Methods and apparatus for secure and adaptive delivery of multimedia content

• US 20040202320A1
• Filed: 04/09/2003
• Published: 10/14/2004
• Est. Priority Date: 04/09/2003
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Verscheure, Olivier, Westerink, Peter, Venkatramani, Chitra, Amini, Lisa D., Frossard, Pascal
• Granted Patent: US 7,313,236 B2
• Time in Patent Office: Days
• US Class Current: 380/36
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/70 Media network packetisation
• CPC Class Codes: H04L 65/762 at the source reformatting of additional data in video distribution servers H04N21/2355

Abstract

Techniques for securely and adaptively delivering multimedia content. It is assumed that a set of alternate access units for each time slot is obtained. Then, the encryption stream index of each access unit from the set of alternate access units of the previous time slot are obtained. An encryption stream index is then assigned to each access unit in the set of alternate access units in the current time slot, such that the encryption index increases over time. Thus, the invention overcomes the problem of encrypting a multimedia stream that may have multiple access units for each time slot by selecting the encryption index for each access unit such that the encryption index increases, regardless of which access unit the delivery system (e.g., server) selects for transmission.

Claims

1. A method of processing content for delivery in an information system, wherein the content is representable as access units, the method comprising the steps of:

obtaining a set of alternate access units for a current time slot associated with the content; and

assigning an encryption index to each access unit in the set of alternate access units in the current time slot such that an encryption index increases over time.

2. The method of claim 1, wherein the assigning step further comprises assigning an encryption index to each access unit in the set of alternate access units in the current time slot such that an encryption index increases with respect to each encryption index of each access unit from a set of alternate access units for a previous time slot.

3. The method of claim 1, wherein each alternate access unit uses a different encryption key.

4. The method of claim 3, wherein the assigning step further comprises the steps of:

obtaining an encryption index of each access unit from a set of alternate access units of a previous time slot;

computing sums by adding corresponding access unit lengths to each index; and

setting the encryption index of each access unit in the current time slot equal to or greater than the maximum of the computed sums.

5. The method of claim 1, wherein each alternate access unit uses the same encryption key.

6. The method of claim 5, wherein the assigning step further comprises the steps of:

setting the encryption index of the first access unit in the set of alternate access units with the earliest time slot to an initial value;

obtaining the last computed encryption index and computing a sum by adding the access unit length corresponding to the access unit for which the encryption index was computed; and

setting the encryption index of the next access unit equal to or larger than the computed sum.

7. The method of claim 6, wherein a next access unit is defined as the next access unit in the same alternate set or, when encryption indexes in the same alternate set have been assigned, the next access unit is the first access unit of the set of alternate access units of the next time slot.

8. The method of claim 1, wherein the encryption index of each access unit of a particular stream of access units is equal to the sum of the encryption index of the previous access unit plus the length of the previous access unit.

9. The method of claim 8, wherein the particular stream of access units comprises a stream of access units selected to not have an encryption index gap.

10. The method of claim 8, wherein the assigning step further comprises the steps of:

obtaining the encryption index of the access unit of the particular stream for a given time slot; and

setting the encryption index of the other access units in the same time slot equal to or greater than the encryption index of the access unit of the particular stream.

11. The method of claim 1, wherein the content is multimedia content.

12. The method of claim 1, wherein the obtaining and assigning steps are performed in accordance with a content creation system.

13. The method of claim 12, wherein access units and encryption indexes are provided to at least one delivery server for subsequent delivery to at least one client device.

14. Apparatus for processing content for delivery in an information system, wherein the content is representable as access units, the apparatus comprising:

a memory; and

at least one processor coupled to the memory and operative to;

(i) obtain a set of alternate access units for a current time slot associated with the content; and

(ii) assign an encryption index to each access unit in the set of alternate access units in the current time slot such that an encryption index increases over time.

15. The apparatus of claim 14, wherein the assigning operation further comprises assigning an encryption index to each access unit in the set of alternate access units in the current time slot such that an encryption index increases with respect to each encryption index of each access unit from a set of alternate access units for a previous time slot.

16. The apparatus of claim 14, wherein each alternate access unit uses a different encryption key.

17. The apparatus of claim 16, wherein the assigning operation further comprises:

obtaining an encryption index of each access unit from a set of alternate access units of a previous time slot;

computing sums by adding corresponding access unit lengths to each index; and

setting the encryption index of each access unit in the current time slot equal to or greater than the maximum of the computed sums.

18. The apparatus of claim 14, wherein each alternate access unit uses the same encryption key.

19. The apparatus of claim 18, wherein the assigning operation further comprises:

setting the encryption index of the first access unit in the set of alternate access units with the earliest time slot to an initial value;

obtaining the last computed encryption index and computing a sum by adding the access unit length corresponding to the access unit for which the encryption index was computed; and

setting the encryption index of the next access unit equal to or larger than the computed sum.

20. The apparatus of claim 19, wherein a next access unit is defined as the next access unit in the same alternate set or, when encryption indexes in the same alternate set have been assigned, the next access unit is the first access unit of the set of alternate access units of the next time slot.

21. The apparatus of claim 14, wherein the encryption index of each access unit of a particular stream of access units is equal to the sum of the encryption index of the previous access unit plus the length of the previous access unit.

22. The apparatus of claim 21, wherein the particular stream of access units comprises a stream of access units selected to not have an encryption index gap.

23. The apparatus of claim 21, wherein the assigning operation further comprises:

obtaining the encryption index of the access unit of the particular stream for a given time slot; and

setting the encryption index of the other access units in the same time slot equal to or greater than the encryption index of the access unit of the particular stream.

24. The apparatus of claim 14, wherein the content is multimedia content.

25. The apparatus of claim 14, wherein the obtaining and assigning operations are performed in accordance with a content creation system.

26. The apparatus of claim 25, wherein access units and encryption indexes are provided to at least one delivery server for subsequent delivery to at least one client device.

27. Apparatus for processing content for delivery in an information system, the apparatus comprising:

a content creation system operative to;

(i) obtain a set of alternate access units for a current time slot associated with the content; and

(ii) assign an encryption index to each access unit in the set of alternate access units in the current time slot such that an encryption index increases over time.

28. An article of manufacture for processing content for delivery in an information system, comprising a machine readable medium containing one or more programs which when executed implement the steps of:

obtaining a set of alternate access units for a current time slot associated with the content; and

assigning an encryption index to each access unit in the set of alternate access units in the current time slot such that an encryption index increases over time.