Cloud-Based Movable-Component Binding for Mobile Content Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current content distribution services for mobile computing devices face challenges such as vulnerability to malicious attacks, slow performance due to complex cryptographic functions, and bandwidth and security compromises when transferring protected media content to new devices, leading to user inconvenience and potential service provider losses.

Innovation Solution

Implementing cloud-based movable-component binding, which allows protected media content to be securely bound to a mobile computing device without requiring the device to perform complex cryptographic functions, by using a cryptographically secure identifier to request permission from a remote server, thus trading slow computational power for fast communication speed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If complex cryptographic functions are performed on mobile computing devices, then content security is improved, but processing speed deteriorates

Engineering Contradiction:
Improvecontent securityVSAvoidprocessing speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

A cloud-based license server acts as an intermediary between the mobile device and the content protection system. The server performs complex cryptographic operations including key generation, license issuance, and authentication verification, while mobile devices only execute lightweight client protocols. This mediator approach maintains strong security through server-side cryptography while achieving fast response times through optimized cloud processing and network communication.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If protected media content is transferred to new mobile devices, then user accessibility is improved, but bandwidth consumption and security risks increase

Engineering Contradiction:
Improveuser accessibilityVSAvoidbandwidth consumption
Core Design Contradiction:
Ease of operationVSLoss of energy

Solution Approach 1:

Cryptographic binding between licenses and device identifiers is established in advance through pre-authorization mechanisms. When users transfer devices or acquire new ones, the system has already prepared binding relationships between content licenses and potential device identifiers. This preliminary binding setup enables rapid license portability to new devices without requiring large-scale content retransmission or complex real-time authorization negotiations, thereby reducing bandwidth consumption while maintaining security.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If cryptographic binding is performed on mobile devices, then content protection is improved, but device complexity increases

Engineering Contradiction:
Improvecontent protectionVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Complex cryptographic functionality is extracted from mobile computing devices and relocated to cloud-based license servers. Mobile devices retain only essential lightweight cryptographic operations such as hashing device identifiers and verifying license signatures. The heavy lifting of asymmetric key cryptography, key derivation, and secure key management is performed externally on the server infrastructure. This extraction maintains robust content protection through server-side cryptographic strength while keeping device complexity minimal and power consumption low.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS8850230B2Cloud-based movable-component binding
Publication Date: 2014.09.30 MICROSOFT TECHNOLOGY LICENSING LLC
  • US8850230B2 patent drawing
  • US8850230B2 patent drawing
  • US8850230B2 patent drawing

AI summary

This document describes tools capable of enabling cloud-based movable-component binding. The tools, in some embodiments, bind protected media content to a movable component in a mobile computing device in a cryptographically secure manner without requiring the movable component to perform a complex cryptographic function. By so doing the mobile computing device may request access to content and receive permission to use the content quickly and in a cryptographically robust way.