Networked digital video recording system with copy protection and random access playback

In a multimedia recording and playback network for receiving from a content server a service package of multimedia content, the network including a media server in communication with the content server, a system for securely transmitting a master encryption key from the content server to the media server, the system comprising:

• means for downloading a service package certificate from the content server to the media server;
• means, in the media server, for authenticating the downloaded service package certificate;
• means, in the content server, for providing to the media server a key server certificate, a public key of the content server, and client certificate request;
• means, in the media server, for authenticating the key server certificate;
• means, in the media server, for providing to the content server a client certificate including a challenge signature and a public key of the media server after authentication of the key server certificate;
• means, in the content server, for authenticating the client certificate including the challenge signature received from the media server;
• means, in the media server, for requesting the master encryption key from the content server;
• and
• means, in the content server, for responding to the master encryption key request by transmitting the master key to media server.

In a multimedia recording and playback network for receiving from a content server a service package of multimedia content, the network including a media server in communication with the content server for securely transmitting a master encryption key from the content server to the media server, the media server comprising:

• means for downloading a service package certificate from the content provider to the media;
• means for authenticating the downloaded service package certificate;
• means for receiving a key server certificate, a public key of the content provider, and a client certificate request;
• means for authenticating the key server request;
• means for providing to the content server a client certificate including a challenge signature and a public key of the media server after authentication of the key server certificate;
• means for requesting the master encryption key from the content server;
• and
• means for receiving and decrypting the master encryption key transmitted by the content server in an encrypted format.

In a multimedia recording and playback network for receiving from a content server a service package of multimedia content, the network including a media server in communication with the content server for securely transmitting a master encryption key from the content server to the media server, the content server comprising:

• a service package certificate;
• means for providing to the media server a key server certificate, a public key of the content provider, and a client certificate request
• means for receiving a client certificate including a challenge signature and a public key of the media server from the media server;
• means for authenticating the client certificate including the challenge signature received from the media server;
• and
• means for encrypting the master encryption key and transmitting the encrypted master encryption key to the media server.