Method and system for securing a client's access to a DRM agent's services for a video player

A method for securing a client's computerized module access to a Digital Rights Management (DRM) agent's services, said method comprising the steps of:

• receiving the get-token request from the client;
• applying a function to generate a decryption request identifier (RequestID) and a token value (Token), and returning the RequestID and the Token to the client;
• inserting, into a hash table of token values with get-token requests identifiers as keys, recorded in a memory of the DRM agent, a record comprising the Token associated to the Request ID;
• receiving, a decryption request of a multimedia content encrypted chunk, wherein the decryption request comprising the RequestID, the encrypted chunk and a digest of the encrypted chunk;
• retrieving the Token, from the hash table, based on the RequestID;
• processing the digest using a public key and the Token;
• checking match between processed digest and at least part of the encrypted chunk;
• only in case of match:
• decrypt encrypted chunk and return the decrypted chunk to the client;
• wherein at least one of receiving, processing, computing decrypting are perfumed by a processor.

A system for securing a client's access to a Digital Rights Management (DRM) agent's services, said system being comprised of:

• a microprocessor;
• a client algorithm engine for receiving a decryption request identifier (RequestID) and a token value (Token) from the DRM agent, computing a digest of a multimedia content encrypted chunk using the Token and a private key, computing a decryption request of the multimedia content encrypted chunk, wherein the decryption request comprising the RequestID, the encrypted chunk and the digest of the encrypted chunk, and sending to the DRM agent, the decryption request of the encrypted chunk;
• a get-token request handling engine for receiving a get-token request, applying a function to generate the RequestID and the Token, returning the RequestID and the Token to the client, and inserting, into a hash table of token values with get-token requests identifiers as keys, a record comprising the Token associated to the RequestID;
• a decryption request handling engine for receiving a decryption request of a multimedia content encrypted chunk comprising the RequestID, the encrypted chunk and a digest of the encrypted chunk, retrieving the Token, from the hash table based on the RequestID, processing the digest using a public key and the Token, checking match between processed digest and at least part of the encrypted chunk and, only in case of match:
• decrypting the encrypted chunk and returning the decrypted chunk to the client.