System for identification and revocation of audiovisual titles and replicators

An article comprising:

• a storage medium having a plurality of machine accessible instructions, wherein when the instructions are executed by a processor, the instructions provide for the managing of production of a title including content, the instructions including
• obtaining a signed certificate from a trusted entity, the signed certificate including a public key, and inserting the signed certificate into the title;
• computing a hash of the content, signing the hash with a private key corresponding to the public key, and inserting the signed hash into the title;
• and
• inserting the content into the title.

An article comprising:

• a storage medium having a plurality of machine accessible instructions, wherein when the instructions are executed by a processor, the instructions provide for processing of a title by a player, the title including content for rendering by the player, the instructions including
• reading a signed certificate from the title, verifying a first signature of the signed certificate using a public key of a trusted entity, and aborting processing of the title when the first signature is invalid;
• and
• reading a signed hash from the title, verifying a second signature of the signed hash using a public key obtained from the signed certificate, and aborting processing of the title when the second signature is invalid.

A method of operating a trusted entity comprising:

• signing a certificate with a private key to form a signed certificate;
• sending the signed certificate to a replicator for insertion into one or more titles;
• creating a revocation list, the revocation list including information identifying at least one of a title, a certificate, and a replicator;
• signing the revocation list with the private key;
• and
• sending the signed revocation list to at least one replicator for insertion into titles.

An article comprising:

• a storage medium having a plurality of machine accessible instructions, wherein when the instructions are executed by a processor, the instructions provide for operating a trusted entity, the instructions including
• signing the certificate with a private key to form a signed certificate;
• sending the signed certificate to a replicator for insertion into one or more titles;
• creating a revocation list, the revocation list including information identifying at least one of a title, a certificate, and a replicator;
• signing the revocation list with the private key;
• and
• sending the signed revocation list to at least one replicator for insertion into titles.

A method of processing a title, the title including content, comprising:

• signing a certificate having a public key of a second entity by a first entity using the first entity's private key;
• sending the signed certificate from the first entity to the second entity;
• and
• storing, by the second entity, the signed certificate on the title.