Abstract:
The method and apparatus for distributing multimedia content over a network to a plurality of networked and portable devices affords a system operator the ability to control the unauthorized distribution and playback of content transferred by the system operator to a user of that system. The transferred content in the form of encrypted data is distributed over the network from a set-top terminal/personal versatile recorder to at least one playback device, in accordance with rights established by the system operator or the content provider, where the content is decrypted for subsequent playback by the authorized device (s). The method also addresses illegal propagation of content.

Description:
CROSS REFERENCES TO RELATED APPLICATIONS  
       [0001]    This application relates to subject matter disclosed in copending U.S. patent application Ser. No. ______, filed on ______. 
     
    
     
       FIELD OF THE INVENTION  
         [0002]    The present invention relates to a set-top terminal for connection to a communication network of a broadband system. More specifically, the present invention relates to the ability of distributing content to different devices in the home, automotive vehicle, or the office along with limiting the unauthorized distribution and playback of copyright-protected content.  
         BACKGROUND OF THE INVENTION  
         [0003]    Multimedia content includes audio recordings and audiovisual programming in the form of digital data. When audio recordings and audiovisual programming are formatted as digital data, conventional data compression formats enable the creation of digitized multimedia files.  
           [0004]    One example of a data compression format is the Moving Pictures Experts Group (MPEG) level-2 data format, also known as the MPEG-2 video data compression format. This format can be used for the compression and decompression of digital bit streams that are broadcast over multi-channel video programming networks. Such networks include, but are not limited to cable, satellite and terrestrial networks. This content includes television broadcasts, webcasts, and streamed or non-streamed content, some of which is in the MPEG-2 format.  
           [0005]    Another example of a conventional data compression format is the MPEG layer 3 data format, also known as the MP3 data format. By encoding an audio recording using the MP3 format, an audio data file can be reduced to one twelfth of its original size with only very little loss of audio quality. An MP3-encoded audio data file can be stored as a small file on a personal computer, or on another device known as a personal digital audio player. The personal digital audio player provides for the easy distribution of MP3 formatted music content by allowing a listener to download customized play-lists from over the Internet to the portable player. These players are generally accompanied with software that facilitates easy transfer of MP3 files between a platform such as a personal computer and the portable player. The portability of content along with the customization of such content to meet the preferences of the listener is becoming increasingly popular. As a result, players that do not enable these abilities are becoming less appealing to consumers.  
           [0006]    Other forms of digitally-formatted multimedia content include, but are not limited to, Internet Protocol, picture and graphics files, HyperText Markup Language (HTML) files, Extended Markup Language (XML) files, application software files, electronic mail (e-mail), universal resource locator (URL) links, or any combination of the above.  
           [0007]    However, there are shortcomings in the use of digitally-formatted multimedia content. For example, as the use and transfer of digitally-formatted multimedia content expand, concerns about the violation of the content owner&#39;s rights in copyrighted work continue to proliferate. Currently, copyright-protected content in digital form can be copied without limitation, resulting in the substantial risk of piracy known as “content piracy.” Content piracy is generally described as the unauthorized, unlawful reproduction or distribution of multimedia content. It is responsible for the loss of considerable revenue to the content owner and/or the distributor.  
           [0008]    Consequently, there is a need in the art for a method and apparatus that allows the consumer to transfer content among multiple devices in a transparent manner, transparent to the content type and the devices involved, while limiting the distribution and further playback of the copyright-protected content.  
         SUMMARY OF THE INVENTION  
         [0009]    It is an object of the present invention to meet the above-described needs. Specifically, it is an overall object of the present invention to provide a portability of content via a versatile recorder that manages multimedia data in a wide variety of file and streaming formats.  
           [0010]    Furthermore, it is an object of the present invention to provide an apparatus and method that affords a Multiple System Operator, the Internet Service Provider, or the content provider, (hereinafter referred to as the System Operator) the ability to limit the unauthorized distribution and reproduction of content transferred by the system operator over a delivery network to a user of the system.  
