KR101977478B1 - Method and apparatus for outputting a content - Google Patents

Abstract

A method and apparatus for outputting content that a user can view is provided. The method comprising the steps of: receiving data and content security parameters of encrypted content from a content server to output content; determining a mode for decrypting data of the encrypted content based on security parameters; Generates data of cleared content by decrypting the data of the content encrypted in the security mode, and outputs the content based on the data of the permitted content.

Description

[0001] METHOD AND APPARATUS FOR OUTPUTING A CONTENT [

The technical field relates to a technology for providing contents, and more particularly, to a method for decrypting encrypted contents to output contents.

Digital Rights Management (DRM) technology is a technology for continuously managing and protecting the rights of intellectual property of digital contents using encryption technology. DRM technology is a technique for safely delivering various contents to a user from a content provider (CP) and preventing a user who receives the contents from illegally using and distributing the content. DRM technology can protect information throughout the entire process from creation, distribution, use and disposal of digital contents, and it protects the rights and uses of rights according to the user's authority in offline as well as online.

Korean Patent No. 10-1601976 (published March 03, 2016) discloses a DRM content management system. The present invention relates to a content providing server that provides an environment for registering DRM content and copyright of DRM content, a license management server that issues a license that is a right of use right to each DRM content file provided from a content providing server, A service providing server for generating a discarding performance value of a license and transmitting the license discarding performance value to the user terminal; a license server for extracting a license discard value from the license of the DRM content file transmitted from the service providing server, A user terminal that uses the DRM contents and transmits a result of performing the license revocation to the service providing server is disclosed.

One embodiment can provide a content output apparatus and method.

One embodiment may provide an apparatus and method for decrypting encrypted content.

According to an aspect, a content output method includes: receiving data and content security parameters of encrypted content from a content server; determining a mode for decrypting data of the encrypted content based on the security parameter; Generating secreted content data by decrypting the encrypted content data in the secure mode if the determined mode is the secure mode, And outputting.

The security parameter may indicate whether the data of the encrypted content should be decrypted into a normal mode or a secure mode.

The step of generating the data of the authorized content by decrypting the data of the encrypted content in the secure mode comprises the steps of: decrypting the encrypted content data using a secure DRM module (Digital Right Management Module) And generating the data.

Wherein the content output method further includes generating data of permitted content by decrypting the encrypted content data in the normal mode when the determined mode is the normal mode, The step of generating the data of the authorized content by decrypting the data may include the step of generating the data of the permitted content by decrypting the data of the encrypted content using the general DRM module.

Wherein the security DRM module is implemented through security firmware, the general DRM module is implemented through general firmware, the security firmware and the general firmware are independent from each other, and the security firmware and the general firmware are stored in the same processor Lt; / RTI >

The step of generating data of the authorized content by decrypting the data of the encrypted content using the secure DRM module may include the step of transmitting the data of the authorized content to the general DRM module and the shared memory of the secure DRM module Storing the data of the encrypted content, loading the encrypted content data from the shared memory by the secure DRM module, decrypting the encrypted content data by the secure DRM module, And the secure DRM module storing data of the authorized content in a secure memory, wherein the data of the authorized content stored in the secure memory can be used to output the content have.

The step of outputting the content based on the data of the permitted content may include loading data of the permitted content stored in the secure memory, decoding and rendering the data of the permitted content to correspond to the output format, Generating content data, and outputting the content by outputting data of the final content.

The content may be Ultra high resolution content.

According to another aspect, a content output apparatus includes a memory in which a program for outputting a content is recorded, and a processor for executing the program, the program comprising: Receiving a security parameter, determining a mode for decrypting the encrypted content data based on the security parameter, decrypting the encrypted content data in the secure mode when the determined mode is a secure mode, Generating data of cleared content, and outputting the content based on the data of the permitted content.

The security parameter may indicate whether the data of the encrypted content should be decrypted into a normal mode or a secure mode.

The step of generating the data of the authorized content by decrypting the data of the encrypted content in the secure mode comprises the steps of: decrypting the encrypted content data using a secure DRM module (Digital Right Management Module) And generating the data.

