System and method for automatically protecting private video content using cryptographic security for legacy systems

• US 7,120,252 B1
• Filed: 08/16/2001
• Issued: 10/10/2006
• Est. Priority Date: 08/16/2001
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Jones, William L., Schon, Walter J.
• Primary Examiner(s): Moise, Emmanuel L.
• Assistant Examiner(s): SCHUBERT, KEVIN R
• Application Number:
  US09/931,794
• Time in Patent Office: 1,881 Days
• Field of Search: 380/201, 380/203, 380/229, 380/210
• US Class Current: 380/201
• CPC Class Codes: H04N 21/23473 by pre-encrypting
• CPC Class Codes: H04N 21/4223 Cameras H04N23/00 takes precedence
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4788 communicating with other users, e.g. chatting arrangements for providing for computer conferences, e.g. chat rooms, to substation in data switching networks H04L12/1813; distributed application using peer-to-peer [P2P] networks H04L67/104
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A system and method for automatically protecting private video content using cryptographic security for legacy systems is disclosed. A substantially continuous video signal representing video content in the process of being recorded on a transportable storage medium is intercepted. The intercepted substantially continuous video signal is divided into individual frames. Each frame stores a fixed amount of data in digital form. Each individual frame is encrypted into encrypted video content using an encryption cryptographic key and is stored. The encrypted frames are retrieved and decrypted using a decryption cryptographic key. The decrypted frames are combined into a substantially continuous video signal and output as video content in the process of being played from the transportable storage medium. In a further embodiment, private video content automatically authenticated using embedded cryptographic security, either alone or in conjunction with the encryption of video content.

Claims

1. A system for automatically protecting private video content using cryptographic security for legacy systems, comprising:

a transportable storage medium, comprising;

recording logic intercepting a substantially continuous video signal representing video content in the process of being recorded on a transportable storage medium;

a frame buffer dividing the intercepted substantially continuous video signal into individual frames during recording, each individual frame storing a fixed amount of data in digital form, and combining decrypted frames into a substantially continuous video signal during playback;

a processor encrypting each individual frame into encrypted video content using an encryption cryptographic key and storing the encrypted frames during recording and retrieving the encrypted frames and decrypting each encrypted frame using a decryption cryptographic key during playback;

reading logic outputting the substantially continuous video signal as video content in the process of being played from the transportable storage medium;

a removable storage medium storing at least one of the encryption cryptographic key and the decryption cryptographic key, where the removable storage medium is removable with respect to the transportable storage medium;

an authentication module generating a fixed-length original cryptographic hash from at least one such individual frame, encrypting the original cryptographic hash using an encryption cryptographic key, storing the encrypted original cryptographic hash as a digital signature on a transportable storage medium, retrieving the digital signature from the transportable storage medium, decrypting the encrypted original cryptographic hash using a decryption cryptographic key, generating a verification fixed-length cryptographic hash from at least one such individual frame, and comparing the verification cryptographic hash and the original cryptographic hash; and

a validation module validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption cryptographic keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

2. A system according to claim 1, further comprising:

an asymmetric cryptographic key pair comprising a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

3. A system according to claim 1, further comprising:

an asymmetric cryptographic key pair comprising a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

4. A system according to claim 3, wherein the asymmetric cryptographic key pair comprises at least one of an RSA-compatible key pair, a TwoFish-compatible key pair and a Diffie-Hellman-compatible key pair.

5. A system according to claim 1, further comprising:

a symmetric cryptographic key pair comprising a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

6. The system according to claim 1, wherein during the recording a first cryptographic hash is generated from at least one of the individual frames utilizing a one-way hashing function and the at least one of the individual frames is encrypted utilizing the encryption cryptographic key.

7. The system according to claim 6, wherein during the playback the first cryptographic hash is retrieved and decrypted utilizing the decryption cryptographic key.

8. The system according to claim 7, wherein a second cryptographic hash is generated from the at least one of the individual frames and compared to the decrypted first cryptographic hash.

9. The system according to claim 8, wherein the video content is played if the first cryptographic hash and the second cryptographic hash match.