           [0011]    The present invention is preferably embodied and described as a personal versatile recorder for recording any type of data.  
           [0012]    The personal versatile recorder of the present invention is preferably integrated with a set-top terminal to share a common central processing unit; to share associated firmware and software, decoding and security elements, interfaces, and the like, as well as a data storage device; to share a connection for receiving audiovisual programming; and for receiving one or more data transport streams.  
           [0013]    In accordance with the present invention, content in the form of encrypted data is distributed over a network from a set-top terminal/personal versatile recorder to at least one playback device.  
           [0014]    When a user requests a transfer of some content from the set-top terminal/personal versatile recorder to storage/playback device (referred to here after as the playback device), the playback device, which is interfaced to the network, authenticates itself to the set-top terminal/personal versatile recorder prior to receiving the content. The content is transferred either as an encrypted stream or an unencrypted stream. An inquiry is made to determine the existence of permission to make copies of the content. A connection between the set-top terminal/personal versatile recorder and the playback device is established if the permission has been determined to exist. Identification is then provided from the playback device to the set-top terminal/personal versatile recorder.  
           [0015]    Next, the playback device requests identification from the set-top terminal/personal versatile recorder. The set-top terminal/personal versatile recorder registers the playback device with the system operator in order to trace the content distributed to the playback device and performs a distribution inquiry to authenticate the playback identification and to determine if the playback device has permission to access the content. When playback identification is confirmed and the playback device has permission to access the content, a distribution identification code is provided to the playback device and the establishment of secure communications is requested. A playback inquiry to authenticate the distribution identification is performed and the set-top terminal/personal versatile recorder is instructed to begin transferring the content when the step of performing the playback inquiry yields a result that is sufficient for the establishment of a secure communications link. At that point, the content is transferred from the set-top terminal/personal versatile recorder to the playback device.  
           [0016]    In another embodiment of the present invention, the set-top terminal/personal versatile recorder located at a location is interfaced to a playback device. The user requests a transfer of content from the set-top terminal/personal versatile recorder to the playback device and a playback identifier is reported to a system operator, wherein the system operator checks the playback identifier against a revocation list.  
           [0017]    Another object of the present invention is to provide a method and apparatus for permitting the access to content and the duplication of content. This permission is offered by a system operator as an option that is selectable by the set-top terminal/personal versatile recorder. The right to perform the option is granted by the system operator, where such rights may correspond to the rights established by the content provider or a distributor on behalf of the content provider, to the set-top terminal/personal versatile recorder. Once the option is executed, the access to content and the duplication of content are tracked and reported to the system operator for additional billing.  
           [0018]    It is an object of the present invention to meet the above-described needs. Specifically, it is an overall object of the present invention to provide a versatile recorder that manages multimedia data in a wide variety of file and streaming formats.  
           [0019]    Furthermore, it is an object of the present invention to provide a method and apparatus that affords a system operator the ability to limit the unauthorized distribution and playback of content transferred by the system operator to a user of the system.  
           [0020]    Additional objects, advantages and novel features of the invention will be set forth in the description which follows or may be learned by those skilled in the art through reading these materials or practicing the invention. The objects and advantages of the invention may be achieved through the system, apparatus, methods, or means recited in the attached claims.  
           [0021]    These and other objects, advantages, aspects and features of the present invention will be more fully understood and appreciated upon consideration of the following detailed description of a preferred embodiment, presented in conjunction with the accompanying drawings. 
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0022]    The accompanying functional drawings illustrate the present invention and are a part of the specification. Together with the following description, the drawings demonstrate and explain the principles of the present invention.  
         [0023]    [0023]FIG. 1 is a block diagram of the diagram of a playback area network according to the present invention.  
         [0024]    [0024]FIG. 2 is a flowchart outlining the retrieval of according to the present invention.  
         [0025]    [0025]FIG. 3 is a block diagram of the apparatus for distributing content according to the present invention.  
