Patent Application
20060227756
Certain embodiments of the invention relate to mobile multimedia communication. More specifically, certain embodiments of the invention relate to secure conditional access and digital rights management in a multimedia processor.
Mobile communications have changed the way people communicate and mobile phones have been transformed from a luxury item to an essential part of every day life. The use of mobile phones today is dictated by social situations, rather than hampered by location or technology. While voice connections fulfill the basic need to communicate, and mobile voice connections continue to filter even further into the fabric of every day life, various integrated mobile multimedia applications, utilizing the mobile Internet, are the next step in the mobile communication revolution.
Third generation (3G) cellular networks offering various high speed access technologies and mobile telephones that have been specifically designed to utilize these technologies, fulfill demands for integrated multimedia applications supporting TV and audio applications utilizing advanced compression standards, high-resolution gaming applications, musical interfaces, peripheral interface support, etc. The processing requirements are being increased as chip designers take advantage of compression and higher bandwidths to transmit more information. 3G wireless applications support bit rates from 384 kilobits (Kbits)/second to 2 megabits (Mbits)/second, allowing chip designers to provide wireless systems with multimedia capabilities, superior quality, reduced interference, and a wider coverage area.
As mobile multimedia services grow in popularity and usage, factors such as power consumption, cost efficient optimization of network capacity and quality of service (QoS) are becoming even more essential to cellular operators than they are today. These factors may be achieved with careful network planning and operation, improvements in transmission methods, and advances in receiver techniques and chip integration solutions. To this end, carriers need technologies that will allow them to increase downlink throughput for the mobile multimedia applications support and, in turn, offer advanced QoS capabilities and speeds for consumers of mobile multimedia application services. Currently, mobile multimedia processors don't fully exploit system-on-a-chip (SOC) integration for advanced total system solution for today's mobile handsets.
For example, conventional mobile processors may utilize a plurality of hardware accelerators to enable a variety of multimedia applications, which significantly increases power consumption, implementation complexity, mobile processor real estate, and ultimately terminal size. In addition, conventional mobile multimedia processors do not provide a secure platform for conditional access and digital rights management. Multimedia content is decrypted outside the mobile multimedia processor and is exposed to potential hackers when the decrypted content is communicated to the mobile multimedia processor for processing.
Further limitations and disadvantages of conventional and traditional approaches will become apparent to one of skill in the art, through comparison of such systems with some aspects of the present invention as set forth in the remainder of the present application with reference to the drawings.
A system and/or method is provided for secure conditional access and digital rights management in a multimedia processor, substantially as shown in and/or described in connection with at least one of the figures, as set forth more completely in the claims.
These and other advantages, aspects and novel features of the present invention, as well as details of an illustrated embodiment thereof, will be more fully understood from the following description and drawings.
Certain embodiments of the invention may be found in a method and system for secure conditional access and digital rights management in a single mobile multimedia processor chip in a mobile multimedia system. In one embodiment of the invention, one or more security boundaries may be established within the single mobile multimedia processor chip, thereby preventing access by a potential hacker to secure key content, decrypted multimedia content, and/or critical operation code within the single mobile multimedia processor chip. The security boundaries may comprise physical boundaries within the mobile multimedia system in which one or more processing blocks within the boundary may be designated as secure and other blocks outside the boundary may be designated as unsecure. For example, a host processor may be located outside a secure boundary, such as a secure kernel, and may be designated as unsecure. In this regard, any communications received from an unsecure block may be considered unsecure. The security boundaries may also comprise boundaries that vary in time in which one or more blocks within the mobile multimedia system, at different instants, may be designated as either secure blocks or unsecure blocks. In an exemplary embodiment of the invention, a secure bit may be asserted within information communicated from a secure source, such as a block within a secure boundary within the single mobile multimedia processor chip. Similarly, a secure bit may be de-asserted within information communicated from unsecure source, such as a block outside a secure boundary within the single mobile multimedia processor chip.
The SMMPC 101a may comprise suitable circuitry, logic, and/or code and may be adapted to perform video and/or multimedia processing for the mobile multimedia device 105a. The SMMPC 101a may further comprise a plurality of integrated interfaces, which may be utilized to support one or more external devices coupled to the mobile multimedia device 105a. For example, the SMMPC 101a may support connections to a TV 101h and/or to a PC 101k.
