Process and streaming server for encrypting a data stream

• US 6,965,993 B2
• Filed: 03/29/2002
• Issued: 11/15/2005
• Est. Priority Date: 11/09/1999
• Status: Expired due to Term

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Widevine Technologies Incorporated (Alphabet Inc.)
• Inventors: Baker, Brian
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US10/109,963
• Publication Number:
  US 20020108037A1
• Time in Patent Office: 1,327 Days
• Field of Search: 713/168, 713/153, 713/151, 713/185, 380/201, 380/231, 380/232, 705/51, 705/52, 705/53, 705/54, 705/57, 709/231
• US Class Current: 713/153
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04N 21/234 Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
• CPC Class Codes: H04N 21/23406 involving management of server-side video buffer
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2387 Stream processing in response to a playback request from an end-user, e.g. for trick-play
• CPC Class Codes: H04N 21/2401 Monitoring of the client buffer
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/25866 Management of end-user data customer care in data networks H04L41/5077
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/6587 : Control parameters, e.g. trick play commands, viewpoint selection
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17318 : Direct or substantially direct transmission and handling of requests
• CPC Class Codes: H04N 7/17336 : Handling of requests in head-ends

Abstract

There is disclosed a process for encrypting a data stream to secure the data stream for single viewing and to protect copyrights of the data stream. Specifically, there is disclosed a process for protecting streaming multimedia, entertainment and communications in an Internet-type transmission. There is further disclosed a streaming server component operably connected with a streaming server that interacts with a client system to effect the inventive process.

Claims

1. A system for providing a data stream for a predetermined number of viewings, comprising:

a client component that is arranged to communicate user verification information, a URI, and a token associated with the URI, request a data stream, and to receive the data stream, wherein the received data stream is encrypted; and

a streaming data component arranged to verify the user verification information, the URI, and the token, wherein the token is verified, at least in part, based on an expiration date, and to provide the encrypted data stream to the client component, wherein the encrypted data stream is rate flow controlled by the streaming data component over a network to maintain a substantially full buffer in the verified client component.

2. The system of claim 1, wherein the predetermined number of viewings is a single viewing.

3. The system of claim 1, wherein the streaming data component comprises:

a transaction server arranged to verify the user verification information for the requested data stream; and

a streaming data server arranged to negotiate encryption keys with the client component for use in encrypting the requested data stream and controlling the rate of a flow of the encrypted data stream to the client component.

4. The system of claim 1, wherein the client component is further arranged to provide a network statistic on the rate that a flow of the encrypted data stream is being received.

5. A computer-readable medium having computer-executable instructions for performing actions that provide a data stream to a client for a predetermined number of viewings, the actions comprising:

receiving user verification information, URI, and a token associated with the URI with a request for the data stream from the client;

determining the validity of the user verification information, the URI, and the token, wherein the token is validated based, in part, on an expiration date; and

when the user verification information, URI, and the token are valid, performing actions, including;

negotiating an encryption key with the client;

encrypting the data stream as it is streamed to the client, wherein the data stream is encrypted with the negotiated encryption key; and

controlling by a server over a network a rate of a flow of the encrypted data steam to the client to maintain a substantially full client buffer.

6. The computer-readable medium of claim 5, wherein the predetermined number of viewings is a single viewing.

7. The computer-readable medium of claim 5, wherein controlling the rate of the flow further comprises transmitting the encrypted data stream to the client at substantially the same rate as the encrypted data stream is received by the client.

8. The computer-readable medium of claim 5, wherein controlling the rate of the flow further comprises monitoring a network statistic such that a client buffer is maintained substantially full.

9. A method for transacting requests for a data stream for single viewing, comprising:

receiving a request for the data stream, wherein the data stream is associated with a URI;

receiving user information associated with the request for the data stream;

determining when the user information is associated with a valid user account; and

when the user information is valid, performing actions, including;

debiting the valid user account by an amount associated with the requested data stream; and

generating a token associating the requested data stream to the user information, such that the data stream is accessible and wherein the token is employable only for the requested data stream; and

if the token is not expired, providing the data stream at a flow controlled rate by a server over a network that is operable to maintain a substantially full user buffer.

10. The method of claim 9, further comprising:

receiving a user selected time limit for accessing the data stream; and

associating the user selected time limit with the generated token such that the access to the data stream is denied upon expiration of the time limit.

11. The method of claim 9, further comprising:

generating a new user account when a user account associated with the received user information is unavailable.

12. A method for receiving a data stream, comprising:

communicating a request for the data stream;

communicating user information and a token associated with the requested data stream, wherein the user information and token are validated for the requested data stream; and

receiving the data stream over a network from a server that is configured to deliver the data stream at a rate of flow that maintains a client buffer substantially full.

13. The method of claim 12, wherein the token includes user permissions for the requested data stream.

14. The method of claim 12, wherein the user information includes user account information.

15. The method of claim 12, wherein the token includes a user selected time limit for accessing the data stream, wherein access to the data stream is denied upon expiration of the user selected time limit.

16. The method of claim 12, wherein the received data stream is encrypted.

17. The method of claim 16, wherein the encrypted data stream is encrypted using Triple-DES encryption.

18. The method of claim 16, wherein the encrypted data stream is encrypted for a single viewing.