IPTV transport architecture with double layer encryption and bulk decryption

• US 20080069350A1
• Filed: 10/05/2006
• Published: 03/20/2008
• Est. Priority Date: 08/28/2006
• Status: Abandoned Application

• Current Assignee: SES AMERICOM, Inc. (SES SA)
• Original Assignee: SES AMERICOM, Inc. (SES SA)
• Inventors: Osman, Steven, Berman, William, Reinoso, Ramiro
• Application Number:
  US11/544,394
• Publication Number:
  US 20080069350A1
• Time in Patent Office: Days
• US Class Current: 380/200
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/23473 by pre-encrypting
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25883 being end-user demographical data, e.g. age, family status or address arrangements for identifying locations of users in broadcast systems H04H60/52
• CPC Class Codes: H04N 21/25891 being end-user preferences retrieval of video data in a video database based on user preferences G06F16/739; arrangements for recognizing users' preferences H04H60/46; user profiles in network data switching protocols H04L67/306; processing of user preferences or user profiles in wireless networks H04W8/18
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/6175 involving transmission via Internet broadcast-related systems characterised by the transmission system being the Internet H04H60/82
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

IPTV-based systems offer acquisition and distribution of content from numerous channels with protected end-to-end conditional access. In adopting IPTV-based systems for seamless transport of the content to their subscribers'"'"' set-top boxes, service providers would need a transport architecture that accommodates their existing infrastructure. In the spectrum of service providers some have no physical infrastructure at all and some have the entire suite of infrastructure and services. Therefore, the present invention provides a new transport architecture that can accommodate the spectrum of service providers, including tier-1, tier-2 and tier-3 service providers. For this purpose, the transport architecture includes double-layer encryption and bulk decryption.

Claims

1. An IPTV-based (Internet protocol television-based) system, comprising:

a receiver of content;

a transmitter for sending the content in double-layer-encrypted form to at least one of high-tier and low-tier service provider networks;

an inner layer encryption engine operative to perform inner-layer encryption of received content; and

an outer layer encryption engine operative to perform outer layer encryption of inner-layer-encrypted content in order to produce double-layer-encrypted content so that decryption thereof would yield the inner-layer-encrypted content for acquisition by one of the low-tier service provider networks, wherein bulk decryption of the yielded inner-layer-encrypted content would expose the content for acquisition by one of the high-tier service provider networks.

2. An IPTV-based system as in claim 1, wherein the high-tier service provider network includes a secure handoff for passing the exposed content which is unencrypted.

3. An IPTV-based system as in claim 1, wherein the low-tier service provider network is operative to carry therethrough the inner-layer-encrypted content so that the content remains protected.

4. An IPTV-based system as in claim 1, further comprising TV (television) sets and associated set-top boxes with encryption engines for exposing the content and relaying it to their associated TV sets.

5. An IPTV-based system as in claim 1, wherein the content includes video, audio, audiovisual or multimedia.

6. An IPTV-based system as in claim 1, further comprising a transmission medium for relaying the content from the transmitter, the transmission medium being one or more wireless antennas, fiber optic cables, or satellites and associated satellite antennas, or a combination thereof.

7. An IPTV-based system as in claim 1, further comprising an encapsulation engine, wherein IP streams, each representing a video channel, are encapsulated either on individual MPEG-2 transport streams with their own PID, or are grouped and then encapsulated as a group of channels onto MPEG-2 transport streams with each group having its own PID.

8. An IPTV-based system as in claim 7, wherein the encapsulation engine is further operative to insert an outer header comprising MPE and MPEG-2 TS fields before an IP packet'"'"'s original header such that decapsulation would expose the original header with its original IP address.

9. An IPTV-based system as in claim 1, wherein each of the encryptions to be performed in the inner layer encryption engine and outer layer encryption engine uses its own separate encryption key.

10. An IPTV-based system as in claim 1, further comprising providers of the content.

13. An IPTV-based system as in claim 1, wherein the low-tier service provider network is operative to carry therethrough the inner-layer-encrypted content so that the content remains protected.

11. An IPTV-based (Internet protocol television-based) system, comprising:

a receiver of double-layer encrypted content which is content that has undergone inner-layer encryption and outer-layer encryption;

at least one of high-tier and low-tier service provider networks;

an outer layer decryption engine operative to perform outer layer decryption of the received double-layer-encrypted content to yield inner-layer-encrypted content for acquisition by one of the low-tier service provider networks; and

an inner layer decryption engine operative to perform bulk inner-layer decryption of the yielded inner-layer-encrypted content in order to expose the content for acquisition by one of the high-tier service provider networks.

12. An IPTV-based system as in claim 11, wherein the high-tier service provider network includes a secure handoff for passing the exposed content to a high tier service provider encryption and conditional access system.

14. An IPTV-based system as in claim 11, further comprising TV (television) sets and associated set-top boxes with encryption engines for exposing the content from the inner-layer-encrypted content and relaying it to their associated TV sets.

15. An IPTV-based system as in claim 11, wherein the content includes video, audio, audiovisual or multimedia.

16. An IPTV-based system as in claim 11, further comprising a transmitter and transmission medium for relaying the double-layer-encrypted content from the transmitter, the transmission medium being one or more wireless antennas, fiber optic cables, or satellites and associated satellite antennas, or a combination thereof.

17. An IPTV-based system as in claim 11, further comprising decapsulation engine operative for decapsulating the yielded inner-layer-encrypted content to unbundled it into separate IP streams associated with individual channels.

18. An IPTV-based system as in claim 17, wherein the decapsulation engine is further operative to remove from the yielded inner-layer-encrypted content an outer MPE and MPEG-2 TS header and expose an original header with its original IP address.

19. An IPTV-based system as in claim 11, wherein each of the inner and outer layer encryptions uses its own separate encryption key.

20. An IPTV-based system as in claim 11, further comprising content providers in communication link with the transmitter.

21. A method for distributing content in an IPTV-based system, comprising:

receiving content;

performing inner-layer encryption of the received content;

producing a double-layer-encrypted content by performing outer-layer encryption of the inner-layer-encrypted content; and

sending the double-layer-encrypted content for acquisition by one or more of high tier and low tier service provider networks.

22. A method as in claim 21, further comprising decrypting the double-layer-encrypted content by performing outer layer decryption to yield the inner-layer encrypted content, wherein the low tier service provider networks carry the yielded inner-layer-encrypted content.

24. A method as in claim 21, further comprising encapsulating individual or a group of inner-layer-encrypted content in MPEG-2 TS packets.

25. A method as in claim 24, wherein the encapsulation further includes inserting an outer MPE and MPEG-2 TS header in each packet before an IP packet'"'"'s original IP address header so that decapsulation would expose the original IP address header.

23. A method as in claim 23, further comprising decrypting the yielded inner-layer-encrypted content by performing inner layer decryption to expose the content, the exposed content being securely handed off to a high tier service provider'"'"'s controlled access system for re-encryption before being passed on to the high tier service provider network.