System and method for automatically protecting private video content using embedded cryptographic security

• US 7,136,487 B1
• Filed: 08/16/2001
• Issued: 11/14/2006
• Est. Priority Date: 06/25/1999
• Status: Expired due to Term

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Jones, William L., Schon, Walter J.
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Chai, Longbit
• Application Number:
  US09/931,803
• Time in Patent Office: 1,916 Days
• Field of Search: 380 28- 30, 380/201, 713/176, 713/193, 713/183, 713/184
• US Class Current: 380/229
• CPC Class Codes: G06Q 50/16 Real estate

Abstract

A system and method for automatically protecting private video content using embedded cryptographic security is disclosed. A substantially continuous video signal representing raw video content is divided into individual frames. Each frame stores a fixed amount of data in digital form. Each individual frame is encrypted into encrypted video content using an encryption cryptographic key. The encrypted frames is stored on a transportable storage medium. Encrypted frames are retrieved from the transportable storage medium. A decryption cryptographic key is verified prior to decryption. Each encrypted frame is decrypted using the decryption cryptographic key. The decrypted frames are combined into a substantially continuous video signal representing the raw video content in reconstructed form. In a further embodiment, private video content automatically authenticated using embedded cryptographic security, either alone or in conjunction with the encryption of video content.

Claims

1. A system for automatically protecting private video content using embedded cryptographic security, comprising:

a recorder frame buffer dividing a substantially continuous video signal representing raw video content into individual frames which each store a fixed amount of data in digital form;

an encryption module encrypting each individual frame into encrypted video content using an encryption cryptographic key and storing the encrypted frames on a transportable storage medium;

a decryption module retrieving encrypted frames from the transportable storage medium and decrypting each encrypted frame into decrypted frames using a decryption cryptographic key that is verified prior to decryption;

a playback frame buffer combining the decrypted frames into a substantially continuous video signal representing the raw video content in reconstructed form;

a signature module generating a fixed-length original cryptographic hash from at least one such individual frame, encrypting the original cryptographic hash using an encryption cryptographic key, and storing the encrypted original cryptographic hash as a digital signature on the transportable storage medium;

a verification module retrieving the digital signature from the transportable storage medium, decrypting the encrypted original cryptographic hash using a decryption cryptographic key, generating a verification fixed-length cryptographic hash from at least one such corresponding decrypted frame, and comparing the verification cryptographic hash and the original cryptographic hash;

a validation module validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

a set of cryptographic instructions employing at least one of the encryption cryptographic key and the decryption cryptographic key; and

a removable storage medium storing at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, wherein the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

2. A system according to claim 1, further comprising:

an asymmetric cryptographic key pair comprising a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

3. A system according to claim 1, further comprising:

an asymmetric cryptographic key pair comprising a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

4. A system according to claim 3, wherein the asymmetric cryptographic key pair comprises at least one of an RSA-compatible key pair, a TwoFish-compatible key pair and a Diffie-Hellman-compatible key pair.

5. A system according to claim 1, further comprising:

a symmetric cryptographic key pair comprising a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

6. A method for automatically protecting private video content using embedded cryptographic security, comprising:

dividing a substantially continuous video signal representing raw video content into individual frames which each store a fixed amount of data in digital form;

encrypting each individual frame into encrypted video content using an encryption cryptographic key and storing the encrypted frames on a transportable storage medium;

retrieving encrypted frames from the transportable storage medium and decrypting each encrypted frame into decrypted frames using a decryption cryptographic key that is verified prior to decryption;

combining the decrypted frames into a substantially continuous video signal representing the raw video content in reconstructed form;

generating a fixed-length original cryptographic hash from at least one such individual frame;

encrypting the original cryptographic hash using an encryption cryptographic key and storing the encrypted original cryptographic hash as a digital signature on the transportable storage medium;

retrieving the digital signature from the transportable storage medium and decrypting the encrypted original cryptographic hash using a decryption cryptographic key;

generating a verification fixed-length cryptographic hash from at least one such corresponding decrypted frame and comparing the verification cryptographic hash and the original cryptographic hash;

validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

including a set of cryptographic instructions employing at least one of the encryption cryptographic key and the decryption cryptographic key; and

storing on a removable storage medium at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, wherein the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