         [0026]    [0026]FIG. 4 is a block diagram of the apparatus for distributing content according to an alternative embodiment of the present invention. 
     
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS  
       [0027]    The ensuing detailed description provides preferred exemplary embodiments only, and is not intended to limit the scope, applicability, or configuration of the invention. Rather, the ensuing detailed description of the preferred exemplary embodiments will provide those skilled in the art with an enabling description for implementing a preferred embodiment of the invention. It being understood that various changes may be made in the function and arrangement of elements without departing from the spirit and scope of the invention.  
         [0028]    Using the drawings, the preferred embodiments of the present invention will be explained. These functional embodiments are illustrative in nature and chosen for exposition of the principles of the present invention. The invention is not, however, limited to the following embodiments, as will be appreciated by those skilled in the art.  
         [0029]    [0029]FIG. 1 depicts an apparatus of the present invention that includes the Personal Versatile Recorder ( 10 ), the Playback Area Network (PAN)( 20 ), and at least one receiver/playback device ( 30 ).  
         [0030]    The Personal Versatile Recorder ( 10 ) of the present invention is a digital compression device that functions as a caching and distribution gateway for the transfer of multimedia content from the system operator and affiliated content providers. This device provides the integrated capacity to store, replay, retrieve, and distribute content. Multimedia content includes, but is not limited to, audiovisual programming such as compressed or pre-compressed programming. Audiovisual programming is not limited to a single video stream, e.g., a single camera angle, but can also include user-selectable multiple camera angles. Similarly, multimedia content also includes audio in the form of multiple user-selectable audio streams. Furthermore, the audiovisual programming, analog programming, digital broadcast or on-demand MPEG-2 programming, or webcast streaming media are all sources of multimedia content. This content also includes video files, picture and graphics files, audio files, HTML files, XML files, text files, application software files, e-mail, URL links, and the like.  
         [0031]    The Personal Versatile Recorder ( 10 ) is either integrated into a set-top terminal or is housed separately as a stand-alone unit. While FIG. 1 depicts the Personal Versatile Recorder ( 10 ) as the distribution device of the preferred embodiment, any device with such distribution capabilities is suitable as an alternative to the Personal Versatile Recorder ( 10 ). Thus, the use of this alternative device in place of the Personal Versatile Recorder ( 10 ), whether the receiver/playback device ( 30 ) is located within or outside of the residence, is practicable as an extension to the embodiment of the present invention.  
         [0032]    The PAN ( 20 ) is a wired or a wireless network that is suitable for transporting multimedia content from the Personal Versatile Recorder ( 10 ) to the receiver/playback device ( 30 ). This content is transported from the Personal Versatile Recorder ( 10 ) to the receiver/playback device ( 30 ). The content is transferred either as an encrypted stream or an unencrypted stream.  
         [0033]    The receiver/playback device ( 30 ), interfaced to the PAN ( 20 ), comprises any number of devices that include, but are not limited to a personal computer, an optical disk player such as a compact disc (CD) player and a digital video disc (DVD) player, a portable player such as a personal digital audio player and an MP3 player, a video player, a hand-held computer, a cell phone or other personal communication devices, and any other device capable of receiving a digital bit stream.  
         [0034]    Content Rights Management prevents the illegal or unauthorized reproduction, duplication or transmission of multimedia content. Using Content Rights Management, the Personal Versatile Recorder ( 10 ) possesses the ability to store multimedia content and to transfer the content to another receiver/payback device ( 30 ) over the PAN ( 20 ) pursuant to the content owner&#39;s and/or the distributor&#39;s rights in the copyrighted work. Content Rights Management provides an approach for sanctioning and tracing operations performed on the content, such as viewing, displaying, or reproducing the content, or forwarding the content to another user; and for sanctioning and tracing transactions on the content, such as setting conditions for granting access and accepting payment for content. Content Rights Management also provides a framework for specifying the frequency and duration of the operations and transactions that are performed on the content. Content Rights Management includes capabilities such as those described under the Secure Digital Music Initiative (SDMI) or alternative Content Rights Management systems.  
