公开(公告)号：WO2009146401A1

公开(公告)日：2009-12-03

申请号：PCT/US2009/045592

申请日：2009-05-29

Applicant: MOTOROLA, INC. ,  MORONEY, Paul ,  PETERKA, Petr

Inventor： MORONEY, Paul ,  PETERKA, Petr

IPC: G06F21/00

CPC classification number: G06F21/10 ,  H04N21/4408 ,  H04N21/4627 ,  H04N21/8352 ,  H04N21/8355

Abstract: In a method for encrypting content, the content is received in a device and at least a portion of the content is stored to thereby associate the content with one of a first copy control state and a second copy control state. The method includes creating at least one of a first content pre-key using a local storage key unique to the device as a key to encrypt the content ID of the content and a second content pre-key using the first content pre-key as a key to encrypt the first copy control state, creating a content encryption key using one of the first content pre-key as a key to encrypt the first copy control state and the second content pre-key as a key to encrypt the second copy control state, and encrypting the content using the content encryption key.

Abstract translation: 在用于加密内容的方法中，在设备中接收内容，并且存储内容的至少一部分，从而将内容与第一复制控制状态和第二复制控制状态之一相关联。 该方法包括使用设备唯一的本地存储密钥来创建第一内容预密钥中的至少一个作为密钥来加密内容的内容ID，第二内容预密钥使用第一内容预密钥作为 用于加密第一复制控制状态的密钥，使用第一内容预密钥之一作为加密第一复制控制状态的密钥和第二内容预密钥作为加密第二复制控制状态的密钥来创建内容加密密钥 ，并使用内容加密密钥加密内容。

公开(公告)号：WO2008134476A1

公开(公告)日：2008-11-06

申请号：PCT/US2008/061512

申请日：2008-04-25

Applicant: GENERAL INSTRUMENT CORPORATION ,  PETERKA, Petr ,  MEDVINSKY, Alexander ,  MORONEY, Paul

Inventor： PETERKA, Petr ,  MEDVINSKY, Alexander ,  MORONEY, Paul

IPC: H04N7/16

CPC classification number: H04N21/440281 ,  G06F21/10 ,  G06F2221/0784 ,  G06F2221/2137 ,  G06F2221/2151 ,  H04N21/4147 ,  H04N21/4408 ,  H04N21/4627 ,  H04N21/8456

Abstract: A process may be utilized by a DVR. The process characterizes a set of content as a plurality of segments as the set of content is received. Each of the segments has a segment length according to a predetermined time interval. Further, the process encrypts each of the segments with a corresponding content encryption key to generate a plurality of encrypted segments. The corresponding content encryption key for each of the segments is generated by the DRM component. In addition, the process stores each of the encrypted segments for playback with trick play features in accordance with an expiration content rule having a time limit on the temporary playability of the set of content.

Abstract translation: DVR可以利用进程。 当接收到内容集合时，该过程将一组内容表征为多个段。 每个段具有根据预定时间间隔的段长度。 此外，该过程使用对应的内容加密密钥来加密每个段，以生成多个加密段。 每个段的相应内容加密密钥由DRM组件产生。 此外，该过程根据具有对该组内容的临时可播放性具有时间限制的过期内容规则，将每个加密段用于播放特技播放特征。

公开(公告)号：WO2008134463A1

公开(公告)日：2008-11-06

申请号：PCT/US2008/061485

申请日：2008-04-25

Applicant: GENERAL INSTRUMENT CORPORATION ,  SHAMSAASEF, Rafie ,  PETERKA, Petr ,  MEDVINSKY, Alexander ,  MORONEY, Paul

Inventor： PETERKA, Petr ,  MEDVINSKY, Alexander ,  MORONEY, Paul

IPC: G11B20/00 ,  G11B27/30 ,  H04N7/167 ,  H04N7/24

CPC classification number: G11B20/00086 ,  G11B20/00166 ,  G11B20/0021 ,  G11B20/00507 ,  G11B20/00731 ,  G11B27/30 ,  G11B2220/2516 ,  H04N7/1675 ,  H04N21/2541 ,  H04N21/4135 ,  H04N21/4147 ,  H04N21/43615 ,  H04N21/43622 ,  H04N21/4367 ,  H04N21/4408 ,  H04N21/4627 ,  H04N21/835 ,  H04N21/8355 ,  H04N21/8456

Abstract: A process may be utilized by the DVR. The process receives a plurality of segments of a set of content and a plurality of corresponding content rule sets. Further, the process provides one or more instructions to record and encrypt the plurality of segments of the set of content on a storage medium. In addition, the process provides the plurality of content rule sets to the DRM component to be inserted into a locally generated and secured content license associated with the encryption of the set of content. The secured content license includes a master key and a list of the plurality of corresponding content rule sets that have been received in order of reception. The process receives a plurality of marker tokens from the DRM component in order to facilitate trick mode playback.

