WO2004036892A2 - Cryptage selectif à la demande pour vidéo - Google Patents

Cryptage selectif à la demande pour vidéo Download PDF

Info

Publication number
WO2004036892A2
WO2004036892A2 PCT/US2003/027775 US0327775W WO2004036892A2 WO 2004036892 A2 WO2004036892 A2 WO 2004036892A2 US 0327775 W US0327775 W US 0327775W WO 2004036892 A2 WO2004036892 A2 WO 2004036892A2
Authority
WO
WIPO (PCT)
Prior art keywords
content
encrypted
vod
segments
encryption
Prior art date
Application number
PCT/US2003/027775
Other languages
English (en)
Other versions
WO2004036892A3 (fr
Inventor
Brant L. Candelore
Original Assignee
Sony Electronics Inc.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US10/274,084 external-priority patent/US7155012B2/en
Priority claimed from US10/273,903 external-priority patent/US7302059B2/en
Priority claimed from US10/273,905 external-priority patent/US7376233B2/en
Priority claimed from US10/274,019 external-priority patent/US7292690B2/en
Application filed by Sony Electronics Inc. filed Critical Sony Electronics Inc.
Priority to AU2003296903A priority Critical patent/AU2003296903A1/en
Priority to CA2498346A priority patent/CA2498346C/fr
Publication of WO2004036892A2 publication Critical patent/WO2004036892A2/fr
Publication of WO2004036892A3 publication Critical patent/WO2004036892A3/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
    • H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption
    • H04N21/44055—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption by partially decrypting, e.g. decrypting a video stream that has been partially encrypted
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/234—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
    • H04N21/2343—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving reformatting operations of video signals for distribution or compliance with end-user requests or end-user device requirements
    • H04N21/234345—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving reformatting operations of video signals for distribution or compliance with end-user requests or end-user device requirements the reformatting operation being performed only on part of the stream, e.g. a region of the image or a time segment
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/234—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
    • H04N21/2343—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving reformatting operations of video signals for distribution or compliance with end-user requests or end-user device requirements
    • H04N21/23439—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving reformatting operations of video signals for distribution or compliance with end-user requests or end-user device requirements for generating different versions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/234—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
    • H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption
    • H04N21/23476—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption by partially encrypting, e.g. encrypting the ending portion of a movie
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/235—Processing of additional data, e.g. scrambling of additional data or processing content descriptors
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/236—Assembling of a multiplex stream, e.g. transport stream, by combining a video stream with other content or additional data, e.g. inserting a URL [Uniform Resource Locator] into a video stream, multiplexing software data into a video stream; Remultiplexing of multiplex streams; Insertion of stuffing bits into the multiplex stream, e.g. to obtain a constant bit-rate; Assembling of a packetised elementary stream
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/238—Interfacing the downstream path of the transmission network, e.g. adapting the transmission rate of a video stream to network bandwidth; Processing of multiplex streams
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/258—Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
    • H04N21/25808—Management of client data
    • H04N21/25833—Management of client data involving client hardware characteristics, e.g. manufacturer, processing or storage capabilities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/266—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel
    • H04N21/26606—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/435—Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/436—Interfacing a local distribution network, e.g. communicating with another STB or one or more peripheral devices inside the home
    • H04N21/43607—Interfacing a plurality of external cards, e.g. through a DVB Common Interface [DVB-CI]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
    • H04N21/4402—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving reformatting operations of video signals for household redistribution, storage or real-time display
    • H04N21/440245—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving reformatting operations of video signals for household redistribution, storage or real-time display the reformatting operation being performed only on part of the stream, e.g. a region of the image or a time segment
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
    • H04N21/4402—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving reformatting operations of video signals for household redistribution, storage or real-time display
    • H04N21/440281—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving reformatting operations of video signals for household redistribution, storage or real-time display by altering the temporal resolution, e.g. by frame skipping
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
    • H04N21/4623—Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/47—End-user applications
    • H04N21/472—End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content
    • H04N21/47202—End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content for requesting content on demand, e.g. video on demand
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
    • H04N21/633—Control signals issued by server directed to the network components or client
    • H04N21/6332—Control signals issued by server directed to the network components or client directed to client
    • H04N21/6334—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key
    • H04N21/63345—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key by transmitting keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
    • H04N21/835—Generation of protective data, e.g. certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N5/00—Details of television systems
    • H04N5/76—Television signal recording
    • H04N5/78—Television signal recording using magnetic recording
    • H04N5/782—Television signal recording using magnetic recording on tape
    • H04N5/783—Adaptations for reproducing at a rate different from the recording rate
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N5/00—Details of television systems
    • H04N5/76—Television signal recording
    • H04N5/91—Television signal processing therefor
    • H04N5/913—Television signal processing therefor for scrambling ; for copy protection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/162—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
    • H04N7/163—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing by receiver means only
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/162—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
    • H04N7/165—Centralised control of user terminal ; Registering at central
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/167—Systems rendering the television signal unintelligible and subsequently intelligible
    • H04N7/1675—Providing digital key or authorisation information for generation or regeneration of the scrambling sequence
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/24—Systems for the transmission of television signals using pulse code modulation
    • H04N7/52—Systems for transmission of a pulse code modulated video signal with one or more other pulse code modulated signals, e.g. an audio signal or a synchronizing signal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N9/00—Details of colour television systems
    • H04N9/79—Processing of colour television signals in connection with recording
    • H04N9/7921—Processing of colour television signals in connection with recording for more than one processing mode
    • H04N9/7925—Processing of colour television signals in connection with recording for more than one processing mode for more than one standard
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N5/00—Details of television systems
    • H04N5/76—Television signal recording
    • H04N5/91—Television signal processing therefor
    • H04N5/913—Television signal processing therefor for scrambling ; for copy protection
    • H04N2005/91357—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal
    • H04N2005/91364—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal the video signal being scrambled

