System and method of applying adaptive privacy control regions to bitstream data

• US 10,410,000 B1
• Filed: 12/29/2017
• Issued: 09/10/2019
• Est. Priority Date: 12/29/2017
• Status: Active Grant

• Current Assignee: Entefy Inc.
• Original Assignee: Entefy Inc.
• Inventors: Ghafourifar, Alston, Ciancio, Vincente
• Primary Examiner(s): Nipa, Wasika
• Application Number:
  US15/859,232
• Time in Patent Office: 620 Days
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

Disclosed are systems to apply customized permission settings to protect particular portions of a document, and, in particular, documents that are of bitstream datatypes, encoded or not encoded, e.g., an audio filetype such as the MP3 audio format. The custom access permission settings may be implemented by obfuscating the protected portions of the original bitstream and then embedding “secret,” e.g., hidden and/or encrypted, versions of the obfuscated portions in parts of the data structure of the original file, e.g., in the form of “layers” that are held within audio stream containers such as channels. The content of the individual encrypted audio stream containers may then be decrypted according to each recipient'"'"'s permissions and layered on top of the obfuscated portions of the encoded media file before being rendered to the recipient.

Claims

1. A non-transitory computer readable medium storing instructions executable by one or more processing units, the instructions comprising instructions to:

receive an indication of a first portion of a media file, the first portion comprising a first bitstream;

receive a first permission-setting for the first portion;

receive an indication of a first recipient for the first portion;

receive an indication of a second portion of the media file, the second portion comprising a second bitstream;

receive a second permission-setting for the second portion;

receive an indication of a second recipient for the second portion;

crop the first portion and the second portion;

generate a first scrambled portion and a second scrambled portion by transposing a first plurality of bits of the first cropped portion with a second plurality of bits of the second cropped portion, wherein the first cropped portion and the second cropped portion are of different lengths corresponding to different periods of time;

generate a first encryption key for the first scrambled portion based, at least in part, on the first permission-setting and the indication of the first recipient;

generate a second encryption key for the second scrambled portion based, at least in part, on the second permission-setting and the indication of the second recipient;

encrypt the first scrambled portion using the first encryption key and the second scrambled portion using the second encryption key;

generate a first control wave corresponding to the first encrypted portion and a second control wave corresponding to the second encrypted portion;

generate a first steganographic bitstream by multiplexing the first encrypted portion with the first control wave, and a second steganographic bitstream by multiplexing the second encrypted portion with the second control wave, wherein the first steganographic bitstream is the same length as first cropped portion and the second steganographic bitstream is the same length as the second portion; and

transmit the media file to the first recipient and the second recipient.

2. The non-transitory computer readable medium of claim 1, wherein the

first portion and the second portion of the media file are non-overlapping.

3. The non-transitory computer readable medium of claim 1, wherein the first portion and the media file are coextensive.

4. The non-transitory computer readable medium of claim 3, wherein the media file is an audio file.

5. The non-transitory computer readable medium of claim 1, wherein the instructions further comprise instructions to multiplex the encrypted first portion with a high frequency control wave.

6. The non-transitory computer readable medium of claim 5, wherein the instructions further comprise instructions to overwrite a second portion of the media file with the multiplexed first portion.

7. The non-transitory computer readable medium of claim 6, wherein the high frequency control wave is inaudible to humans, the first portion corresponds to a first channel, and the second portion corresponds to a second channel.

8. A system, comprising:

a memory; and

one or more processing units, communicatively coupled to the memory, wherein the memory stores instructions executable to cause the one or more processing units to;

receive an indication of a first portion of a media file, the first portion comprising a first bitstream;

receive a first permission-setting for the first portion;

receive an indication of a first recipient for the first portion;

receive an indication of a second portion of the media file, the second portion comprising a second bitstream;

receive a second permission-setting for the second portion;

receive an indication of a second recipient for the second portion;

crop the first portion and the second portion;

generate a first scrambled portion and a second scrambled portion by transposing a first plurality of bits of the first cropped portion with a second plurality of bits of the second cropped portion, wherein the first cropped portion and the second cropped portion are of different lengths corresponding to different periods of time;

generate a first encryption key for the first scrambled portion based, at least in part, on the first permission-setting and the indication of the first recipient;

generate a second encryption key for the second scrambled portion based, at least in part, on the second permission-setting and the indication of the second recipient;

encrypt the first scrambled portion using the first encryption key and the second scrambled portion using the second encryption key;

generate a first control wave corresponding to the first encrypted portion and a second control wave corresponding to the second encrypted portion; and

generate a first steganographic bitstream by multiplexing the first encrypted portion with the first control wave, and a second steganographic bitstream by multiplexing the second encrypted portion with the second control wave, wherein the first steganographic bitstream is the same length as first cropped portion and the second steganographic bitstream is the same length as the second portion.

9. The system of claim 8, wherein

first portion and the second portion of the media file are mutually exclusive.

10. The system of claim 8, wherein the second portion and the media file are coextensive.

11. The system of claim 10, wherein the media file is an audio-visual file.

12. The system of claim 8, wherein the instructions are further executable to cause the one or more processing units to multiplex the encrypted first portion with a high frequency control wave.

13. The system of claim 12, wherein the instructions are further executable to cause the one or more processing units to overwrite a second portion of the media file with the multiplexed first portion.

14. The system of claim 13, wherein the high frequency control wave is inaudible to humans, the first portion corresponds to a first channel and the second portion corresponds to a second channel.

15. A computer-implemented method, comprising:

receiving an indication of a first portion of a media file, the first portion comprising a first bitstream;

receiving a first permission-setting for the first portion;

receiving an indication of a first recipient for the first portion;

receiving an indication of a second portion of the media file, the second portion comprising a second bitstream;

receiving a second permission-setting for the second portion;

receiving an indication of a second recipient for the second portion;

cropping the first portion and the second portion;

generating a first scrambled portion and a second scrambled portion by transposing a first plurality of bits of the first cropped portion with a second plurality of bits of the second cropped portion, wherein the first cropped portion and the second cropped portion are of different lengths corresponding to different periods of time;

generating a first encryption key for the first scrambled portion based, at least in part, on the first permission-setting for the first portion and the indication of the first recipient of the first portion;

generating a second encryption key for the second scrambled portion based, at least in part, on the second permission-setting and the indication of the second recipient;

encrypting the first scrambled portion using the first encryption key and the second scrambled portion using the second encryption key;

generating a first control wave corresponding to the first encrypted portion and a second control wave corresponding to the second encrypted portion;

generating a first steganographic bitstream by multiplexing the first encrypted portion with the first control wave, and a second steganographic bitstream by multiplexing the second encrypted portion with the second control wave, wherein the first steganographic bitstream is the same length as first cropped portion and the second steganographic bitstream is the same length as the second portion; and

transmitting the media file to the first recipient.

16. The computer-implemented method of claim 15,

wherein the first portion and the second portion of the media file are overlapping.

17. The computer-implemented method of claim 15, wherein the first portion and the media file are coextensive.

18. The computer-implemented method of claim 17, wherein the media file is an audio file.

19. The computer-implemented method of claim 15, further comprising multiplexing the encrypted first portion with a high frequency control wave.

20. The computer-implemented method of claim 19, further comprising overwriting a second portion of the media file with the multiplexed first portion.