System and method for partially encrypted multimedia stream

• US 7,773,750 B2
• Filed: 04/30/2007
• Issued: 08/10/2010
• Est. Priority Date: 01/02/2002
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Pedlow, JR., Leo M., Candelore, Brant, Derovanessian, Henry
• Primary Examiner(s): Homayounmehr, Farid
• Application Number:
  US11/796,909
• Publication Number:
  US 20070204146A1
• Time in Patent Office: 1,198 Days
• Field of Search: 380/212, 380/210
• US Class Current: 380/212
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04N 21/23608 Remultiplexing multiplex streams, e.g. involving modifying time stamps or remapping the packet identifiers
• CPC Class Codes: H04N 21/23897 by partially encrypting, e.g. encrypting only the ending portion of a movie
• CPC Class Codes: H04N 21/43607 Interfacing a plurality of external cards, e.g. through a DVB Common Interface [DVB-CI]
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A multimedia stream head end includes a legacy conditional access (CA) device that fully encrypts the stream using legacy keys. A copy of the stream is sent to a secondary CA device that encrypts only critical packets in the stream using secondary keys to render a partially encrypted stream. The critical packets in the fully encrypted stream from the legacy CA device are obtained and inserted next to the corresponding critical packets in the partially encrypted stream. Thus, only critical packets are encrypted, with encrypted versions being generated by both the legacy CA and secondary CA without the legacy CA knowing which of the packets that it encrypts are “critical”.

Claims

1. A method for multimedia transmission, comprising:

generating at least two copies of a multimedia stream to render first and second clear stream copies;

sending the first clear stream copy to a first conditional access (CA) component to encrypt the entire first clear stream copy to render a first completely encrypted stream;

sending the second clear stream copy to a second conditional access (CA) component to encrypt the entire second clear stream copy to render a second completely encrypted stream;

identifying predetermined portions of the multimedia stream, the predetermined portions being a subset of portions of the multimedia stream and having respective encrypted versions in the first completely encrypted stream and in the second completely encrypted stream;

obtaining the encrypted versions of the predetermined portions from the first completely encrypted stream;

obtaining encrypted versions of the predetermined portions from the second completely encrypted stream;

substituting the encrypted predetermined portions obtained from both the first and second completely encrypted streams for the predetermined portions in the multimedia stream or in a duplicate clear copy thereof to render a transmission stream that is only partially encrypted for transmission thereof.

2. The method of claim 1, comprising transmitting the transmission stream to plural set-top boxes over cable.

3. The method of claim 1, comprising wirelessly broadcasting the transmission stream to plural receivers.

4. The method of claim 1, wherein the first CA component is a legacy component provided by an incumbent.

5. The method of claim 1, comprising determining locations of the predetermined portions at least in one of the streams using corresponding offsets from at least one packet identifier (PID).

6. The method of claim 5, wherein the offsets are in integral numbers of packets from at least one PID.

7. The method of claim 5, wherein the offsets are used for identifying the locations of the encrypted predetermined portions in the completely encrypted streams for obtaining them and inserting them into the multimedia stream to render the transmission stream.

8. The method of claim 1, wherein the encrypted predetermined portions obtained from the first completely encrypted stream are inserted adjacent to the predetermined portions encrypted using the second CA component to render the transmission stream.

9. A system for use in a digital stream transmitter head end having a legacy Conditional access (CA) device completely encrypting a multimedia Stream to render a legacy-encrypted stream, comprising:

at least a system CA device completely encrypting a copy of the multimedia stream to render a system-encrypted stream; and

a reconstitution component combining, into the multimedia stream, only predetermined portions from the system-encrypted stream and the same predetermined portions from the legacy-encrypted stream to render a partially encrypted stream having both a first encrypted version of the predetermined portions and a second encrypted version of the predetermined portions and having substantially no other encrypted data therein.

10. The system of claim 9, wherein the predetermined portions obtained from the legacy-encrypted stream represent the same information as the predetermined portions from the system-encrypted stream.

11. The system of claim 10, wherein the head end transmits the partially encrypted stream over cable.

12. The system of claim 10, wherein the head end wireless broadcasts the partially encrypted stream.

13. The system of claim 10, comprising at least one critical packet locator determining offsets of at least some predetermined portions from at least one packet identifier (PID).

14. The system of claim 13, wherein the offsets are in integral numbers of packets from at least one PID.

15. The system of claim 13, wherein the reconstitution component uses the offsets to insert the predetermined portions obtained from the encrypted streams adjacent to each other.

16. The system of claim 9, further comprising at least one buffer temporarily holding the system-encrypted stream.

17. The system of claim 13, further comprising at least one data structure storing the offsets.