Protected media path and refusal response enabler

A method of delivering encrypted content from a plurality of content delivery sources to a plurality of sinks by way of a common computing device, the method comprising:

• an application on the common computing device calling to a media base on the common computing device with a definition of content from a first source of the plurality of content delivery sources, the first source, and a first sink of the plurality of sinks;
• the media base including a policy engine that enforces policy on behalf of the first source, the policy corresponding to the content from the first source and including rules and requirements for accessing and rendering the content, and establishing a protected media path based on the defined content, the first source, and the first sink to effectuate such delivery, the established protected media path including:
• the media base;
• a source trust authority (SOTA) on the common computing device and associated with and corresponding to the first source, the SOTA acting as a secure lockbox connecting the first source to the media base and representing the first source in the protected media path, decrypting the content from the first source, translating policy associated with the content from a native format of the first source into a format amenable to the policy engine, propagating the translated policy to the policy engine, and releasing the decrypted content to the media base;
• and
• a sink trust authority (SITA) on the common computing device and associated with and corresponding to the first sink, the SITA acting as a secure lockbox connecting the first sink to the media base and representing the first sink in the protected media path, re-encrypting the decrypted content released by the SOTA, receiving the translated policy from the policy engine, and re-translating the translated policy from the format of the policy engine into a format amenable to the first sink, whereby the re-encrypted content and the re-translated policy are delivered to the first sink, and whereby the first sink receives the re-encrypted content and the re-translated policy, decrypts the received content, and renders same based on the received policy;
• the SOTA on behalf of the first source establishing trust with respect to the protected media path;
• the SOTA upon trust being established with respect to the protected media path propagating the translated policy corresponding to the content to be delivered to the protected media path;
• the SOTA determining a particular type of action to be taken with the content as delivered through the protected media path;
• the SOTA deciding whether the particular type of action can be taken with the content as delivered through the protected media path and informing the media base regarding same;
• the media base informing the application whether the particular type of action can be taken, and if so the application proceeding by commanding the media base to perform such type of action.