Efficient key hierarchy for delivery of multimedia content

Patent metadata

Field	Value
Publication number	US-9565171-B2
Application number	US-201213466039-A
Country	US
Kind code	B2
Filing date	May 7, 2012
Priority date	Sep 1, 2005
Publication date	Feb 7, 2017
Grant date	Feb 7, 2017

Abstract

A Digital Rights Management (DRM) system provides a lightweight layering of encryption and decryption of keys that allows efficient use of different cryptographic techniques to effect the secure delivery of multimedia content. Asymmetric cryptography, where a public key is used to encrypt information that can only be decrypted by a matched private key, is used by the DRM system to deliver symmetric keys securely.

First claim

What is claimed is:

1. An apparatus that facilitates data rights management of multimedia content, comprising:
means for generating, by a hardware processor, a public key and a private key;
means for communicating the public key to a subscription server with a request for a license file;
means for receiving the requested license file; and
means for decrypting a multimedia content based in part on header information contained in the license file, the header information including a User Identification and an Epoch Identification, wherein the Epoch Identification defines a time period for which the license file is valid.

2. The apparatus of claim 1 , further comprising means for storing a service key contained in the license file.

3. The apparatus of claim 1 , further comprising means for rendering a media on a display screen at substantially a same time as the multimedia content is decrypted.

4. A non-transitory computer-readable medium having stored thereon computer executable instructions for digital rights management, the instructions comprising:
generating an asymmetric key pair;
sending at least a first portion of the asymmetric key pair and a request for access to multimedia content to a server;
receiving a license file that includes symmetric keys relating to the multimedia content and header information including a User Identification and an Epoch Identification, wherein the Epoch Identification defines a time period for which the license file is valid; and
decrypting the multimedia content based in part on the header information contained in the license file.

5. The computer-readable medium of claim 4 , the instructions further comprising maintaining a second portion of the asymmetric key pair in a storage media.

6. The computer-readable medium of claim 4 , the first portion of the asymmetric key pair is a public key and the second portion of the asymmetric key pair is a private key.

7. A processor that executes computer-executable instructions from a non-transitory computer medium for key hierarchy for delivery of multimedia content, the instructions comprising:
generating a key pair that comprises a public key and a private key;
transmitting the public key to fetch a license file from a subscription server;
receiving license file information that includes header information and at least one symmetric key, the header information including a User Identification and an Epoch Identification, wherein the Epoch Identification defines a time period for which the license file is valid; and
decrypting a program based in part on the header information.

8. The processor of claim 7 , generating a key pair is associated with an activation process.

9. The processor of claim 7 , the public key is a Client Encryption key and the private key is a Client Decryption key.

10. The processor of claim 7 , further comprising storing a service key contained in the license file on a client.

11. The processor of claim 7 , decrypting the program is performed at substantially a same time as media is rendered on a display.

12. The processor of claim 7 , the license file comprises an encrypted session key and at least one service.

13. The apparatus of claim 1 , wherein the means for generating the public key and the private key is associated with an activation process.

14. The apparatus of claim 1 , wherein the public key is a Client Encryption key and the private key is a Client Decryption key.

15. The apparatus of claim 1 , wherein the license file comprises an encrypted session key and at least one service key.

16. The computer-readable medium of claim 4 , wherein generating an asymmetric key pair is associated with an activation process.

17. The computer-readable medium of claim 4 , wherein the instructions further comprise:
storing a service key contained in the license file on a client.

18. The computer-readable medium of claim 4 , wherein the license file comprises an encrypted session key and at least one service key.

19. The computer-readable medium of claim 6 , wherein the public key is a Client Encryption key and the private key is a Client Decryption key.

Assignees

• Wingert Christopher R
• Aggarwal Pooja
• Qualcomm Inc

Inventors

• Wingert Christopher R
• Aggarwal Pooja

Classifications

• G06F21/107

  License processing; Key processing · CPC title

• H04N21/4405 Primary

  involving video stream decryption · CPC title

• H04L2209/603

  Digital right managament [DRM] · CPC title

• H04N21/63775

  for uploading keys, e.g. for a client to communicate its public key to the server (key management H04L9/08; network support of key management H04L63/06) · CPC title

• H04N21/4627

  Rights management {associated to the content (security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08)} · CPC title