Secure and efficient content screening in a networked environment

Patent metadata

Field	Value
Publication number	US-9607131-B2
Application number	US-201113080605-A
Country	US
Kind code	B2
Filing date	Apr 5, 2011
Priority date	Sep 16, 2010
Publication date	Mar 28, 2017
Grant date	Mar 28, 2017

Abstract

Methods, devices, and computer program products facilitate the application of a content use policy based on watermarks that are embedded in a content. Watermark extraction and content screening operations, which can include the application of content usage enforcement actions, may be organized such that some or all of the operations can be conducted at different times by different devices. These operations can be conducted by one or more trusted devices that reside in a networked environment. The authenticity of various devices can be verified through the exchange of certificates that can further enable such devices to ascertain capabilities of one another. Based on the ascertained capabilities, an operational configuration for conducting watermark extraction and content screening can be determined.

First claim

What is claimed is:

1. A method, comprising:
receiving a device authentication certificate at a first device from a second device;
verifying an authenticity of the certificate;
ascertaining capabilities of the second device; and
based on at least the ascertained capabilities of the second device, determining by the first device an operational configuration among one or more of the first device, the second device, a trusted delegated device and a trusted slave device for conducting watermark extraction and content screening operations associated with a content, the operational configuration providing an allocation of resources needed to perform the watermark extraction and content screening operations and for fulfillment of a content use policy associated with an extracted watermark payload.

2. The method of claim 1 , wherein the certificate comprises information indicative of at least a portion of the capabilities of the second device.

3. The method of claim 2 , wherein
the certificate is a digital transmission content protection over Internet protocol (DTCP-IP) certificate; and
information regarding the capabilities of the second device is carried as part of the DCTP-IP certificate.

4. The method of claim 1 , wherein at least a portion of the capabilities of the second device is ascertained from a source other than the certificate.

5. The method of claim 4 , wherein the at least a portion of the capabilities of the second device is received through an additional communication with the second device.

6. The method of claim 1 , wherein the ascertained capabilities of the second device comprises a capability to conduct some or all of the watermark extraction and content screening operations.

7. The method of claim 6 , wherein the operational configuration designates the second device to perform at least one of the watermark extraction and content screening operations.

8. The method of claim 1 , wherein the ascertained capabilities of the second device comprises a capability to grant computational and memory resources to other devices.

9. The method of claim 1 , further comprising:
receiving a device authentication certificate at the second device from the first device;
verifying an authenticity of the certificate received from the first device; and
ascertaining capabilities of the first device by the second device.

10. The method of claim 9 , wherein the certificate received from the first device comprises information indicative of at least a portion of the capabilities of the first device.

11. The method of claim 10 , wherein
the certificate received from the first device is a digital transmission content protection over Internet protocol (DTCP-IP) certificate; and
information regarding the capabilities of the first device is carried as part of the DCTP-IP certificate.

12. The method of claim 9 , wherein at least a portion of the capabilities of the first device is ascertained from a source other than the certificate.

13. The method of claim 12 , wherein the at least a portion of the capabilities of the first device is received through an additional communication with the first device.

14. The method of claim 9 , wherein the ascertained capabilities of the first device comprises a capability to conduct some or all of the watermark extraction and/or content screening operations.

15. The method of claim 9 , wherein the ascertained capabilities of the first device comprises a capability to grant computational and memory resources to other devices.

16. The method of claim 9 , wherein the operational configuration designates the first device to perform at least one of the watermark extraction and content screening operations.

17. The method of claim 9 , wherein the operational configuration designates the first and the second devices to collaboratively perform the watermark extraction and content screening operation.

18. The method of claim 1 , wherein the operational configuration designates at least one of the first and the second devices to conduct the watermark extraction and content screening operations in accordance with a factor selected from the group consisting of:
availability of computational resources;
availability of watermark extraction and screening capabilities;
an integration complexity for a device manufacturer;
a consumer experience;
a processing performance; and
an overall preference ranking.

19. The method of claim 1 , wherein at least one of the first and second devices is configured to operate in a home network.

20. A device, comprising:
a processor; and
a memory, including processor executable code, the processor executable code when executed by the processor configures the device to:
receive a device authentication certificate from a second device;
verify an authenticity of the certificate;
ascertain capabilities of the second device; and
based on at least the ascertained capabilities of the second device, determine an operational configuration among one or more of the device, the second device, a trusted delegated device and a trusted slave device for conducting watermark extraction and content screening operations associated with a content, the operational configuration providing an allocation of resources needed to perform the watermark extraction and content screening operations and for fulfillment of a content use policy associated with an extracted watermark payload.

21. The device of claim 20 , wherein the certificate comprises information indicative of at least a portion of the capabilities of the second device.

22. The device of claim 21 , wherein
the certificate is a digital transmission content protection over Internet protocol (DTCP-IP) certificate; and
information regarding the capabilities of the second device is carried as part of the DCTP-IP certificate.

23. The device of claim 20 , wherein at least a portion of the capabilities of the second device is ascertained from a source other than the certificate.

24. The device of claim 23 , wherein the at least a portion of the capabilities of the second device is received through an additional communication with the second device.

25. The device of claim 20 , wherein the ascertained capabilities of the second device comprises a capability to conduct some or all of the watermark extraction and content screening operations.

26. The device of claim 25 , wherein the operational configuration designates the second device to perform at least one of the watermark extraction and content screening operations.

27. The device of claim 20 , wherein the ascertained capabilities of the second device comprises a capability to grant computational and memory resources to other devices.

28. The device of claim 20 , wherein the processor executable code when executed by the processor further configures the device to:
transmit a device authentication certificate to the second device, wherein the second device can ascertain capabilities of the device from the device authentication certificate.

29. The device of claim 28 , wherein the certificate transmitted by the device comprises information indicative of at least a portion of the capabilities of the device.

30. The device of claim 29 , wherein
the certificate transmitted by the device is a digital transmission content protection over Internet protocol (DTCP-IP) certifi

Assignees

• Winograd Joseph M
• Petrovic Rade
• Zhao Jian
• Verance Corp

Inventors

• Winograd Joseph M
• Petrovic Rade
• Zhao Jian

Classifications

• G06F2221/0737

  Physics · mapped topic

• G06F21/445 Primary

  by mutual authentication, e.g. between devices or programs · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/321

  involving a third party or a trusted authority · CPC title

• G06F2221/0733

  Physics · mapped topic