In operation, the mobile multimedia device may receive signals via the antenna 101d. Received signals may be processed by the RF block 101e and the RF signals may be converted to baseband by the baseband processing block 101f. Baseband signals may then be processed by the SMMPC 101a. Audio and/or video signals may also be received via the integrated camera 101g and/or the PC 101k. During processing, the SMMPC 101a may utilize the external memory 101n for storing of processed data. Processed audio data may be communicated to the audio block 101s and processed video data may be communicated to the LCD 101b or the TV 101h, for example. The keypad 101c may be utilized for communicating processing commands and/or other data, which may be required for audio or video data processing by the SMMPC 101a.
In one embodiment of the invention, the SMMPC 101a may be adapted to receive a secure key from an off-chip device. An on-chip key stored within the SMMPC 101a may be utilized for decryption of the received secure key. The decrypted and received secure key may then be stored within the SMMPC 101a. Furthermore, encrypted multimedia content may be received by the mobile multimedia device 105a via the antenna 101d. The received, encrypted multimedia content may be decrypted within the SMMPC 101a using the stored decrypted received secure key. The on-chip key may be stored within a one-time programmable (OTP) memory in the SMMPC 101a. The stored on-chip key may be retrieved from the OTP memory for the decrypting of the secure key. The stored, decrypted and received secure key may be encrypted utilizing the on-chip key stored within the SMMPC 101a.
The host processor 102b may comprise suitable circuitry, logic, and/or code and may be adapted to handle application level processing of information for the mobile multimedia system 107. The single mobile multimedia processor chip 110b may comprise suitable circuitry, logic, and/or code and may be adapted to handle processing of multimedia content, such as decryption and/or decoding of encrypted and/or encoded multimedia content, as well as security-related tasks associated with decrypted and decoded multimedia content. For example, the multimedia processor (MP) 106b within the single mobile multimedia processor chip 110b may comprise suitable circuitry, logic, and/or code and may be adapted to handle decryption and decoding of multimedia content. The SC 108b may comprise suitable circuitry, logic, and/or code and may be adapted to perform security functions related to decrypted and decoded multimedia content within the single mobile multimedia processor chip 110b.
In an exemplary embodiment of the invention, one or more security boundaries may be established within the mobile multimedia system 107, thereby preventing access by a potential hacker to secure key content, decrypted multimedia content, and/or critical operation code within the single mobile multimedia processor chip 110b. The security boundaries may comprise physical boundaries within the mobile multimedia system 107, in which one or more processing blocks within the boundary may be designated as secure and other blocks outside the boundary may be designated as unsecure. For example, the host processor 102b and the external memory 104b may be located within area 112 that is outside a secure boundary 114b. In this regard, the MP 106b and the SC 108b, which are within the secure boundary 114b, may be designated as secure. The host processor 102b and the external memory 104b, which are located outside the secure area 114b, may be designated as unsecure. Any communications received from an unsecure block, such as the host processor 102b or the external memory 104b, may be considered unsecure. In another embodiment of the invention, the security boundary 114b may comprise a boundary that varies in time. In this regard, the MP 106b and the SC 108b, which are located within the boundary 114b, at different instants, may be designated as either secure blocks or unsecure blocks.
The host processor 202 may comprise suitable circuitry, logic, and/or code and may be adapted to handle application level processing of information for the mobile multimedia system 200. The single mobile multimedia processor chip 206 may comprise suitable circuitry, logic, and/or code and may be adapted to handle processing of multimedia content, such as decryption and/or decoding of encrypted and/or encoded multimedia content, as well as security-related tasks associated with decrypted and decoded multimedia content. For example, the multimedia processor (MP) 212 within the single mobile multimedia processor chip 206 may comprise suitable circuitry, logic, and/or code and may be adapted to handle decryption and decoding of multimedia content. The instruction cache 208 may be adapted to store one or more instructions, which may be utilized by the MP 212 during decryption and/or decoding. The data cache 210 may be adapted to store data during processing of the multimedia content.