10. The system according to claim 1, wherein the removable storage medium is removably coupled to a video tape cassette.

11. A method for automatically protecting private video content using cryptographic security for legacy systems, comprising:

intercepting a substantially continuous video signal representing video content in the process of being recorded on a transportable storage medium;

dividing the intercepted substantially continuous video signal into individual frames which each store a fixed amount of data in digital form;

encrypting each individual frame into encrypted video content using an encryption cryptographic key and storing the encrypted frames;

retrieving encrypted frames and decrypting each encrypted frame using a decryption cryptographic key;

combining the decrypted frames into a substantially continuous video signal;

outputting the substantially continuous video signal as video content in the process of being played from the transportable storage medium;

storing at least one of the encryption cryptographic key and the decryption cryptographic key on a removable storage medium, where the removable storage medium is removable with respect to the transportable storage medium;

generating a fixed-length original cryptographic hash from at least one such individual frame;

encrypting the original cryptographic hash using an encryption cryptographic key and storing the encrypted original cryptographic hash as a digital signature on a transportable storage medium;

retrieving the digital signature from the transportable storage medium and decrypting the encrypted original cryptographic hash using a decryption cryptographic key;

generating a verification fixed-length cryptographic hash from at least one such individual frame and comparing the verification cryptographic hash and the original cryptographic hash;

outputting the substantially continuous video signal upon successful comparison of the verification cryptographic hash and the original cryptographic hash; and

validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption cryptographic keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

12. A method according to claim 11, further comprising:

providing an asymmetric cryptographic key pair comprising a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

13. A method according to claim 11, further comprising:

providing an asymmetric cryptographic key pair comprising a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

14. A method according to claim 13, wherein the asymmetric cryptographic key pair comprises at least one of an RSA-compatible key pair, a TwoFish-compatible key pair and a Diffie-Hellman-compatible key pair.

15. A method according to claim 11, further comprising:

providing a symmetric cryptographic key pair comprising a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

16. A computer-readable storage medium holding code for performing the method according to claims 11, 12, 13, or 15.

17. A system for encrypting private video content using cryptographic security for legacy systems, comprising:

recordation logic intercepting a substantially continuous video signal prior to recordation on a transportable storage medium, the signal representing raw video content;

a frame buffer dividing the signal into individual frames which each store a fixed amount of data in digital form;

a processor encrypting each individual frame into encrypted video content using an encryption key selected from a cryptographic key pair and storing the encrypted frames on the transportable storage medium for retrieval and decryption using a decryption key selected from the cryptographic key pair, the processor generating a fixed-length original cryptographic hash from at least one such individual frame, encrypting the original cryptographic hash using an encryption cryptographic key from a cryptographic key pair, and storing the encrypted original cryptographic hash as a digital signature on the transportable storage medium for retrieval and decryption using a decryption key selected from the cryptographic key pair,

a removable storage medium storing at least one of the encryption key and the decryption key, where the removable storage medium is removable with respect to the transportable storage medium; and

a validation module validating the decryption key against user-provided credentials prior to decrypting the encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption keys and a plurality of decryption keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

18. A system according to claim 17, further comprising:

a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

19. A system according to claim 17, further comprising:

a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

20. A system according to claim 17, further comprising:

a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

21. A method for encrypting private video content using cryptographic security for legacy systems, comprising:

intercepting a substantially continuous video signal prior to recordation on a transportable storage medium, the signal representing raw video content, and dividing the signal into individual frames which each store a fixed amount of data in digital form;

encrypting each individual frame into encrypted video content using an encryption key selected from a cryptographic key pair;

storing the encrypted frames on the transportable storage medium for retrieval and decryption using a decryption key selected from the cryptographic key pair;

storing at least one of the encryption key and the decryption key on a removable storage medium, where the removable storage medium is removable with respect to the transportable storage medium;

generating a fixed-length original cryptographic hash from at least one such individual frame;

encrypting the original cryptographic hash using an encryption cryptographic key from a cryptographic key pair;

storing the encrypted original cryptographic hash as a digital signature on the transportable storage medium for retrieval and decryption using a decryption key selected from the cryptographic key pair; and

validating the decryption key against user-provided credentials prior to decrypting the encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

