KEY ROTATION IN LIVE ADAPTIVE STREAMING

• US 20120114118A1
• Filed: 10/28/2011
• Published: 05/10/2012
• Est. Priority Date: 11/05/2010
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: VERMA, Sanjeev
• Application Number:
  US13/283,949
• Publication Number:
  US 20120114118A1
• Time in Patent Office: Days
• US Class Current: 380/42
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/8456 by decomposing the content in the time domain, e.g. in time segments

Abstract

Key rotation required for adaptive streaming of data is described. Metadata is added or provides extensions to two file formats, namely, ISO-based FF (also known as MP4 FF) and MPEG2-TS. A new Sample Group Type box in ISO-based FF is introduced to support key rotation required in adaptive streaming use cases, especially for live adaptive streaming. A mapping from MPEG2-TS FF to ISO-based FF is also enabled with the introduction of this new Sample Group Type by embedding metadata required for key rotation. Key rotation needed for live adaptive streaming in a broadcast environment is enabled.

Claims

1. A method of enabling secure adaptive streaming of data in an ISO-based file format, the method comprising:

receiving a long-term key through an initialization segment, the long-term key encrypted using a public key of a service provider, wherein the long-term key is used to encrypt a short-term key;

receiving a media stream, wherein samples are grouped based on a plurality of crypto-periods, wherein the media stream is scrambled by a plurality of short-term keys, wherein the short-term keys changes frequently,

receiving an encrypted short-term key; and

rendering the streaming data by using the plurality of short-term keys to decrypt the samples in the plurality of crypto-periods, thereby enabling re-keying of segments of a media stream.

2. A method as recited in claim 1 further comprising:

storing the short-term key, an encryption algorithm identifier, and initialization vector length in a sample group type box.

3. A method as recited in claim 1 wherein key rotation for the ISO-based file format media stream is supported.

4. A method as recited in claim 1 further comprising receiving a decryption key.

5. A method as recited in claim 2 wherein the sample group type box supports conditional access systems.

6. A method as recited in claim 1 further comprising:

storing default values in a TrackEncryptionBox.

7. A method as recited in claim 1 further comprising:

signaling the long-term key through a ‘

pssh’

box in a ‘

moov’

container box.

8. A method as recited in claim 1 further comprising:

grouping samples belonging to a crypto-period to achieve key rotation.

9. A method of creating a data stream in MPEG-TS, the method comprising:

adding a segment encryption box in a sidx container box, said encryption box having an additional URL for encryption parameters, an additional encrypted key element to carry encrypted traffic keys, and an initialization vector for each sample for random access; and

overriding parameters in a track encryption box with said encryption parameters,

wherein the initialization vector is in the sidx box at the beginning of a segment, and wherein encryption signaling at the segment level and random access to individual samples are enabled.

10. A method as recited in claim 9 wherein the sidx container box appears at a segment level where reference is to segment index boxes at sub-segment levels and to a movie fragment box at a sub-segment level.

11. A method as recited in claim 9 wherein extensions to common encryption signaling format (CENC) are provided.

12. A method as recited in claim 9 further comprising providing a sample encryption box.

13. A method as recited in claim 9 further comprising:

providing signaling at a segment level for random access and relative timing information.

14. A media player comprising:

a processor;

a network interface; and

a memory component storing an algorithm identifier for identifying an encryption algorithm, an initialization vector size value, and a long-term key identifier for locating a long-term key used for encrypting a short-term key.

15. A media player as recited in claim 14 wherein the memory component further stores a sample group type box for storing said encryption algorithm, initialization vector size value, and long-term key identifier.

16. A media player as recited in claim 14 wherein samples of a media stream are grouped based on crypto-period to achieve key rotation.