         [0035]    In addition to Content Rights Management, the content is transferred in an encrypted format from the system operator&#39;s facilities to the Personal Versatile Recorder ( 10 ) to assist in preventing prohibited or unlicensed access to the multimedia content. The content is decrypted upon receipt from the delivery network either for playback by the Personal Versatile Recorder ( 10 ), or for re-encryption by the Personal Versatile Recorder ( 10 ) to distribute the content over the PAN ( 20 ). The secure transfer of the content from the Personal Versatile Recorder ( 10 ) to a receiver/playback device ( 30 ) is established using a standard protocol. This protocol may include, but is not limited to, the Secure Sockets Layer (SSL) protocol.  
         [0036]    Content is distributed over the PAN ( 20 ) using the transfer scheme as shown in the flowchart of FIG. 2. The scheme includes, but is not limited to a Public-Key Encryption format along with a digital certificate such as an X.509 certificate, or the like. When a Public-Key Encryption format is used for encryption and decryption, the keys used to encrypt and decrypt the content are specific to a particular personal versatile recorder. The private-public key pair is stored securely in hardware located within the Personal Versatile Recorder ( 10 ) to prevent access to the pair, while storage of the certificate in a non-secure medium, such as non-secure memory, is feasible.  
         [0037]    The corresponding public key and certificates for the receiver/playback device ( 30 ) are transferred to the receiver/playback device ( 30 ) from the Personal Versatile Recorder ( 10 ). The private key for the receiver/playback device ( 30 ) is required by the receiver/playback device ( 30 ) to decrypt the content. This scheme prevents the use of transferred content by an illegal or unauthorized receiver/playback device ( 30 ). In particular, this transfer is not initiated until the requisite authorization, pursuant to restraints such as Content Rights Management, is validated. Since an illegal or unauthorized receiver/playback device ( 30 ) will be unable to decrypt the content, the encryption/decryption scheme obviates the need for physically mating the receiver/playback device ( 30 ) to the Personal Versatile Recorder ( 10 ).  
         [0038]    When direct connectivity among the transferring and receiving devices is present, a feature of the present invention provides for the issuance of challenge/response commands. These commands provide for additional transfer security while safeguarding the authenticity of the communicating devices.  
         [0039]    Initially, as shown in step  400  of FIG. 2, the user requests the transfer of content from the Personal Versatile Recorder ( 10 ) to a receiver/playback device ( 30 ). When the multi-channel video programming network is a cable network, the Personal Versatile Recorder ( 10 ) communicates with the headend to determine if a receiver/playback device ( 30 ) is approved for use on the PAN ( 20 ) if this approval is either desired or required by the content owner and/or the distributor.  
         [0040]    In step  402 , when the requested content is a copyrighted work, the Personal Versatile Recorder ( 10 ) performs an inquiry to determine whether the user has permission to make copies of that work and whether the maximum number of copies allowed has not been exceeded, if such a limit has been specified. If the requisite permissions exist, the Personal Versatile Recorder ( 10 ) initializes the establishment of an SSL connection with the receiver/playback device ( 30 ), as shown in step  404 .  
         [0041]    Next, the receiver/playback device ( 30 ) authenticates itself to the Personal Versatile Recorder ( 10 ) by providing a certificate to the Personal Versatile Recorder ( 10 ), as shown in step  406  of FIG. 2, and by requesting verification of that certificate, as shown in step  408 . In step  410 , the receiver/playback device ( 30 ) then requests a certificate from the Personal Versatile Recorder ( 10 ).  
