公开(公告)号：US20080270311A1

公开(公告)日：2008-10-30

申请号：US11843312

申请日：2007-08-22

申请人： Petr Peterka ,  Alexander Medvinsky ,  Paul Moroney

发明人： Petr Peterka ,  Alexander Medvinsky ,  Paul Moroney

IPC分类号： G06Q10/00

CPC分类号： G06F21/10 ,  G06Q10/06

摘要： A process composes a content license for a set of content. The content license has a static portion and a dynamic portion. Further, the process inserts a master key into the static portion. In addition, the process inserts a plurality of content rule sets of values into the dynamic portion and composes a unique content encryption key for each segment of content associated with one of the content rule sets of values as each of the content rule sets of values is sequentially received during recording of the content. The unique content encryption key is based on the master key and at least a subset of the content rule set of values for a corresponding segment of the content. The unique content encryption key is utilized for encryption of each segment of the content to generate a plurality of encrypted content segments for storage on the storage medium.

摘要翻译： 一个进程组成一组内容的内容许可证。 内容许可证具有静态部分和动态部分。 此外，该过程将主密钥插入静态部分。 此外，该过程将多个内容规则集值集合插入到动态部分中，并且对于与内容规则集值之一相关联的每个内容段，构成唯一内容加密密钥，因为每个内容规则集值是 在记录内容期间顺序地接收。 唯一内容加密密钥基于主密钥以及内容的相应段的内容规则集合的集合的至少一个子集。 独特的内容加密密钥用于加密内容的每个段，以生成用于存储在存储介质上的多个加密的内容段。

公开(公告)号：US20070162399A1

公开(公告)日：2007-07-12

申请号：US11316236

申请日：2005-12-22

申请人： Alexander Medvinsky ,  Joon Park ,  Petr Peterka

发明人： Alexander Medvinsky ,  Joon Park ,  Petr Peterka

IPC分类号： G06Q99/00

CPC分类号： H04L63/10 ,  G06F21/10 ,  H04L2463/101

摘要： The present invention discloses an apparatus and method for obtaining rights management data for broadcast or multicast content. In one embodiment, a broadcast trigger message is obtained from a broadcast source. At least one content license identifier from said broadcast trigger message is obtained. Afterwards, at least one content license file associated with said at least one content license identifier is requested. Notably, the broadcast trigger message is shared by all endpoint devices while the content license file is uniquely adapted for the requesting endpoint device.

摘要翻译： 本发明公开了一种用于获取广播或组播内容的权限管理数据的装置和方法。 在一个实施例中，从广播源获得广播触发消息。 获得来自所述广播触发消息的至少一个内容许可标识符。 之后，请求与所述至少一个内容许可标识符相关联的至少一个内容许可证文件。 值得注意的是，广播触发消息由所有端点设备共享，而内容许可证文件被唯一地适用于请求端点设备。

公开(公告)号：US20060242069A1

公开(公告)日：2006-10-26

申请号：US11321210

申请日：2005-12-29

申请人： Petr Peterka ,  Alexander Medvinsky

发明人： Petr Peterka ,  Alexander Medvinsky

IPC分类号： G06Q99/00

CPC分类号： G06Q20/00 ,  G06F21/10 ,  G06Q2220/00 ,  G06Q2220/10 ,  G06Q2220/18

摘要： The systems disclosed here provide a complete standards-based end-to-end scalable system for storage, delivery and in-home distribution of digital content over IP networks using standard protocols such as Real-time Transport Protocol (“RTP”) or IP-encapsulated MPEG-2 Transport Stream, or traditional MPEG-2 networks. Mechanisms are provided for receiving content from one security domain, re-encrypting that content uniquely for a receiving device, persistently storing that content, and playing back that content at a later time to and within another security domain. The systems also provide the ability to stream the persistently-stored content from the initial receiving device to another device that has been authenticated as part of a, e.g., home network. This allows a media server, e.g., a dual-tuner set-top box (“STB”) with hard drive, to deliver recorded content to any TV in the house by streaming to media clients such as STBs.

