Method and apparatus for building a hardware root of trust and providing protected content processing within an open computing platform

A client computing system for processing content, content including one or more simultaneous protected content streams with distinct security properties and keying material, comprising:

• a first component including a plurality of processor cores and a graphics engine, at least one of the processing cores to execute a media player application and have a shared secret, the media player application to obtain encrypted content from a service provider server coupled to the client computing system over a network, the graphics engine to receive the encrypted content over a protected audio/video path;
• a second component coupled to the first component by a protected chip to chip data interface, the second component including a security processor to execute firmware to provide attestation and key management operations, and have the shared secret, the security processor to provide a hardware-based root of trust between the client computing system and the service provider server, to obtain a key blob having an encrypted title key associated with the encrypted content from the service provider server, to control content processing on the client computing system, and to pass the encrypted title key associated with the encrypted content to the graphics engine over the protected chip to chip data interface at the full system memory bandwidth without compromising performance or security;
• and
• a display coupled to the second component by a protected display interface;
• wherein the graphics engine is to decrypt, decode, and decompress the encrypted content using the encrypted title key received from the security processor, to compose display image data, and to re-encrypt the display image data within the graphics engine;
• and pass the encrypted display image data to the display over the protected display interface.