         [0042]    The Personal Versatile Recorder ( 10 ) registers the receiver/playback device ( 30 ), in step  412 , for a subsequent “reportback” to trace any content that has been distributed to the device ( 30 ). Next, as shown in step  414 , the Personal Versatile Recorder ( 10 ) performs an inquiry to authenticate the certificate provided by the receiver/playback device ( 30 ) and determines if the receiver/playback device ( 30 ) has permission to access the requested content. If the inquiry and the determination are sufficient, then, the Personal Versatile Recorder ( 10 ) provides its certificate to the receiver/playback device ( 30 ) and requests the establishment of secure communications, as shown in step  416 .  
         [0043]    As shown in step  418 , the receiver/playback device ( 30 ) then performs an inquiry to authenticate the certificate provided by the Personal Versatile Recorder ( 10 ). If the result of this inquiry is sufficient for the establishment of a communications link, then the receiver/playback device ( 30 ) will perform step  420  of instructing the Personal Versatile Recorder ( 10 ) to begin transferring the content.  
         [0044]    At this point, in step  422 , the secure channel is established over the PAN ( 20 ) to transfer the content from the Personal Versatile Recorder ( 10 ) to the receiver/playback device ( 30 ) using the standard protocol. The receiver/playback device ( 30 ) will either store the content for later use or decrypt the content for playback.  
         [0045]    In another embodiment of the present invention, system operator establishes that the Personal Versatile Recorder ( 10 ) is located at a particular user residence or location. In accordance with this alternative embodiment, the content that has been designated for transfer to the Personal Versatile Recorder ( 10 ) is stored or reproduced only by an receiver/playback device ( 30 ) that is associated with the particular user residence or location. This alternative embodiment proceeds as follows.  
         [0046]    Initially, a receiver/playback device ( 30 ) owned by a user is interfaced to the Personal Versatile Recorder ( 10 ) that is located at a user residence or location. The user then requests the transfer of content from the Personal Versatile Recorder ( 10 ) to a receiver/playback device ( 30 ). Using a standard protocol, the identifier for the receiver/playback device ( 30 ) is reported to the system operator. This identifier may comprise, but is not limited to, an X.509 certificate. The system operator compares the identifier against a nationally known revocation list of prohibited devices. Alternatively, the revocation list of a limited number of prohibited devices is stored in the Personal Versatile Recorder ( 10 ). If identifier is not on the revocation list and has not been previously associated with any other set-top terminal, the identifier is then registered and associated with the Personal Versatile Recorder ( 10 ). The system operator sends an acknowledgement to the Personal Versatile Recorder ( 10 ) indicating the association of the Personal Versatile Recorder ( 10 ) with the receiver/playback device ( 30 ). But if the identifier is on the revocation list, then the association of the Personal Versatile Recorder ( 10 ) with the receiver/playback device ( 30 ) is denied and the system operator sends a negative acknowledgement to the Personal Versatile Recorder ( 10 ). Upon receipt of this negative acknowledgement, the Personal Versatile Recorder ( 10 ) terminates the transfer request.  
         [0047]    If the identifier of the receiver/playback device ( 30 ) is associated with a Set-Top Terminal other than the Personal Versatile Recorder ( 10 ), the system operator flags the identifier for further investigation. The transfer is aborted when a negative acknowledgement, indicating a denial of the association of the Personal Versatile Recorder ( 10 ) with the receiver/playback device ( 30 ), is sent from the system operator to the Personal Versatile Recorder ( 10 ). Conversely, the transfer is permitted when a positive acknowledgement is sent, indicating an authorization of the association of more than one Personal Versatile Recorder ( 10 ) with a specific receiver/playback device ( 30 ).  
         [0048]    These features are controllable by the system operator. For example, medium to high value content may be offered only from the system operator for a certain release window, that allows the consumer to access this content with selected playback options (copy never, copy once, copy without restrictions) at different price points. Two grades of content are offered, one for mass consumption and one for production, such that if the former were stolen it would not play on an unauthorized device.  
