Remotely Managed Trusted Execution Environment For Digital-Rights Management In A Distributed Network With Thin Clients

摘要

A method is performed at a client device distinct from an application server. In the method, a first key is stored in a secure store of the client device. A wrapped second key is received from the application server. The first key is retrieved from the secure store and used to unwrap the second key. Encrypted media content is received from the application server, decrypted using the unwrapped second key, and decoded for playback.

主权项

1. A method, comprising:
at a client device distinct from an application server:
storing a first key in a secure store of the client device;receiving a wrapped second key from the application server;retrieving the first key from the secure store;using the first key to unwrap the second key;receiving encrypted media content from the application server;decrypting the encrypted media content using the unwrapped second key; anddecoding the decrypted media content for playback.