22. A method according to claim 21, further comprising:

employing a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

23. A method according to claim 21, further comprising:

employing a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

24. A method according to claim 21, further comprising:

employing a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

25. A computer-readable storage medium holding code for performing the method according to claims 21, 22, 23 or 24.

26. A system for decrypting private video content using cryptographic security for legacy systems, comprising:

reading logic retrieving encrypted frames prior to playback from a transportable storage medium, the encrypted frames storing raw video content encrypted using an encryption cryptographic key selected from a cryptographic key pair;

a processor decrypting each encrypted frame using a decryption cryptographic key selected from the cryptographic key pair;

a frame buffer combining the decrypted frames into a substantially continuous video signal representing the raw video content in reconstructed form; and

a removable storage medium storing at least one of the encryption cryptographic key and the decryption cryptographic key, where the removable storage medium is removable with respect to the transportable storage medium;

the reading logic retrieving a digital signature included with the encrypted frames and encrypted using an encryption cryptographic key selected from a cryptographic key pair;

the processor generating a verification fixed-length cryptographic hash from at least one such individual frame and comparing the verification cryptographic hash and the original cryptographic hash;

the frame buffer combining the individual frames into a substantially continuous video signal and outputting the substantially continuous video signal as video content in the process of being played from the transportable storage medium upon successful comparison of the verification cryptographic hash and the original cryptographic hash; and

a validation module validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption cryptographic keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

27. A system according to claim 26, further comprising:

a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

28. A system according to claim 26, further comprising:

a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

29. A method for decrypting private video content using cryptographic security for legacy systems, comprising:

retrieving encrypted frames prior to playback from a transportable storage medium, the encrypted frames storing raw video content encrypted using an encryption cryptographic key selected from a cryptographic key pair;

decrypting each encrypted frame using a decryption cryptographic key selected from the cryptographic key pair;

combining the decrypted frames into a substantially continuous video signal representing the raw video content in reconstructed form;

storing at least one of the encryption cryptographic key and the decryption cryptographic key on a removable storage medium, where the removable storage medium is removable with respect to the transportable storage medium;

retrieving a digital signature included with the encrypted frames and encrypted using an encryption cryptographic key selected from a cryptographic key pair;

generating a verification fixed-length cryptographic hash from at least one such individual frame and comparing the verification cryptographic hash and the original cryptographic hash;

combining the individual frames into a substantially continuous video signal and outputting the substantially continuous video signal as video content in the process of being played from the transportable storage medium upon successful comparison of the verification cryptographic hash and the original cryptographic hash; and

validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption cryptographic keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on transportable storage medium.

30. A method according to claim 29, further comprising:

employing a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

31. A method according to claim 29, further comprising:

employing a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

32. A computer-readable storage medium holding code for performing the method according to claims 29, 30 or 31.

33. A method for automatically authenticating private video content using cryptographic security for legacy systems, comprising:

a transportable storage medium, comprising;

recording logic intercepting a substantially continuous video signal representing video content in the process of being recorded on a transportable storage medium;

a frame buffer dividing a substantially continuous video signal representing raw video content into individual frames which each store a fixed amount of data in digital form and combining the individual frames into a substantially continuous video signal;

a processor generating a fixed-length original cryptographic hash from at least one such individual frame, encrypting the original cryptographic hash using an encryption cryptographic key, storing the encrypted original cryptographic hash as a digital signature on a transportable storage medium, retrieving the digital signature from the transportable storage medium, decrypting the encrypted original cryptographic hash using a decryption cryptographic key, generating a verification fixed-length cryptographic hash from at least one such individual frame, and comparing the verification cryptographic hash and the original cryptographic hash;

reading logic outputting the substantially continuous video signal as video content in the process of being played from the transportable storage medium upon successful comparison of the verification cryptographic hash and the original cryptographic hash;

a removable storage medium storing at least one of the encryption cryptographic key and the decryption cryptographic key, where the removable storage medium is removable with respect to the transportable storage medium; and

a validation module validating the decryption cryptographic key against user-provided credentials prior to decrypting encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption cryptographic keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

34. A method for automatically authenticating private video content using cryptographic security for legacy systems, comprising:

intercepting a substantially continuous video signal representing video content in the process of being recorded on a transportable storage medium;

dividing a substantially continuous video signal representing raw video content into individual frames which each store a fixed amount of data in digital form;

generating a fixed-length original cryptographic hash from at least one such individual frame;

encrypting the original cryptographic hash using an encryption cryptographic key and storing the encrypted original cryptographic hash as a digital signature on a transportable storage medium;

retrieving the digital signature from the transportable storage medium and decrypting the encrypted original cryptographic hash using a decryption cryptographic key;

generating a verification fixed-length cryptographic hash from at least one such individual frame and comparing the verification cryptographic hash and the original cryptographic hash;

combining the individual frames into a substantially continuous video signal and outputting the substantially continuous video signal as video content in the process of being played from the transportable storage medium upon successful comparison of the verification cryptographic hash and the original cryptographic hash;

storing at least one of the encryption cryptographic key and the decryption cryptographic key on a removable storage medium, where the removable storage medium is removable with respect to the transportable storage medium; and

validating the decryption cryptographic key against user-provided credentials prior to decrypting encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption cryptographic keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

