Method and system to uniquely associate multicast content with each of multiple recipients

• US 7,058,809 B2
• Filed: 03/06/2001
• Issued: 06/06/2006
• Est. Priority Date: 03/06/2000
• Status: Expired due to Term

• Current Assignee: Irdeto B.V. (MultiChoice Group Ltd.)
• Original Assignee: Entriq Incorporated, Irdeto Access B.V. (MultiChoice Group Ltd.)
• Inventors: Wajs, Andrew Augustine, White, Mark Andrew George
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US09/800,842
• Publication Number:
  US 20030009669A1
• Time in Patent Office: 1,918 Days
• Field of Search: 380277-278, 380/54, 380200-203, 713/168, 713/176, 382/100, 382115-118, 382/124, 705 57- 59, 705/62
• US Class Current: 713/176
• CPC Class Codes: H04N 1/32272 Encryption or ciphering
• CPC Class Codes: H04N 1/32288 Multiple embedding, e.g. cocktail embedding, or redundant embedding, e.g. repeating the additional information at a plurality of locations in the image
• CPC Class Codes: H04N 2005/91335 the copy protection signal being a watermark
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/23892 involving embedding information at multiplex stream level, e.g. embedding a watermark at packet level
• CPC Class Codes: H04N 21/25808 Management of client data terminal profiles in network data switching protocols H04L67/303
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6405 Multicasting data broadcast and multicast in packet switching networks H04L12/18
• CPC Class Codes: H04N 21/8352 involving content or source identification data, e.g. Unique Material Identifier [UMID]
• CPC Class Codes: H04N 21/8358 involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

Methods and systems are disclosed in which contact can be safely distributed and protected in a manner that is viable in terms of bandwidth economy and ensures that clients can be identified by the content received. Copies of encrypted content can be provided such that unique watermarks can be added to the copies. Content can also be both watermarked uniquely for multiple clients and multicasted to the clients. As such, content can be distributed using the bandwidth efficiency of multicasting while providing reliable content protection and watermarking.

Claims

1. A computer-implemented method for providing encrypted copies of content comprising:

encrypting a copy of at least one part of the content having a first watermark;

encrypting a copy of at least one part of the content having a second watermark; and

providing encrypted copies for each of a plurality of clients by combining parts of the encrypted copy with the first watermark and parts of the encrypted copy with the second watermark in a manner unique for an individual client, such that the encrypted copies have a unique combination of sections marked with the first watermark and sections marked with the second watermark.

2. The computer-implemented method of claim 1, wherein the first watermark includes “

0s” and

the second watermark includes “

1s.”

3. The computer-implemented method of claim 1, further comprising:

distributing the combined parts to one or more clients on a network.

4. The computer-implemented method of claim 3, wherein the network includes an Internet network.

5. The computer-implemented method of claim 1, further comprising:

encrypting a neutral part of the content; and

combining parts of encrypted neutral copy, parts of the encrypted copy with the first watermark, and parts of the encrypted copy with the second watermark in a manner unique for an individual client.

6. A server comprising:

a storage device to store content; and

an encryption module

to encrypt a copy of at least one part of the content having a first watermark,

to encrypt a copy of at least one part of the content having a second watermark, and

to combine parts of the encrypted copy with the first watermark and parts of the encrypted copy with the second watermark in a manner unique for an individual client, and

to provide a plurality of encrypted copies of the content, each having a unique combination of sections marked with the first watermark and sections marked with the second watermark.

7. The server of claim 6, wherein the first watermark includes “

0s” and

the second watermark includes “

1 s.”

8. The server of claim 6, wherein the server is to distribute the combined parts to one or more clients on a network.

9. The server of claim 6, wherein the network includes an Internet network.

10. The server of claim 6, wherein the encryption module is to encrypt a neutral part of the content and to combine parts of encrypted neutral copy, parts of the encrypted copy with the first watermark, and parts of the encrypted copy with the second watermark in a manner unique for an individual client.

11. A computing system comprising:

means for storing content; and

means for encrypting a copy of at least one part of the content having a first watermark, a copy of at least one part of the content having a second watermark;

means for combining parts of the encrypted copy with the first watermark and parts of the encrypted copy with the second watermark in a manner unique for an individual client, and

means for providing a plurality of encrypted copies of the content, each having a unique combination of sections marked with the first watermark and sections marked with the second watermark.

12. The computing system of claim 11, wherein the first watermark includes “

0s” and

the second watermark includes “

1s.”

13. The computing system of claim 11, further comprising:

means for distributing the combined parts to one or more clients on a network.

14. The computing system of claim 13, wherein the network includes an Internet network.

15. The computing system of claim 11, further comprising:

means for scrambling a neutral part of the content; and

means for combining parts of encrypted neutral copy, parts of the encrypted copy with the first watermark, and parts of the encrypted copy with the second watermark in a manner unique for an individual client.