Abstract translation: DVR可以利用一个过程。 该过程接收一组内容和多个对应的内容规则集合的多个片段。 此外，该过程提供一个或多个指令以在存储介质上记录和加密该组内容的多个段。 此外，该过程向DRM组件提供多个内容规则集以被插入到与该组内容的加密相关联的本地生成和安全的内容许可中。 安全内容许可证包括主密钥和已经按照接收顺序接收的多个对应的内容规则集的列表。 该过程从DRM组件接收多个标记符号以便于特技模式回放。

公开(公告)号：WO2003028330A2

公开(公告)日：2003-04-03

申请号：PCT/US2002/030128

申请日：2002-09-20

Applicant: GENERAL INSTRUMENT CORPORATION ,  MEDVINSKY, Alexander ,  PETERKA, Petr ,  MORONEY, Paul

Inventor： MEDVINSKY, Alexander ,  PETERKA, Petr ,  MORONEY, Paul

IPC: H04L29/00

CPC classification number: H04L63/062 ,  G06F21/10 ,  G06F21/602 ,  G06F21/606 ,  H04L63/0407 ,  H04L63/0457 ,  H04L63/0807 ,  H04L65/607 ,  H04L65/608

Abstract: A provisioning system that secures delivery of a client's public key to a KDC (Key Distribution Center). The provisioning system comprises a client, uniquely identifiable by one or more parameters including a user ID (identification); a provisioning server for registering the client; a key distribution center for generating a provisioning key associated with the user ID, the provisioning key being forwarded to the provisioning server; the provisioning server generating configuration parameters for initializing the client, the provisioning key being included in the configuration parameters; and upon initialization, the client provides its public key, authenticated with the provisioning key for forwarding to the key distribution center.

Abstract translation: 一种供应系统，用于确保将客户端的公开密钥交付给KDC（密钥分配中心）。 配置系统包括客户端，可以通过包括用户ID（识别）的一个或多个参数唯一地标识; 用于注册客户端的供应服务器; 用于生成与所述用户ID相关联的供应密钥的密钥分配中心，所述供应密钥被转发到所述供应服务器; 配置服务器生成用于初始化客户端的配置参数，配置密钥被包括在配置参数中; 并且在初始化时，客户端提供其公开密钥，用供应密钥进行认证，以转发到密钥分配中心。

公开(公告)号：WO2011090630A1

公开(公告)日：2011-07-28

申请号：PCT/US2010/060932

申请日：2010-12-17

Applicant: GENERAL INSTRUMENT CORPORATION ,  ZHANG, Jiang ,  MEDVINSKY, Alexander ,  MORONEY, Paul ,  PETERKA, Petr

Inventor： ZHANG, Jiang ,  MEDVINSKY, Alexander ,  MORONEY, Paul ,  PETERKA, Petr

IPC: H04L29/06 ,  H04L9/08 ,  H04L9/32

CPC classification number: H04L63/061 ,  H04L9/0841 ,  H04L9/3226 ,  H04L9/3263 ,  H04L9/3271 ,  H04L63/0442 ,  H04L63/0823 ,  H04L63/0869 ,  H04L63/123 ,  H04L2463/061

Abstract: In a method of temporarily registering a second device with a first device, in which the first device includes a temporary registration mode, the temporary registration mode in the first device is activated, a temporary registration operation in the first device is initiated from the second device, a determination as to whether the second device is authorized to register with the first device is made, and the second device is temporarily registered with the first device in response to a determination that the second device is authorized to register with the first device, in which the temporary registration requires that at least one of the second device and the first device delete information required for the temporary registration following at least one of a determination of a network connection between the first device and the second device and a powering off of at least one of the first device and the second device.

Abstract translation: 在第一设备暂时注册第二设备的方法中，其中第一设备包括临时注册模式，激活第一设备中的临时注册模式，从第二设备启动第一设备中的临时注册操作 进行关于第二设备是否被授权向第一设备注册的确定，并且响应于第二设备被授权向第一设备注册的确定，第二设备被临时登记到第一设备， 所述暂时注册要求所述第二设备和所述第一设备中的至少一个删除在所述第一设备和所述第二设备之间的网络连接的确定中的至少一个之后临时注册所需的信息，以及至少 第一个设备和第二个设备之一。

公开(公告)号：WO2012071143A1

公开(公告)日：2012-05-31

申请号：PCT/US2011/058753

申请日：2011-11-01

Applicant: GENERAL INSTRUMENT CORPORATION ,  ZHANG, Jiang ,  MORONEY, Paul ,  PETERKA, Petr