Definitions

  • This invention relates generally to the field of video on demand (VOD). More particularly, this invention relates to a multiple encryption method and apparatus particularly useful for multiple encrypting digitized video on demand programming.
  • VOD Video On Demand
  • IPPV impulse pay-per-view
  • subscription and IPPV content is generally scrambled at a Master Headend and delivered to the hubs for distribution.
  • VOD service providers There are currently two major VOD service providers in the cable industry.
  • content is stored pre-encrypted on hard drives in the VOD server.
  • the keys used to encrypt the content do not change from month-to-month, however, the entitlement control messages (ECMs) used to derive those keys to enable the conditional access (CA) system are updated every month.
  • ECMs entitlement control messages
  • CA conditional access
  • content is stored in-the-clear on hard drives in the VOD server.
  • the content is encrypted real-time with slow changing keys (lasting 20 minutes or more). For other systems, the VOD content is sent in-the-clear to subscribers.
  • Storage has been typically in-the-clear or encrypted using a simple "storage key".
  • the frequency and program identifiers (PIDs) used for a VOD session are privately signaled through encrypted transactions, so that someone trying to eavesdrop on the VOD communication cannot receive the tuning information for the program even if the content is sent in-the-clear.
  • the content is scrambled as an IPPV program.
  • the program is therefore "purchased” as in a broadcast IPPV program. If an eavesdropper could locate the VOD channel, he or she would still need to pay for the movie as the legitimate customer.
  • VOD security In addition to the security provided by encryption, encryption of PIDs and frequencies and other measures, VOD security also relies on the fact that both the content and viewing times are under control of a legitimate purchasing party. That party can pause the program for a half an hour or all day. The content can be "rewound” or started over from scratch. These factors all contribute to providing protection against pirating of the content.
  • decoder equipment e.g., television set top boxes (STBs)
  • STBs television set top boxes
  • each vendor generally uses its own conditional access (CA) encryption system.
  • CA conditional access
  • FIGURE 1 is a block diagram of an exemplary video on demand cable television system consistent with certain embodiments of the present invention.
  • FIGURE 2 is a flow chart depicting operation of an exemplary embodiment consistent with certain embodiments of the present invention.
  • FIGURE 3 illustrates conversion from clear content to dual selectively encrypted content to single selectively encrypted content in a manner consistent with certain embodiments of the present invention.
  • FIGURE 4 is a block diagram of an exemplary video on demand server consistent with certain embodiments of the present invention.
  • the present document generally uses the example of a “dual selective encryption” embodiment, but those skilled in the art will recognize that the present invention can be utilized to realize multiple partial encryption without departing from the invention.
  • partial encryption and “selective encryption” are used synonymously herein.
  • program and “television program” and similar terms can be interpreted in the normal conversational sense, as well as a meaning wherein the term means any segment of A/V content that can be displayed on a television set or similar monitor device.
  • the term “legacy” as used herein refers to existing technology used for existing cable and satellite systems.
  • the exemplary embodiments disclosed herein are decoded by a television Set-Top Box (STB), but it is contemplated that such technology will soon be incorporated within television receivers of all types whether housed in a separate enclosure alone or in conjunction with recording and/or playback equipment or Conditional Access (CA) decryption module or within a television set itself.
  • STB television Set-Top Box
  • CA Conditional Access
  • the present document generally uses the example of a "dual partial encryption" embodiment, but those skilled in the art will recognize that the present invention can be utilized to realize multiple partial encryption without departing from the invention.
  • the above-referenced commonly owned patent applications describe inventions relating to various aspects of methods generally referred to herein as partial encryption or selective encryption.
  • systems are described wherein selected portions of a particular selection of digital content are encrypted using two (or more) encryption techniques while other portions of the content are left unencrypted.
  • the content can effectively be encrypted for use under multiple decryption systems without the necessity of encryption of the entire selection of content.