         [0049]    In yet another embodiment of the present invention, an embedded selfdestruction feature contained within the content communicates with the receiver/playback device ( 30 ) and the system operator. The activation of this routine occurs under detection of certain conditions that include, but are not limited to, an unauthorized access of the content or a copyright violation. Upon activation of the self-destruction feature, the identifier of the receiver/playback device ( 30 ) obtained by the Personal Versatile Recorder ( 10 ) and a signed token for traceability is generated (with all relevant information), stored locally on the Personal Versatile Recorder ( 10 ), and is reported to the system operator. This feature includes, but is not limited to, the anonymous server tasked to investigate the unauthorized conditions that initiate an activation of the embedded self-destruction feature. This server is operated by the system operator or by a third party. The signed token ensures reporting authenticity and non-repudiation. In addition to this reporting feature, the content is erased from the memory contained within the Personal Versatile Recorder ( 10 ). The signed token also is maintained for subsequent use. The user may also receive a warning indicating that any further infraction may result in a fine or an arrest. This warning is stored within the device ( 30 ), either as a message generated by the device ( 30 ), or alternatively, as a message provided from the system operator for the subsequent presentation by the device ( 30 ) to the user.  
         [0050]    Revenue collection is in accordance with the business agreements that the system operator placed with the content owners. Collection is as follows.  
         [0051]    Initially, the user selects one of the access and copy options offered by the system operator for a given content. The right to perform the selected option is granted to the Personal Versatile Recorder ( 10 ). Billing may occur at this time or may be deferred. The user exercises these options. The Personal Versatile Recorder ( 10 ) then tracks the options as they are exercised and reports the options to the system operator for additional tracking or billing. The above is only an example embodiment other embodiments are also possible.  
         [0052]    Depicted within FIG. 3 and FIG. 4 are a transmitting device ( 100 ), a network ( 122 ), a media device ( 124 ), a network ( 126 ), and at least one receiver/playback device ( 130 ). The transmitting device ( 100 ) of the present invention includes, but is not limited to the Personal Versatile Recorder ( 10 ) as described hereinabove, a Set-Top Terminal, a personal computer (PC), or any device that can output information in the form of a digital or analog signal.  
         [0053]    The network ( 122 ) includes, but is not limited to the PAN ( 20 ) as described hereinabove, or any network that is suitable for transferring information from the transmitting device ( 100 ) to a media device ( 124 ), such as a wired network or a wireless network.  
         [0054]    The media device ( 124 ) includes, but is not limited to, the receiver/playback device ( 30 ) as described hereinabove, a stationary device capable of storing content, a mobile or portable device capable of storing content, a removable storage medium, a portable storage medium, a secure digital card, an optical disc, a magnetic disc, a floppy diskette, either as a stand-alone unit or as part of another stationary or portable device.  
         [0055]    Similar to the network ( 122 ), the network ( 126 ) includes, and is not limited to the PAN ( 20 ) as described hereinabove, or any network that is suitable for transporting information from the media device ( 124 ) to at least one receiver/playback device ( 130 ).  
         [0056]    The receiver/playback device ( 130 ) includes, but is not limited to, the receiver/playback device ( 30 ) as described hereinabove, a transmitting device ( 100 ) that is also capable of receiving content, a media device ( 124 ), or any other device capable of receiving content. The receiver/playback device ( 130 ) is co-located with or remotely-located from the transmitting device ( 100 ). The media device ( 124 ) is a conduit for the ultimate content distribution to the receiver/playback device ( 130 ). Specifically, instead of using direct wired or wireless networking from the transmitting device ( 100 ) to the receiver/playback device ( 130 ) for the transfer multimedia content, the media device ( 124 ) is alternatively used to as an intermediary the transmitting device ( 100 ) and the a receiver/playback device ( 130 ) for the transfer of this content.  
         [0057]    [0057]FIG. 3 depicts the media device ( 124 ) as being simultaneously interfaced with the transmitting device ( 100 ) and the receiver/playback device ( 130 ).  