Wherein the program further includes the step of generating data of the permitted content by decrypting the encrypted content data in the normal mode when the determined mode is the normal mode, The step of generating the data of the permitted content by decrypting may include the step of generating the data of the permitted content by decrypting the data of the encrypted content using the general DRM module.

Wherein the security DRM module is implemented through security firmware, the general DRM module is implemented through general firmware, the security firmware and the general firmware are independent from each other, and the secure firmware and the general firmware are stored in the processor Lt; / RTI >

The step of generating data of the authorized content by decrypting the data of the encrypted content using the secure DRM module may include the step of transmitting the data of the authorized content to the general DRM module and the shared memory of the secure DRM module Storing the data of the encrypted content, loading the encrypted content data from the shared memory by the secure DRM module, decrypting the encrypted content by decrypting the encrypted content, Wherein the secure DRM module is operable to store data of the authorized content in a secure memory, wherein the data of the authorized content stored in the secure memory is used to output the content, Wherein the memory includes the shared memory and the secure memory Can.

The step of outputting the content based on the data of the permitted content may include loading data of the permitted content stored in the secure memory, decoding and rendering the data of the permitted content to correspond to the output format, Generating content data, and outputting the content by outputting data of the final content.

The content may be Ultra high resolution content.

A content output apparatus and method can be provided.

An apparatus and method for decrypting encrypted content can be provided.

1 is a configuration diagram of a contents providing system in an example.
2 is a configuration diagram of a content output apparatus according to an embodiment.
3 is a flowchart of a content output method according to an embodiment.
4 is a flowchart illustrating a method of generating authorized content data by decrypting encrypted content data in a secure mode according to an exemplary embodiment.
5 is a flowchart of a method of outputting contents according to an example.
6 illustrates a configuration of general firmware and security firmware according to an example.

In the following, embodiments will be described in detail with reference to the accompanying drawings. However, the scope of the patent application is not limited or limited by these embodiments. Like reference symbols in the drawings denote like elements.

Various modifications may be made to the embodiments described below. It is to be understood that the embodiments described below are not intended to limit the embodiments, but include all modifications, equivalents, and alternatives to them.

The terms used in the examples are used only to illustrate specific embodiments and are not intended to limit the embodiments. The singular expressions include plural expressions unless the context clearly dictates otherwise. In this specification, the terms "comprises" or "having" and the like refer to the presence of stated features, integers, steps, operations, elements, components, or combinations thereof, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this embodiment belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

In the following description of the present invention with reference to the accompanying drawings, the same components are denoted by the same reference numerals regardless of the reference numerals, and redundant explanations thereof will be omitted. In the following description of the embodiments, a detailed description of related arts will be omitted if it is determined that the gist of the embodiments may be unnecessarily blurred.

1 is a configuration diagram of a contents providing system in an example.

The content providing system 100 includes a content output apparatus 120 and a content server 130. For example, the content output apparatus 120 may be a set top box (STB). The content output apparatus 120 may receive a content output request through a user terminal 110 controlled by a user and request the content server 130 for the content. For example, the user terminal 110 may be a remote controller for controlling the content output apparatus 120. The content output apparatus 120 may receive the content from the content server 130 and output the content through the display 140. [

According to an aspect, the content output apparatus 120 may operate as a Trusted Execution Environment (TEE) or a Non-Trusted Execution Environment (NTEE). NTEE may refer to hardware or software used for general system control and management. TEE may refer to hardware or software used to perform security-requiring processes such as user authentication. TEE is stable and hacking from the outside can be prevented.

For example, one processor or one memory can be used in hardware, divided into NTEE and TEE. For example, the secure area of the processor may be the TEE of the hardware. The hardware structure of the TEE may include on-system on-chip (SoC) and / or external memory. For example, an On-SoC may be a random access memory (RAM), a crypto accelerator, a micro processing core (s), a read only memory (ROM), a peripheral, one time programmable) field. The content output apparatus 120 may use the processors in temporal discrete fashion in order to operate NTEE and TEE execution environments. The content output apparatus 120 can use the processor and the memory by dividing the processor and the memory into an area accessible from NTEE and an area accessible from TEE.

