Patent ID: 7319759

Claim:
An apparatus for producing a new ((n)th) black box for a digital rights management (DRM) system, the (n)th black box for being installed in the DRM system and for performing decryption and encryption functions in the DRM system, the (n)th black box being produced and delivered to the DRM system upon request therefrom and including a new ((n)th) executable and a new ((n)th) key file, the (n)th key file having a new ((n)th) set of black box keys and a number of old sets of black box keys, the request including an old ((n−1)th) key file having the old sets of black box keys, the apparatus comprising: a code optimizer/randomizer receiving a master executable and randomized optimization parameters as inputs and producing the (n)th executable as an output; and a key manager receiving the (n−1)th key file and the (n)th set of black box keys as input, extracting the old sets of black box keys from the (n−1)th key file, and producing the (n)th key file including the (n)th set of black box keys and the old sets of black box keys as an output; wherein the (n)th executable and the (n)th key file are to be forwarded to the requesting DRM system, the key manager producing the (n)th key file encrypted according to a secret, the apparatus further comprising an injector receiving the (n)th executable from the code optimizer/randomizer as an input, injecting the secret into the (n)th executable in a pre-determined location, and producing the injected (n)th executable as an output, wherein the injected (n)th executable and the encrypted (n)th key file are to be forwarded to the requesting DRM system, wherein the DRM system resides on a computing device having a hardware ID (HWID) associated therewith, wherein the HWID is included in and obtained from the (n−1)th key file, and wherein the injector injects the obtained HWID into the (n)th executable in a pre-determined location.