Secure transcoding of content

A transcoding device for transcoding content from a first encoding standard to a second encoding standard, the transcoding device comprising:

• an interface connecting a source device to the transcoding device, wherein the source device is configured to send encrypted content in the first encoding standard to the transcoding device, and a second rights data file including a second content ID, and a second encryption key, and to perform DRM for the transcoding device including a key management operation;
• and
• a transcoder receiving the encrypted content in the first encoding standard via the interface from the source device in response to the source device determining the encrypted content in the first encoding standard is to be transcoded to encrypted content in the second encoding standard, and
• the transcoder decrypting the encrypted content in the first encoding standard using a decryption key received from the source device, transcoding the content in the first encoding standard to the content in the second encoding standard, re-encrypting the content in the second encoding standard to form encrypted content in the second encoding standard using the second encryption key, and transferring the encrypted content in the second encoding standard to at least one of the source device and a second device indicated by the source device.

A method for transcoding encrypted content:

• at a source device, determining content rights for encrypted content in a first encoding standard using a first rights data file, wherein the first rights data file includes a first content ID, and a first encryption key, and indicates whether transcoding of the encrypted content in the first encoding standard to encrypted content in a second encoding standard is allowed;
• creating a second rights data file for transcoded content in the second encoding standard, wherein the second rights data file includes a second content ID, and a second encryption key, the second encryption key being derived from a second encryption pre-key, in response to a determination that transcoding of the encrypted content in the first encoding standard to encrypted content in the second encoding standard is allowed;
• authenticating a transcoder;
• performing a key management operation including communicating a decryption key for the encrypted content in the first encoding standard and an encryption key for the encrypted content in the second encoding standard to the transcoder;
• and
• transferring the encrypted content in the first encoding standard to the transcoder, wherein the transcoder is configured to decrypt the encrypted content in the first encoding standard using the decryption key, transcode the encrypted content into the second encoding standard, re-encrypt the transcoded content in the second encoding standard to form encrypted content in the second encoding standard using the encryption key, and transfer the encrypted content in the second encoding standard to at least one of the source device and a second device indicated by the source device.

A computer readable storage medium storing at least one computer program that when executed performs a method for securely transcoding encrypted content, the method comprising:

• at a source device, determining content rights for encrypted content in a first encoding standard using a first rights data file using a first rights data file, wherein the first rights data file includes a first content ID, and a first encryption key, and indicates whether transcoding of the encrypted content in the first encoding standard to encrypted content in a second encoding standard is allowed;
• creating a second rights data file for transcoded content in the second encoding standard, wherein the second rights data file includes a second content ID, and a second encryption key, the second encryption key being derived from a second encryption pre-key, in response to a determination that transcoding of the encrypted content in the first encoding standard to encrypted content in the second encoding standard is allowed;
• authenticating a transcoder;
• performing a key management operation including communicating a decryption key for the encrypted content in the first encoding standard and an encryption key for the encrypted content in the second encoding standard to the transcoder;
• and
• transferring the encrypted content in the first encoding standard to the transcoder, wherein the transcoder is configured to decrypt the encrypted content in the first encoding standard using the decryption key, transcode the encrypted content into the second encoding standard, re-encrypt the transcoded content in the second encoding standard to form encrypted content in the second encoding standard using the encryption key, and transfer the encrypted content in the second encoding standard to at least one of the source device and a second device indicated by the source device.