According to an aspect of the present invention, the content output apparatus 120 can process contents requiring enhanced security in TEE, and can process contents requiring general security in NTEE. For example, security for high-quality contents may be required more than low-quality contents. The encrypted content can be decrypted using the secure area of the content output apparatus 120. [ For example, the content output apparatus 120 may determine a mode for processing the content based on the security parameter of the content, and output the processed content based on the determined mode.

According to an aspect of the present invention, there may be a content output apparatus 120 that does not support TEE and a content output apparatus 120 that supports TEE, depending on the type of the content output apparatus 120, The security parameter can be set according to whether or not it is supported.

Hereinafter, a method of outputting contents will be described in detail with reference to FIG. 2 to FIG.

2 is a configuration diagram of a content output apparatus according to an embodiment.

The content output apparatus 200 includes a communication unit 210, a processor 220, and a memory 230. For example, the content output apparatus 200 may correspond to the content output apparatus 120 described above with reference to FIG.

The communication unit 210 is connected to the processor 220 and the memory 230 to transmit and receive data. The communication unit 210 may be connected to another external device to transmit / receive data. Hereinafter, the expression " transmit / receive " A may indicate transmission / reception of " information or data representing A ".

The communication unit 210 may be implemented as a circuitry in the content output apparatus 200. For example, the communication unit 210 may include an internal bus and an external bus. As another example, the communication unit 210 may be an element that connects the content output apparatus 200 and an external apparatus. The communication unit 210 may be an interface. The communication unit 210 can receive data from an external device and transmit data to the processor 220 and the memory 230. [

The processor 220 processes the data received by the communication unit 210 and the data stored in the memory 230. &Quot; Processor " may be a data processing device embodied in hardware having circuitry having a physical structure for performing desired operations. For example, the desired actions may include code or instructions included in the program. For example, a data processing apparatus embodied in hardware may be a microprocessor, a central processing unit, a processor core, a multi-core processor, a multiprocessor, , An application-specific integrated circuit (ASIC), and a field programmable gate array (FPGA).

The processor 220 executes computer readable code (e.g., software) stored in a memory (e.g., memory 230) and instructions triggered by the processor 220.

The memory 230 stores data received by the communication unit 210 and data processed by the processor 220. [ For example, the memory 230 may store a program. The stored program may be a set of syntaxes executable by processor 220 that are coded to output content.

According to an aspect, the memory 230 may include one or more volatile memory, non-volatile memory, RAM, ROM, flash memory, hard disk drive, and optical disk drive.

The memory 230 stores a set of instructions (e.g., software) for operating the content output apparatus 200. The instruction set that operates the content output apparatus 200 is executed by the processor 220. [

According to one aspect, the memory 230 can be divided into a plurality of areas, and each area can be separately managed. For example, some of the plurality of areas is a secure area, and the security authentication may be required for the processor 220 to access the secure area.

Firmware may be implemented through the programs stored in the processor 220 and the memory 230. The memory 230 used to implement the firmware may be ROM. The firmware implemented by the content output apparatus 200 will be described in detail below with reference to FIGS. 4 to 6. FIG.

The communication unit 210, the processor 220, and the memory 230 will be described in detail with reference to Figs. 3 to 6 below.

3 is a flowchart of a content output method according to an embodiment.

The following steps 310 to 350 are performed by the content output apparatus 200 described above with reference to Fig. The content output apparatus 200 can implement secure firmware and normal firmware based on the processor 220 and the memory 230. [ Secure firmware and normal firmware can be independently implemented and executed. Steps 310, 320, 340, and 350 may be performed by general firmware, and step 330 may be performed by security firmware. Security firmware is used to run TEE, and generic firmware can be used to run NTEE.

Before the step 310 is performed, the communication unit 210 may receive the content provision request from the user terminal 110 and request the content server 130 for the content corresponding to the content provision request.

In step 310, the communication unit 210 receives data and content security parameters of the encrypted content from the content server 130. The data of the received encrypted content is stored in the memory 230. According to an aspect, the memory 230 may include conventional memory, shared memory, and secure memory. The data of the encrypted content can be stored in general memory.

The data of the encrypted content may include the moving picture data of the encrypted content and the encrypted sound data. For example, data of encrypted content may be provided via a real time streaming channel. As another example, the content may be provided via a VOD (Video on Demand) channel.