7. A method according to claim 6, further comprising:

providing an asymmetric cryptographic key pair comprising a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

8. A method according to claim 6, further comprising:

providing an asymmetric cryptographic key pair comprising a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

9. A method according to claim 8, wherein the asymmetric cryptographic key pair comprises at least one of an RSA-compatible key pair, a TwoFish-compatible key pair and a Diffie-Hellman-compatible key pair.

10. A method according to claim 6, further comprising:

providing a symmetric cryptographic key pair comprising a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

11. A computer-readable storage medium holding code for performing the method according to claims 6, 7, 8, 9, or 10.

12. A system for encrypting private video content using embedded cryptographic security, comprising:

a frame buffer receiving a substantially continuous video signal representing raw video content and dividing the data signal into individual frames which each store a fixed amount of data in digital form;

a processor encrypting each individual frame into encrypted video content using an encryption cryptographic key selected from a cryptographic key pair; and

a recorder storing the encrypted frames on a transportable storage medium for retrieval and decryption using a decryption cryptographic key selected from the cryptographic key pair,

wherein the processor generates a fixed-length original cryptographic hash from at least one such individual frame and encrypts the original cryptographic hash using an encryption cryptographic key selected from the cryptographic key pair and the recorder stores the encrypted original cryptographic hash as a digital signature on the transportable storage medium for retrieval and verification using a decryption cryptographic key selected from the cryptographic key pair,

wherein the decryption cryptographic key is validated against user-provided credentials prior to decrypting the encrypted frames;

wherein a set of cryptographic instructions employs at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein a removable storage medium stores at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, where the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or the recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

13. A system according to claim 12, further comprising:

a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

14. A system according to claim 12, further comprising:

a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

15. A system according to claim 12, further comprising:

a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

16. A method for encrypting private video content using embedded cryptographic security, comprising:

receiving a substantially continuous video signal representing raw video content and dividing the data signal into individual frames which each store a fixed amount of data in digital form;

encrypting each individual frame into encrypted video content using an encryption cryptographic key selected from a cryptographic key pair;

storing the encrypted frames on a transportable storage medium for retrieval and decryption using a decryption cryptographic key selected from the cryptographic key pair;

generating a fixed-length original cryptographic hash from at least one such individual frame;

encrypting the original cryptographic hash using an encryption cryptographic key selected from the cryptographic key pair;

storing the encrypted original cryptographic hash as a digital signature on the transportable storage medium for retrieval and verification using a decryption cryptographic key selected from the cryptographic key pair;

validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

including a set of cryptographic instructions employing at least one of the encryption cryptographic key and the decryption cryptographic key; and

storing in a removable storage medium at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, wherein the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

17. A method according to claim 16, further comprising:

employing a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

18. A method according to claim 16, further comprising:

employing a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

19. A method according to claim 16, further comprising:

employing a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

20. A computer-readable storage medium holding code for performing the method according to claims 16, 17, 18, or 19.

21. A system for decrypting private video content using embedded cryptographic security, comprising:

a player retrieving encrypted frames from a transportable storage medium, the encrypted frames storing raw video content encrypted using an encryption cryptographic key selected from a cryptographic key pair;

a processor decrypting each encrypted frame using a decryption cryptographic key selected from the cryptographic key pair; and

a frame buffer combining the decrypted frames into a substantially continuous video signal representing the raw video content in reconstructed form,

wherein the player retrieves a digital signature from the transportable storage medium, the digital signature containing an original cryptographic hash encrypted using an encryption cryptographic key selected from the cryptographic key pair, and the processor decrypts the encrypted original cryptographic hash using a decryption cryptographic key selected from the cryptographic key pair, generates a verification fixed-length cryptographic hash from at least one individual frame retrieved from the transportable storage medium, and compares the verification cryptographic hash and the original cryptographic hash;

wherein the decryption cryptographic key is validated against user-provided credentials prior to decrypting the encrypted frames;

wherein a set of cryptographic instructions employs at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein a removable storage medium stores at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, where the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

