# US 2021/0240847 A1 · System and method for protecting content > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0240847 A1 - Document ID: US20210240847A1 - Status: Published application - Kind: A1 - Application number: 17/235,753 - Filed: 2021-04-20 - Published: 2021-08-05 - Earliest claimed: 2017-08-31 - Assignees: ARRIS Enterprises LLC - Applicants: ARRIS Enterprises LLC - Inventors: Ananth Seetharam; Sean J. Higgins; Paul R. Osborne - Web page: https://patentgrep.com/patent/US20210240847A1 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} - G06F 21/105: {Arrangements for software license management or administration, e.g. for managing licenses at corporate level} - G06F 21/602: {Providing cryptographic facilities or services} - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 2463/062: applying encryption of the keys - H04L 2463/101: applying security measures for digital rights management - H04L 2463/103: applying security measure for protecting copyright - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for protecting content, comprising receiving, from a client device, a request for an encryption key for encrypting the content comprising a reference associated with the client device, identifying a set of supported security capabilities corresponding to the reference associated with the client device, identifying a set of required security capabilities corresponding to the content associated with the key request, determining if the set of supported security capabilities satisfy the set of required security capabilities, and in response to determining that the supported security capabilities satisfy the set of required security capabilities, transmitting the encryption key to the client device. ## Claims ### Claim 1 A method for protecting content, comprising: receiving, from a client device, a request for an encryption key for encrypting the content comprising a reference associated with the client device; identifying a set of supported security capabilities corresponding to the reference associated with the client device; identifying a set of required security capabilities corresponding to the content associated with the key request; determining if the set of supported security capabilities satisfy the set of required security capabilities; and in response to determining that the supported security capabilities satisfy the set of required security capabilities, transmitting the encryption key to the client device. ### Claim 2 (depends on 1) The method according to claim 1, further comprising, in response to determining that the supported security capabilities do not satisfy the set of required security capabilities, withholding the encryption key from the client device. ### Claim 3 (depends on 1) The method according to claim 1, wherein the client device comprises an asset decryptor. ### Claim 4 (depends on 1) The method according to claim 1, wherein determining if the set of supported security capabilities satisfy the set of required security capabilities comprises determining if the set of supported security capabilities includes at least the set of required security capabilities. ### Claim 5 (depends on 4) The method according to claim 4, wherein determining if the set of supported security capabilities satisfy the set of required security capabilities comprises determining if the set of supported security capabilities exactly matches the set of required security capabilities. ### Claim 6 (depends on 1) The method according to claim 1, wherein the content comprises media content comprising at least one of audio content and video content. ### Claim 7 (depends on 6) The method according to claim 6, wherein the content further comprises a media manifest used by a playing device for retrieving and decrypting the media content to be played on the playing device. ### Claim 8 (depends on 6) The method according to claim 6, wherein the encryption key comprises a media encryption key. ### Claim 9 (depends on 1) The method according to claim 1, wherein the set of supported security capabilities are configured to be ordered by increasing security capabilities listed in the set of required security capabilities. ### Claim 10 (depends on 9) The method according to claim 9, wherein the determining if the set of supported security capabilities satisfy the set of required security capabilities comprises determining if the set of supported security capabilities are equal or greater to the required security capabilities. ### Claim 11 A digital rights management system comprising: a receiving device for receiving an encryption key request from a client device; a transmitting device for transmitting the encryption key to the client device; a first database for storing a set of supported security capabilities corresponding to client device; a second database for storing a set of required security capabilities corresponding to at least one of the encryption key and content associated with the encryption key; and a processing device configured to: identify, in the first database, the set of supported security capabilities corresponding to the client device; identify, in the second database, the set of required security capabilities corresponding to the content associated with the encryption key; determine if the set of supported security capabilities satisfy the set of required security capabilities; and in response to determining that the supported security capabilities satisfy the set of required security capabilities, transmit the encryption key to the client device via the transmitting device. ### Claim 12 (depends on 11) The digital rights management system according to claim 11, wherein the processing device is further configured to, in response to determining that the supported security capabilities do not satisfy the set of required security capabilities, withhold the encryption key from the client device. ### Claim 13 (depends on 11) The digital rights management system according to claim 11, wherein the processing device being configured to determine if the set of supported security capabilities satisfy the set of required security capabilities comprises the processing device being configured to determine if the set of supported security capabilities exactly matches the set of required security capabilities. ### Claim 14 (depends on 11) The digital rights management system according to claim 11, wherein the processing device being configured to determine if the set of supported security capabilities satisfy the set of required security capabilities comprises the processing device being configured to determine if the set of supported security capabilities includes at least the set of required security capabilities. ### Claim 15 (depends on 11) The digital rights management system according to claim 11, wherein the content comprises media content comprising at least one of audio content and video content. ### Claim 16 (depends on 15) The digital rights management system according to claim 15, wherein the content further comprises a media manifest used by a playing device for retrieving and decrypting the media content to be played on the playing device. ### Claim 17 (depends on 15) The digital rights management system according to claim 15, wherein the encryption key comprises a media encryption key. ### Claim 18 (depends on 11) The digital rights management system according to claim 11, further comprising a server. ### Claim 19 (depends on 18) The digital rights management system according to claim 18, wherein at least one of the set of supported security capabilities and the set of required security capabilities is configured in the server. ### Claim 20 (depends on 19) The digital rights management system according to claim 19, wherein the set of supported security capabilities being configured in the server comprises an administrator specifying which required security capabilities are associated with particular content, and wherein the set of required security capabilities being configured in the server comprises the administrator which supported security capabilities are associated with a particular client device.