16. A machine-readable medium providing instructions, which if executed by a processor, causes the processor to perform an operation comprising:

encrypting a copy of at least one part of content having a first watermark;

encrypting a copy of at least one part of content having a second watermark; and

providing encrypted copies for each of a plurality of clients by combining parts of the scrambled copy with the first watermark and parts of the scrambled copy with the second watermark in a manner unique for an individual client, such that the encrypted copies have a unique combination of sections marked with the first watermark and sections marked with the second watermark.

17. A digital processing system for providing encrypted copies of content comprising:

a storage device to store an encrypted copy of at least one part of the content watermarked with a first identifier and an encrypted copy of at least one part of the content watermarked with a second identifier; and

a processing unit coupled to the storage device, the processing unit to combine parts of the encrypted copy watermarked with the first and second identifiers in a manner unique to an individual client and to provide a plurality of encrypted copies of the content, each having a unique combination of sections marked with the first watermark and sections marked with the second watermark.

18. The digital processing system of claim 17, wherein the processing unit is to send the combined parts to the individual client.

19. The digital processing system of claim 17, wherein the first identifier includes “

0s”

and the second identifier include “

1 s.”

20. The digital processing system of claim 17, wherein the storage device is to store a client identification and a corresponding unique combination of watermarked copies for the client.

21. The digital processing system of claim 17, wherein the storage device is to store a neutral scrambled copy of the content.

22. The digital processing system of claim 21, wherein the processing unit is to combine at least one part of the neutral encrypted copy with parts of the encrypted copy watermarked with the first identifier and with parts of the encrypted copy watermarked with the second identifier.

23. A digital processing system comprising:

a receiving module to provide clear content having a plurality of double parts, a first part watermarked with a first identifier and a second part watermarked with a second identifier;

an encryption module coupled to the receiving module, the encryption module to encrypt the clear content with a first key, to encrypt the first part watermarked with the first identifier with a second key, and to encrypt the second part watermarked with the second identifier with a third key; and

a key management module to manage the keys as to allow one or more clients to decrypt the encrypted content with a combination of encrypted first and second parts watermarked with the first identifier and second identifier, respectively, unique to each client.

24. The digital processing system of claim 23, wherein the first identifier includes “

0s” and

the second identifier includes “

1s.”

25. The digital processing system of claim 23, wherein the encryption module is to provide entitlement control messages (ECMs) using the first key, second key, and third key, wherein the second and third key are alternated to obtain a unique combinations of “

0s” and

“

1 s”

unique to each client.

26. The digital processing system of claim 23, wherein the storage device is to store a client identification and a corresponding unique combination of watermarked copies for the client.

27. A computer-implemented method for providing an encrypted copy of content comprising:

prior to communication of the encrypted copy of the content,

watermarking first and second copies of content with respective first and second watermarks;

encrypting the first copy of content using a first and the second copy of the content using a second key; and

combining encrypted copies into a single stream of data.

28. The computer-implemented method of claim 27, further comprising:

multicasting the single stream of data to one or more clients.

29. The computer-implemented method of claim 27, further comprising:

storing the unique keys and common key in a database, the database including an array matching the unique keys to the unique watermarks.

30. The computer-implemented method of claim 29, further comprising:

selectively unicasting the unique keys to one or more clients.

31. The computer-implemented method of claim 30, further comprising:

associating each client to the unique keys received and watermarks in the stream of data.

32. A server comprising:

a storage device to store content;

a processing unit to watermark redundant parts in the content with one or more unique watermarks, to encrypt the watermarked redundant parts using a unique key for each unique watermark and the remaining parts of the stream of content with a common key, and to combine the encrypted parts into a single stream of data.

33. The server of claim 32, wherein the processing unit is to multicast the single stream of data to one or more clients.

34. The server of claim 32, further comprising:

a database to store the unique keys and common key, the database including an array matching the unique keys to the unique watermarks.

35. The server of claim 32, wherein the processing unit is to unicast selectively the unique keys to one or more clients.

36. The server of claim 32, wherein the processing unit is to associate each client to the unique keys and watermarks in the stream of data.

37. A computing system comprising:

means for storing content;

means for watermarking redundant parts in the content with one or more unique watermarks;

means for encrypting the watermarked redundant parts using a unique key for each unique watermark and the remaining parts of the stream of content with a common key; and

means for combining the encrypted parts into a single stream of data.

38. The computing system of claim 37, further comprising:

means for multicasting the single stream of data to one or more clients.

39. The computing system of claim 37, further comprising:

means for storing in a database the unique keys and common key, the database including an array matching the unique keys to the unique watermarks.

40. The computing system of claim 37, further comprising:

means for unicasting selectively the unique keys to one or more clients.

41. The computing system of claim 37, further comprising:

means for associating each client to the unique keys and watermarks in the stream of data.

42. A machine-readable medium providing instructions, which if executed by a processor, causes the processor to perform an operation comprising:

watermarking redundant parts in content with one or more unique watermarks;

encrypting the watermarked redundant parts using a unique key for each unique watermark and the remaining parts of the stream of content with a common key; and

combining encrypted parts into a single stream of data.

