Back to results
US 11,386,187 B2Granted
Systems and methods for securely processing content
AssigneeComcast Cable Communications, LLC
InventorAndrew Morrow
Life of this patent
Estimating the term…
Abstract
A device may not trust another device with which it is in communication. To establish trust, a first device may send a second device an indication of signed code that is stored in a protected memory of the first device. Based on determining that the first device is a trusted device, the second device may send the first device an encrypted content asset, a decryption key associated with the content asset, and/or an encryption key associated with the content asset.
Claims20
A method comprising:
- receiving, by a key server and from a network device that is untrusted by the key server, an indication of code associated with a secure enclave, on the network device, that comprises a signed code module;
- determining, based on the indication of the code, that the network device is a trusted device;
- sending, based on determining that the network device is a trusted device and to the network device, a shared secret key;
- receiving, from the network device, an encrypted request for a digital rights management (DRM) key associated with a content asset, wherein the encrypted request is encrypted using the shared secret key;
- and
- sending, based on the encrypted request and to the network device, the DRM key and a decryption key.
3 more elements
A system comprising:
- a key server configured to:
- receive, from a network device that is untrusted by the key server, an indication of code associated with a secure enclave, on the network device, that comprises a signed code module;
- and
- send, based on receiving the indication of the code and to the network device, a shared secret key;
- and
- the network device configured to:
- send, to the key server, a request for a digital rights management (DRM) key associated with a content asset, wherein the request is encrypted using the shared secret key;
- receive, from the key server and based on the request, an encrypted response that comprises the DRM key;
- decrypt, using the secure enclave and the shared secret key, the encrypted response to determine the DRM key;
- and
- decrypt, using the secure enclave and the DRM key, the content asset.
8 more elements
A method comprising:
- sending, to a key server and by a network device that is untrusted by the key server, an indication of code associated with a secure enclave, on the network device, that comprises a signed code module;
- receiving, in response to sending the indication of the code and from the key server, a shared secret key;
- sending, to the key server, a request for a digital rights management (DRM) key associated with a content asset, wherein the request is encrypted using the shared secret key;
- receiving, from the key server, an encrypted response to the request, wherein the encrypted response comprises the DRM key and a decryption key;
- determining, based on decrypting, using the secure enclave and the shared secret key, the encrypted response, the DRM key and the decryption key;
- and
- decrypting, using the secure enclave and the decryption key, the content asset.
4 more elements
Dependencies are inferred from the claim text.