The SC 214 may comprise suitable circuitry, logic, and/or code and may be adapted to perform security functions related to decrypted and decoded multimedia content within the single mobile multimedia processor chip 206. For example, the SC 214 may be adapted to control whether one or more blocks within the single mobile multimedia processor chip 206 and/or within the mobile multimedia system 200 may be designated as trusted or un-trusted for handling decrypted and decoded multimedia content. In an exemplary embodiment of the invention, the SC 214 may be adapted to receive a plurality of indicators from the MP 212 and generate a secure bit indicator in response to the received plurality of indicators and to state stored within the SC 214. The SC 214 may secure the multimedia content processed by the MP 212 by setting a bit, for example, on the AHB bus in accordance with the generated secure bit indicator. For example, if the bit is asserted, the current bus transaction may be considered secure and the source of the transaction may be considered trusted. If the bit is not asserted, the bus transaction may be considered unsecure and the source of the transaction may be considered untrusted.
The SS block 216 may comprise suitable circuitry, logic, and/or code and may be adapted to utilize one or more decryption algorithms, such as data encryption standard (DES) or triple DES (3DES), to facilitate multimedia content decryption by the MP 212. Furthermore, the SS block 216 may be utilized by the MP 212 as storage for one or more secure keys that may be utilized for decryption of encrypted multimedia content.
In operation, multimedia content may be communicated for processing from the external memory 204 to the MP 212 within the single mobile multimedia processor chip 206. The MP 212 may utilize the instruction cache 208, the data cache 210 and the SS block 216 during decryption and decoding of the received encrypted and encoded multimedia content. Furthermore, the MP 212 may communicate a plurality of indicators to the SC 214 for determination of a secure bit indicator. For example, the MP 212 may communicate a first indicator, which may identify whether the instruction cache 208 was used to process the current instruction. The MP 212 may also communicate a second indicator, which may identify whether an interrupt was used to process the current instruction. In addition, the MP 212 may communicate a third indicator to the SC 214, which may specify a program counter value associated with the current instruction. The SC 214 may then generate the secure bit indicator based on the received first indicator, second indicator, and third indicator. Processed data, such as multimedia content decrypted and decoded by the MP 212, may be communicated to one or more blocks within the single mobile multimedia processor chip 206 via the AHB 218. The SC 214 may assert or de-assert a bit within processed data communicated via the AHB 218, based on the generated secure bit indicator.
The multimedia processor (MP) 312 within the single mobile multimedia processor chip 300 may comprise suitable circuitry, logic, and/or code and may be adapted to handle, for example, decryption and decoding of multimedia content. The instruction cache 308 may be adapted to store one or more instructions, which may be utilized by the MP 312 during the decryption and/or the decoding. The data cache 310 may be adapted to store data during processing of the multimedia content. The MP 312 may be also adapted to provide a plurality of indicators 303, . . . , 305 to the SC 314, which may be utilized by the SC 314 for generation of a secure bit indicator 306.
In an exemplary embodiment of the invention, the MP 312 may communicate a first indicator 303, which may identify whether the instruction cache 308 was used to process the current instruction. The MP 312 may also communicate a second indicator 304, which may identify whether an interrupt was used to process the current instruction. In addition, the MP 312 may communicate a third indicator 305 to the SC 314, which may specify a program counter value associated with the current instruction of the MP 312. The secure bit indicator 306 may be generated by the SC 314 based on the received indicators 303, . . . , 305, plus the internal state of the SC 314, and may be utilized within the single mobile multimedia processor chip 300 to secure processed multimedia data, such as processed data 307 generated by the MP 312.
The SC block 314 may comprise suitable circuitry, logic, and/or code and may be adapted to perform security functions related to decrypted and decoded multimedia content within the single mobile multimedia processor chip 300. For example, the SC 314 may be adapted to control whether one or more blocks within the single mobile multimedia processor chip 300 may be designated as trusted or un-trusted for handling decrypted and decoded multimedia content. In an exemplary embodiment of the invention, the SC 314 may also comprise a plurality of registers, which may be utilized by the SC 314 during the security-related functions. Furthermore, one or more registers may be utilized to control use of a secure portion of the local memory 322. The plurality of registers are described below, with regards to
The SS block 316 may comprise suitable circuitry, logic, and/or code and may be adapted to utilize one or more decryption algorithms, such as data encryption standard (DES) or triple DES (3DES), to facilitate multimedia content decryption by the MP 312. Furthermore, the SS block 316 may be utilized by the MP 312 as storage for one or more secure keys that may be utilized for decryption of encrypted multimedia content.