Even in the case of the same contents, the quality of the moving picture providing the contents may be different according to the channel providing the contents. For example, when there are a plurality of channels providing the same contents, the quality of the moving picture provided for each channel may be different.

The security parameters of the content may be set differently according to the picture quality of the moving picture. For example, normal encryption may be applied to low-quality video, and secure encryption may be applied to high-quality video. The content to which the security encryption is applied may be Ultra High Definition content. For example, encryption may be DRM encryption to prevent unauthorized use of the content. The security parameter of the content indicates whether the data of the encrypted content should be decrypted into the normal mode or the secure mode. For example, the security parameter may be a security field, and if the value of the security parameter is 0, it indicates a normal mode, and if it is 1, a secure mode. The security mode represents operations performed by the security firmware, and the general mode may represent operations performed by general firmware.

At step 320, the processor 220 determines a mode for decrypting the encrypted content based on the security parameters. When the value of the security parameter is 0, the normal mode is determined, and when it is 1, the security mode is determined. Step 330 is performed if the operation mode is determined to be the normal mode, and step 340 is performed if the operation mode is determined to be the secure mode.

At step 330, the processor 220 generates data of the cleared content by decrypting the data of the encrypted content in the secure mode. The data of the permitted content may be data that a player can output a moving image. A method of generating data of the authorized content in the secure mode will be described in detail with reference to Fig. 4 below.

At step 340, the processor 220 generates data of the authorized content by decrypting the data of the encrypted content in the normal mode.

At step 350, the processor 220 outputs the authorized content. For example, the processor 220 may output the content through a display connected to the content output apparatus 200.

4 is a flowchart illustrating a method of generating authorized content data by decrypting encrypted content data in a secure mode according to an exemplary embodiment.

Step 330 described above with reference to FIG. 3 may include the following steps 410-440. Generic firmware can implement generic digital rights management (DRM) modules. A generic DRM module may be implemented to process data within generic firmware. The security firmware may implement a secure DRM module. The secure DRM module may be implemented to process data within the security firmware. It is to be understood that the functions performed by the generic DRM module and the secure DRM module are performed by the processor 220

In step 410, the generic DRM module stores data of the encrypted content in a shared memory. The shared memory is a memory accessible by the general DRM module and the secure DRM module. For example, the generic DRM module may move the data of the encrypted content stored in the general memory to the shared memory. As another example, a generic DRM module may store data of encrypted content in a shared memory by registering general memory as shared memory. The general DRM module can register the address in the memory 230 of the area where the encrypted content data is stored as the area of the shared memory.

In step 420, the secure DRM module loads data of the encrypted content from the shared memory. For example, the processor 220 may load data of encrypted content into a secure DRM module or a cache memory allocated for security firmware.

In step 430, the secure DRM module generates data of the authorized content by decrypting the encrypted content data.

In step 440, the secure DRM module stores the data of the authorized content in secure memory. The secure memory may be an area in the memory 230 that is only accessible by the secure DRM module or security firmware.

Although not shown, in the normal mode, data of the content permitted by the general DRM module can be generated. The general DRM module loads the data of the encrypted content stored in the general memory and the general DRM module decrypts the data of the encrypted content to generate the data of the permitted content, Lt; / RTI >

5 is a flowchart of a method of outputting contents according to an example.

The above-described step 340 with reference to FIG. 3 may include the following steps 510 to 530. Steps 510 to 530 have been shown to be performed after step 330 or step 440 described above with reference to Figures 3 and 4 has been performed but steps 510 to 530 have been described with reference to Figure 3 May similarly be performed after the above-described step 340 is performed.

At step 510, the processor 220 loads the data of the authorized content stored in the secure memory. For example, the security firmware may implement a decoder / renderer and the decoder / renderer may load data of authorized content stored in secure memory.

At step 520, the processor 220 generates data of the final content by decoding and rendering the data of the authorized content to correspond to the output format. The decoder can use the data of the authorized content to synchronize video and sound. The renderer may render data of the content permitted to correspond to the output format of the display on which the content is to be output.

At step 530, the processor 220 outputs the content by outputting the data of the final content. For example, generic firmware can implement a player and output content via a player.

