Patent ID: 8443208

Claim:
A method of securing a storage device and providing content to an authorized entity yet protecting the content from unauthorized duplication comprising: in a portable device configured for detachably receiving the storage device, the portable device having a processor, a secure device driver interface and a security engine module, wherein the secure device driver interface and the security engine module are executable by the processor, performing: the secure device driver interface requesting the security engine module to initiate a key generation procedure in response to receiving a playback command to read an authentication area of the storage device; the security engine module requesting the secure device driver interface to communicate with the storage device for retrieving information for use by the security engine module to generate a media unique key, the media unique key corresponding to another instance of a media unique key maintained in a hidden, write-protected area of the storage device; the security engine module generating the media unique key, wherein exposure of the media unique key to the secure device driver interface is prevented by the security engine module requesting functions of the secure device driver interface to gain access to the storage device and the secure device driver interface requesting functions of the security engine module relating to key generation; the secure device driver interface obtaining one of a plurality of portions of an encrypted file of a track from the storage device; the security engine module generating a decryption key corresponding to the track; the security engine module decrypting the one of a plurality of portions with the decryption key; the security engine module deleting the decryption key and the media unique key after decrypting the one of the plurality of portions; after deletion of the decryption key, the secure device driver interface obtaining a next one of the plurality of portions of the encrypted file of the track from the storage device; the security engine module regenerating the media unique key and the decryption key corresponding to the track; and the security engine module decrypting the next one of the plurality of portions with the decryption key, wherein the decryption key and the media unique key are deleted each time one portion of the plurality of portions of the encrypted file of the track are decrypted.