         [0058]    Alternatively, FIG. 4 depicts the media device ( 124 ) that is not simultaneously interfaced with the transmitting device ( 100 ) and the receiver/playback device ( 130 ). Instead, the media device ( 124 ) is initially interfaced with the transmitting device ( 100 ), receiving content transferred therefrom. The transferred content received from the transmitting device ( 100 ) is stored in the storage medium of the media device ( 124 ) for subsequent delivery to the receiver/playback device ( 130 ). The media device ( 124 ) is then isolated from the transmitting device ( 100 ) and interfaced with the receiver/playback device ( 130 ). Once the media device ( 124 ) is interfaced with the receiver/playback device ( 130 ), the transferred content stored in the storage medium of the media device ( 124 ) is then transported to the receiver/playback device ( 130 ). As shown within FIG. 4, co-location of the receiver/playback device ( 130 ) and the transmitting device ( 100 ), while being feasible, is not a prerequisite for the transfer of content from the transmitting device ( 100 ) to the receiver/playback device ( 130 ). Instead, the receiver/playback device ( 130 ), being remotely-located from and not directly interfaced with the transmitting device ( 100 ) will nevertheless receive content from the transmitting device ( 100 ).  
         [0059]    The apparatus FIG. 3 and FIG. 4 performs various functions to enhance the performance of the media device ( 124 ) and/or the receiver/playback device ( 130 ) once direct or indirect communication using a wired or wireless interface between these devices and the transmitting device ( 100 ) has been established. These functions include, but are not limited to, the enablement and disablement of the configuration, the administration, and the programming or reprogramming of the media device ( 124 ) and/or the receiver/playback device ( 130 ).  
         [0060]    These performance-enhancing functions also include the enablement and disablement of the information transfer from the transmitting device ( 100 ) to the media device ( 124 ) and/or the receiver/playback device ( 130 ). Using the apparatus of FIGS. 3 and 4, multimedia content is transferred from the transmitting device ( 100 ) to the media device ( 124 ) using the transfer scheme shown in the flowchart of FIG. 2 and described hereinabove. Furthermore, each transmitting device ( 100 ), media device ( 124 ), and receiver/playback device ( 130 ) contains secure agents, which are applications written in software and may be supported via secured hardware resources, that permit these devices to perform Content Rights Management functions. In particular, an additional level of security is achieved by programming the media device ( 124 ) to facilitate data transfer to the receiver/playback device ( 130 ) only after the media device ( 124 ) has coordinated the transfer with the transmitting device ( 100 ) and has successfully authenticated the receiver/playback device ( 130 ). This programming is accomplished through an agent that is included as a feature of the transmitting device ( 100 ) and another agent that is included as a feature of the media device ( 124 ). The agent that is included with the transmitting device ( 100 ) provides to the transmitting device ( 100 ) the ability to configure and send, to the media device ( 124 ), information for permitting the establishment of a communications link with a selected receiver/playback device ( 130 ). This information includes, but is not limited to, the requisite the public keys and associated certificates. The agent that is included with the media device ( 124 ) provides to the media device ( 124 ) the ability to receive the information from the transmitting device ( 100 ) and to store the public keys and associated certificates of the media device ( 124 ) and the receiver/playback device ( 130 ). These agents also permit the user to transfer content from various media devices ( 124 ) to diverse receiver/playback devices ( 130 ) when the media device ( 124 ) is programmed to have the same security features, such as keys, certificates, or supporting cryptography routines, as any other receiver/playback device. The media device ( 124 ) disallows the transfer of data in the same manner as the transmitting device ( 100 ) when the media device ( 124 ) detects an illegal or unauthorized device as the receiver/playback device ( 130 ).  
         [0061]    The preceding description has been presented only to illustrate and describe the invention. It is not intended to be exhaustive or to limit the invention to any precise form disclosed. Many modifications and variations are possible in light of the above teaching.  
         [0062]    The preferred embodiments were chosen and described to explain the principles of the invention and its practical application. The preceding description is intended to enable others skilled in the art to best utilize the invention in various embodiments and with various modifications as are suited to the particular use contemplated. It is intended that the scope of the invention be defined by the following claims.