22. A system according to claim 21, further comprising:

a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

23. A system according to claim 21, further comprising:

a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

24. A system according to claim 21, further comprising:

a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

25. A method for decrypting private video content using embedded cryptographic security, comprising:

retrieving encrypted frames from a transportable storage medium, the encrypted frames storing raw video content encrypted using an encryption cryptographic key selected from a cryptographic key pair;

decrypting each encrypted frame using a decryption cryptographic key selected from the cryptographic key pair;

combining the decrypted frames into a substantially continuous video signal representing the raw video content in reconstructed form;

retrieving a digital signature from the transportable storage medium, the digital signature containing an original cryptographic hash encrypted using an encryption cryptographic key selected from the cryptographic key pair;

decrypting the encrypted original cryptographic hash using a decryption cryptographic key selected from the cryptographic key pair;

generating a verification fixed-length cryptographic hash from at least one individual frame retrieved from the transportable storage medium and comparing the verification cryptographic hash and the original cryptographic hash;

validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

including a set of cryptographic instructions employing at least one of the encryption cryptographic key and the decryption cryptographic key; and

storing on a removable storage medium at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, wherein the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

26. A method according to claim 25, further comprising:

employing a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

27. A method according to claim 25, further comprising:

employing a substantially identical key corresponding to each of the encryption cryptographic key and the decryption cryptographic key.

28. A computer-readable storage medium holding code for performing the method according to claims 25 or 26.

29. A system for automatically authenticating private video content using embedded cryptographic security, comprising:

a recorder frame buffer dividing a substantially continuous video signal representing raw video content into individual frames which each store a fixed amount of data in digital form;

a signature module generating a fixed-length original cryptographic hash from at least one such individual frame, encrypting the original cryptographic hash using an encryption cryptographic key comprising a private key of an asymmetric cryptographic pair, and storing the encrypted original cryptographic hash as a digital signature on a transportable storage medium;

a verification module retrieving the digital signature from the transportable storage medium and decrypting the encrypted original cryptographic hash using a decryption cryptographic key comprising a public key of an asymmetric cryptographic pair;

a player frame buffer generating a verification fixed-length cryptographic hash from at least one such individual frame and comparing the verification cryptographic hash and the original cryptographic hash;

a validation module validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

a set of cryptographic instructions employing at least one of the encryption cryptographic key and the decryption cryptographic key; and

a removable storage medium storing at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, wherein the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

30. A system according to claim 29, wherein the asymmetric cryptographic key pair comprises at least one of an RSA-compatible key pair, a TwoFish-compatible key pair and a Diffie-Hellman-compatible key pair.

31. A method for automatically authenticating private video content using embedded cryptographic security, comprising:

dividing a substantially continuous video signal representing raw video content into individual frames which each store a fixed amount of data in digital form and generating a fixed-length original cryptographic hash from at least one such individual frame;

encrypting the original cryptographic hash using an encryption cryptographic key comprising a private key of an asymmetric cryptographic pair and storing the encrypted original cryptographic hash as a digital signature on a transportable storage medium;

retrieving the digital signature from the transportable storage medium and decrypting the encrypted original cryptographic hash using a decryption cryptographic key comprising a public key of an asymmetric cryptographic pair;

generating a verification fixed-length cryptographic hash from at least one such individual frame and comparing the verification cryptographic hash and the original cryptographic hash;

validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

including a set of cryptographic instructions employing at least one of the encryption cryptographic key and the decryption cryptographic key; and

storing on a removable storage medium at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, wherein the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

32. A method according to claim 31, wherein the asymmetric cryptographic key pair comprises at least one of an RSA-compatible key pair, a TwoFish-compatible key pair and a Diffie-Hellman-compatible key pair.

