Protected media pipeline

Abstract

A system for processing a media content comprising an application space, a media control mechanism operating in the application space, the media control mechanism controlling the operation of the system, a user interface adapted to provide input to the media control mechanism, a protected space distinct from the application space, and a protected media pipeline operating in the protected space, the protected media pipeline coupled to the media control mechanism, the protected media pipeline adapted to access the media content, process the media content, and output the media content.

1 . A computing device comprising:
 a processor;   memory coupled to the processor;   a protected media pipeline implemented at least in part by the processor and the memory, the protected media pipeline configured to process digital media, the protected media pipeline comprising:
 a media source coupled to a first secure connection over which the digital media is received via the media source into the protected media pipeline; and 
 a media sink coupled to a second secure connection over which processed digital media is transferred via the media sink out of the protected media pipeline. 
   
     
     
         2 . The computing device of  claim 1  coupled to a protected input via the first secure connection and via which the digital media is initially received into the computing device, where the protected input is configured to limit unauthorized access to the digital media. 
     
     
         3 . The computing device of  claim 1  coupled to a protected output via the second secure connection and via which the processed digital media is transferred from the computing device, where the protected output is configured to limit unauthorized access to the processed digital media. 
     
     
         4 . The computing device of  claim 1  where the first secure connection is configured to limit unauthorized access to the digital media. 
     
     
         5 . The computing device of  claim 1  where the second secure connection is configured to limit unauthorized access to the processed digital media. 
     
     
         6 . The computing device of  claim 1 , the protected media pipeline further comprising a protected space that includes at least one transform mechanism that is configured to transform the digital media, where the protected space is configured to limit unauthorized access to the digital media and the processed digital media. 
     
     
         7 . The computing device of  claim 1 , where the protected media pipeline is configured to limit unauthorized access to the digital media and the processed digital media. 
     
     
         8 . A method performed on a computing device that comprises a processor, memory, and a protected media pipeline that is configured to process digital media, the method comprising:
 receiving, by a media source over a first secure connection into the protected media pipeline, the digital media, where the media source is a component of the protected media pipeline;   transferring, by a media sink over a second secure connection out of the protected media pipeline, processed digital media, where the media sink is a component of the protected media pipeline.   
     
     
         9 . The method of  claim 9 , the receiving based on the computing device being coupled to a protected input via the first secure connection and via which the digital media is initially received into the computing device, where the protected input is configured to limit unauthorized access to the digital media. 
     
     
         10 . The method of  claim 9 , the transferring based on the computing device being coupled to a protected output via the second secure connection and via which the processed digital media is transferred from the computing device, where the protected output is configured to limit unauthorized access to the processed digital media. 
     
     
         11 . The method of  claim 9  where the first secure connection is configured to limit unauthorized access to the digital media. 
     
     
         12 . The method of  claim 9  where the second secure connection is configured to limit unauthorized access to the processed digital media. 
     
     
         13 . The method of  claim 9  further comprising transforming, by at least one transform mechanism, the digital media, where the at least one transform mechanism is a component of a protected space of the protected media pipeline, where the protected space is configured to limit unauthorized access to the digital media and the processed digital media. 
     
     
         14 . The method of  claim 9 , where the protected media pipeline is configured to limit unauthorized access to the digital media and the processed digital media. 
     
     
         15 . At least on computer-readable media that comprises:
 memory that includes computer-executable instructions that, based on execution by a computing device that comprises a protected media pipeline that is configured to process digital media, configure the computing device to perform actions comprising:
 receiving, via a media source over a first secure connection into the protected media pipeline, the digital media, where the media source is a component of the protected media pipeline; 
 transferring, via a media sink over a second secure connection out of the protected media pipeline, processed digital media, where the media sink is a component of the protected media pipeline. 
   
     
     
         16 . The at least on computer-readable media of  claim 15 , the receiving based on the computing device being coupled to a protected input via the first secure connection and via which the digital media is initially received into the computing device, where the protected input is configured to limit unauthorized access to the digital media. 
     
     
         17 . The at least on computer-readable media of  claim 15 , the transferring based on the computing device being coupled to a protected output via the second secure connection and via which the processed digital media is transferred from the computing device, where the protected output is configured to limit unauthorized access to the processed digital media. 
     
     
         18 . The at least on computer-readable media of  claim 15  where the first secure connection is configured to limit unauthorized access to the digital media, or where the second secure connection is configured to limit unauthorized access to the processed digital media. 
     
     
         19 . The at least on computer-readable media of  claim 15 , the actions further comprising transforming, by at least one transform mechanism, the digital media, where the at least one transform mechanism is a component of a protected space of the protected media pipeline, where the protected space is configured to limit unauthorized access to the digital media and the processed digital media. 
     
     
         20 . The at least on computer-readable media of  claim 15 , where the protected media pipeline is configured to limit unauthorized access to the digital media and the processed digital media.