35. A computer-readable storage medium holding code for performing the method according to claim 34.

36. A system for digitally signing private video content using cryptographic security for legacy systems, comprising:

recordation logic intercepting a substantially continuous video signal prior to recordation on a transportable storage medium, the signal representing raw video content;

a frame buffer dividing the signal into individual frames which each store a fixed amount of data in digital form;

a processor generating a fixed-length original cryptographic hash from at least one such individual frame, encrypting the original cryptographic hash using an encryption cryptographic key from a cryptographic key pair, and storing the encrypted original cryptographic bash as a digital signature on a transportable storage medium for retrieval and decryption using a decryption key selected from the cryptographic key pair;

providing at least one of the encryption cryptographic key and the decryption cryptographic key on a removable storage medium, where the removable storage medium is removable with respect to the transportable storage medium; and

a validation module validating the decryption cryptographic key against user-provided credentials prior to decrypting encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption cryptographic keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

37. A system according to claim 36, further comprising:

employing a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

38. A method for digitally signing private video content using cryptographic security for legacy systems, comprising:

intercepting a substantially continuous video signal prior to recordation on a transportable storage medium, the signal representing raw video content;

dividing the signal into individual frames which each store a fixed amount of data in digital form;

generating a fixed-length original cryptographic hash from at least one such individual frame;

encrypting the original cryptographic hash using an encryption cryptographic key from a cryptographic key pair;

storing the encrypted original cryptographic hash as a digital signature on a transportable storage medium for retrieval and decryption using a decryption key selected from the cryptographic key pair;

storing at least one of the encryption cryptographic key and the decryption key on a removable storage medium, where the removable storage medium is removable with respect to the transportable storage medium; and

validating the decryption key against user-provided credentials prior to decrypting encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption key;

wherein the removable storage medium comprises only the memory and is separate from a slayer which is capable of playing the video content on the transportable storage medium.

39. A method according to claim 38, further comprising;

employing a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

40. A computer-readable storage medium holding code for performing the method according to claims 38 or 39.

41. A system for verifying digitally signed private video content using cryptographic security for legacy systems, comprising:

reading logic retrieving frames prior to playback from a transportable storage medium, the frames storing raw video content and including a digital signature encrypted using an encryption cryptographic key selected from a cryptographic key pair;

a processor generating a verification fixed-length cryptographic hash from at least one such individual frame and comparing the verification cryptographic hash and the original cryptographic hash;

a frame buffer combining the individual frames into a substantially continuous video signal and outputting the substantially continuous video signal as video content in the process of being played from the transportable storage medium upon successful comparison of the verification cryptographic hash and the original cryptographic hash;

a removable storage medium storing the encryption cryptographic key, where the removable storage medium is removable with respect to the transportable storage medium; and

a validation module validating a decryption cryptographic key against user-provided credentials prior to decrypting encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption cryptographic keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

42. A method for verifying digitally signed private video content using cryptographic security for legacy systems, comprising:

retrieving frames prior to playback from a transportable storage medium, the frames storing raw video content and including a digital signature encrypted using an encryption cryptographic key selected from a cryptographic key pair;

generating a verification fixed-length cryptographic hash from at least one such individual frame and comparing the verification cryptographic hash and the original cryptographic hash;

combining the individual frames into a substantially continuous video signal and outputting the substantially continuous video signal as video content in the process of being played from the transportable storage medium upon successful comparison of the verification cryptographic hash and the original cryptographic hash;

storing the encryption cryptographic key on a removable storage medium, where the removable storage medium is removable with respect to the transportable storage medium; and

validating a decryption cryptographic key against user-provided credentials prior to decrypting encrypted frames;

wherein the removable storage medium includes memory that is coupled to a standardized connector which enables utilization of at least one of a plurality of encryption cryptographic keys and a plurality of decryption cryptographic keys;

wherein a set of cryptographic instructions is stored on the removable storage medium for employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein the removable storage medium comprises only the memory and is separate from a player which is capable of playing the video content on the transportable storage medium.

43. A computer-readable storage medium holding code for performing the method according to claim 42.