Secure Media Path Methods, Systems, and Architectures

One or more computer-readable media having computer-readable instructions thereon which, when executed by one or more processors, cause the one or more processors to:

• establish multiple paths of components that are to process and render digital data, individual components supporting one or more of an authenticable interface and an authentication proxy interface, the multiple paths comprising a video path for processing digital video data, and an audio path for processing digital audio data;
• translate, if necessary, digital rights management data that is associated with the digital data and use the translated digital rights management data to protect the digital data during processing of the digital data;
• create a first authenticator to authenticate individual components of one or more of the paths;
• call, with the first authenticator, one or more authenticable interfaces on one or more respective components to ascertain components downstream from the components that are called;
• authenticate one or more downstream components using the first authenticator;
• for those components that support an authentication proxy interface and an authentication interface, create a separate authenticator;
• establish an encrypted channel between the first authenticator and one or more of the separate authenticators and use the channel to provide encryption/decryption keys to the components for use in encrypting and decrypting data;
• and
• authenticate additional components using the separate authenticator.

A computing device comprising:

• memory;
• one or more processors;
• instructions in the memory which, when executed by the one or more processors, cause the one or more processors to:
• establish multiple paths of components that are to process and render digital data, individual components supporting one or more of an authenticable interface and an authentication proxy interface, the multiple paths comprising a video path for processing digital video data, and an audio path for processing digital audio data, the authenticable interface returning one or more of:
• a list of authentication interfaces of downstream components,
• a list of authentication proxy interfaces of downstream components, and
• a list of dependent components on which to verify signatures, and
• key session number for the chain of authenticators;
• translate, if necessary, digital rights management data that is associated with the digital data and use the translated digital rights management data to protect the digital data during processing of the digital data;
• create a first authenticator to authenticate individual components of one or more of the paths;
• call, with the first authenticator, one or more authenticable interfaces on one or more respective components to ascertain components downstream from the components that are called;
• authenticate one or more downstream components using the first authenticator;
• for those components that support an authentication proxy interface and an authentication interface, create a separate authenticator;
• establish an encrypted channel between the first authenticator and one or more of the separate authenticators and use the channel to provide encryption/decryption keys to the components for use in encrypting and decrypting data;
• and
• authenticate additional components using the separate authenticator.