摘要翻译： 这里公开的系统提供了一种完整的基于标准的端对端可扩展系统，用于使用诸如实时传输协议（“RTP”）或IP-IP的标准协议通过IP网络存储，传送和在家内分发数字内容， 封装的MPEG-2传输流或传统的MPEG-2网络。 提供了用于从一个安全域接收内容的机制，对于接收设备唯一地重新加密该内容，持续存储该内容，以及在稍后时间再到该另一个安全域内的该内容。 这些系统还提供将持续存储的内容从初始接收设备流传送到已经被认证为例如家庭网络的一部分的另一设备的能力。 这允许诸如具有硬盘驱动器的双调谐器机顶盒（“STB”）的媒体服务器通过流向诸如STB的媒体客户端将记录的内容传送到房屋中的任何电视。

公开(公告)号：US20050071669A1

公开(公告)日：2005-03-31

申请号：US10933011

申请日：2004-09-02

申请人： Alexander Medvinsky ,  Petr Peterka ,  Jiang (Jason) Zhang

发明人： Alexander Medvinsky ,  Petr Peterka ,  Jiang (Jason) Zhang

IPC分类号： G06F21/00 ,  H04L9/00

CPC分类号： H04N21/43615 ,  G06F21/10 ,  H04N21/8355

摘要： A copyright protection method (150) and apparatus (190) employs (151) a first protection scheme (160) within a single authorized domain (195), in which all interfaces (194a-c) are protected with digital rights management system and employs (152) a second protection scheme (170) for use in inter-domain file transfers. The method (150) and apparatus (190) may employ (153) a third protection scheme (180) for external outputs (197a-c) not protected by a digital rights management system. The first protection scheme (160) includes specifying (161) whether a copy of files is allowed to be stored anywhere within the single authorized domain; specifying (162) whether files may be stored only on specific devices within the single authorized domain; or specifying (163) how many simultaneous rendering devices are permitted when rendering files. The second protection scheme (170) may include: specifying (171) if the files may be copied to other domains; and explicitly identifying (172) domains to which copies are allowed; specifying (173) if files may be moved to other domains, and optionally allowing movement of files to any other domain; specifying (174) a list of specific domains to which content may be copied, and preserving content rights during content transfer to another domain; or specifying (175) specific domains to which content may be moved, and preserving content rights during content transfer. The third protection scheme (180) may include: specifying (181) copy protection information separately for analog, digital uncompressed and digital compressed outputs; specifying (182) a CGMS Copy protection state; specifying (183) MACROVISION parameters for analog outputs; specifying (184) if a particular type of output is allowed at all; or disabling (185) the particular type of output if the particular output type is not allowed.

公开(公告)号：US20050071663A1

公开(公告)日：2005-03-31

申请号：US10672929

申请日：2003-09-26

申请人： Alexander Medvinsky ,  Petr Peterka ,  Jiang Zhang

发明人： Alexander Medvinsky ,  Petr Peterka ,  Jiang Zhang

IPC分类号： G06F21/00 ,  H04L9/00

CPC分类号： H04N21/43615 ,  G06F21/10 ,  H04N21/8355

摘要： Management of rights to content is provided within an authorized domain. In a single authorized domain, where a plurality of domain interfaces are protected using a common rights management system, a copy of particular content may be allowed to be provided on all devices or only on specific devices coupled to the domain via the interfaces. Copy protection information, for outputs to external devices not protected by the common rights management system, is also specified. Rules can be provided for specifying whether particular content may be copied or moved to another protected domain. A number of rendering devices permitted to render the content simultaneously may be specified. Content rules are provided for use in managing rights to content within an authorized domain. Such rules can be associated with content that is persistently stored by a consumer device, as well as with content that is only rendered by a consumer device.

