Methods and apparatus for secure and adaptive delivery of multimedia content

• US 7,313,236 B2
• Filed: 04/09/2003
• Issued: 12/25/2007
• Est. Priority Date: 04/09/2003
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Amini, Lisa D., Frossard, Pascal, Venkatramani, Chitra, Verscheure, Olivier, Westerink, Peter
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US10/410,455
• Publication Number:
  US 20040202320A1
• Time in Patent Office: 1,721 Days
• Field of Search: 713/162, 380277-285, 380/42, 380/217, 380/260
• US Class Current: 380/42
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/70 Media network packetisation
• CPC Class Codes: H04L 65/762 at the source reformatting of additional data in video distribution servers H04N21/2355

Abstract

Techniques for securely and adaptively delivering multimedia content. It is assumed that a set of alternate access units for each time slot is obtained. Then, the encryption stream index of each access unit from the set of alternate access units of the previous time slot are obtained. An encryption stream index is then assigned to each access unit in the set of alternate access units in the current time slot, such that the encryption index increases over time. Thus, the invention overcomes the problem of encrypting a multimedia stream that may have multiple access units for each time slot by selecting the encryption index for each access unit such that the encryption index increases, regardless of which access unit the delivery system (e.g., server) selects for transmission.

Claims

1. A method of processing content for delivery in an information system, wherein the content is representable as access units, the method comprising the steps of:

obtaining a set of alternate versions of an access unit for a current time slot associated with the content; and

assigning an encryption index to each access unit in the set of alternate versions of the access unit in the current time slot such that an encryption index increases over time;

wherein each alternate version of the access unit uses a different encryption key;

wherein the assigning step further comprises the steps of;

obtaining an encryption index of each access unit from a set of alternate versions of an access unit of a previous time slot;

computing sums by adding corresponding access unit lengths to each index; and

setting the encryption index of each access unit in the current time slot equal to or greater than the maximum of the computed sums.

2. The method of claim 1, wherein the assigning step further comprises assigning an encryption index to each access unit in the set of alternate versions of the access unit in the current time slot such that an encryption index increases with respect to each encryption index of each access unit from a set of alternate versions of an access unit for a previous time slot.

3. The method of claim 1, wherein each alternate version of the access unit uses the same encryption key.

4. The method of claim 3, wherein the assigning step further comprises the steps of:

setting the encryption index of the first access unit in the set of alternate versions of the access unit with the earliest time slot to an initial value;

obtaining the last computed encryption index and computing a sum by adding the access unit length corresponding to the access unit for which the encryption index was computed; and

setting the encryption index of the next access unit equal to or larger than the computed sum.

5. The method of claim 4, wherein a next access unit is defined as the next access unit in the same alternate set or, when encryption indexes in the same alternate set have been assigned, the next access unit is the first access unit of the set of alternate versions of the access unit of the next time slot.

6. The method of claim 1, wherein the encryption index of each access unit of a particular stream of access units is equal to the sum of the encryption index of the previous access unit plus the length of the previous access unit.

7. The method of claim 6, wherein the particular stream of access units comprises a stream of access units selected to not have an encryption index gap.

8. The method of claim 6, wherein the assigning step further comprises the steps of:

obtaining the encryption index of the access unit of the particular stream for a given time slot; and

setting the encryption index of the other access units in the same time slot equal to or greater than the encryption index of the access unit of the particular stream.

9. The method of claim 1, wherein the content is multimedia content.

10. The method of claim 1, wherein the obtaining and assigning steps are performed in accordance with a content creation system.

11. The method of claim 10, wherein access units and encryption indexes are provided to at least one delivery server for subsequent delivery to at least one client device.

12. Apparatus for processing content for delivery in an information system, wherein the content is representable as access units, the apparatus comprising:

a memory; and

at least one processor coupled to the memory and operative to;

(i) obtain, a set of alternate versions of an access unit for a current time slot associated with the content; and

(ii) assign an encryption index to each access unit in the set of alternate versions of the access unit in the current time slot such that an encryption index increases over time;

wherein each alternate access unit uses a different encryption key;

wherein the assigning operation further comprises;

obtaining an encryption index of each access unit from a set of alternate versions of an access unit of a previous time slot;

computing sums by adding corresponding access unit lengths to each index; and

setting the encryption index of each access unit in the current time slot equal to or greater than the maximum of the computed sums.

13. The apparatus of claim 12, wherein the assigning operation further comprises assigning an encryption index to each access unit in the set of alternate versions of the access unit in the current time slot such that an encryption index increases with respect to each encryption index of each access unit from a set of alternate versions of an access unit for a previous time slot.

14. The apparatus of claim 12, wherein each alternate version of the access unit uses the same encryption key.

15. The apparatus of claim 14, wherein the assigning operation further comprises:

setting the encryption index of the first access unit in the set of alternate versions of the access unit with the earliest time slot to an initial value;

obtaining the last computed encryption index and computing a sum by adding the access unit length corresponding to the access unit for which the encryption index was computed; and

setting the encryption index of the next access unit equal to or larger than the computed sum.

16. The apparatus of claim 15, wherein a next access unit is defined as the next access unit in the same alternate set or, when encryption indexes in the same alternate set have been assigned, the next access unit is the first access unit of the set of alternate versions of the access unit of the next time slot.

17. The apparatus of claim 12, wherein the encryption index of each access unit of a particular stream of access units is equal to the sum of the encryption index of the previous access unit plus the length of the previous access unit.

18. The apparatus of claim 17, wherein the particular stream of access units comprises a stream of access units selected to not have an encryption index gap.

19. The apparatus of claim 17, wherein the assigning operation further comprises:

obtaining the encryption index of the access unit of the particular stream for a given timeslot; and

setting the encryption index of the other access units in the same time slot equal to or greater than the encryption index of the access unit of the particular stream.

20. The apparatus of claim 12, wherein the content is multimedia content.

21. The apparatus of claim 12, wherein the obtaining and assigning operations are performed in accordance with a content creation system.

22. The apparatus of claim 21, wherein access units and encryption indexes are provided to at least one delivery server for subsequent delivery to at least one client device.

23. Apparatus for processing content for delivery in an information system, the apparatus comprising:

a content creation system operative to;

(i) obtain a set of alternate versions of an access unit for a current time slot associated with the content; and

(ii) assign an encryption index to each access unit in the set of alternate versions of the access unit in the current time slot such that an encryption index increases over time;

wherein each alternate access unit uses a different encryption key;

wherein the assigning operation further comprises;

obtaining an encryption index of each access unit from a set of alternate versions of an access unit of a previous time slot;

computing sums by adding corresponding access unit lengths to each index; and

setting the encryption index of each access unit in the current time slot equal to or greater than the maximum of the computed sums.

24. An article of manufacture for processing content for delivery in an information system, comprising a machine readable medium containing one or more programs which when executed implement the steps of:

obtaining a set of alternate versions of an access unit for a current time slot associated with the content; and

assigning an encryption index to each access unit in the set of alternate versions of the access unit in the current time slot such that an encryption index increases over time;

wherein each alternate access unit uses a different encryption key;

wherein the assigning operation further comprises;

obtaining an encryption index of each access unit from a set of alternate versions of an access unit of a previous time slot;

computing sums by adding corresponding access unit lengths to each index; and

setting the encryption index of each access unit in the current time slot equal to or greater than the maximum of the computed sums.