6 illustrates a configuration of general firmware and security firmware according to an example.

The content output apparatus 200 can implement the general firmware 610 and the security firmware 620 using the processor 220. [ The memory 600 may correspond to the memory 230 described above with reference to Figures 2-5. The memory 600 includes a general memory 601, a shared memory 602, and a secure memory 603. The general memory 601, the shared memory 602, and the secure memory 603 may be separate areas within the memory 600. The general firmware 610 can access the general memory 601 and the shared memory 602. The security firmware 620 can access the shared memory 602 and secure memory 603.

The general firmware 610 may implement the player 611 and the general DRM module 612. The security firmware 620 may implement the secure DRM module 621.

In step 635, the player 611 may store the data of the encrypted content received by the communication unit 210 in the general memory 601. [

In step 640, the player 611 transmits the security parameters received by the generic DRM module 612.

At step 645, the generic DRM module 612 determines the DRM module to process the data of the encrypted content based on the security parameters.

In step 650, when the encrypted content data is processed by the secure DRM module, the generic DRM module 612 transmits the encrypted content data stored in the generic memory 601 to the shared memory (602).

In step 655, the generic DRM module 612 instructs the shared DRM module 621 to process the data of the encrypted content in the shared DRM module 621.

At step 660, the shared DRM module 621 loads the data of the encrypted content from the shared memory 602. The shared DRM module 621 decrypts the data of the encrypted content to generate data of the permitted content.

In step 665, the shared DRM module 621 transmits to the generic DRM module 612 information indicating that the data of the authorized content has been generated.

At step 668, the shared DRM module 621 stores the data of the authorized content in secure memory.

In step 670, the general DRM module 612 transmits to the player 611 information indicating that the data of the content permitted by the player 611 has been generated.

At step 675, the player 611 requests to process the data of the final content based on the data of the content authorized by the decoder / renderer.

In step 680, the decoder / renderer 622 loads the data of the authorized content from the secure memory 603. The decoder / renderer 622 decodes and renders the data of the authorized content to generate data of the final content.

The player 611 outputs the content based on the data of the final contents.

The apparatus described above may be implemented as a hardware component, a software component, and / or a combination of hardware components and software components. For example, the apparatus and components described in the embodiments may be implemented within a computer system, such as, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable array (FPA) A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For ease of understanding, the processing apparatus may be described as being used singly, but those skilled in the art will recognize that the processing apparatus may have a plurality of processing elements and / As shown in FIG. For example, the processing unit may comprise a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as a parallel processor.

The method according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions to be recorded on the medium may be those specially designed and configured for the embodiments or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. For example, it is to be understood that the techniques described may be performed in a different order than the described methods, and / or that components of the described systems, structures, devices, circuits, Lt; / RTI > or equivalents, even if it is replaced or replaced.

100: Content providing system
200: Content output device
210:
220: Processor
230: Memory

Claims (18)

