Provisioning DRM credentials on a client device using an update server

摘要

A method of provisioning DRM credentials on a client device, comprising receiving DRM credentials at an update server from a key generation system, the DRM credentials having been encrypted by the key generation system, receiving a DRM credential request from a client device, the DRM credential request comprising a digital signature, a device class certificate, and an authorization token, authenticating the DRM credential request by validating the digital signature and the device class certificate, extracting and validating the authorization token, and providing the DRM credentials to the client device.

主权项

1. A method of provisioning DRM credentials on a client device, comprising:
receiving at an update server a set of DRM credentials from a key generation system, said DRM credentials having been encrypted by said key generation system using a cryptographic key; receiving a DRM credential request at said update server from a client device, said DRM credential request comprising a digital signature that includes two signature portions comprising: a device class certificate associated with a class of the requesting device, wherein the device class certificate signature portion is generated by the requesting client device and uses a private key; and an authorization token, wherein said authorization token signature portion comprises a signature field containing a signature generated from one or more other fields within the authorization token using a device private key associated with a device certificate held by a gateway device that generated and issued said authorization token to said client device; authenticating said DRM credential request at said update server by validating said digital signature; extracting and validating said authorization token from said DRM credential request at said update server after said DRM credential request has been validated; and providing said DRM credentials to said client device.