Patent ID: 8625788
Filing Date: 2014-01-07
Classification: G06F,H04L,H04N

Abstract:
1. A method of processing content in a client computing device, content including one or more simultaneous protected content streams with distinct security properties and keying material, comprising: establishing, with a security processor of the client computing device, a hardware-based root of trust between the client computing device and a service provider server; receiving, with the client computing device and from the service provider server, an encrypted title key associated with encrypted content of the service provider server; decrypting, with the security processor, the encrypted title key received from the service provider server; encrypting, with the security processor, the decrypted title key with a storage key to form a key blob; transmitting the key blob from the security processor to a central processor of the client computing device for storage in memory of the client computing device in response to encrypting the decrypted title key; receiving, with the security processor, the key blob from the central processor in response to a request from a user of the client computing device to execute the encrypted content; transmitting, with the security processor, the key blob to a graphics engine of the client computing device over a hardware-protected data path; receiving, with the graphics engine, at least one slice of the encrypted content; decrypting, with the graphics engine, the key blob using the storage key received from the security processor; decrypting, on the graphics engine, the at least one slice of the encrypted content using the title key of the decrypted key blob; encrypting, on the graphics engine, the at least one decrypted content slice to generate one or more re-encrypted content slices; generating, on the graphics engine, composed image data based on the re-encrypted content slices in response to encrypting the at least one decrypted content slice; transmitting, from the graphics engine, the composed image data to the security processor over the hardware-protected data path; and transmitting, from the security processor, the composed image data to a display over a protected display interface link.