Digital rights management for local recording and home network distribution

摘要

The systems disclosed here provide a complete standards-based end-to-end scalable system for storage, delivery and in-home distribution of digital content over IP networks using standard protocols such as Real-time Transport Protocol (“RTP”) or IP-encapsulated MPEG-2 Transport Stream, or traditional MPEG-2 networks. Mechanisms are provided for receiving content from one security domain, re-encrypting that content uniquely for a receiving device, persistently storing that content, and playing back that content at a later time to and within another security domain. The systems also provide the ability to stream the persistently-stored content from the initial receiving device to another device that has been authenticated as part of a, e.g., home network. This allows a media server, e.g., a dual-tuner set-top box (“STB”) with hard drive, to deliver recorded content to any TV in the house by streaming to media clients such as STBs.

主权项

1. A non-transitory computer readable medium storing computer-executable instructions that, in response to execution, cause a device comprising a processor to perform operations, comprising:
a. Communicatively coupling a home key distribution center via a wide area network to an infrastructure key distribution center; b. Transmitting a security certificate via a wide area network to the infrastructure key distribution center; c. receiving a reply security certificate via the wide area network from the infrastructure key distribution center; d. sending a secure request via the wide area network for a ticket-granting ticket to the infrastructure key distribution center; e. receiving via the wide area network from the infrastructure key distribution center the ticket-granting ticket that provides authorization data that is used to determine which client device(s) are authorized to share content on a home network; and f. distributing a server ticket to another client device within the home network only when the other client device is determined to be authorized, based on the authorization data associated with the ticket granting ticket, to receive content from other devices in the home network, wherein the server ticket identifies a client device operating as a server within the home network, and wherein the server ticket can be used by the other client device to obtain content from the server using a content key generated by the server that is unique to a combination of the server and the content and wherein the content key has been encrypted by a key that is unique to the server, and wherein the content is encrypted with the content key.