Secured distributed method and system for the distribution of audiovisual flows

• US 7,633,941 B2
• Filed: 03/23/2006
• Issued: 12/15/2009
• Est. Priority Date: 10/15/2003
• Status: Active Grant

• Current Assignee: OL Security LLC (Intellectual Ventures LLC)
• Original Assignee: Querell Data LLC (Intellectual Ventures LLC)
• Inventors: Lecomte, Daniel, Hosny, Reda, Lamtouni, Mohammed
• Primary Examiner(s): Cho; Hong
• Assistant Examiner(s): Scheibel; Robert C
• Application Number:
  US11/387,284
• Publication Number:
  US 20060184686A1
• Time in Patent Office: 1,363 Days
• Field of Search: None
• US Class Current: 370/389
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3221 interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4622 Retrieving content or additional data from different sources, e.g. from a broadcast channel and the Internet web site content organization and management for information retrieval from the Internet G06F16/958; transmission by internet of broadcast information H04H60/82; stock exchange data over packet-switching network H04L12/1804; push services including data channel over packet-switching network H04L12/1859
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/631 Multimode Transmission, e.g. transmitting basic layers and enhancement layers of the content over different transmission paths or transmitting with different error corrections, different keys or with different transmission protocols
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

A process for secure distribution of digital audio streams according to a standard, normalized or proprietary format, on which streams a separation of the stream into two parts is made prior to transmission to equipment of an addressee to generate a modified main stream having a format of an original stream and complementary information including digital information suitable for permitting reconstruction of the original stream including: transmitting, by separate paths during a distribution phase, the modified main stream from a distribution server and the complementary information to the equipment of the addressee from a secure central server passing via at least one intermediate server connecting the equipment of the addressee to the central server, wherein the complementary information is defined according to a nominal structured format containing processing units which comprise logical entities with a modulatable size and wherein each of the processing units is prefixed by a heading containing information relative to the processing unit and a useful load containing data and references about the modified main stream, and packetizing the units prior to the transmission.

Claims

1. A process for secure distribution of digital audiovisual streams according to a standard, normalized or proprietary format, comprising:

separating an original stream to generate a modified stream having a format corresponding to a format of the original stream and complementary information comprising digital information suitable to enable reconstructing the original stream;

transmitting to equipment of an addressee, using separate transmission paths, the modified stream from a distribution server and the complementary information from a secure central server, the transmission path for the complementary information including at least one intermediate server connecting the equipment of the addressee to the central server, wherein the complementary information is defined according to a nominal structured format containing processing units that include logical entities with a modulatable size, and wherein the respective processing units include load information containing data and references about the modified stream, wherein the distribution server and the secure central server are distinct from one another.

2. The process according to claim 1, wherein at least one of the processing units is prefixed by a heading including information relative to the processing unit, and which contains time references and position references for the modified stream.

3. The process according to claim 1, further comprising packetizing and encrypting the processing units prior to transmission.

4. The process according to claim 1, further comprising compressing, and then encrypting, the processing units.

5. The process according to claim 1, further comprising determining, by the central server, a dynamic and regular regeneration of a session key during communication.

6. The process according to claim 1, further comprising determining, by the central server, a degree of encryption of the complementary information as a function of load on the transmission network.

7. The process according to claim 1, further comprising determining, by an intermediate server, a degree of encryption of the complementary information as a function of bandwidth allocated to the user.

8. The process according to claim 1, further comprising encrypting the processing units, wherein the encrypting is personalized for respective users.

9. The process according to claim 1, further comprising receiving, at the server of the complementary information, event reports sent by the addressee equipment at regular intervals.

10. A system to distribute audiovisual streams, comprising;

a device configured to separate an original video stream into a modified stream and into complementary information, wherein said modified stream has a format corresponding to a format of the original video stream, and wherein the complementary information includes digital information suitable for permitting reconstruction of the original video stream, and wherein the complementary information is defined according to a nominal structured format containing processing units that comprise logical entities with a modulatable size, and wherein the processing units include respective load information containing data and references about the modified stream;

at least one multimedia server configured to contain one or more protected audiovisual streams, wherein the one or more protected audiovisual streams include one or more modified streams produced by the device configured to separate an original video stream;

at least one secure central server, including a device for securing and personalizing the complementary information, and configured to distribute the complementary information to at least one addressee via a transmission path that includes at least one intermediate server.

11. The system according to claim 10, further comprising:

at least one module configured to manage correspondence between the modified stream and the complementary information associated with the modified stream.

12. The system according to claim 10, further comprising:

at least one module configured to manage subscribers.

13. The system according to claim 10, further comprising:

at least one module configured to manage and generate session keys.

14. The system according to claim 10, wherein the at least one multimedia server and the at least one secure central server are distinct from one another.

15. The system according to claim 10, wherein the multimedia server is configured to transmit the modified stream to the addressee via a transmission path that is different from the transmission path used by the secure central server to transmit the complementary information to the addressee.

16. An apparatus for receiving a modified stream and complementary information corresponding to an original audiovisual stream, the apparatus comprising:

at least one device configured to decrypt a session key associated with communication of the complementary information associated with the original audiovisual stream, wherein the device includes at least one smart card;

at least one device configured to decrypt the complementary information, using the decrypted session key; and

at least one module configured to reconstruct the original audiovisual stream as a function of the modified stream and the complementary information,

wherein the modified stream and the complementary information are derived from the original audiovisual stream by separating the original audiovisual stream into the modified stream and the complementary information, wherein the modified stream has a format corresponding to a format of the original audiovisual stream, and wherein the complementary information includes digital information suitable for permitting reconstruction of the original audiovisual stream, and wherein the complementary information is defined according to a nominal structured format containing processing units that comprise logical entities with a modulatable size, and wherein the processing units include respective load information containing data and references about the modified stream.

17. The apparatus according to claim 16, wherein the session key is varied during the course of communicating the complementary information associated with the original audiovisual stream.

18. The apparatus according to claim 16, wherein the smart card includes a private key, and wherein the private key is to be used to decrypt the session key.