The boot ROM 326 may comprise suitable circuitry, logic, and/or code and may be adapted to store boot code, which may be utilized during a boot sequence of the single mobile multimedia processor chip 300. In an exemplary embodiment of the invention, boot code stored within the boot ROM 326 may be encrypted for a secure boot sequence.
The local memory 322 may comprise suitable circuitry, logic, and/or code and may be utilized by the single mobile multimedia processor chip 300 for storage of secure and unsecure data. In an exemplary aspect of the invention, the local memory 322 may be divided into a secured and unsecured region, for storage of secure and unsecure data, respectively. The memory arbiter 324 may comprise suitable circuitry, logic, and/or code and may be adapted to control access to the local memory 322. For example, the memory arbiter 324 may be adapted to determine whether processed data is secure, with an asserted bit, prior to granting access to the secured region of the local memory 322.
In operation, input multimedia content 302 may be communicated for processing by the MP 312 within the single mobile multimedia processor chip 300. The MP 312 may utilize the instruction cache 308, the data cache 310 and the SS block 316 during decryption and decoding of the received encrypted and encoded multimedia content 302. The MP 312 may communicate a first indicator 303, which may identify whether the instruction cache 308 was used to process the current instruction. The MP 312 may also communicate a second indicator 304, which may identify whether an interrupt was used to process the current instruction. In addition, the MP 312 may communicate a third indicator 305 to the SC 314, which may specify a program counter value associated with the current instruction.
The SC 314 may then generate the secure bit indicator 306 based on the received first indicator 303, second indicator 304, third indicator 305, and on internal state of the SC 314. The SC 314 may be adapted to secure the multimedia content 307 processed by the MP 312 by setting a bit on the AHB bus in accordance with the generated secure bit indicator 306. For example, if the bit is asserted, the current bus transaction may be considered secure and the source of the transaction may be considered trusted. If the bit is not asserted, the current transaction may be considered unsecure and the source of the transaction may be considered untrusted. The SC 214 may assert or de-assert a bit within processed data communicated via the AHB 218, based on the generated secure bit indicator.
Secure processed data may be stored within a secure portion of the local memory 322. In this regard, the SC 314 may communicate a secured region size value 320 to the memory arbiter 324, and the local memory 322 may set the size of its secured region in accordance with the received size value 320. The memory arbiter 324 may verify that a bit is asserted within the current bus transaction, and the bus transaction may then access the secured region of the local memory 322.
The trusted bit register 406 may be adapted to store a trusted bit value, which may be utilized by the SC 402 during generation of a secure bit indicator, such as the secure bit indicator 306 in
The disable bit register 404 may be adapted to store a disable bit. In an exemplary aspect of the invention, the disable bit may be utilized by the SC 402 to disable the ability to turn the trusted bit, stored by the trusted bit register 406, back on without a reset. In this regard, if the disable bit is set, for example by setting the disable bit to 1, the trusted bit may not be set or turned ON without a reset of the single mobile multimedia processor chip. If the disable bit is not set, for example by setting the disable bit to 0, the trusted bit may be turned ON without a reset of the single mobile multimedia processor chip.
The trusted program counter register 408 may be adapted to store a determined program counter value. In an exemplary embodiment of the invention, the SC 402 may receive a plurality of indicators from a multimedia processor. Referring to
The local memory secure size register 410 may be adapted to store a local memory secure size value. Referring to
The local memory 508 may comprise suitable circuitry, logic, and/or code and may be utilized for storage of secure and unsecure data. In an exemplary aspect of the invention, the local memory 508 may be divided into a secured memory region 510 and an unsecured memory region 512, for storage of secure and unsecure data, respectively. The memory arbiter 514 may comprise suitable circuitry, logic, and/or code and may be adapted to control access to the local memory 512. For example, the memory arbiter 514 may be adapted to determine whether processed data is secure, with an asserted bit, prior to granting access to a secured region 510 of the local memory 508. Furthermore, the memory arbiter 514 may be adapted to set the size of the secured memory region 510 in the local memory 508, based on the local memory size value 506 stored within the local memory secure size register 504. The local memory secure size register 504 within the SC 502 may be accessed and changed if the processed data comprises an asserted secure bit. The unsecured region 512 of the local memory 508 may be accessed regardless of whether the secure bit of processed multimedia content is asserted or de-asserted.
