Patent ID: 8689010
Filing Date: 2014-04-01
Classification: G06F

Abstract:
1. A method, implemented at least in part by a computer, comprising: providing a computing device with digital rights management (DRM) software that has been remotely provisioned, wherein the remotely provisioned DRM software performs DRM operations, the DRM operations including acquisition and enforcement of one or more licenses pertaining to DRM data, and wherein the remotely provisioned DRM software has been remotely provisioned by: creating a DRM partition that serves as an empty host; generating an attestation request that includes at least: an identity (ID) of the DRM partition; and an identification of the computing device; and using the attestation request to initiate a provisioning process from a remote service in which the remotely provisioned DRM software is provisioned to the DRM partition; providing, in secure storage on the computing device, a signing key and a counter that maintains a counter value that is to be used for verification; associating a counter value with the DRM data that is to be protected; signing, under the influence of the remotely provisioned DRM software, the DRM data and associated counter value using the signing key, said signing providing signed DRM data and the associated counter value; storing the signed DRM data and the associated counter value in local storage on the computing device; and verifying that a counter value stored in the local storage matches with a counter value stored in the secure storage, wherein the act of verifying comprises sending, by the remotely provisioned DRM software, a nonce to the secure storage and receiving, responsive to said sending, a signed package that includes the nonce and a counter value to be verified.