Inventor： ZHANG, Jiang ,  MORONEY, Paul ,  PETERKA, Petr

IPC: H04N21/4627 ,  H04N21/266 ,  H04L9/08

CPC classification number: H04N21/26613 ,  H04L9/0825 ,  H04L9/3263 ,  H04L2209/603 ,  H04N21/4627

Abstract: A method is provided by which a client device obtains authorized access to content delivered over a content delivery network. The method includes receiving an entitlement management message (EMM). The EMM includes at least one cryptographic key and a device registration server certificate ID (DRSCID) identifying a currently valid device registration server (DRS) public key certificate. The DRSCID obtained from the EMM is compared to a stored DRSCID value. An entitlement control message (ECM), which includes an encrypted traffic key for decrypting content, is received. If the DRSCID obtained from the EMM is determined to match the stored DRSCID, the traffic key is decrypted with the cryptographic key or a key derived from the cryptographic key to thereby access the content.

Abstract translation: 提供一种方法，通过该方法，客户端设备获得对通过内容传送网络传送的内容的授权访问。 该方法包括接收授权管理消息（EMM）。 EMM包括标识当前有效的设备注册服务器（DRS）公钥证书的至少一个加密密钥和设备注册服务器证书ID（DRSCID）。 将从EMM获得的DRSCID与存储的DRSCID值进行比较。 接收包括用于解密内容的加密业务密钥的授权控制消息（ECM）。 如果确定从EMM获得的DRSCID与存储的DRSCID匹配，则使用加密密钥或从加密密钥导出的密钥对流量密钥进行解密，从而访问内容。

公开(公告)号：WO2009009191A2

公开(公告)日：2009-01-15

申请号：PCT/US2008/060715

申请日：2008-04-18

Applicant: GENERAL INSTRUMENT CORPORATION ,  PETERKA, Petr ,  MEDVINSKY, Alexander ,  MORONEY, Paul

Inventor： PETERKA, Petr ,  MEDVINSKY, Alexander ,  MORONEY, Paul

CPC classification number: G06F21/10 ,  G06Q10/06

Abstract: A process composes a content license for a set of content. The content license has a static portion and a dynamic portion. Further, the process inserts a master key into the static portion. In addition, the process inserts a plurality of content rule sets of values into the dynamic portion and composes a unique content encryption key for each segment of content associated with one of the content rule sets of values as each of the content rule sets of values is sequentially received during recording of the content. The unique content encryption key is based on the master key and at least a subset of the content rule set of values for a corresponding segment of the content. The unique content encryption key is utilized for encryption of each segment of the content to generate a plurality of encrypted content segments for storage on the storage medium.

Abstract translation: 一个进程组成一组内容的内容许可证。 内容许可证具有静态部分和动态部分。 此外，该过程将主密钥插入静态部分。 此外，该过程将多个内容规则集值集合插入到动态部分中，并且对于与内容规则集值之一相关联的每个内容段，构成唯一内容加密密钥，因为每个内容规则集值是 在记录内容期间顺序地接收。 唯一内容加密密钥基于主密钥以及内容的相应段的内容规则集合的集合的至少一个子集。 独特的内容加密密钥用于加密内容的每个段，以生成用于存储在存储介质上的多个加密的内容段。

公开(公告)号：WO2012067813A1

公开(公告)日：2012-05-24

申请号：PCT/US2011/058772

申请日：2011-11-01

Applicant: GENERAL INSTRUMENT CORPORATION ,  TANG, Polly ,  PETERKA, Petr

Inventor： TANG, Polly ,  PETERKA, Petr

IPC: G06F21/00

CPC classification number: G06F21/10 ,  G06F2221/0742 ,  G06F2221/2141 ,  G06Q30/00 ,  H04L9/083 ,  H04L9/3213 ,  H04L63/062 ,  H04L63/0807 ,  H04L2209/603 ,  H04L2463/101

Abstract: A device is provided for use with a digital content provider and a content purchaser. The content provider can provide digital content and a first digital key, wherein the digital content has quantified digital rights associated therewith. The device includes a receiving portion, a security portion, a content database, an interface portion and a transmitting portion. The receiving portion can receive the digital content and the first digital key. The security portion can access the digital content with the first digital key. The content database can store the digital content. The interface portion can offer to the content purchaser the digital content and can enable the content purchaser to purchase the digital content in accordance with purchased quantified digital rights. The security portion can further encrypt the digital content with a second digital key such that the content purchaser may use the purchased digital content.

