Apparatus, system, method, and computer program product for generating and securing a program capable of being executed utilizing a processor to decrypt content

A computer program product embodied on a non-transitory computer readable medium, comprising:

• computer code for storing a player executable from a second party, the player executable including:
• an encrypted binary program for execution by a processor, the encrypted binary program being encrypted under a public key of a first party, and the encrypted binary program being further signed by a signing secret key of the second party, and
• a certificate for a signing public key of the second party, the certificate resulting from the first party utilizing a signing secret key of the first party to sign the signing public key of the second party;
• computer code for establishing an ephemeral session key secret by generating a random number, and using the ephemeral session key secret to re-encrypt the encrypted binary program within the player executable into a run-time encrypted payload;
• computer code for loading the run-time encrypted payload and the certificate for the signing public key of the second party;
• computer code for verifying the loaded certificate for the signing public key of the second party utilizing the public key of the first party;
• computer code for verifying the encrypted binary program of the loaded run-time encrypted payload utilizing the signing public key of the second party;
• and
• computer code for, in response to the verification of the loaded certificate for the signing public key of the second party, and the verification of the encrypted binary program of the loaded run-time encrypted payload, decrypting the loaded run-time encrypted payload utilizing the ephemeral session key secret.

An apparatus, comprising:

• a processor configured to:
• execute a stored player executable received from a second party, the player executable including:
• an encrypted binary program for execution by the processor, the encrypted binary program being encrypted under a public key of a first party, and the encrypted binary program being further signed by a signing secret key of the second party, and
• a certificate for a signing a signing public key of the second party, the certificate resulting from the first party utilizing a signing secret key of the first party to sign the signing public key of the second party;
• establish an ephemeral session key secret by generating a random number, and using the ephemeral session key secret to re-encrypt the encrypted binary program within the player executable into a run-time encrypted payload;
• load the run-time encrypted payload and the certificate for the signing public key of the second party;
• verify the loaded certificate for the signing public key of the second party utilizing the public key of the first party;
• verify the encrypted binary program of the loaded run-time encrypted payload utilizing the signing public key of the second party;
• and
• in response to the verification of the loaded certificate for the signing public key of the second party, and the verification of the encrypted binary program of the loaded run-time encrypted payload, decrypt the loaded run-time encrypted payload utilizing the ephemeral session key secret.