Patent ID: 8266448

Claim:
A method, comprising: storing a player executable from a second party, the player executable including: an encrypted binary program for execution by a processor, the encrypted binary program being encrypted under a public key of a first party, and the encrypted binary program being further signed by a signing secret key of the second party, and a certificate for a signing public key of the second party, the certificate resulting from the first party utilizing a signing secret key of the first party to sign the signing public key of the second party; establishing an ephemeral session key secret by generating a random number, and using the ephemeral session key secret to re-encrypt the encrypted binary program within the player executable into a run-time encrypted payload; loading the run-time encrypted payload and the certificate for the signing public key of the second party; verifying the loaded certificate for the signing public key of the second party utilizing the public key of the first party; and verifying the encrypted binary program of the loaded run-time encrypted payload utilizing the signing public key of the second party; and in response to the verification of the loaded certificate for the signing public key of the second party, and the verification of the encrypted binary program of the loaded run-time encrypted payload, decrypting the loaded run-time encrypted payload utilizing the ephemeral session key secret.