Method and apparatus for detecting the falsification of metadata

• US 20060259781A1
• Filed: 04/29/2005
• Published: 11/16/2006
• Est. Priority Date: 04/29/2005
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: SONY CORPORATION/SONY ELECTRONICS INC.
• Inventors: Ishizaka, Toshihiro, Futagami, Motomasa, Saeki, Keiko
• Application Number:
  US11/117,985
• Publication Number:
  US 20060259781A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

There are disclosed methods and systems (and related data structures) for processing metadata in files, including media files, so that an alteration or falsification of the metadata can be detected. According to certain embodiments, the metadata includes hash values and digital signatures that were generated by a content server. These hash values and digital signatures can be used by a client device to authenticate the metadata.

Claims

1. A method of processing metadata in a file having a first portion and a second portion, wherein the first portion consists of metadata and the second portion is comprised of data that is other than metadata, the method comprising:

selecting a first set of metadata adapted for storage in a first location in the file;

creating a hash value as a function of the first set of metadata and as a function of other than the data in the second portion; and

storing the hash value in a second location in the file.

2. The method of claim 1 further comprising creating a digital signature as a function of at least the hash value.

3. The method of claim 1 wherein the file comprises a media file, wherein the second portion is comprised of media data, and wherein the first portion includes the first set of metadata.

4. The method of claim 3 wherein the media file comprises a MPEG file.

5. The method of claim 3 wherein the media file comprises a MPEG file and wherein the first location is one of a movie-level user data box and a track-level user data box, and wherein the second location is another box contained within a movie box.

6. The method of claim 1 further comprising selecting a second set of metadata adapted for storage in a third location in the file, wherein creating the hash value as a function of the first set of metadata includes creating the hash value as a function of the first and second sets of metadata.

7. The method of claim 6 further comprising creating a digital signature as a function of at least the hash value.

8. The method of claim 6 further comprising:

selecting a third set of metadata adapted for storage in a fourth location in the file and for use in decrypting a set of encrypted data, wherein the set of encrypted data is other than encrypted metadata and is adapted for storage in the second portion; and

creating a digital signature as a function of at least the hash value and the third set of metadata.

9. A method of processing metadata in a media file, the method comprising:

selecting a first plurality of sets of user data, wherein the first plurality is adapted for storage in a first box in the media file;

creating a first hash value as a function of the first plurality of sets of user data;

storing the first hash value in a second box in the media file;

selecting a second plurality of sets of user data, wherein the second plurality is adapted for storage in a third box in the media file;

creating a second hash value as a function of the second plurality of sets of user data; and

storing the second hash value in a fourth box in the media file.

10. The method of claim 9, wherein creating the first hash value as a function of the first plurality of sets of user data comprises creating the first hash value as a function of a concatenation of the first plurality of sets of user data, and

wherein creating the second hash value as a function of the second plurality of sets of user data comprises creating the second hash value as a function of a concatenation of the second plurality of sets of user data.

11. The method of claim 9 further comprising:

creating a digital signature as a function of at least the first and second hash values; and

storing the digital signature in a fifth box in the media file.

12. The method of claim 9 wherein the media file includes a first track of media data, a second track of media data, a first track box for containing metadata related to the first track of media data, and a second track box for containing metadata related to the second track of media data,

wherein the first box is located other than in the first and second track boxes;

and

wherein the second, third and fourth boxes are located in the first track box.

13. The method of claim 12 further comprising storing the first hash value in a fifth box located in the second track box.

14. The method of claim 9 wherein the media file includes a first track of media data, a second track of media data, a first track box for containing metadata related to the first track of media data, and a second track box for containing metadata related to the second track of media data,

wherein the first and second boxes are located in the first track box;

and

wherein the third and fourth boxes are located in the second track box.

15. The method of claim 9 further comprising:

selecting a third plurality of sets of user data, wherein the third plurality is adapted for storage in a fifth box in the media file;

creating a third hash value as a function of the third plurality of sets of user data; and

storing the third hash value in a sixth box in the media file.

16. The method of claim 15 further comprising:

creating a first digital signature as a function of at least the first and second hash values;

storing the first digital signature in a seventh box in the media file;

creating a second digital signature as a function of at least the first and third hash values; and

storing the second digital signature in an eighth box in the media file.

17. The method of claim 15 wherein the media file includes a first track of media data, a second track of media data, a first track box for containing metadata related to the first track of media data, and a second track box for containing metadata related to the second track of media data,

wherein the first box is located in other than the first and second track boxes;

wherein the second, third and fourth boxes are located in the first track box; and

wherein the fifth and sixth boxes are located in the second track box.

18. The method of claim 17 further comprising storing the first hash value in a seventh box located in the second track box.