  • only a few percent of data overhead is needed to effectively encrypt the content using multiple encryption systems.
  • CA conditional access
  • the partial encryption processes described in the above patent applications utilize any suitable encryption method.
  • these encryption techniques are selectively applied to the data stream, rather than encrypting the entire data stream, using techniques described in the above-referenced patent applications.
  • the selective encryption process utilizes intelligent selection of information to encrypt so that the entire program does not have to undergo dual encryption.
  • the program material can be effectively scrambled and hidden from those who desire to hack into the system and illegally recover commercial content without paying.
  • MPEG (or similar format) data that are used to represent the audio and video data does so using a high degree of reliance on the redundancy of information from frame to frame.
  • anchor data representing chrominance and luminance data. That data is then often simply moved about the screen to generate subsequent frames by sending motion vectors that describe the movement of the block. Changes in the chrominance and luminance data are also encoded as changes rather than a recoding of absolute anchor data. Thus, encryption of this anchor data, for example, or other key data can effectively render the video un-viewable.
  • the selected video data to be encrypted may be any individual one or combination of the following (described in greater detail in the above applications): video slice headers appearing in an active region of a video frame, data representing an active region of a video frame, data in a star pattern within the video frame, data representing scene changes, I Frame packets, packets containing motion vectors in a first P frame following an I Frame, packets having an intra_slice_flag indicator set, packets having an intra_slice indicator set, packets containing an intra_coded macroblock, data for a slice containing an intra_coded macroblock, data from a first macroblock following the video slice header, packets containing video slice headers, anchor data, and P Frame data for progressively refreshed video data, data arranged in vertical and or horizontal moat patterns on the video frame, and any other selected data that renders the video and/or audio difficult to utilize.
  • FIGURE 1 a VOD content delivery system 100 consistent with certain embodiments of the present invention is illustrated.
  • a cable television muliple services operator operates a cable head end 104 to provide content to subscribers.
  • VOD content is statically stored on VOD servers such as servers 108 and 112 depicted as located at cable hubs 116 and 120 respectively.
  • the VOD content is delivered to a specific subscriber's STB such as STB 124, 128, 132 or 136 upon receipt of a specific request by that subscriber.
  • content stored in the VOD servers is delivered to the ordering STB which has an individual identification code that can be addressed by the cable head end and VOD server.
  • VOD is interactive
  • the cable system can learn not only the address of the ordering STB, but also what type of STB the ordering STB is (e.g., a legacy or non-legacy set-top box), and what CA system the STB uses.
  • CA conditional access
  • Such selective encryption entails duplicating and encrypting certain important or critical segments of the content independently with each CA while sending the remainder of the content in the clear.
  • the clear content can be received by both legacy and non-legacy set-top boxes, affording a huge savings in bandwidth from the "full dual carriage" approach, while the encrypted content is decrypted by the respective set-top boxes with the particular CA.
  • the ordering STB since the content is directed to a specific target STB (the ordering STB), the efficiency of both transmission and storage of the content can be enhanced using multiple and single selective encryption in accordance with embodiments consistent with the present invention.
  • FIGURE 2 depicts a process 200 consistent with an embodiment of the present invention starting at 202 in which the VOD content is stored as a multiple (e.g., dual) selectively encrypted content and then transmitted as single selectively encrypted content.
  • the content is selectively multiply encrypted. This is carried out by selecting appropriate segments of content to be encrypted that are important or critical to the decoding of the content, duplicating those selected segments content and encrypting each copy using a different encryption method (one for each CA system in use).
  • the resulting multiple selectively encrypted content is then stored on the VOD server(s) or at a data repository in the cable head end.
