• H04L2463/121

  Timestamp · CPC title

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title