Secure recording and rendering of encrypted multimedia content

A non-transitory computer readable medium having instructions encoded thereon that, when executed by one or more processors, cause a secure content playback process to be invoked, the process comprising:

• receiving, at a playback device, from a content repository, an encrypted content item that is identified by a content item identifier, wherein the encrypted content item includes a first validation hash;
• sending, from the playback device to an authorization server, a playback authorization token request that includes a user identifier and the content item identifier;
• receiving, at the playback device, from the authorization server, a playback authorization token;
• sending, from the playback device to a key management server, a playback license request that includes the playback authorization token and a playback device identifier associated with the playback device;
• receiving, at the playback device, from the key management server, a playback license that includes a content key;
• decrypting the content item using the content key;
• generating a second validation hash based on the decrypted content item;
• verifying that the first and second validation hashes match;
• causing the decrypted content item to be rendered on a display screen associated with the playback device;
• making a determination that the content item is no longer being rendered on the display screen;
• and
• in response to making the determination, sending a notification from the playback device to the authorization server, the notification indicating that the playback license is released.

A content playback device comprising:

• a display screen;
• a memory device;
• and
• a processor that is operatively coupled to the display screen and the memory device, wherein the processor is configured to execute instructions stored in the memory device that, when executed, cause the processor to invoke a secure content playback process, the process comprising:
• receiving, from a content repository, an encrypted content item that is identified by a content item identifier, wherein the encrypted content item includes a first validation hash;
• sending, to an authorization server, a playback authorization token request that includes a user identifier and the content item identifier;
• receiving, from the authorization server, a playback authorization token;
• sending, to a key management server, a playback license request that includes the playback authorization token and a playback device identifier;
• receiving, from the key management server, a playback license that includes a content key;
• decrypting the content item using the content key;
• generating a second validation hash based on the decrypted content item;
• verifying that the first and second validation hashes match;
• rendering the decrypted content item on the display screen;
• making a determination that the content item is no longer being rendered on the display screen;
• and
• in response to making the determination, sending a notification from the playback device to the authorization server, the notification indicating that the playback license is released.