DRM protected video streaming on game console with secret-less application

A system for secure playback of protected multimedia content using a secret-less application, the system comprising:

• a storage;
• a game console comprising one or more computer processors operatively coupled to the storage;
• and
• a key server comprising one or more computer processors operatively coupled to the storage;
• wherein the one or more computer processors are configured to execute instructions stored in the storage that when executed cause the one or more computer processors to carry out a process comprising:
• receiving, by a client application executing on the game console, an access control credential from a security token service via a communications network;
• receiving, by the client application and from a multimedia content server via the communications network, a playlist file having encoded therein a uniform resource identifier (URI) associated with a key server and a security token signed by the multimedia content server, the security token having encoded therein an encrypted content key associated with protected multimedia content;
• sending, by a development kit application executing on the game console separately from the client application, the access control credential and the encrypted content key to the key server via the communications network using a secure communications protocol;
• determining, by the key server, that a client computing device is authenticated based on the access control credential;
• in response to the determination, decrypting, by the key server, the encrypted content key using a private cryptographic key;
• sending, by the key server, the decrypted content key to the client computing device via the communications network using the secure communications protocol, the decrypted content key being configured for accessing the protected multimedia content;
• receiving, by the development kit application, the decrypted content key from the key server via the communications network using the secure communications protocol;
• and
• playing back, by the client application, the decrypted protected multimedia content such that the decrypted content key is not stored or used by the client application for playing back the decrypted protected multimedia.