Protecting content on client platforms

A method comprising:

• registering as a component with a client security management layer to receive protection of a protected portion of a memory of a computer system;
• receiving encrypted content and an encrypted content key from a content provider;
• providing the encrypted content key to the client security management layer, wherein the client security management layer confirms the integrity of the component, decrypts the encrypted content key to provide a decrypted content key, and places the decrypted content key into the protected portion of the memory;
• and
• decrypting the encrypted content into the protected portion of the memory using the decrypted content key.

A computer system comprising:

• a processor;
• a memory coupled to the processor;
• a client security management layer configured to:
• control access to a protected portion of the memory on behalf of a component running on the processor;
• receive an encrypted content key from the component;
• confirm the integrity of the component;
• decrypt the encrypted content key to provide a decrypted content key;
• and
• place the decrypted content key in the protected portion of the memory in response to confirming the integrity of the component.

A computer system comprising:

• a processor;
• a memory;
• a client security management layer;
• and
• a content player configured to
• register as a component with the client security management layer to receive protection of a protected portion of the memory;
• receive encrypted content and an encrypted content key from a content provider;
• provide the encrypted content key to the client security management layer, wherein the client security management layer confirms the integrity of the component, decrypts the encrypted content key to provide a decrypted content key, and places the decrypted content key into the protected portion of the memory;
• and
• decrypt the encrypted content into the protected portion of the memory using the decrypted content key.

A computer-readable storage medium comprising:

• instructions configured to:
• control access to a protected portion of a memory of a computer system on behalf of a component running on the computer system;
• receive an encrypted content key from the component;
• confirm the integrity of the component;
• decrypt the encrypted content key to provide a decrypted content key;
• and
• place the decrypted content key in the protected portion of the memory in response to confirming the integrity of the component.

A computer-readable storage medium comprising:

• instructions configured to:
• register as a component with a client security management layer of a computer system to receive protection of a protected portion of a memory of the computer system;
• receive encrypted content and an encrypted content key from a content provider;
• provide the encrypted content key to the client security management layer, wherein the client security management layer confirms the integrity of the component, decrypts the encrypted content key to provide a decrypted content key, and places the decrypted content key into the protected portion of the memory;
• and
• decrypt the encrypted content into the protected portion of the memory using the decrypted content key.