Selective encryption with coverage encryption

• US 8,818,896 B2
• Filed: 04/01/2005
• Issued: 08/26/2014
• Est. Priority Date: 09/09/2002
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Candelore, Brant L.
• Primary Examiner(s): Hewitt, II, Calvin L
• Assistant Examiner(s): Qayyum, Zeshan
• Application Number:
  US11/097,919
• Publication Number:
  US 20050192904A1
• Time in Patent Office: 3,434 Days
• Field of Search: 705/51
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

A method and apparatus for enabling use of multiple digital rights management scenarios (DRM). Unencrypted data representing digital content is examined to identify at least segments of content for DRM encryption. The identified segments of content are duplicated and then encrypted using a first encryption method associated with a first DRM to produce first encrypted segments. Duplicates are encrypted using a second encryption method associated with a second DRM to produce second encrypted segments. At least a portion of segments not selected for DRM encryption are encrypted using a coverage encryption method. The coverage encryption key is encrypted by each of a third and fourth encryption methods associated with the first and second DRMs respectively. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Claims

1. A method, comprising:

receiving by one or more processors segments of unencrypted data stream of digital content;

identifying by one or more processors from the received segments, segments for multiple selective DRM encryption based on a critical data selection rule;

generating by one or more processors first DRM encrypted segments and second DRM encrypted segments by parallel encrypting the identified segments using a first encryption method associated with a first DRM and using a second encryption method associated with a second DRM;

creating by one or more processors a coverage key for encryption of the received segments that was not identified for multiple selective DRM encryption via a coverage encryption method;

generating a coverage encrypted content by the one or more processors by encrypting at least portion of the received segments of unencrypted data stream of digital content that was not identified for multiple selective DRM encryption using the coverage encryption method and the coverage key;

generating by one or more processors a first encrypted key and second encrypted key by parallel encrypting the coverage key using a third encryption method associated with the first DRM and using a fourth encryption method associated with the second DRM;

constructing by one or more processors an output digital content stream comprising the first DRM encrypted segments, the second DRM encrypted segments, the first encrypted coverage key, the second encrypted coverage key, and the coverage encrypted content; and

transmitting by the one or more processors, the constructed digital content stream to one or more recipients.

2. The method according to claim 1, wherein the segments of unencrypted data stream of digital content comprises at least one of digitized audio content and digitized video content.

3. The method according to claim 1, wherein the output digital content stream further comprises data to enable digital rights under the first DRM to a file, and data to enable digital rights under the second DRM to the file.

4. The method according to claim 1, wherein the output digital content stream further comprises clear unencrypted data.

5. The method according to claim 1, wherein creating the coverage key comprises using a hash function to create the coverage key.

6. The method according to claim 5, wherein the hash function used to create the coverage key incorporates rights or other attributes of at least one of the first and second DRMs.

7. The method according to claim 1, wherein the coverage key comprises at least one of a fixed hardware key, a fixed software key, and a changing software key.

8. The method according to claim 1, wherein the third encryption method and the first encryption method are the same.

9. The method according to claim 1, wherein the fourth encryption method and the second encryption method are the same.

10. An encoder device that enables use of multiple digital rights management scenarios (DRM), comprising:

one or more processors and a memory connected to said one or more processors, the memory storing instructions that when executed by the one or more processors cause the one or more processors to perform the functions of;

receiving by one or more processors segments of unencrypted data stream of digital content;

identifying by one or more processors from the received segments, segments for multiple selective DRM encryption based on a critical data selection rule;

generating by one or more processors first DRM encrypted segments and second DRM encrypted segments by parallel encrypting the identified segments using a first encryption method associated with a first DRM and using a second encryption method associated with a second DRM;

creating by one or more processors a coverage key for encryption of the received segments that was not identified for multiple selective DRM encryption via a coverage encryption method;

generating a coverage encrypted content by the one or more processors by encrypting at least portion of the received segments of unencrypted data stream of digital content that was not identified for multiple selective DRM encryption using the coverage encryption method and the coverage key;

generating by one or more processors a first encrypted key and second encrypted key by parallel encrypting the coverage key using a third encryption method associated with the first DRM and using a fourth encryption method associated with the second DRM;

constructing by one or more processors an output digital content stream comprising the first DRM encrypted segments, the second DRM encrypted segments, the first encrypted coverage key, the second encrypted coverage key, and the coverage encrypted content; and

transmitting by the one or more processors, the constructed digital content stream to one or more recipients.

