Method and system for ensuring sequential playback of digital media

• US 10,268,806 B2
• Filed: 07/06/2015
• Issued: 04/23/2019
• Est. Priority Date: 09/30/2008
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Lindahl, Aram, James, Bryan J.
• Primary Examiner(s): Georgandellis, Andrew C
• Application Number:
  US14/792,605
• Publication Number:
  US 20150310190A1
• Time in Patent Office: 1,387 Days
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

Techniques for ensuring that media playback proceeds sequentially through media content of a digital media asset are disclosed. In one embodiment, distinct portions (e.g., segments) of a digital media asset can be separately encrypted such that on playback decoded data being output from at least one prior portion can be used to derive a cryptographic key that is used in decrypting a subsequent portion of the digital media asset.

Claims

1. A method for requiring a media asset to be played back sequentially, the method comprising, at a server device:

selecting an encryption algorithm;

dividing the media asset into a first segment and a plurality of additional segments arranged in a sequence;

generating a sequential key for each segment in the plurality of additional segments, wherein the sequential key for a particular segment in the plurality of additional segments arranged in the sequence is based, at least in part, on decoded media data included in a previous segment of the media asset immediately prior to the particular segment in the sequence;

encrypting, based on the selected encryption algorithm, each segment in the media asset in accordance with a corresponding encryption key to produce a plurality of encrypted segments, wherein the first segment is encrypted with a seed key and each particular segment in the plurality of additional segments is encrypted with the sequential key generated for the particular segment;

generating decryption information for decrypting the plurality of encrypted segments, wherein the decryption information identifies the selected encryption algorithm;

combining the plurality of encrypted segments and the decryption information to produce a protected media asset; and

storing the protected media asset,

wherein the sequential keys are not included in the decryption information to cause a decryption algorithm to decrypt the plurality of encrypted segments, in an order according to the sequence, to generate the decoded media data included in each segment that is utilized to reconstruct the sequential key for a subsequent segment in the sequence.

2. The method of claim 1, further comprising, in response to receiving a request for the media asset from the client device, providing the protected media asset to the client device.

3. The method of claim 2, further comprising, prior to providing the protected media asset to the client device:

encrypting the protected media asset using a master key; and

providing the master key to the client device.

4. The method of claim 1, wherein the decryption information indicates a starting encrypted segment and an ending encrypted segment within the protected media asset.

5. The method of claim 4, wherein the decryption information indicates that a first encryption key corresponds to the first segment.

6. The method of claim 1, further comprising:

identifying the media asset to be encrypted.

7. The method of claim 1, wherein the corresponding encryption key for each particular segment in the plurality of additional segments arranged in the sequence is based on two or more distinct portions of the decoded media data included in a previous segment of the media asset immediately prior to the particular segment in the sequence.

8. A non-transitory computer readable storage medium configured to store instructions that, when executed by a processor included in a computing device, cause the computing device to carry out steps that include:

selecting an encryption algorithm;

dividing a media asset into a first segment and a plurality of additional segments arranged in a sequence;

generating a sequential key for each segment in the plurality of additional segments, wherein the sequential key for a particular segment in the plurality of additional segments arranged in the sequence is based, at least in part, on decoded media data included in a previous segment of the media asset immediately prior to the particular segment in the sequence, wherein the first segment is encrypted with a seed key and each particular segment in the plurality of additional segments is encrypted with the sequential key generated for the particular segment;

encrypting each segment in the media asset in accordance with a corresponding encryption key to produce a plurality of encrypted segments;

generating decryption information for decrypting the plurality of encrypted segments, wherein the decryption information identifies the selected encryption algorithm;

combining the plurality of encrypted segments and the decryption information to produce a protected media asset; and

storing the protected media asset,

wherein the sequential keys are not included in the decryption information to cause a decryption algorithm to decrypt the plurality of encrypted segments, in an order according to the sequence, to generate the decoded media data included in each segment that is utilized to reconstruct the corresponding sequential key for a subsequent segment in the sequence.

9. The non-transitory computer readable storage medium of claim 8, wherein the steps further include, in response to receiving a request for the media asset from the client device, providing the protected media asset to the client device.

10. The non-transitory computer readable storage medium of claim 9, wherein the steps further include, prior to providing the protected media asset to the client device:

encrypting the protected media asset using a master key; and

providing the master key to the client device.

11. The non-transitory computer readable storage medium of claim 8, wherein the decryption information indicates a starting encrypted segment and an ending encrypted segment within the protected media asset.

12. The non-transitory computer readable storage medium of claim 11, wherein the decryption information indicates that a first encryption key corresponds to the first segment.

13. The non-transitory computer readable storage medium of claim 8, wherein the steps further include:

identifying the media asset to be encrypted.

14. The non-transitory computer readable storage medium of claim 8, wherein the corresponding encryption key for each particular segment in the plurality of additional segments arranged in the sequence is based on two or more distinct portions of the decoded media data included in a previous segment of the media asset immediately prior to the particular segment in the sequence.

15. A computing device, comprising:

a processor configured to cause the computing device to carry out steps that include;

selecting an encryption algorithm;

dividing a media asset into a first segment and a plurality of additional segments arranged in a sequence;

generating a sequential key for each segment in the plurality of additional segments, wherein the sequential key for a particular segment in the plurality of additional segments arranged in the sequence is based, at least in part, on decoded media data included in a previous segment of the media asset immediately prior to the particular segment in the sequence, wherein the first segment is encrypted with a seed key and each particular segment in the plurality of additional segments is encrypted with the sequential key generated for the particular segment;

encrypting each segment in the media asset in accordance with a corresponding encryption key to produce a plurality of encrypted segments;

generating decryption information for decrypting the plurality of encrypted segments, wherein the decryption information identifies the selected encryption algorithm;

combining the plurality of encrypted segments and the decryption information to produce a protected media asset; and

storing the protected media asset,

wherein the sequential keys are not included in the decryption information to cause a decryption algorithm to decrypt the plurality of encrypted segments, in an order according to the sequence, to generate the decoded media data included in each segment that is utilized to reconstruct the corresponding sequential key for a subsequent segment in the sequence.

16. The computing device of claim 15, wherein the steps further include, in response to receiving a request for the media asset from the client device, providing the protected media asset to the client device.

17. The computing device of claim 16, wherein the steps further include, prior to providing the protected media asset to the client device:

encrypting the protected media asset using a master key; and

providing the master key to the client device.

18. The computing device of claim 15, wherein the decryption information indicates a starting encrypted segment and an ending encrypted segment within the protected media asset.

19. The computing device of claim 18, wherein the decryption information indicates that a first encryption key corresponds to the first segment.

20. The computing device of claim 15, wherein the corresponding encryption key for each particular segment in the plurality of additional segments arranged in the sequence is based on two or more distinct portions of the decoded media data included in a previous segment of the media asset immediately prior to the particular segment in the sequence.