摘要翻译： 在授权域内提供对内容权限的管理。 在单个授权域中，其中使用共同权限管理系统来保护多个域接口，可以允许在所有设备上或仅通过经由接口耦合到域的特定设备上提供特定内容的副本。 还规定了将保护信息复制到不受普通版权管理系统保护的外部设备的输出。 可以提供规则来指定特定内容是否可以被复制或移动到另一个受保护的域。 可以指定允许同时呈现内容的多个渲染设备。 提供内容规则用于管理授权域内的内容权限。 这样的规则可以与由消费者设备持久存储的内容以及仅由消费者设备呈现的内容相关联。

公开(公告)号：US08214630B2

公开(公告)日：2012-07-03

申请号：US12391488

申请日：2009-02-24

申请人： Petr Peterka ,  Alexander Medvinsky

发明人： Petr Peterka ,  Alexander Medvinsky

IPC分类号： G06F15/177 ,  G06F21/00 ,  G06F11/30 ,  H04L9/32

CPC分类号： G01R31/318555 ,  G01R31/31719

摘要： A method, device and system for controlling JTAG interface enablement within a communication device. The JTAG interface can be selectively enabled based on the receipt of an encrypted access token generated by an access token server. The access token server generates the access token in response to an end user providing appropriate device-specific information. The access token includes appropriate information that, upon appropriate authentication and decryption, can temporarily device bind the boot code image of the device in a manner that enables the JTAG interface. Alternatively, the access token includes appropriate information that instructs the general purpose processor to choose between JTAG interface enablement information and JTAG interface disablement information for use with the boot code image of the device. The access token can include expiration information that causes an enabled JTAG interface to revert back to its disabled status upon expiration of the access token.

摘要翻译： 一种用于控制通信设备内的JTAG接口使能的方法，设备和系统。 可以基于由访问令牌服务器生成的加密访问令牌的接收来选择性地启用JTAG接口。 访问令牌服务器响应于最终用户提供适当的设备特定信息来生成访问令牌。 访问令牌包括适当的信息，在适当的认证和解密之后，可以以启用JTAG接口的方式临时地将设备的引导代码映像绑定。 或者，访问令牌包括指示通用处理器在JTAG接口使能信息和JTAG接口禁用信息之间进行选择以与设备的启动代码映像一起使用的适当信息。 访问令牌可以包括使得启用的JTAG接口在访问令牌到期时恢复到其禁用状态的到期信息。

公开(公告)号：US07953668B2

公开(公告)日：2011-05-31

申请号：US11446668

申请日：2006-06-05

申请人： Jiang Zhang ,  Alexander Medvinsky ,  Petr Peterka

发明人： Jiang Zhang ,  Alexander Medvinsky ,  Petr Peterka

IPC分类号： G06F21/00

CPC分类号： G06Q10/00 ,  G06Q90/00

摘要： The present invention discloses an apparatus and method for reserving a set of requested rights. In one example, the digital rights data associated with digital content information is found in a remaining rights file using a license index. A portion of the digital rights data is subsequently reserved. A determination is made as to whether a content download associated with the digital content information is successful. If the content download is unsuccessful, then the reserved portion of the digital rights data is cancelled. Alternatively, if the content download is successful, then the remaining rights file is updated to reflect a use of the portion of the digital rights data.

摘要翻译： 本发明公开了一种用于保留一组请求权限的装置和方法。 在一个示例中，使用许可索引在剩余的权限文件中找到与数字内容信息相关联的数字版权数据。 数字版权数据的一部分随后被保留。 确定与数字内容信息相关联的内容下载是否成功。 如果内容下载不成功，则取消数字版权数据的保留部分。 或者，如果内容下载成功，则剩余的权利文件被更新以反映该部分数字版权数据的使用。

公开(公告)号：US07865723B2

公开(公告)日：2011-01-04

申请号：US11201675

申请日：2005-08-11

申请人： Petr Peterka ,  Alexander Medvinsky

发明人： Petr Peterka ,  Alexander Medvinsky

IPC分类号： H04L29/06

CPC分类号： H04L12/18

摘要： Method and apparatus providing program information to client devices for at least one multicast stream of digital content is described. In one embodiment, session description messages for the at least one multicast stream of digital content are generated. Each of the session description messages includes at least one content access parameter. The at least one content access parameter may include digital rights management (DRM) data, channel key identification data associated with the at least one channel of the at least one multicast stream of digital content, and/or data indicative of whether each session description message is associated with a channel, a program, or a program segment. Each of the session description messages is signed using a cryptographic key. The session description messages are then multicasted to the client devices using a predefined multicast address.

