Process and streaming server for encrypting a data stream

• US 7,380,117 B2
• Filed: 06/30/2005
• Issued: 05/27/2008
• Est. Priority Date: 11/09/1999
• Status: Expired due to Term

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Widevine Technologies Incorporated (Alphabet Inc.)
• Inventors: Baker, Brian
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US11/171,866
• Publication Number:
  US 20060059563A1
• Time in Patent Office: 1,062 Days
• Field of Search: 380/200, 380/203
• US Class Current: 713/153
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04N 21/234 Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
• CPC Class Codes: H04N 21/23406 involving management of server-side video buffer
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2387 Stream processing in response to a playback request from an end-user, e.g. for trick-play
• CPC Class Codes: H04N 21/2401 Monitoring of the client buffer
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/25866 Management of end-user data customer care in data networks H04L41/5077
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/6587 : Control parameters, e.g. trick play commands, viewpoint selection
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17318 : Direct or substantially direct transmission and handling of requests
• CPC Class Codes: H04N 7/17336 : Handling of requests in head-ends

Abstract

There is disclosed a process for encrypting a data stream to secure the data stream for single viewing and to protect copyrights of the data stream. Specifically, there is disclosed a process for protecting streaming multimedia, entertainment and communications in an Internet-type transmission. There is further disclosed a streaming server component operably connected with a streaming server that interacts with a client system to affect the inventive process.

Claims

1. A client for receiving a data stream for use in a predefined number of viewings, comprising:

a control module that is programmed to perform actions comprising;

providing a URI and a token associated with the URI, and a request for the data stream to a server; and

if the URI, and token are validated;

negotiating an encryption key with the server,

receiving the data stream over a network a rate of a flow to maintain a substantially full client buffer,

using the encryption key to decrypt the data stream; and

a display module that is configured to control the display of the data stream.

2. The client of claim 1, wherein the encrypted data stream is encrypted for a single viewing.

3. The client of claim 1, wherein at least a portion of computer-readable instructions associated with the control module is uploadable onto the client.

4. The client of claim 1, wherein if the URI, and token are validated further comprises employing the server to determine if the token has expired.

5. The client of claim 1, wherein the control module is programmed to perform actions further comprising:

sending user information and the request for the data stream to the server; and

if the user information is valid, performing additional actions, including;

if a fee is associated with the requested data stream, debiting a valid user account, and generating the token.

6. A server for use in providing a data stream to a client for a predetermined number of viewings, the server comprising:

a first component configured to enable a connection to be established with the client; and

a second component that is programmed to perform actions comprising;

receiving user verification information, URI, and a token associated with the URI with a request for the data stream from the client;

determining the validity of the user verification information, the URI, and the token, wherein the token is validated based, in part, on an expiration date; and

if the user verification information, URI, and token are valid, negotiating an encryption key with the client, using the encryption key to encrypt the data stream as it is streamed to the client, and controlling over a network a rate of a flow of the encrypted data stream to the client to maintain a substantially full client buffer.

7. The server of claim 6, wherein the predetermined number of viewings is a single viewing.

8. The server of claim 6, wherein controlling over the network the rate of the flow further comprises transmitting the encrypted data stream to the client at substantially the same rate as the encrypted data stream is received by the client.

9. The server of claim 6, wherein controlling over the network the rate of the flow further comprises receiving a network statistic from the client.

10. An apparatus for providing a data stream, comprising:

a means for receiving user information, including a token associated with a URI for a request for the data stream from a client;

a means for determining a validity of the user information and the token; and

if the user information and the token are valid, employing;

a means for negotiating an encryption key with the client;

a means for encrypting the data stream as it is streamed to the client, wherein the data stream is encrypted with the negotiated encryption key; and

a means for controlling by the apparatus over a network a rate of a flow of the encrypted data stream to the client to maintain a substantially full client buffer.