  • any time critical PCR information should be fixed along with the Continuity Counter information in the duplicated packets.
  • I determines what type of STB is associated with the order and thus what type of CA encryption system is being used by the ordering STB at 218. Once this is determined, there is no need to transmit the multiple selectively encrypted content to the subscriber (unless the order somehow is to be associated with multiple STBs of different types as in a household having two different STBs, both of which are to be entitled to decode the content).
  • the encrypted portions of the content that are encrypted under a CA encryption not used by the ordering STB are stripped out at 222 to convert the multiple selectively encrypted VOD content into single selectively encrypted VOD content.
  • the remaining encrypted content is then associated with the program identifier used by the clear unencrypted content to produce the single selectively encrypted VOD content.
  • This single selectively encrypted VOD content is then provided to the ordering STB at 226.
  • a bill is ultimately sent to the subscriber at 230 for the VOD content and the process ends at 234.
  • a video on demand (VOD) method involves storing multiple selective encrypted VOD content on a VOD server; receiving an order for the VOD content specifying delivery to a target decoder; determining what CA encryption system is associated with the order; stripping all encrypted segments from the multiple selectively encrypted content that are not associated with the order to produce single selectively encrypted VOD content; and sending the single selectively encrypted VOD content to the target decoder.
  • VOD video on demand
  • the multiple selectively encrypted VOD content can be created by examining unencrypted data representing digital content to identify segments of content for encryption; encrypting the identified segments of content using a first encryption method associated with a first conditional access system to produce first encrypted segments; encrypting the identified segments of content using a second encryption method associated with a second conditional access system to produce second encrypted segments; and replacing the identified segments of content with the first encrypted content and the second encrypted content in the digital content, to produce the multiple selectively encrypted VOD content.
  • the data streams or files representing the VOD content associated with this process are depicted in FIGURE 3.
  • the clear content is represented by packets or other segments of data containing a "C" while encrypted segments encrypted under CA encryption system A is represented by the designations "CA-A".
  • Encrypted segments encrypted under CA encryption system B is represented by designations "CA-B".
  • the initial file is either unencrypted or decrypted and its initial 16 segments is shown as 310.
  • segments 7 and 14 are selected for encryption. These segments may correspond to important or critical data needed for decoding or may be selected according to any desired selection criteria.
  • These segments are duplicated, encrypted under CA-A and CA-B and reinserted into the file or data stream as shown to produce the dual selectively encrypted file.
  • This file 320 can then be stored for later retrieval, when a customer places an order for this VOD content, on one or more of the VOD servers at the cable hubs or at the cable head end.
  • the dual selectively encrypted content is converted to single encrypted content for transmission to the ordering STB. This is done by stripping out the unneeded portions that are encrypted under any unused CA systems to produce a data stream such as that depicted in 330. In this case, CA-A encrypted segments are stripped out and CA-B encrypted segments remain.
  • the storage requirements of the VOD file servers are minimized by not requiring full multiple copies of encrypted content to be stored thereon. Still, the content is stored in a secure manner with low overhead needed to accommodate the multiple encryption schemes.
  • the content, when sent to the ordering STB is further optimized to eliminate the small amount of overhead used for the second CA encryption scheme to further enhance the efficiency of the utilization of the bandwidth for transmission of the VOD content to the ordering STB. Since the VOD system knows which set-top box, legacy or non-legacy, it is sending content to, the content does not need to be sent with packet duplication. This can preserve bandwidth on the cable plant. While the elimination of the un-needed packet is not strictly required, it provides the advantage of minimizing bandwidth and can eliminate the need for a "shadow" or secondary PID to be called out in the Program Map Table (PMT) as described in the above-referenced patent applications, since the encrypted packet can be mapped to the primary PID associated with the unencrypted content.
