Patent ID: 7296296
Filing Date: 2007-11-13
Classification: G06F,H04L

Abstract:
1. A method of delivering content from a source to a sink by way of a computing device, the method comprising: an application on the computing device calling to a media base on the computing device with a definition of the content, the source, and the sink; the media base establishing a protected media path based on the defined content, source and sink to effectuate such delivery, the established protected media path including: the media base; a source trusted authority (SOTA) associated with and corresponding to the source, the SOTA acting as a secure lockbox connecting the source to the media base and representing the source in the protected media path; and a sink trusted authority (SITA) associated with the corresponding to the sink, the SITA acting as a secure lockbox connecting the sink to the media base and representing the sink in the protected media path; the SOTA on behalf of the source establishing trust with respect to the protected media path; the SOTA, upon trust being established with respect to the protected media paths translating policy corresponding to the content from a native format of the source into a format amenable to a policy engine and propagating the translated policy to the policy engine; the SOTA determining a particular type of action to be taken with the content as delivered through the protected media path; the SOTA deciding with regard to the propagated policy that the particular type of action cannot be taken with the content as delivered through the protected media path and informing the media base of a refusal to take such action; the media base informing the application of the refusal to take the action; the SOTA recognizing that the refusal may be rectified by way of a particular enabler available to such SOTA and the SOTA providing the particular enabler to the application by way of the media base, the provided enabler including information and methods necessary for the application to obtain data necessary to responded to the refusal; the application receiving the enabler at an interface thereof by way of the media base, and the interface applying a common interaction procedure to run the enabler to obtain the data necessary to respond to the refusal; the application providing the obtained data to the media base and the media base employing the provided data to respond to the refusal; the SOTA deciding with regard to the propagated policy and based at least in part on the responded refusal that the particular type of action can be taken with the content as delivered through the protected media path and informing the media base regarding same; the SOTA decrypting the content from the source and releasing the decrypted content to the media base; the media base informing the application that the particular type of action can be taken, and application proceeding by commanding the media base to perform such type of action; the SITA receiving the translated policy from the policy engine and re-translating the translated policy from the format of the policy engine into a format amenable to the sink; and the SITA re-encrypting the decrypted content released by the SOTA.