摘要翻译： 描述了向数字内容的至少一个多播流向客户设备提供节目信息的方法和装置。 在一个实施例中，生成数字内容的至少一个多播流的会话描述消息。 每个会话描述消息包括至少一个内容访问参数。 至少一个内容访问参数可以包括数字版权管理（DRM）数据，与数字内容的至少一个多播流的至少一个信道相关联的信道密钥标识数据，和/或指示每个会话描述消息 与频道，节目或节目片段相关联。 每个会话描述消息都使用加密密钥进行签名。 然后使用预定义的多播地址将会话描述消息多播到客户端设备。

公开(公告)号：US20070282751A1

公开(公告)日：2007-12-06

申请号：US11446668

申请日：2006-06-05

申请人： Jiang Zhang ,  Alexander Medvinsky ,  Petr Peterka

发明人： Jiang Zhang ,  Alexander Medvinsky ,  Petr Peterka

IPC分类号： G06Q99/00

CPC分类号： G06Q10/00 ,  G06Q90/00

摘要： The present invention discloses an apparatus and method for reserving a set of requested rights. In one example, the digital rights data associated with digital content information is found in a remaining rights file using a license index. A portion of the digital rights data is subsequently reserved. A determination is made as to whether a content download associated with the digital content information is successful. If the content download is unsuccessful, then the reserved portion of the digital rights data is cancelled. Alternatively, if the content download is successful, then the remaining rights file is updated to reflect a use of the portion of the digital rights data.

摘要翻译： 本发明公开了一种用于保留一组请求权限的装置和方法。 在一个示例中，使用许可索引在剩余的权限文件中找到与数字内容信息相关联的数字版权数据。 数字版权数据的一部分随后被保留。 确定与数字内容信息相关联的内容下载是否成功。 如果内容下载不成功，则取消数字版权数据的保留部分。 或者，如果内容下载成功，则剩余的权利文件被更新以反映该部分数字版权数据的使用。

公开(公告)号：US20060059342A1

公开(公告)日：2006-03-16

申请号：US11228180

申请日：2005-09-16

申请人： Alexander Medvinsky ,  Paul Moroney ,  Eric Sprunk ,  Petr Peterka

发明人： Alexander Medvinsky ,  Paul Moroney ,  Eric Sprunk ,  Petr Peterka

IPC分类号： H04L9/00

CPC分类号： H04L9/0825 ,  G11B20/0021 ,  G11B20/00731 ,  H04L9/0822 ,  H04L9/083 ,  H04L2209/603 ,  H04N21/26606 ,  H04N21/26613 ,  H04N21/4181 ,  H04N21/63345 ,  H04N21/8355

摘要： Described herein are embodiments that provide an approach to cryptographic key management for a digital rights management (DRM) architecture that includes multiple levels of key management for minimizing bandwidth usage while maximizing security for the DRM architecture. In one embodiment, there is provided a data structure for cryptographic key management that includes a public/private key pair and three additional layers of symmetric keys for authorizing access to a plurality of contents.

摘要翻译： 这里描述的是提供用于数字版权管理（DRM）架构的加密密钥管理的方法的实施例，其包括用于最小化带宽使用的多级密钥管理，同时最大化DRM架构的安全性。 在一个实施例中，提供了一种用于加密密钥管理的数据结构，其包括用于授权访问多个内容的公钥/私钥对和三个对称密钥层。