43. A method of distributing content, the method comprising:

watermarking first and second duplicates of a content portion with first and second identifiers respectively;

encrypting each of the first and second duplicates of the content portion with at least first and second keys respectively;

supplying both the first and second duplicates of the content portion to first and second users; and

supplying at least the first key to the first user and the second key to the second user, so that the first user is enabled to decrypt the first duplicate of the content portion watermarked with the first identifier, and so that the second user is enabled to decrypt the second duplicate of the content portion watermarked with the second identifier.

44. The method of claim 43, wherein the content includes text, audio, or video content.

45. The method of claim 43, wherein the supplying of the first and second duplicates and keys includes supplying the first and second duplicates and keys via a network.

46. The method of claim 45, wherein the network include an Internet network.

47. An apparatus comprising:

watermarking means for watermarking first and second duplicates of a content portion with first and second identifiers respectively;

encrypting means for encrypting each of the first and second duplicates of the content portion with at least first and second keys respectively;

supplying means for supplying both the first and second duplicates of the content portion to first and second users; and

supplying means for supplying at least the first key to the first user and the second key to the second user, so that the first user is enabled to decrypt the first duplicate of the content portion watermarked with the first identifier, and so that the second user is enabled to decrypt the second duplicate of the content portion watermarked with the second identifier.

48. The apparatus of claim 47, wherein the content includes text, audio, or video content.

49. The apparatus of claim 47, wherein the supplying means for the first and second duplicates and keys include supplying means for supplying the first and second duplicates and keys via a network.

50. The apparatus of claim 49, wherein the network includes an Internet network.

51. A machine-readable medium providing instructions, which if executed by a processor, causes the processor to perform an operation comprising:

prior to communication of an encrypted copy of content,

watermarking first and second duplicates of a content portion with first and second identifiers respectively;

encrypting each of the first and second duplicates of the content portion with at least first and second keys respectively;

after the watermarking and the encrypting,

supplying both the first and second duplicates of the content portion to first and

second users; and

supplying at least the first key to the first user and the second key to the second user, so that the first user is enabled to decrypt the first duplicate of the content portion watermarked with the first identifier, and so that the second user is enabled to decrypt the second duplicate of the content portion watermarked with the second identifier.

52. A method of distributing content, the method comprising:

watermarking multiple sets of duplicated content portions with multiple sets of identifiers, each identifier of each set being unique to a specific duplicated content portion;

encrypting each duplicated content portion within each set with a respective key of a plurality of keys;

supplying the multiple sets of duplicated content portions to multiple users; and

supplying a unique set of keys, selected from the plurality of keys, to each of the multiple users so that each of the multiple users is enabled to decrypt the multiple sets of duplicated content portions to generate content embodying a unique sequence of identifiers.

53. The method of claim 52, wherein the supplying of the multiple sets of duplicated content portions includes multicasting the multiple sets of duplicated content portions to the multiple users on an Internet network.

54. The method of claim 53, wherein the supplying of the unique sets of keys to each of the multiple users includes unicasting the unique set of keys to each of the multiple users on the Internet network.

55. The method of claim 52, wherein the content portions include text, audio, or video content portions.

56. An apparatus comprising:

prior to communication of an encrypted copy of content

watermarking means for watermarking multiple sets of duplicated content portions with multiple sets of identifiers, each identifier of each set being unique to a specific duplicated content portion;

encrypting means for encrypting each duplicated content portion within each set with a respective key of a plurality of keys;

supplying means for supplying the multiple sets of duplicated content portions to multiple users after the watermarking and the encrypting; and

supplying means for supplying a unique set of keys, selected from the plurality of keys, to each of the multiple users so that each of the multiple users is enabled to decrypt the multiple sets of duplicated content portions to generate content embodying a unique sequence of identifiers.

57. The apparatus of claim 56, wherein the supplying means for supplying of the multiple sets of duplicated content portions includes multicasting means for multicasting the multiple sets of duplicated content portions to the multiple users on an Internet network.

58. The apparatus of claim 57, wherein the supplying means for supplying of the unique sets of keys to each of the multiple users includes unicasting means for unicasting the unique set of keys to each of the multiple users on the Internet network.

59. The apparatus of claim 56, wherein the content portions include text, audio or video content portions.

60. A machine-readable medium providing instructions, which if executed by a processors, causes the processor to perform an operation comprising:

prior to communication of an encrypted copy of content,

watermarking multiple sets of duplicated content portions with multiple sets of identifiers, each identifier of each set being unique to a specific duplicated content portion;

encrypting each duplicated content portion within each set with a respective key of a plurality of keys;

supplying the multiple sets of duplicated content portions to multiple users after

the watermarking and encrypting; and

supplying a unique set of keys, selected from the plurality of keys, to each of the multiple users so that each of the multiple users is enabled to decrypt the multiple sets of duplicated content portions to generate content embodying a unique sequence of identifiers.