Security device and building block functions

Apparatus for securing content, the apparatus comprising:

• a dynamically generated pseudo-unique secure module loader operative to load a dynamically generated pseudo-unique secure module to a content rendering device from a secure module source, the dynamically generated pseudo-unique secure module comprising a sequence of software primitives from among a plurality of available individual software primitives, where the sequence may combine any of the available individual software primitives in any order at all, where any of the available individual software primitives may be repeated in the sequence, and where the sequence does not have to include all of the available individual software primitives, so that the sequence thereby can be any one of a large number of possible combinations of the available individual software primitives;
• a communication mechanism operative (a) to establish communication between the secure module source and the content rendering device, and (b) to establish communication between the secure module source and the dynamically generated pseudo-unique secure module after the dynamically generated pseudo-unique secure module has been loaded to the content rendering device from the secure module source;
• and
• a decryption key transferring mechanism operative to transfer a decryption key from the secure module source to the dynamically generated pseudo-unique secure module after the dynamically generated pseudo-unique secure module has been loaded to the content rendering device from the secure module source, thereby enabling decryption of encrypted content, the encrypted content being encrypted according to the decryption key,
• wherein the dynamically generated pseudo-unique secure module comprises the sequence of software primitives, each one of the sequence of software primitives being capable of being sequentially executed, and an output from a first one of the sequence comprises an input to a second one of the sequence.

Apparatus for securing content, the apparatus comprising:

• means for loading a dynamically generated pseudo-unique secure module to a content rendering device from a secure module source, the dynamically generated pseudo-unique secure module comprising a sequence of software primitives from among a plurality of available individual software primitives, where the sequence may combine any of the available individual software primitives in any order at all, where any of the available individual software primitives may be repeated in the sequence, and where the sequence does not have to include all of the available individual software primitives, so that the sequence thereby can be any one of a large number of possible combinations of the available individual software primitives;
• a communication means (a) for establishing communication between the secure module source and the content rendering device, and (b) for establishing communication between the secure module source and the dynamically generated pseudo-unique secure module after the dynamically generated pseudo-unique secure module has been loaded to the content rendering device from the secure module source;
• and
• means for transferring a decryption key from the secure module source to the dynamically generated pseudo-unique secure module after the dynamically generated pseudo-unique secure module has been loaded to the content rendering device from the secure module source, thereby enabling decryption of encrypted content, the encrypted content being encrypted according to the decryption key,
• wherein each one of the sequence of software primitives is sequentially executed, and an output from a first one of the sequence comprises an input to a second one of the sequence.

A method of securing content, the method comprising:

• establishing communication between a secure module source and a content rendering device;
• loading a dynamically generated pseudo-unique secure module to the content rendering device from the secure module source, the dynamically generated pseudo-unique secure module comprising a sequence of software primitives from among a plurality of available individual software primitives, where the sequence may combine any of the available individual software primitives in any order at all, where any of the available individual software primitives may be repeated in the sequence, and where the sequence does not have to include all of the available individual software primitives, so that the sequence thereby can be any one of a large number of possible combinations of the available individual software primitives;
• after the loading step, establishing communication between the secure module source and the dynamically generated pseudo-unique secure module;
• and
• after the step of establishing communication between the secure module source and the dynamically generated pseudo-unique secure module, transferring a decryption key from the secure module source to the dynamically generated pseudo-unique secure module, thereby enabling decryption of encrypted content, the encrypted content being encrypted according to the decryption key;
• wherein each one of the sequence of the software primitives can be sequentially executed, and an output from a first one of the sequence comprises an input to a second one of the sequence.