Back to results
US 2023/0418911 A1Published application
Systems and methods for securely processing content
AssigneeComcast Cable Communications, LLC
InventorAndrew MORROW
Life of this patent
Estimating the term…
Abstract
A device may not trust another device with which it is in communication. To establish trust, a first device may send a second device an indication of signed code that is stored in a protected memory of the first device. Based on determining that the first device is a trusted device, the second device may send the first device an encrypted content asset, a decryption key associated with the content asset, and/or an encryption key associated with the content asset.
Claims28
A method comprising:
- sending, to a key server and by a device during a time in which the device is not authenticated, an indication of a secure enclave on the device;
- receiving, based on sending the indication of the secure enclave and from the key server, a shared secret key;
- sending, to the key server, a request for a digital rights management (DRM) key associated with a content asset;
- based on the request, receiving, from the key server, at least the DRM key, wherein the at least the DRM key is encrypted using the shared secret key;
- and
- decrypting, using the secure enclave and the shared secret key, the at least the DRM key.
3 more elements
A device comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the device to:
- send, to a key server during a time in which the device is not authenticated, an indication of a secure enclave on the device;
- receive, based on sending the indication of the secure enclave and from the key server, a shared secret key;
- send, to the key server, a request for a digital rights management (DRM) key associated with a content asset;
- based on the request, receive, from the key server, at least the DRM key, wherein the at least the DRM key is encrypted using the shared secret key;
- and
- decrypt, using the secure enclave and the shared secret key, the at least the DRM key.
6 more elements
A non-transitory computer-readable medium storing instructions that, when executed, cause:
- sending, to a key server and by a device during a time in which the device is not authenticated, an indication of a secure enclave on the network device;
- receiving, based on sending the indication of the secure enclave and from the key server, a shared secret key;
- sending, to the key server, a request for a digital rights management (DRM) key associated with a content asset;
- based on the request, receiving, from the key server, at least the DRM key, wherein the at least the DRM key is encrypted using the shared secret key;
- and
- decrypting, using the secure enclave and the shared secret key, the at least the DRM key.
3 more elements
A system comprising:
- a key server;
- and
- a device comprising a secure enclave, wherein the device is configured to:
- send, to the key server during a time in which the device is not authenticated, an indication of the secure enclave on the network device;
- receive, based on sending the indication of the secure enclave and from the key server, a shared secret key;
- send, to the key server, a request for a digital rights management (DRM) key associated with a content asset;
- based on the request, receive, from the key server, at least the DRM key, wherein the at least the DRM key is encrypted using the shared secret key;
- and
- decrypt, using the secure enclave and the shared secret key, the at least the DRM key.
6 more elements
Dependencies are inferred from the claim text.