Signaling and handling content encryption and rights management in content transport and delivery

• US 9,342,668 B2
• Filed: 07/12/2013
• Issued: 05/17/2016
• Est. Priority Date: 07/13/2012
• Status: Active Grant

• Current Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wang, Xin, Zhang, Shaobo, Liu, Yongliang, Giladi, Alexander
• Primary Examiner(s): PEARSON, DAVID J
• Application Number:
  US13/941,408
• Publication Number:
  US 20140020111A1
• Time in Patent Office: 1,040 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 65/70 Media network packetisation
• CPC Class Codes: H04L 65/765 intermediate
• CPC Class Codes: H04N 21/2362 Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08

Abstract

An apparatus comprising a memory, a processor coupled to the memory and configured to obtain a protection description for media content comprising a plurality of content items, wherein the protection description comprises data signaling at least two protection mechanisms for at least two content items in a media content, wherein each of the at least two content items is protected by one or more of the at least two protection mechanisms, and wherein the protection mechanisms for the at least two content items are different, determine the protection mechanisms for the at least two content items from the data, and process the at least two content items according to their associated protection mechanisms.

Claims

1. A method comprising;

obtaining a media content comprising at least two segments, wherein each of the at least two segments are protected by one or more of at least two encryption schemes;

developing a manifest file that comprises a protection description for the media content, wherein the protection description comprises data sufficient to signal the encryption schemes for the at least two segments, wherein the data comprises;

an element that specifies an encryption scheme used for encryption of the segments; and

an initialization vector (iv) uniform resource identifier (URI) template that specifies a template for generating a URI pointing to an iv for the segments; and

transmitting the manifest file and the media content to a client.

2. The method of claim 1, wherein the protection description further comprises data sufficient to indicate to the client at least one of the following associated with the at least two encryption schemes:

a key management system, iv information for a single period, and iv information for several constant-length periods.

3. The method of claim 1, wherein the protection description comprises data sufficient to signal a key URI associated with a period, wherein the key URI is usable to retrieve a key resource.

4. The method of claim 1, wherein the protection description comprises data describing global properties of protection schemes used in all periods for a media presentation.

5. The method of claim 1, wherein the protection description comprises data describing global properties of a key system used in all periods for a media presentation.

6. The method of claim 1, wherein at least a portion of the media content is encrypted using a common encryption algorithm.

7. The method of claim 1, wherein the manifest file is a media presentation description (MPD) file.

8. An apparatus comprising:

a memory;

a processor coupled to the memory and configured to;

obtain a media content comprising at least two content items, wherein each of the at least two content items are protected by one or more of at least two encryption schemes, and wherein at least two of the encryption schemes for the at least two content items are different; and

develop a manifest file that comprises a protection description for the media content, wherein the protection description comprises data sufficient to signal the encryption schemes for the at least two content items, wherein the data comprises an initialization vector (iv) uniform resource identifier (URI) template that specifies a template for generating a URI pointing to an iv for the content items; and

a transmitter coupled to the processor and configured to transmit the manifest file and the media content to a client.

9. The apparatus of claim 8, wherein at least a portion of the content items are obtained from a first source and at least a portion of the content items are obtained from a second source.

10. The apparatus of claim 8, wherein the protection description is transmitted using a Dynamic Adaptive Streaming over Hypertext Transfer Protocol (HTTP) (DASH) or Moving Picture Experts Group (MPEG) Media Transport (MMT) protocol.

11. The apparatus of claim 8, wherein the manifest file is a media apresentation description (MPD) file.