Securely ingesting encrypted content into content servers

• US 20080015999A1
• Filed: 01/19/2006
• Published: 01/17/2008
• Est. Priority Date: 02/04/2005
• Status: Abandoned Application

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Widevine Technologies Incorporated (Alphabet Inc.)
• Inventors: Jacobs, Andre, Ali, Hamid, Morten, Glenn
• Application Number:
  US11/336,693
• Publication Number:
  US 20080015999A1
• Time in Patent Office: Days
• US Class Current: 705/52
• CPC Class Codes: H04N 21/23473 by pre-encrypting
• CPC Class Codes: H04N 21/235 Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/23611 Insertion of stuffing data into a multiplex stream, e.g. to obtain a constant bitrate synchronisation arrangements in time-division multiplex systems using bit stuffing for systems with different or fluctuating information rates H04J3/073
• CPC Class Codes: H04N 21/2387 Stream processing in response to a playback request from an end-user, e.g. for trick-play
• CPC Class Codes: H04N 21/23895 involving multiplex stream encryption
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/44029 for generating different versions
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/8455 involving pointers to the content, e.g. pointers to the I-frames of the video stream
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17336 Handling of requests in head-ends

Abstract

A system and method are directed towards including buffer packets into an unencrypted content stream at a same location as encryption related information such as an ECM, an EMM message, or the like, would be in a corresponding encrypted content stream. The buffer packets may comprise virtually any information, including a null packet, an ECM message. By inserting buffer packets in the same location, an overall file size, and frame locationing may be made to match the file size, and frame locationing of the encrypted content stream. The modified unencrypted content stream may be employed to generate trick play files, such as a fast forward file, fast reverse file, and so forth, as well as a corresponding index file that indicates locations of relevant content frames in the unencrypted content stream and the trick play files.

Claims

1. A server device for managing content encryption, comprising:

a transceiver for receiving and sending information between another computing device;

a processor in communication with the display and the transceiver; and

a memory in communication with the processor and for use in storing data and machine instructions that causes the processor to perform a plurality of operations, including;

receiving an unencrypted file;

encrypting a copy of the unencrypted file;

inserting a message associated with encryption information within the encrypted file;

modifying the unencrypted file to include a buffer packet at a location corresponding to a location of the message within the encrypted file; and

enabling the modified unencrypted file to be used to generate at least one of an index file or a trick play file.

2. The server device of claim 1, wherein the buffer packet includes at least one of an ECM and a null packet.

3. The server device of claim 1, wherein the modified unencrypted content stream and the encrypted content stream are of a same file size.

4. The server device of claim 1, the actions further comprising:

discarding the modified unencrypted file after generation of the at least one index file or trick play file; and

employing the encrypted file during a serving of content to an end-user.

5. The server device of claim 1, the actions further comprising:

modifying a Program Map Table (PMT) by including additional encryption information into the PMT;

inserting the modified PMT within the encrypted file;

padding an unmodified copy of the PMT with at least one null packet such that the padded PMT is of a same size as the modified PMT; and

inserting the padded PMT into the unencrypted file at a frame position corresponding to a frame position of the modified PMT within the encrypted file.

6. The server device of claim 1, wherein unencrypted file employs an MPEG format.

7. The server device of claim 1, wherein the unencrypted file further comprises at least one of a motion picture, a video, an audio file, still images, text, graphics, pay per view file, an interactive media, or a video on demand file.

8. A method for use in for managing content encryption, comprising:

receiving an unencrypted content stream;

encrypting a copy of the unencrypted content stream;

inserting a message associated with encryption information within the encrypted content stream;

modifying the unencrypted content stream to include a buffer packet at a location corresponding to a location of the message within the encrypted content stream such that the modified unencrypted content stream and the encrypted content stream are of a same file size; and

enabling the modified unencrypted content stream to be used to generate at least one of an index file or a trick play file.

9. The method of claim 8, wherein the buffer packet includes at least one of an ECM and a null packet.

10. The method of claim 8, further comprising:

discarding the modified unencrypted content stream upon generation of the at least one index file or trick play file.

11. The method of claim 8, further comprising:

inserting a Program Map Table (PMT) into the encrypted content stream, the PMT being modified with additional encryption information;

padding an unmodified copy of the PMT with at least one null packet such that the padded PMT is of a same size as the modified PMT; and

inserting the padded PMT into the unencrypted content stream at a frame position corresponding to a frame position of the modified PMT within the encrypted content stream.

12. The method of claim 8, wherein the unencrypted content stream further comprises at least one of a motion picture, a video, an audio content stream, still images, text, graphics, pay per view content stream, an interactive media, or a video on demand content stream.

13. A modulated data signal configured to include program instructions for performing the method of claim 8.

14. A system for use in for managing content encryption over a network comprising:

an encryption server that includes program instructions that are operative to perform actions, comprising;

receiving an unencrypted file;

encrypting a copy of the unencrypted file;

inserting a message associated with encryption information within the encrypted file;

modifying the unencrypted file to include a buffer packet at a location corresponding to a location of the message within the encrypted file; and

forwarding the modified unencrypted file; and

a trick play server that is in communication with the encryption server and includes program instructions operative to perform actions, comprising;

receiving the modified unencrypted file; and

generating at least one of an index file or a trick play file based on the modified unencrypted file.

15. The system of claim 14, wherein the actions of the trick play server further comprising:

discarding the modified unencrypted file after generation of the at least one index file or trick play file.

16. The system of claim 14, further comprising:

a server that is in communication with the trick play server and the encryption server and includes program instructions operative to perform actions, including;

receiving the at least one trick play file or index file; and

employing the encrypted file and the at least one trick play file or index file during a serving of content to an end-user.

17. The system of claim 14, wherein the buffer packet includes at least one of an ECM and a null packet.

18. A computer-readable medium having stored thereon a data structure useable in generating a trick play file, comprising:

a plurality of first data fields, each data field within the plurality of first data fields comprising at least one of a video or an audio data packet within an unencrypted content stream; and

at least one second data field comprising a buffer packet, the at least one second data field being inserted at a frame location between at least two first data fields corresponding to a frame location of at least one of an ECM or an EMM message in an encrypted content stream that is derived from the unencrypted content stream, wherein the insertion of the at least one second data field results in the data structure being of a same size as the encrypted content stream.

19. The computer-readable medium of claim 18, wherein the at least one second data field further comprises a same size as the corresponding ECM or EMM message in the encrypted content stream.

20. The computer-readable medium of claim 18, wherein the buffer packet includes at least one of an ECM and a null packet.

21. An apparatus for managing content encryption over a network, comprising:

a transceiver to receive input data over the network; and

means for generating a modified unencrypted content stream by including at least one buffer packet within an unencrypted content stream at a location corresponding to a location of an encryption message within an encrypted copy of the unencrypted content stream that includes at least one encryption message, such that the modified unencrypted content stream may be employed to generate at least one of an index file or a trick play file.

22. The apparatus of claim 21, wherein the encryption message further comprises at least one of an ECM message or an EMM message.

23. The apparatus of claim 21, wherein the modified unencrypted content stream and the encrypted copy are of a same overall file size, and wherein the buffer packet is of a same size as the corresponding encryption message.