Patent ID: 8156560

Claim:
A method for defining rules and enforcing rules of transitioning a digital content between two security domains having different security requirements, the method comprising: establishing a first security domain for receiving, from a digital content source, a transport stream comprising a digital content; establishing a second security domain associated with devices for storage of the digital content at a receiver device, wherein the second security domain is established at the border of the first security domain and the second security domain; wherein the digital content source can cause the digital content to be pre-positioned on the receiver device while the digital content remains in the first security domain, and the digital content source also can cause the digital content to be transmitted from the first security domain to the second security domain; and if the digital content source causes the digital content to be pre-positioned on the receiver device while the digital content remains in the first security domain: receiving and storing the digital content on the receiver device with transport security associated with the first security domain kept intact and with encryption associated with the first security domain kept intact; otherwise, if the digital content source causes the digital content to be transmitted from the first security domain to the second security domain: performing authorization for conditional access of transport stream from the first security domain; providing a session ID for authorizing both a program and associated digital rights management (DRM) rules received with the digital content in the first security domain, and authenticating each session request received from a particular device in the second security domain for usage of the digital content; selecting at least one rule from the DRM rules to be transmitted with the digital content; transmitting the at least one rule with the digital content from the first security domain to the second security domain; translating a first protection in the first security domain of the digital content and the at least one rule attached to the digital content to a second protection in the second security domain of the digital content and the at least one rule for secure delivery and locking the usage of the digital content to the particular device in the second security domain; continuously enforcing the at least one rule during usage of the digital content in the second security domain; and maintaining control over the usage of the digital content in the second security domain.