Binding of protected video content to video player with block cipher hash

• US 8,879,731 B2
• Filed: 12/02/2011
• Issued: 11/04/2014
• Est. Priority Date: 12/02/2011
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Schultz, Roderick
• Primary Examiner(s): Zecher, Dede
• Assistant Examiner(s): MCCOY, RICHARD ANTHONY
• Application Number:
  US13/309,982
• Publication Number:
  US 20130142330A1
• Time in Patent Office: 1,068 Days
• Field of Search: 380200-242, 380/249, 713/152, 713/161, 713/168, 713/170, 726/4, 726/21, 726/29, 340/5.8, 705/67, 455/411, 379/142.04, 725/31, 725/30, 725/86, 725/87, 725/91, 725/93, 725/100, 725/103, 725/104, 725/135, 725/144, 725/146, 725/151
• US Class Current: 380/210
• CPC Class Codes: H04N 21/6581 Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38
• CPC Class Codes: H04N 21/8352 involving content or source identification data, e.g. Unique Material Identifier [UMID]

Abstract

A video player sends a video content identifier and a video player identifier through a network to a server. The video content identifier identifies video content. The video player identifier identifies the video player. Further, a first subset of encrypted video content and an initialization vector are received from a server. In addition, a hash of the video player identifier is generated. The first subset of the encrypted video content is decrypted with a decryption key to generate a first result. Further, a first operation on the initialization vector and the hash is performed to generate a second result. In addition, a second operation is performed on the first result and the second result to generate a first subset of plaintext of video content.

Claims

1. One or more computer-readable memory devices comprising stored instructions executable by one or more processors of a server of a video content provider to:

receive a media content identifier and a media player identifier in a request from a media player residing on a client device, the media content identifier identifying media content, the media player identifier uniquely identifying the media player, the request being received before the media content is sent to the media player;

provide the media player identifier and a binary of the media player to a function generator to generate a hash of the media player identifier and the binary of the media player;

perform a first operation on an initialization vector and the generated hash to generate a first result;

perform a second operation on a first subset of plaintext and the first result to generate a second result, the plaintext being the media content;

encrypt the second result with an encryption key to generate a first set of ciphertext that is bound to the unique media player identifier of the media player residing on the client device; and

deliver the first set of the ciphertext and the initialization vector, without the generated hash, to the media player, effective to enable the media player to generate the hash of the media player identifier and the binary of the media player to decrypt the first set of the ciphertext.

2. The computer-readable memory devices of claim 1, wherein the instructions are further executable to perform a third operation on the first set of ciphertext and the hash of the media player identifier and the binary of the media player to generate a third result, perform a fourth operation on a second subset of the plaintext and the third result to generate a fourth result, and encrypt the fourth result with the encryption key to generate a second set of ciphertext.

3. The computer-readable memory devices of claim 2, wherein the instructions are further executable to send the second set of ciphertext, without the hash of the media player identifier and the binary of the media player, to the media player.

4. The computer-readable memory devices of claim 1, wherein the encryption is a block cipher encryption.

5. The computer-readable memory devices of claim 1, wherein the encryption key is a symmetrical key.

6. The computer-readable memory devices of claim 1, wherein the encryption key is an asymmetrical key.

7. The computer-readable memory devices of claim 1, wherein the first operation is an XOR operation.

8. The computer-readable memory devices of claim 1, wherein the second operation is an XOR operation.

9. A method comprising:

sending, from a video player, a request comprising a video content identifier and a video player identifier through a network to a server, the video content identifier identifying video content, the video player identifier uniquely identifying the video player, the request being sent from the video player before receiving the video content, and being effective to cause the server to generate a hash of the video player identifier and a binary of the video player that is usable to encrypt a first subset of video content using an encryption key and a result of performing a first operation on the generated hash and an initialization vector;

receiving, from the server, the first subset of encrypted video content that is bound to the unique video player identifier, and the initialization vector, without receiving the generated hash;

generating the hash of the video player identifier and the binary of the video player;

decrypting the first subset of the encrypted video content with a decryption key to generate a first result;

performing the first operation on the initialization vector and the generated hash to generate a second result; and

performing a second operation on the first result and the second result to generate a first subset of plaintext of video content from the first subset of encrypted video content that is bound to the unique video player identifier of the video player.

10. The method of claim 9, further comprising receiving, from the server, a second subset of encrypted video content, without receiving the generated hash, decrypting the second subset of the encrypted video content with the decryption key to generate a third result, performing a third operation on the first subset of the encrypted video content and the generated hash to generate a fourth result, and performing a fourth operation on the fourth result to generate a second subset of plaintext of the video content.

11. The method claim 9, wherein the decryption is a block cipher decryption.

12. The method of claim 9, wherein the decryption key is a symmetrical key.

13. The method of claim 9, wherein the encryption key is an asymmetrical key.

14. The method of claim 9, wherein the first operation is an XOR operation.

15. The method of claim 9, wherein the second operation is an XOR operation.

16. A system comprising:

a server configured as a video content provider;

a communication module of the server configured to receive a request from a video player residing on a client device, the request comprising a video content identifier and a video player identifier, the video content identifier identifying video content, and the video player identifier uniquely identifying the video player;

a hash generator configured to generate a hash of the video player identifier and a binary of the video player that is utilized as an initialization vector;

a processor configured to perform a first operation on a first subset of plaintext and the initialization vector to generate a first result, and further configured to encrypt the first result with an encryption key to generate a first set of ciphertext that is bound to the video player identifier of the video player residing on the client device, the plaintext being the video content; and

the communication module is configured to communicate the first set of ciphertext, without the initialization vector, to the video player.

17. The system of claim 16, wherein the processor is configured to:

perform a second operation on the first set of ciphertext and the generated hash to generate a second result;

perform a third operation on a second subset of the plaintext and the second result; and

encrypt the second result with the encryption key to generate a second set of ciphertext; and

the communication module is configured to;

communicate the second set of ciphertext, without the initialization vector, to the video player.

18. The system of claim 16, wherein the encryption is a block cipher encryption.

19. The system of claim 16, further comprising a database configured to store the video content.

20. The system of claim 16, wherein the encryption key is a symmetrical key.