Method and apparatus to using storage devices to implement digital rights management protection

摘要

Embodiments of systems, apparatuses, and methods to securely download digital rights managed content with a client are described. In some embodiments, a system establishes a secure root of trust for the client. In addition, the system establishes a secure tunnel between an agent of the client and a storage system of the client. Furthermore, the system securely downloads the digital rights managed content to the storage system via the secure tunnel and securely provides the digital rights managed content from the storage system to a display.

主权项

1. A method to securely download digital rights managed content with a client, comprising:
establishing a secure root of trust for the client; establishing a secure tunnel between an agent of the client and a storage system of the client; securely downloading the digital rights managed content from a remote service provider to a secure storage of the storage system via the secure tunnel, wherein the secure storage is not accessible to an operating system of the client, wherein the securely downloading the digital rights managed content comprises: authenticating with a service that manages the digital rights managed content, negotiating a content specific key for the digital rights managed content, and storing the content specific key in the storage system; receiving a request for the digital rights managed content from another entity, decrypting the digital rights managed content, re-encrypting the digital rights managed content as per a root of trust protocol, and providing the re-encrypted digital rights managed content to the another entity; and securely providing the digital rights managed content from the storage system to a display; wherein the agent further provides the re-encrypted digital rights managed content to a display.