  • PMT Program Map Table
  • the process 200 of FIGURE 2 can be carried out on any suitable programmed general purpose processor operating as a VOD server/encoder such as that depicted as computer 400 of FIGURE 4.
  • Computer 400 has one or more central processor units (CPU) 410 with one or more associated buses 414 used to connect the central processor unit 410 to Random Access Memory 418 and Non-Volatile Memory 422 in a known manner.
  • Output devices 426 such as a display and printer, are provided in order to display and/or print output for the use of the MSO as well as to provide a user interface such as a Graphical User Interface (GUI).
  • GUI Graphical User Interface
  • input devices such as keyboard, mouse and removable media readers 430 may be provided for the input of information by the operator.
  • Computer 400 also incorporates internal and/or external attached disc or other mass storage 434 (e.g., disc and/or optical storage) for storing large amounts of information including, but not limited to, the operating system, multiple CA encryption methods (if encryption is carried out by the VOD server), as well as the VOD content (which is most likely stored on massive attached storage).
  • the Computer system 400 also has an interface 438 for connection to the cable system to service customer requests for content, and may also have interface 444 that interfaces to multiple encryption devices if the encryption is carried out by separate hardware. While depicted as a single computer, the digital content provider may utilize multiple linked computers to carry out the functions described herein.
  • an electronic storage medium storing selectively encrypted video on demand (VOD) programming stores a file representing multiple selective encrypted VOD content having: segments of unencrypted VOD content; first encrypted segments of VOD content encrypted using a first encryption method associated with a first conditional access system; second encrypted segments of VOD content encrypted using a second encryption method associated with a second conditional access system; the first and second encrypted segments of VOD content representing the same segment of VOD content when not encrypted.
  • a first segment of code when executed operates to remove one of the first and second encrypted segments of VOD content from the multiple selective encrypted VOD content to produce single selectively encrypted content for transmission to a target decoder.
  • the first segment of code operates to remove one of the first and second encrypted segments of VOD content upon receipt of an order for the VOD content specifying delivery to a target decoder, and upon determining which CA encryption system is associated with the order.
  • the second segment of code sends the single selectively encrypted VOD content to the target decoder.
  • a third segment of code associates a program identifier with the single selectively encrypted VOD content, wherein the same PIDs are used for encrypted and unencrypted segments of content.
  • the invention should not be so limited, since the present invention could be implemented using hardware component equivalents such as special purpose hardware and/or dedicated processors which are equivalents to the invention as described and claimed.
  • general purpose computers, microprocessor based computers, micro-controllers, optical computers, analog computers, dedicated processors and/or dedicated hard wired logic may be used to construct alternative equivalent embodiments of the present invention.
  • the present invention has been described in terms of a general purpose personal computer providing a playback mechanism, the playback can be carried on a dedicated machine without departing from the present invention.
  • Software code and/or data embodying certain aspects of the present invention may be present in any computer readable medium, transmission medium, storage medium or propagation medium including, but not limited to, electronic storage devices such as those described above, as well as carrier waves, electronic signals, data structures (e.g., trees, linked lists, tables, packets, frames, etc.) optical signals, propagated signals, broadcast signals, transmission media (e.g., circuit connection, cable, twisted pair, fiber optic cables, waveguides, antennas, etc.) and other media that stores, carries or passes the code and/or data. Such media may either store the software code and/or data or serve to transport the code and/or data from one location to another.
  • electronic storage devices such as those described above, as well as carrier waves, electronic signals, data structures (e.g., trees, linked lists, tables, packets, frames, etc.) optical signals, propagated signals, broadcast signals, transmission media (e.g., circuit connection, cable, twisted pair, fiber optic cables, waveguides, antennas, etc.) and other media

