Downloadable security and protection methods and apparatus

Computerized apparatus for use in a content delivery, the computerized apparatus comprising:

• a computerized server apparatus, the computerized server apparatus configured to establish a security boundary around at least a portion of a requesting one of a plurality of computerized client devices, the security boundary allowing for the protection of both content and software images included therein;
• a digital content protection apparatus in communication with the computerized server apparatus, the digital content protection apparatus configured to generate at least one software image;
• and
• a media provisioning apparatus in communication with the computerized server apparatus and the digital content protection apparatus, the media provisioning apparatus configured to initiate transmission of the at least one software image;
• wherein the requesting one of the plurality of computerized client devices is in communication with one or more secure output domains and one or more non-secure output domains, and wherein the computerized server apparatus is configured to (i) extend the security boundary to the one or more secure output domains, and (ii) prevent the extension of the security boundary to the one or more non-secure output domains.

Computerized apparatus for use in a content delivery network, the computerized apparatus comprising:

• a computerized server apparatus, the computerized server apparatus configured to establish a security boundary around at least a portion of a requesting one of a plurality of computerized client devices, the security boundary allowing for the protection of both content and software images included therein;
• a digital content protection apparatus in communication with the computerized server apparatus, the digital content protection apparatus configured to generate at least one software image;
• and
• a media provisioning apparatus in communication with the computerized server apparatus and the digital content protection apparatus, the media provisioning apparatus configured to initiate transmission of the at least one software image;
• wherein the computerized server apparatus is configured to implement one or more security policies within the security boundary, wherein the one or more security policies are provided by an operator of the content delivery network or a third-party network operator.

A computerized method of operating a security management architecture within a data network, the method comprising:

• identifying a plurality of computerized client devices in data communication with the data network;
• generating a plurality of encrypted software images based on one or more parameters;
• authenticating a first one of the plurality of computerized client devices;
• transmitting, via a first delivery channel, a first one of the plurality of encrypted software images to the first one of the computerized client devices;
• transmitting a first cryptographic key to the first one of the computerized client devices, the first cryptographic key configured to enable decryption of the first one of the plurality of encrypted software image;
• providing at least a second cryptographic key to the first one of the computerized client devices, the second cryptographic key configured to enable decryption of encrypted digital content;
• authenticating a second one of the plurality of computerized client devices;
• and
• transmitting a second one of the plurality of encrypted software images to the second one of the computerized client devices;
• and
• wherein:
• the first one of the computerized client devices is a first type of device and the second one of the computerized client devices is a second type of device, and
• the generating the plurality of encrypted software images, comprises:
• generating the first one of the plurality of encrypted software images, the first one of the plurality of encrypted software images associated with the first type of client device;
• and
• generating the second one of the plurality of encrypted software images, the second one of the plurality of encrypted software images associated with the second type of client device.

A computerized method of operating a security management architecture within a data network, the method comprising:

• identifying a plurality of computerized client devices in data communication with the data network;
• generating a plurality of encrypted software images based on one or more parameters;
• authenticating a first one of the plurality of computerized client devices;
• transmitting, via a first delivery channel, a first one of the plurality of encrypted software images to the first one of the computerized client devices;
• transmitting a first cryptographic key to the first one of the computerized client devices, the first cryptographic key configured to enable decryption of the first one of the plurality of encrypted software image, wherein the transmitting the first cryptographic key to the first one of the computerized client devices comprises transmitting the first cryptographic key via a second delivery channel, the first delivery channel comprising a channel of a first access network, the second delivery channel comprising a channel of a second access network that is different from the first access network;
• and
• providing at least a second cryptographic key to the first one of the computerized client devices, the second cryptographic key configured to enable decryption of encrypted digital content.