The secure storage block 604 may comprise suitable circuitry, logic, and/or code and may be utilized by a multimedia processor, such as the MP 312 in
Referring again to
The single mobile multimedia processor chip 300 may modify at least one bit within the generated output data 307, based on the secure bit. The modified at least one bit may identify whether the output data 307 generated from the input data 302 by the single mobile multimedia processor chip 300 is secure. The single mobile multimedia processor chip 300 may store at least a portion of the output data 307 in a first portion of the local memory 322, if the output data 307 generated from the input data 302 by the single mobile multimedia processor chip 300 is secure. The single mobile multimedia processor chip 300 may store a size value of the first portion of the memory 322, if the output data 307 generated from the input data 302 by the single mobile multimedia processor chip 300 is secure. The single mobile multimedia processor chip 300 may set a size of the first portion of the memory 322 based on the stored size value.
The single mobile multimedia processor chip 300 may disable the generation of the fourth indicator 306 based on the first indicator 303, the second indicator 304, and the third indicator 305. The single mobile multimedia processor chip 300 may store a reference program counter value, where the reference program counter value may be used for the generation of the fourth indicator 306. The single mobile multimedia processor chip 300 may generate the fourth indicator 306, if the first indicator 303 identifies that the instruction cache 308 was not used to process the input data 302, the second indicator 304 identifies that the interrupt was not used to process the input data 302, and the program counter value specified by the third indicator 305 matches the stored reference program counter value. The single mobile multimedia processor chip 300 may count a number of times the output data 307 generated from the input data 302 by the single mobile multimedia processor chip 300 is accessed, if the output data 307 is secure.
Accordingly, aspects of the invention may be realized in hardware, software, firmware or a combination thereof. The invention may be realized in a centralized fashion in at least one computer system or in a distributed fashion where different elements are spread across several interconnected computer systems. Any kind of computer system or other apparatus adapted for carrying out the methods described herein is suited. A typical combination of hardware, software and firmware may be a general-purpose computer system with a computer program that, when being loaded and executed, controls the computer system such that it carries out the methods described herein.
One embodiment of the present invention may be implemented as a board level product, as a single chip, application specific integrated circuit (ASIC), or with varying levels integrated on a single chip with other portions of the system as separate components. The degree of integration of the system will primarily be determined by speed and cost considerations. Because of the sophisticated nature of modern processors, it is possible to utilize a commercially available processor, which may be implemented external to an ASIC implementation of the present system. Alternatively, if the processor is available as an ASIC core or logic block, then the commercially available processor may be implemented as part of an ASIC device with various functions implemented as firmware.
The present invention may also be embedded in a computer program product, which comprises all the features enabling the implementation of the methods described herein, and which when loaded in a computer system is able to carry out these methods. Computer program in the present context may mean, for example, any expression, in any language, code or notation, of a set of instructions intended to cause a system having an information processing capability to perform a particular function either directly or after either or both of the following: a) conversion to another language, code or notation; b) reproduction in a different material form. However, other meanings of computer program within the understanding of those skilled in the art are also contemplated by the present invention.
While the invention has been described with reference to certain embodiments, it will be understood by those skilled in the art that various changes may be made and equivalents may be substituted without departing from the scope of the present invention. In addition, many modifications may be made to adapt a particular situation or material to the teachings of the present invention without departing from its scope. Therefore, it is intended that the present invention not be limited to the particular embodiments disclosed, but that the present invention will include all embodiments falling within the scope of the appended claims.
This application makes reference, claims priority to, and claims the benefit of U.S. Provisional Application Ser. No. 60/669,223 filed Apr. 6, 2005, which is hereby incorporated herein by reference in its entirety. This application makes reference, claims priority to, and claims the benefit of U.S. Provisional Application Ser. No. 60/750,246 filed Dec. 14, 2005, which is hereby incorporated herein by reference in its entirety.
| Number | Date | Country | |
|---|---|---|---|
| 60669223 | Apr 2005 | US | |
| 60750246 | Dec 2005 | US |