Landscapes

  • Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Graphics (AREA)
  • Human Computer Interaction (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
  • Television Signal Processing For Recording (AREA)

Abstract

L'invention concerne un procédé de vidéo à la demande (VOD) impliquant le stockage de contenus VOD multiples sélectivement cryptés sur un serveur VOD; à recevoir un ordre de distribution spécifiant des contenus VOD à un décodeur cible; à déterminer le système de cryptage à accès conditionnel associé à l'ordre; à supprimer tous les segments cryptés des contenus VOD multiples sélectivement cryptés qui ne sont pas associés à cet ordre afin de produire un contenu VOD unique sélectivement crypté; et à envoyer ce contenu VOD unique sélectivement crypté au décodeur cible. Les contenus VOD multiples sélectivement cryptés peuvent être crées par examen de données non cryptées représentant un contenu numérique afin d'identifier des segments de contenu à crypter; à crypter les segments de contenu identifiés à l'aide d'un premier procédé de cryptage associé à un premier système d'accès conditionnel afin de produire des premiers segments cryptés; à crypter les segments de contenu identifiés à l'aide d'un second procédé de cryptage associé à un second système d'accès conditionnel afin de produire des seconds segments cryptés; et à remplacer les segments de contenu identifiés à l'aide du premier contenu crypté et du second contenu crypté par un contenu numérique afin de produit les contenus VOD multiples sélectivement cryptés.
PCT/US2003/027775 2002-09-09 2003-09-08 Cryptage selectif à la demande pour vidéo WO2004036892A2 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
AU2003296903A AU2003296903A1 (en) 2002-09-09 2003-09-08 Selective encryption for video on demand
CA2498346A CA2498346C (fr) 2002-09-09 2003-09-08 Cryptage selectif a la demande pour video

Applications Claiming Priority (10)

Application Number Priority Date Filing Date Title
US40967502P 2002-09-09 2002-09-09
US60/409,675 2002-09-09
US10/273,903 2002-10-18
US10/274,084 US7155012B2 (en) 2002-01-02 2002-10-18 Slice mask and moat pattern partial encryption
US10/273,903 US7302059B2 (en) 2002-01-02 2002-10-18 Star pattern partial encryption
US10/273,905 US7376233B2 (en) 2002-01-02 2002-10-18 Video slice and active region based multiple partial encryption
US10/274,084 2002-10-18
US10/273,905 2002-10-18
US10/274,019 2002-10-18
US10/274,019 US7292690B2 (en) 2002-01-02 2002-10-18 Video scene change detection

Publications (2)

Publication Number Publication Date
WO2004036892A2 true WO2004036892A2 (fr) 2004-04-29
WO2004036892A3 WO2004036892A3 (fr) 2005-06-23

Family

ID=32111125

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2003/027775 WO2004036892A2 (fr) 2002-09-09 2003-09-08 Cryptage selectif à la demande pour vidéo

Country Status (3)

Country Link
AU (1) AU2003296903A1 (fr)
CA (1) CA2498346C (fr)
WO (1) WO2004036892A2 (fr)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2005112451A1 (fr) * 2004-05-11 2005-11-24 Scientific-Atlanta, Inc. Systeme de couche multimedia reseaute
WO2007005422A1 (fr) * 2005-06-29 2007-01-11 Scientific-Atlanta, Inc. Prechiffrement partiel a tri de paquets fonde sur un reseau
US7865925B2 (en) 2003-01-15 2011-01-04 Robertson Neil C Optimization of a full duplex wideband communications system
US8159531B2 (en) 2004-04-28 2012-04-17 Perkinelmer Singapore Pte Ltd. Controlling operations in an image formation process in confocal microscope
US9762970B2 (en) 2002-10-04 2017-09-12 Tech 5 Access of stored video from peer devices in a local network
US10429304B2 (en) 2006-02-28 2019-10-01 Perkinelmer Singapore Pte Ltd. Apparatus and methods for imaging and modification of biological samples

