Stream continuity enforcement

• US 7,039,189 B1
• Filed: 03/17/2000
• Issued: 05/02/2006
• Est. Priority Date: 03/17/2000
• Status: Expired due to Fees

• Current Assignee: RPX Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kienzle, Martin, Rose, Ray E., Verscheure, Olivier
• Primary Examiner(s): Revek, Christopher
• Assistant Examiner(s): Arani, Taghi T.
• Application Number:
  US09/528,456
• Time in Patent Office: 2,237 Days
• Field of Search: 380/239, 380/28, 380/210, 380/217, 713/168, 713/193
• US Class Current: 380/239
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062

Abstract

A system for enforcing data stream continuity, in accordance with the present invention, includes a server coupled to a transmission link for providing a data stream to at least one client over the transmission link. The data stream is segmented into units. The server includes a scrambler for encrypting at least one first unit using an encryption key, and a steganographic unit for embedding the encryption key into at least one second unit for the data stream such that steganographic information is needed by the client to determine the encryption key and decipher the data stream.

Claims

1. A system for enforcing data stream continuity comprising:

a server coupled to a transmission link for providing a data stream to at least one client over the transmission link, the data stream being segmented into units, the server including;

a scrambler for encrypting at least one first unit using an encryption key;

a steganographic unit for embedding the encryption key into at least one second unit for the data stream such that steganographic information is needed by the client to determine the encryption key and decipher the data stream,

wherein the at least one first unit and the at least one second unit are encrypted and each carries a portion of the encryption key.

2. The system as recited in claim 1, wherein the steganographic unit employs a steganographic masking algorithm.

3. The system as recited in claim 1, wherein the data stream includes a transmission order which alternates between first units and second units.

4. The system as recited in claim 1, wherein the steganographic unit encrypts the at least one second unit.

5. The system as recited in claim 1, wherein the transmission link includes the Internet.

6. The system as recited in claim 1, wherein at least one of the client and the server include a memory storage device.

7. A system for enforcing data stream continuity comprising:

a client system coupled to a transmission link for receiving a data stream from at least one server over the transmission link, the data stream being segmented into units, the client system including;

a key extractor for extracting an encryption key steganographically hidden in at least one first unit in the data stream received from the server such that steganographic information is needed by the client to determine the encryption key;

a descrambler for descrabling at least one second unit which was encrypted in accordance with the encryption key before transmission from the server; and

a decoder coupled to the key extractor and the descrambler for reassembling the data stream such that all of the units of the data stream are needed to decipher the data stream,

wherein that at least one first unit and the at least one second unit are encrypted and each carries a portion of the encryption key.

8. The system as recited in claim 7, wherein the data stream includes a transmission order which alternates between first units and second units.

9. The system as recited in claim 7, wherein the encryption key is also steganographically hidden in the at least one second unit.

10. The system as recited in claim 7, wherein the transmission link includes the Internet.

11. The system as recited in claim 7, wherein at least one of the client and the server include a memory storage device.

12. A method for enforcing data stream continuity comprising the steps of:

providing data to be transmitted over a link;

segmenting the data into units for a data stream to be transferred over the link;

scrambling at least one first unit by encrypting the at least one first unit using an encryption key;

steganographically embedding the encryption key into at least one second unit for the data stream such that steganographic information is needed by a client to determine the encryption key and decipher the data stream;

extracting the encryption key steganographically embedded in at least one second unit in the data stream;

descrabling at least one first unit which was encrypted in accordance with the encryption key; and

reassembling the data stream at the client such that all of the units of the data stream are needed to decipher the data stream,

wherein the at least one first unit and the at least one second unit are encrypted and each carries a portion of the encryption key.

13. The method recited in claim 12, wherein the data stream includes a transmission order which alternates between first units and second units.

14. The method as recited in claim 12, wherein the step of steganographically embedding includes the step of steganographically embedding portions of the encryption key in the at least one first unit.

15. The method as recited in claim 12, wherein the transmission link includes the Internet.

16. The method as recited in claim 12, wherein at least one of the client and the server include a memory storage device.

17. A method for enforcing data stream continuity comprising the steps of:

providing data to be transmitted over a link;

segmenting the data into units for a data stream to be transferred over the link;

scrambling at least one first unit by encrypting the at least one first unit using an encryption key;

steganographically embedding the encryption key into at least one second unit for the data stream such that steganographic information is needed by a client to determine the encryption key and decipher the data stream,

wherein the at least one first unit and the at least one second unit are encrypted and each carries a portion of the encryption key.

18. The method recited in claim 17, wherein the data stream includes a transmission order which alternates between first units and second units.

19. The method as recited in claim 17, wherein the step of steganographically embedding includes the step of steganographically embedding portions of the encryption key in the at least one first unit.

20. The method as recited in claim 17, wherein the transmission link includes the Internet.

21. The method as recited in claim 17, wherein at least one of the client and the server include a memory storage device.

22. A method for enforcing data stream continuity comprising the steps of:

providing data segmented into units for a data stream transferred over a link, the units including at least one first unit and at least one second unit;

extracting an encryption key steganographically embedded in at least one second unit in the data stream;

descrabling the at least one first unit which was encrypted in accordance with the encryption key; and

reassembling the data stream at the client such that all of the units of the data stream are needed to decipher the data stream,

wherein the at least one first unit and the at least one second unit are encrypted and each carries a portion of the encryption key.

23. The method recited in claim 22, wherein the data stream includes a transmission order which alternates between first units and second units.

24. The method as recited in claim 22 wherein the portions of the encryption key are embedded in the at least one first unit.

25. The method as recited in claim 22, wherein the link includes the Internet.

26. The method as recited in claim 22, wherein at least one of the client and the server include a memory storage device.

27. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform methods steps for enforcing data stream continuity, the methods steps comprising:

segmenting data to be transmitted over a link into units for a data stream to be transferred over a link;

scrambling at least one first unit for the data stream before transmission by encrypting the at least one first unit using an encryption key;

steganographically embedding the encryption key into at least one second unit for the data stream such that steganographic information is needed by a client to determine the encryption key and decipher the data stream;

extracting the encryption key steganographically embedded in at least one second unit in the data stream;

descrabling at least one first unit which was encrypted in accordance with the encryption key; and

reassembling the data stream at the client such that all of the units of the data stream are needed to decipher the data stream,

wherein the at least one first unit and the at least one second unit are encrypted and each carries a portion of the encryption key.

28. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform methods steps for enforcing data stream continuity, the methods steps comprising:

providing data to be transmitted over a link;

segmenting the data into units for a data stream to be transferred over the link;

scrambling at least one first unit by encrypting the at least one first unit using an encryption key; and

steganographically embedding the encryption key into at least one second unit for the data stream such that steganographic information is needed by a client to determine the encryption key and decipher the data stream,

wherein the at least one first unit and the at least one second unit are encrypted and each carries a portion of the encryption key.

29. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform methods steps for enforcing data stream continuity, the methods steps comprising:

providing data segmented into units for a data stream transferred over a link, the units including at least one first unit and at least one second unit;

extracting an encryption key steganographically embedded in at least one second unit in the data stream;

descrabling the at least one first unit which was encrypted in accordance with the encryption key; and

reassembling the data stream at the client such that all of the units of the data stream are needed to decipher the data stream,

wherein the at least one first unit and the at least one second unit are encrypted and each carries a portion of the encryption key.