11. The encoder device according to claim 10, further comprising:

first and second encryption devices;

wherein generating by one or more processors first DRM encrypted segments and second DRM encrypted segments by parallel encrypting the identified segments using a first encryption method associated with a first DRM and using a second encryption method associated with a second DRM comprises;

the first encryption device generating first DRM encrypted segments using a first DRM encryption method; and

the second encryption device generating second DRM encrypted segments using a second DRM encryption method.

12. The encoder device according to claim 11, wherein the first and second encryption devices comprise hardware encryption devices.

13. The encoder device according to claim 10, further comprising:

a third encryption device;

wherein creating by one or more processors a coverage key for encryption of the received segments that was not identified for multiple selective DRM encryption via a coverage encryption method comprises;

the third encryption device generating a first encrypted key and second encrypted key by parallel encrypting the coverage key using a third encryption method associated with the first DRM and using a fourth encryption method associated with the second DRM.

14. The encoder device according to claim 13, wherein the third encryption device comprises a hardware encryption device.

15. The encoder device according to claim 10, further comprising a multiplexing device that constructs the output digital content stream.

16. The encoder device according to claim 10, wherein the third encryption method and the first encryption method are the same and the fourth encryption method and the second encryption method are the same.

17. The apparatus according to claim 10, wherein the segments of unencrypted data stream of digital content comprises at least one of digitized audio content and digitized video content.

18. The apparatus according to claim 10, wherein the output digital content stream further comprises data enabling digital rights under the first DRM to a file, and data enabling digital rights under the second DRM to the file.

19. The apparatus to claim 10, wherein the output digital content stream further comprises clear unencrypted data.

20. The apparatus according to claim 10, wherein the one or more processors that create the coverage key use a hash function to generate the coverage key.

21. The apparatus according to claim 20, wherein the hash function used to generate the coverage key incorporates rights or other attributes of at least one of the first and second DRMs.

22. The apparatus according to claim 20, wherein the coverage key comprises at least one of a fixed hardware key and a software key.

23. The apparatus according to claim 10, wherein the third encryption method and the first encryption method are the same.

24. The apparatus according to claim 10, wherein the fourth encryption method and the second encryption method are the same.

25. An encoder device that enables use of multiple digital rights management scenarios (DRM), comprising:

one or more processors and a memory connected to said one or more processors, the memory storing instructions that when executed by the one or more processors cause the one or more processors to perform the functions of;

receiving by one or more processors segments of unencrypted data stream of audio/video (AV) data;

identifying by one or more processors from the received segments, segments for multiple selective DRM encryption based on a critical data selection rule;

generating by one or more processors first DRM encrypted segments and second DRM encrypted segments by parallel encrypting the identified segments using a first encryption method associated with a first DRM and using a second encryption method associated with a second DRM;

creating by one or more processors a coverage key for encryption of the received segments that was not identified for multiple selective DRM encryption via a coverage encryption method;

generating a coverage encrypted content by the one or more processors by encrypting at least a portion of the received segments of unencrypted data stream of digital content that was not identified for multiple selective DRM encryption using the coverage encryption method and the coverage key;

generating by one or more processors a first encrypted key and second encrypted key by parallel encrypting the coverage key using a third encryption method associated with the first DRM and using a fourth encryption method associated with the second DRM;

constructing by one or more processors an output digital content stream comprising the first DRM encrypted segments, the second DRM encrypted segments, the first encrypted coverage key, the second encrypted coverage key, and the coverage encrypted content; and

transmitting by the one or more processors, the constructed digital content stream to one or more recipients.

26. The encoder device according to claim 25, further comprising:

first and second encryption devices;

wherein generating by one or more processors first DRM encrypted segments and second DRM encrypted segments by parallel encrypting the identified segments using a first encryption method associated with a first DRM and using a second encryption method associated with a second DRM comprises;

the first encryption device generating first DRM encrypted segments using a first DRM encryption method; and

the second encrypter generating second DRM encrypted segments using a second DRM encryption method.

27. The encoder device according to claim 26, wherein the first and second encryption devices comprise hardware encryption devices.

28. The encoder device according to claim 25, further comprising:

a third encryption device;

wherein creating by one or more processors a coverage key for encryption of the received segments that was not identified for multiple selective DRM encryption via a coverage encryption method comprises;

the third encryption device generating a first encrypted key and second encrypted key by parallel encrypting the coverage key using a third encryption method associated with the first DRM and using a fourth encryption method associated with the second DRM.

29. The encoder device according to claim 28, wherein the third encryption device comprises a hardware encryption device.