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5940738A (en) * 1995-05-26 1999-08-17 Hyundai Electronics America, Inc. Video pedestal network
US5973722A (en) * 1996-09-16 1999-10-26 Sony Corporation Combined digital audio/video on demand and broadcast distribution system
US20020083438A1 (en) * 2000-10-26 2002-06-27 So Nicol Chung Pang System for securely delivering encrypted content on demand with access contrl
US6415031B1 (en) * 1999-03-12 2002-07-02 Diva Systems Corporation Selective and renewable encryption for secure distribution of video on-demand

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5940738A (en) * 1995-05-26 1999-08-17 Hyundai Electronics America, Inc. Video pedestal network
US5973722A (en) * 1996-09-16 1999-10-26 Sony Corporation Combined digital audio/video on demand and broadcast distribution system
US6415031B1 (en) * 1999-03-12 2002-07-02 Diva Systems Corporation Selective and renewable encryption for secure distribution of video on-demand
US20020083438A1 (en) * 2000-10-26 2002-06-27 So Nicol Chung Pang System for securely delivering encrypted content on demand with access contrl

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9762970B2 (en) 2002-10-04 2017-09-12 Tech 5 Access of stored video from peer devices in a local network
US7865925B2 (en) 2003-01-15 2011-01-04 Robertson Neil C Optimization of a full duplex wideband communications system
US8159531B2 (en) 2004-04-28 2012-04-17 Perkinelmer Singapore Pte Ltd. Controlling operations in an image formation process in confocal microscope
WO2005112451A1 (fr) * 2004-05-11 2005-11-24 Scientific-Atlanta, Inc. Systeme de couche multimedia reseaute
WO2007005422A1 (fr) * 2005-06-29 2007-01-11 Scientific-Atlanta, Inc. Prechiffrement partiel a tri de paquets fonde sur un reseau
US10429304B2 (en) 2006-02-28 2019-10-01 Perkinelmer Singapore Pte Ltd. Apparatus and methods for imaging and modification of biological samples

Also Published As

Publication number Publication date
WO2004036892A3 (fr) 2005-06-23
AU2003296903A1 (en) 2004-05-04
CA2498346C (fr) 2011-11-22
CA2498346A1 (fr) 2004-04-29
AU2003296903A8 (en) 2004-05-04

Similar Documents

Publication Publication Date Title
US7039938B2 (en) Selective encryption for video on demand
US7233669B2 (en) Selective encryption to enable multiple decryption keys
US7151833B2 (en) Selective encryption to enable trick play
US8818896B2 (en) Selective encryption with coverage encryption
CA2746621C (fr) Cryptage partiel double base sur une tranche de video et une region active de l'image
US7409562B2 (en) Method and apparatus for encrypting media programs for later purchase and viewing
US7292692B2 (en) Content scrambling with minimal impact on legacy devices
CA2413955C (fr) Embrouillage partiel de profil moat a masquage de tranches
US20080137847A1 (en) Video slice and active region based multiple partial encryption
US20040083177A1 (en) Method and apparatus for pre-encrypting VOD material with a changing cryptographic key
US7929698B2 (en) Selective encryption to enable trick play with enhanced security
CA2553358A1 (fr) Chiffrement selectif multiple a gestion des droits numeriques
CA2498346C (fr) Cryptage selectif a la demande pour video
CA2437025C (fr) Cryptage selectif permettant les fonctions evoluees de lecture

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY TJ TM TN TR TT TZ UA UG UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
WWE Wipo information: entry into national phase

Ref document number: 2003808969

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2498346

Country of ref document: CA

WWW Wipo information: withdrawn in national office

Ref document number: 2003808969

Country of ref document: EP

NENP Non-entry into the national phase in:

Ref country code: JP

WWW Wipo information: withdrawn in national office

Country of ref document: JP