Abstract translation: 提供一种与数字内容提供商和内容购买者一起使用的设备。 内容提供商可以提供数字内容和第一数字密钥，其中数字内容已经量化与其相关联的数字权限。 该设备包括接收部分，安全部分，内容数据库，接口部分和发送部分。 接收部分可以接收数字内容和第一数字键。 安全部分可以使用第一数字密钥访问数字内容。 内容数据库可以存储数字内容。 接口部分可以向内容购买者提供数字内容，并且可以使内容购买者能够根据购买的量化数字权限购买数字内容。 安全部分可以利用第二数字密钥进一步加密数字内容，使得内容购买者可以使用购买的数字内容。

公开(公告)号：WO2011140288A1

公开(公告)日：2011-11-10

申请号：PCT/US2011/035277

申请日：2011-05-04

Applicant: VERIMATRIX, INC. ,  OLUGBILE, Akinwale ,  MESSERMAN, Matthew, E. ,  PETERKA, Petr ,  HANDAL, Thomas

Inventor： OLUGBILE, Akinwale ,  MESSERMAN, Matthew, E. ,  PETERKA, Petr ,  HANDAL, Thomas

IPC: G06F7/04

CPC classification number: H04L63/0823 ,  G06F17/30017 ,  G06F21/10 ,  G06F21/62 ,  G06Q30/0257 ,  G06Q30/0267 ,  H04L63/104 ,  H04L65/4084 ,  H04L2463/101 ,  H04N21/2541 ,  H04N21/25816 ,  H04N21/25875 ,  H04N21/26258 ,  H04N21/26613 ,  H04N21/4627 ,  H04N21/4753 ,  H04N21/4825 ,  H04N21/835

Abstract: Systems and methods are disclosed that authenticate devices or users, and enable playback of secured streaming content through a media player. In one embodiment, the invention is a system for receiving secure content over an unmanaged network, including a security application configured operate on a user device with access to a network, where the security application is configured to receive a request for playlist data from the media player, send a playlist request to a content server, receive playlist data from the content server, send playlist data to a media player, receive a security access request from the media player, send a security access request to a security server, receive security access data from the security server; and send security access data to a media player.

Abstract translation: 公开了认证设备或用户的系统和方法，并且通过媒体播放器启用安全流媒体内容的播放。 在一个实施例中，本发明是一种用于在非托管网络上接收安全内容的系统，包括配置为在具有对网络的访问的用户设备上操作的安全应用，其中所述安全应用被配置为从所述媒体接收播放列表数据的请求 播放器，向内容服务器发送播放列表请求，从内容服务器接收播放列表数据，向媒体播放器发送播放列表数据，从媒体播放器接收安全访问请求，向安全服务器发送安全访问请求，接收安全访问 来自安全服务器的数据; 并向媒体播放器发送安全访问数据。

公开(公告)号：WO2011066531A2

公开(公告)日：2011-06-03

申请号：PCT/US2010/058318

申请日：2010-11-30

Applicant: GENERAL INSTRUMENT CORPORATION ,  ZHANG, Jiang ,  MANGALORE, Geetha ,  PETERKA, Petr

Inventor： ZHANG, Jiang ,  MANGALORE, Geetha ,  PETERKA, Petr

IPC: G06F21/00

CPC classification number: H04N21/2541 ,  G06F21/10 ,  H04L9/0869 ,  H04L63/062 ,  H04L2209/30 ,  H04L2209/603 ,  H04L2463/061 ,  H04L2463/101 ,  H04N7/1675 ,  H04N21/2347 ,  H04N21/2353 ,  H04N21/4405 ,  H04N21/835 ,  H04N21/85406

Abstract: A method is provided for creating an encrypted data file (700) from a data file having a sample entry box and a media data box. The sample entry box has description information therein. The media data box includes media data therein. The method includes: receiving the data file; encrypting the media data within the media data box with an encryption key; replacing the sample entry box with an encoded box (302); creating a sinf box (702) within the encoded box (302); creating a frma box (306) within the sinf box (702); and creating an schm box (704) within the sinf box (702). The schm box (704) indicates the type of formatting of the encrypted media data. The encoded box (302) does not include an initial counter that may be used to decrypt the encrypted media data.

Abstract translation: 提供了一种用于从具有样本输入框和媒体数据框的数据文件创建加密数据文件（700）的方法。 样本输入框中包含描述信息。 媒体数据盒包括其中的媒体数据。 该方法包括：接收数据文件; 用加密密钥加密媒体数据盒内的媒体数据; 用编码框替换样本输入框（302）; 在编码框（302）内创建sinf框（702）; 创建sinf盒（702）内的frma盒（306）; 并在sinf框（702）内创建一个schm框（704）。 schm框（704）指示加密媒体数据的格式化类型。 编码框（302）不包括可用于解密加密的媒体数据的初始计数器。