19. A method of processing metadata in a file having a first portion and a second portion, wherein the first portion consists of metadata and the second portion is comprised of data that is other than metadata, the method comprising:

selecting a first set of metadata adapted for storage in a first location in the file, wherein the first set of metadata is other than a hash value;

creating a digital signature as a function of at least the first set of metadata and as a function of other than the data in the second portion; and

storing the digital signature in a second location in the file.

20. The method of claim 19 wherein the file comprises a media file, wherein the second portion is comprised of media data, and wherein the first portion includes the first set of metadata.

21. The method of claim 20 wherein the media file comprises a MPEG file.

22. The method of claim 21 wherein the media file comprises a MPEG file and wherein the first location is one of a movie-level user data box and a track-level user data box, and wherein the second location is another box contained within a movie box.

23. The method of claim 19 further comprising selecting a second set of metadata adapted for storage in a third location in the file, wherein the second set of metadata is other than a hash value, and wherein creating the digital signature as a function of at least the first set of metadata includes creating the digital signature as a function of at least the first and second sets of metadata.

24. A data structure comprising:

a first portion and a second portion, wherein the first portion consists of metadata and the second portion is comprised of data that is other than metadata;

a first set of metadata stored in a first location in the first portion; and

a hash value stored in a second location in the first portion, wherein the hash value is a function of the first set of metadata and a function of other than the data in the second portion.

25. The data structure of claim 24 further comprising a digital signature stored in a third location in the first portion, wherein the digital signature is a function of at least the hash value.

26. The data structure of claim 24 wherein the data structure comprises a media file, and wherein the second portion is comprised of media data.

27. The data structure of claim 26 wherein the media file comprises a MPEG file.

28. The data structure of claim 26 wherein the media file comprises a MPEG file having a movie box, and wherein the first location is one of a movie-level user data box and a track-level user data box, and wherein the second location is another box contained within the movie box.

29. The data structure of claim 24 further comprising:

a second set of metadata stored in a third location in the first portion,

wherein the hash value is a function of the first and second sets of metadata.

30. The data structure of claim 29 further comprising a digital signature stored in a fourth location in the first portion, wherein the digital signature is a function of at least the hash value.

31. The data structure of claim 29 further comprising:

a third set of metadata stored in a fourth location in the first portion;

a set of encrypted data stored in the second portion, wherein the set of encrypted data is other than encrypted metadata, and wherein the third set of metadata is adapted for use in decrypting the set of encrypted data; and

a digital signature stored in a fifth location in the first portion, wherein the digital signature is a function of at least the hash value and the third set of metadata.

32. An article of manufacture for use in processing metadata in a file and for use by a device having a processing unit, wherein the file has a first portion and a second portion, and wherein the first portion consists of metadata and the second portion is comprised of data that is other than metadata, said article of manufacture comprising:

at least one computer usable media including at least one computer program embedded therein, the at least one computer program being adapted to cause the device to perform;

selecting a first set of metadata adapted for storage in a first location in the file;

creating a hash value as a function of the first set of metadata and as a function of other than the data in the second portion; and

storing the hash value in a second location in the file.

33. A system for processing metadata in a file having a first portion and a second portion, wherein the first portion consists of metadata and the second portion is comprised of data that is other than metadata, the system comprising:

a device having a processing unit capable of executing software routines; and

programming logic executed by the processing unit, wherein the programming logic comprises;

means for selecting a first set of metadata adapted for storage in a first location in the file;

means for creating a hash value as a function of the first set of metadata and as a function of other than the data in the second portion; and

means for storing the hash value in a second location in the file.

34. The system of claim 33 further comprising means for creating a digital signature as a function of at least the hash value.

35. The system of claim 33 wherein the file comprises a media file, wherein the second portion is comprised of media data portion, and wherein the first portion includes the first set of metadata.

36. The system of claim 35 wherein the media file comprises a MPEG file.

37. The system of claim 35 wherein the media file comprises a MPEG file having a movie box and wherein the first location is one of a movie-level user data box and a track-level user data box, and wherein the second location is another box contained within the movie box.

38. The system of claim 33 further comprising means for selecting a second set of metadata adapted for storage in a third location in the file, wherein the means for creating the hash value as a function of the first set of metadata includes means for creating the hash value as a function of the first and second sets of metadata.

39. The system of claim 38 further comprising means for creating a digital signature as a function of at least the hash value.

40. The system of claim 38 further comprising:

means for selecting a third set of metadata adapted for storage in a fourth location in the file and for use in decrypting a set of encrypted data, wherein the set of encrypted data is other than encrypted metadata and is adapted for storage in the second portion; and

means for creating a digital signature as a function of at least the hash value and the third set of metadata.