System and method for securely distributing digital content for short term use

• US 20010036271A1
• Filed: 03/20/2001
• Published: 11/01/2001
• Est. Priority Date: 09/13/1999
• Status: Abandoned Application

• Current Assignee: Vesta Broadband Services Incorporated
• Original Assignee: Vesta Broadband Services Incorporated
• Inventors: Javed, Shoeb M.
• Application Number:
  US09/813,270
• Publication Number:
  US 20010036271A1
• Time in Patent Office: Days
• US Class Current: 380/217
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/2743 Video hosting of uploaded data from client
• CPC Class Codes: H04N 21/42684 Client identification by a unique number or address, e.g. serial number, MAC address, socket ID network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/4331 Caching operations, e.g. of an advertisement for later insertion during playback
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/44204 Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6581 Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8456 by decomposing the content in the time domain, e.g. in time segments
• CPC Class Codes: H04N 7/17327 with deferred transmission or handling of upstream communications
• CPC Class Codes: H04N 7/17336 Handling of requests in head-ends

Abstract

A system and method for use in a communication network that communicates with a plurality of digital content servers to provide selected digital data files, including video and audio files, for download to a subscriber device. A segmentation controller is provided for dividing the selected into segments. An encryption controller is provided for compressing and encrypting each of the segments with a selected one of a plurality of encryption keys. The segments are then transmitted at or above the average bandwidth of the communication network to a subscriber device. A copy of the decryption keys are transmitted to the subscriber device to enable playback of the selected file only with a current verification of the subscriber device.

Claims

1. A digital content server capable of transmitting a selected digital data file comprising at least one of a video file and an audio file to a subscriber device via a communication network, said digital content server comprising:

a memory for storing said selected digital data file and a plurality of encryption keys and a plurality of corresponding decryption keys;

a segmentation controller capable of dividing said selected digital data file into a plurality of segments;

an encryption controller capable of encrypting each of said plurality of segments with a selected one of said plurality of encryption keys; and

a transmission controller capable of determining an average bandwidth of said communication network over an N second period and transmitting said plurality of encrypted segments to said subscriber device in an N second period at an average data rate at least equal to said average bandwidth of said communication network and wherein said transmission controller is capable of transmitting said decryption keys to said subscriber device.

2. The digital content server as set forth in

claim 1

wherein said transmission controller is capable of transmitting said stored decryption keys to said subscriber device upon receipt of a verification signal.

3. The digital content server as set forth in

claim 2

wherein said transmission controller receives verification from said subscriber device.

4. The digital content server as set forth in

claim 1

wherein said segmentation controller is capable of adjusting the size of each one of said plurality of segments.

5. The digital content server as set forth in

claim 4

wherein said segmentation controller is capable of adjusting the size of each one of said plurality of segments according to parameters set by said transmission controller.

6. The digital content server as set forth in

claim 5

wherein the parameters set by said transmission controller are one of equal to the average bandwidth and exceed the average bandwidth of said communications network.

7. The digital content server as set forth in

claim 1

, wherein said decryption keys are sent to the subscriber device each time the selected file is played and said decryption keys are required only when a predetermined time period elapses between verification checks by said subscriber device.

8. The digital content server as set forth in

claim 1

wherein said encryption controller is capable of compressing each segment prior to encryption.

9. A communication network comprising:

a plurality of subscriber video players capable of receiving digital content files; and

a digital content server capable of transmitting a selected digital data file comprising at least one of a video file and an audio file to a subscriber device via a communication network, said digital content server comprising;

a memory for storing said selected digital data file and a plurality of encryption keys and a plurality of corresponding decryption keys;

a segmentation controller capable of dividing said selected digital data file into a plurality of segments;

an encryption controller capable of encrypting each of said plurality of segments with a selected one of said plurality of encryption keys; and

a transmission controller capable of determining an average bandwidth of said communication network over an N second period and transmitting said plurality of encrypted segments to said subscriber device in an N second period at an average data rate at least equal to said average bandwidth of said communication network and wherein said transmission controller is capable of transmitting said decryption keys to said subscriber device.

10. The communication network as set forth in

claim 9

wherein said transmission controller is capable of transmitting said stored decryption keys to said subscriber device upon receipt of a verification signal.

11. The communication network as set forth in

claim 9

wherein said transmission controller receives verification from said subscriber device.

12. The communication network as set forth in

claim 9

wherein said segmentation controller is capable of adjusting the size of each one of said plurality of segments.

13. The communication network as set forth in

claim 12

wherein said segmentation controller is capable of adjusting the size of each one of said plurality of segments according to parameters set by said transmission controller.

14. The communication network as set forth in

claim 13

wherein the parameters set by said transmission controller are one of equal to the average bandwidth and exceed the average bandwidth of said communications network.

15. The communication network as set forth in

claim 14

wherein said decryption keys are sent to the subscriber device each time the selected file is played and said decryption keys are required only when a predetermined time period elapses between verification checks by said subscriber device.

16. The communication network as set forth in

claim 15

wherein said encryption controller is capable of compressing each segment prior to encryption.

17. A method for transmitting a selected digital data file comprising at least one of a video file and an audio file to a subscriber device via a communications network, comprising the steps of:

dividing said digital data file into a plurality of segments, wherein said segments are adjustable in size;

encrypting each of said plurality of segments with a selected one of a plurality of encryption keys;

storing a plurality of decryption keys corresponding to said plurality of encryption keys; and

transmitting each said encrypted segment via said communications network to said subscriber device at an average data rate at least equal to an average bandwidth of said communications network.

18. The method as set forth in

claim 17

further comprising the step of transmitting said decryption keys to said subscriber device upon receipt of a verification signal.

19. The method as set forth in

claim 18

further comprising the step of adjusting the size of each one of said plurality of segments according to parameters set by said transmission controller wherein the parameters are one of, equal to the average bandwidth and exceed the average bandwidth of said communications network.

20. The method as set forth in

claim 19

further comprising the step of, responsive to a verification signal, transmitting a copy of said stored decryption keys to said subscriber device for decrypting each said encrypted segment.

21. The method as set forth in

claim 20

the steps of:

said subscriber device verifying a predetermined time period of use of said selected digital data file; and

transmitting said decryption keys to said subscriber device only if said time period is exceeded.