Encryption scheme for streamed multimedia content protected by rights management system

• US 7,684,566 B2
• Filed: 05/27/2005
• Issued: 03/23/2010
• Est. Priority Date: 05/27/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Alkove, James M., Oliveira, Eduardo P., Dunbar, Geoffrey
• Primary Examiner(s): POWERS, WILLIAM S
• Application Number:
  US11/139,956
• Publication Number:
  US 20060280301A1
• Time in Patent Office: 1,761 Days
• Field of Search: 380/212
• US Class Current: 380/212
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8456 by decomposing the content in the time domain, e.g. in time segments
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A stream of content has multiple sub-streams, where each sub-stream comprises a part of the content and is divisible into logical blocks bounded by intrinsic partitions. For each sub-stream, a specification of the logical blocks bounded by the intrinsic partitions is defined and the sub-stream is divided into the logical blocks bounded by the intrinsic partitions. Each divided logical block is encrypted and then divided into one or more portions to produce corresponding pieces of data, and each piece of data is placed into a data packet as a payload thereof. Each data packet is transmitted to a recipient thereof, and the recipient can retrieve the pieces of data from the payloads of the packets, reconstruct the encrypted logical blocks, and manipulate the sub-stream on a per-logical block basis without necessarily decrypting each encrypted logical block.

Claims

1. A method of rendering a stream of content having at least one rights management (RM) protected sub-stream therein, each RM-protected sub-stream being protected according to a particular protection scheme, the method comprising:

receiving the stream including a data object including data representative of each sub-stream and a header object including an RM description object, the RM description object including at least one content encryption record, each content encryption record corresponding to a particular protection scheme and including with regard to the protection scheme thereof an identification of the protection scheme and at least one encrypted object record, each encrypted object record relating to a particular sub-stream protected according to the identified protection scheme of the content encryption record thereof and including an identification of the particular sub-stream;

locating the header object of the stream, each content encryption record in the header object, and each encrypted object record of each content encryption record in the header object; and

for each RM-protected sub-stream of the stream;

determining an identification of the sub-stream;

finding a located encrypted object record with the determined identification of the sub-stream;

determining the protection scheme of the content encryption record of the found encrypted object record; and

rendering the sub-stream in accordance with the determined protection scheme.

2. The method of claim 1 wherein each encrypted object record further includes an identification of a type of the sub-stream.

3. The method of claim 1 wherein each encrypted object record further includes at least one of an identification of a license to render the object and an identification of where to obtain such a license.

4. The method of claim 1 wherein each content encryption record further includes at least one of an identification of a license to render all sub-streams protected according to the protection scheme of such content encryption record and an identification of where to obtain such a license.

5. A computer-readable medium having stored thereon computer data representative of a stream of content having multiple rights management (RM) protected sub-streams therein, each RM-protected sub-stream being protected according to a different particular protection scheme, the stream including a data object including data representative of each sub-stream and a header object including an RM description object, the RM description object including at least one content encryption record, each content encryption record corresponding to a particular protection scheme and including with regard to the protection scheme thereof an identification of the protection scheme and at least one encrypted object record, each encrypted object record relating to a particular sub-stream protected according to the identified protection scheme of the content encryption record thereof and including an identification of the particular sub-stream, wherein for each RM-protected sub-stream of the stream, an identification of the sub-stream is employed to find a corresponding encrypted object record, and wherein the protection scheme of the content encryption record of the found encrypted object record is employed to render the sub-stream.

6. The medium of claim 5 wherein each encrypted object record further includes an identification of a type of the sub-stream.

7. The medium of claim 5 wherein each encrypted object record further includes at least one of an identification of a license to render the object and an identification of where to obtain such a license.

8. The medium of claim 5 wherein each content encryption record further includes at least one of an identification of a license to render all sub-streams protected according to the protection scheme of such content encryption record and an identification of where to obtain such a license.