33. A computer-readable storage medium holding code for performing the method according to claim 31.

34. A system for digitally signing private video content using embedded cryptographic security, comprising:

a frame buffer receiving a substantially continuous video signal representing raw video content and dividing the data signal into individual frames which each store a fixed amount of data in digital form;

a processor generating a fixed-length original cryptographic hash from at least one such individual frame and encrypting the original cryptographic hash using an encryption cryptographic key selected from a cryptographic key pair; and

a recorder storing the encrypted original cryptographic hash as a digital signature on a transportable storage medium for retrieval and verification using a decryption cryptographic key selected from the cryptographic key pair;

wherein the decryption cryptographic key is validated against user-provided credentials prior to decrypting the encrypted frames;

wherein a set of cryptographic instructions employs at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein a removable storage medium stores at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, where the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or the recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

35. A system according to claim 34, further comprising:

a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

36. A method for digitally signing private video content using embedded cryptographic security, comprising:

receiving a substantially continuous video signal representing raw video content and dividing the data signal into individual frames which each store a fixed amount of data in digital form;

generating a fixed-length original cryptographic hash from at least one such individual frame;

encrypting the original cryptographic hash using an encryption cryptographic key selected from a cryptographic key pair;

storing the encrypted original cryptographic hash as a digital signature on a transportable storage medium for retrieval and verification using a decryption cryptographic key selected from the cryptographic key pair;

validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames;

including a set of cryptographic instructions employing at least one of the encryption cryptographic key and the decryption cryptographic key; and

storing on a removable storage medium at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, wherein the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

37. A method according to claim 36, further comprising:

employing a private key corresponding to the encryption cryptographic key and a public key corresponding to the decryption cryptographic key.

38. A computer-readable storage medium holding code for performing the method according to claims 36 or 37.

39. A system for verifying digitally signed private video content using embedded cryptographic security, comprising:

a player retrieving a digital signature from a transportable storage medium, the digital signature containing an original cryptographic hash encrypted using an encryption cryptographic key selected from a cryptographic key pair; and

a processor decrypting the encrypted original cryptographic hash using a decryption cryptographic key selected from the cryptographic key pair, generating a verification fixed-length cryptographic hash from at least one individual frame retrieved from the transportable storage medium, and comparing the verification cryptographic hash and the original cryptographic hash;

wherein the decryption cryptographic key is validated against user-provided credentials prior to decrypting the encrypted frames;

wherein a set of cryptographic instructions employs at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein a removable storage medium stores at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, where the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from the player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

40. A system according to claim 39, further comprising:

a public key corresponding to the encryption cryptographic key and a private key corresponding to the decryption cryptographic key.

41. A method for verifying digitally signed private video content using embedded cryptographic security, comprising:

retrieving a digital signature from a transportable storage medium, the digital signature containing an original cryptographic hash encrypted using an encryption cryptographic key selected from a cryptographic key pair;

decrypting the encrypted original cryptographic hash using a decryption cryptographic key selected from the cryptographic key pair;

generating a verification fixed-length cryptographic hash from at least one individual frame retrieved from the transportable storage medium and comparing the verification cryptographic hash and the original cryptographic hash;

validating the decryption cryptographic key against user-provided credentials prior to decrypting the encrypted frames; and

including a set of cryptographic instructions employing at least one of the encryption cryptographic key and the decryption cryptographic key;

wherein a removable storage medium stores at least one of the encryption cryptographic key or the decryption cryptographic key such that a plurality of encryption or decryption cryptographic keys, associated with the removable storage medium, are capable of being utilized for encrypting or decrypting the individual frames, where the removable storage medium comprises only memory that stores the set of cryptographic instructions and the plurality of the encryption or decryption cryptographic keys, and is separate from a player which is capable of playing the video content on the transportable storage medium or a recorder which is capable of recording the video content on the transportable storage medium;

wherein only encrypted and signed video content passes a first physical boundary separating the recorder from the transportable storage medium;

wherein only the encrypted and signed video content passes a second physical boundary separating the transportable storage medium from the player.

42. A computer-readable storage medium holding code for performing the method according to claim 41.