A content output method performed by a content output apparatus,
Receiving data and content security parameters of encrypted content from a content server;
Determining a mode for decrypting data of the encrypted content based on the security parameter;
If the determined mode is the secure mode, generating data of the cleared content by decrypting the encrypted content data in the secure mode; And
Outputting the content based on the data of the permitted content
Lt; / RTI >
Wherein the step of generating the data of the authorized content by decrypting the encrypted content data in the secure mode comprises:
Generating encrypted content data by decrypting the encrypted content data using a secure DRM module (Digital Right Management Module)
/ RTI >
A content output method.
The method according to claim 1,
Wherein the security parameter indicates whether data of the encrypted content should be decrypted into a general mode or a secure mode,
A content output method.
delete The method according to claim 1,
Generating encrypted content data by decrypting the encrypted content data in the normal mode when the determined mode is the normal mode,
Further comprising:
Wherein the step of generating the data of the authorized content by decrypting the encrypted content data in the normal mode comprises:
Generating the data of the authorized content by decrypting the data of the encrypted content using the general DRM module
/ RTI >
A content output method.
5. The method of claim 4,
The secure DRM module is implemented through security firmware,
The general DRM module is implemented through general firmware,
Wherein the security firmware and the general firmware are independent of each other,
Wherein the security firmware and the generic firmware are executed by the same processor,
A content output method.
6. The method of claim 5,
Wherein the step of generating data of the authorized content by decrypting the encrypted content data using the secure DRM module comprises:
The general DRM module storing data of the encrypted content in a shared memory of the general DRM module and the secure DRM module;
The secure DRM module loading data of the encrypted content from the shared memory;
The secure DRM module generating data of the authorized content by decrypting the encrypted content data; And
Wherein the secure DRM module stores data of the authorized content in a secure memory
Lt; / RTI >
Wherein the data of the authorized content stored in the secure memory is used for outputting the content,
A content output method.
The method according to claim 6,
Wherein the outputting of the content based on the data of the authorized content comprises:
Loading data of the authorized content stored in the secure memory;
Generating data of the final content by decoding and rendering the data of the permitted content to correspond to the output format; And
Outputting the content by outputting data of the final content
/ RTI >
A content output method.
The method according to claim 1,
The content may be ultra high resolution content,
A content output method.
A computer-readable recording medium containing a program for carrying out the method according to any one of claims 1, 2 and 4 to 8.
A content output application stored in a memory of a content output apparatus,
Wherein the content output application is a content output apparatus,
Receiving data and content security parameters of encrypted content from a content server;
Determining a mode for decrypting data of the encrypted content based on the security parameter;
If the determined mode is the secure mode, generating data of the cleared content by decrypting the encrypted content data in the secure mode; And
Outputting the content based on the data of the permitted content
Controls the content output apparatus to execute the content output apparatus,
Wherein the step of generating the data of the authorized content by decrypting the encrypted content data in the secure mode comprises:
Generating encrypted content data by decrypting the encrypted content data using a secure DRM module (Digital Right Management Module)
/ RTI >
Content output application.
By the content output apparatus,
A memory in which a program for outputting contents is recorded; And
The processor
Lt; / RTI >
The program includes:
Receiving data and content security parameters of encrypted content from a content server;
Determining a mode for decrypting data of the encrypted content based on the security parameter;
If the determined mode is the secure mode, generating data of the cleared content by decrypting the encrypted content data in the secure mode; And
Outputting the content based on the data of the permitted content
Lt; / RTI >
Wherein the step of generating the data of the authorized content by decrypting the encrypted content data in the secure mode comprises:
Generating encrypted content data by decrypting the encrypted content data using a secure DRM module (Digital Right Management Module)
/ RTI >
Content output device.
12. The method of claim 11,
Wherein the security parameter indicates whether data of the encrypted content should be decrypted into a general mode or a secure mode,
Content output device.
delete 12. The method of claim 11,
The program includes:
Generating encrypted content data by decrypting the encrypted content data in the normal mode when the determined mode is the normal mode,
Lt; / RTI >
Wherein the step of generating the data of the authorized content by decrypting the encrypted content data in the normal mode comprises:
Generating the data of the authorized content by decrypting the data of the encrypted content using the general DRM module
/ RTI >
Content output device.
15. The method of claim 14,
The secure DRM module is implemented through security firmware,
The general DRM module is implemented through general firmware,
Wherein the security firmware and the general firmware are independent of each other,
Wherein the security firmware and the generic firmware are executed by the processor,
Content output device.
16. The method of claim 15,
Wherein the step of generating data of the authorized content by decrypting the encrypted content data using the secure DRM module comprises:
The general DRM module storing data of the encrypted content in a shared memory of the general DRM module and the secure DRM module;
The secure DRM module loading data of the encrypted content from the shared memory;
The secure DRM module generating data of the authorized content by decrypting the encrypted content data; And
Wherein the secure DRM module stores data of the authorized content in a secure memory
Lt; / RTI >
Wherein the data of the authorized content stored in the secure memory is used for outputting the content,
Wherein the memory comprises the shared memory and the secure memory.
Content output device.
17. The method of claim 16,
Wherein the outputting of the content based on the data of the authorized content comprises:
Loading data of the authorized content stored in the secure memory;
Generating data of the final content by decoding and rendering the data of the permitted content to correspond to the output format; And
Outputting the content by outputting data of the final content
/ RTI >
Content output device.
12. The method of claim 11,
The content may be ultra high resolution content,
Content output device.

Images