Methods and apparatus for protecting information content

• US 7,362,861 B2
• Filed: 05/26/2004
• Issued: 04/22/2008
• Est. Priority Date: 10/20/1999
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: England, Paul, Yuval, Gideon A., Yacobi, Yacov
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): Hoffman; Brandon S
• Application Number:
  US10/854,967
• Publication Number:
  US 20040218759A1
• Time in Patent Office: 1,427 Days
• Field of Search: None
• US Class Current: 380/213
• CPC Class Codes: H04N 21/4122 additional display device, e.g. video projector digital output for controlling a plurality of local displays G06F3/1423
• CPC Class Codes: H04N 21/43632 involving a wired protocol, e.g. IEEE 1394 high-speed IEEE 1394 serial bus H04L12/40052
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4402 involving reformatting operations of video signals for household redistribution, storage or real-time display details of conversion of video standards at pixel level H04N7/01; video transcoding H04N19/40; adapting incoming signals to the display format of the display terminal G09G5/005; media handling at the source in data packet switching networks H04L65/764
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 7/1696 by changing or reversing the order of active picture signal portions

Abstract

Methods and apparatus for protecting copyrighted information, e.g., video signals, from unauthorized copying. Analog red (R), green (G) and blue (B) video signals are transmitted from a source device, e.g., a display adapter, to a display device, e.g., a monitor, over corresponding analog signal lines after the identify of the destination device is confirmed by receipt of a certificate assigned to the destination device. A session key, used for encrypting the analog signals, is generated and exchanged between the source and destination devices after the identification of the destination device is confirmed. The source and destination devices each includes a pseudo-random number generator driven by the session key. The lines that carry the R, G and B video signals are changed, e.g., swapped, on a periodic basis as a function of the output of the pseudo-random number generator in the source device. The destination device, which has an input to its pseudo-random number generator synchronized with the random number generator of the source device, decrypts the received video signals in a complimentary fashion to the encryption. Encrypted digital information subject to copying constraints may be supplied to a display adapter via an IEEE 1394 compliant bus.

Claims

1. A method of processing first, second and third signals for use in a system having first, second, and third signal lines, comprising:

operating a source device to communicate with a destination device so as to establish a session key;

generating pseudo-random output values based on the session key, using a pseudo-random number generator of the source device,

changing, as a function of at least one of said pseudo-random output values, which ones of the first, second, and third signal lines are used to transmit the first, second and third signals, wherein the first, second, and third signals correspond to color signals representing an image and the first, second, and third signal lines couple the source device to the destination device;

as a function of said at least one pseudo-random output value, modifying at least one of the first, second or third signals prior to transmission of said at least one signal over one of said first, second, and third signal lines, the changing including performing a matrix multiplication operation on the first, second, and third signals utilizing matrix coefficients generated from a plurality of the pseudo-random output values; and

utilizing a different session key for each signal line for an image that is transmitted;

wherein session key information is transmitted to the destination device during a video blanking period.

2. One or more computer-readable media containing computer executable instructions which when executed cause a computing device to perform the method recited in claim 1.

3. The method of claim 1, wherein the destination device includes an additional pseudo-random number generator, the method further comprising:

operating the destination device to perform, as a function of an output of the additional pseudo-random number generator, the inverse of the changing and modifying steps performed by the source device to restore the first, second and third signals to their original condition so as to yield restored first, second and third signals.

4. The method of claim 3, wherein the first, second and third signals are analog red, green and blue color video signals, respectively, the source device is a computer system display adapter, and the destination device is a computer monitor;

the method further comprising;

displaying, on a display screen included in the destination device, an image represented by restored first, second and third color video signals.

5. The method of claim 1, wherein the method further comprises, prior to establishing a session key:

operating the source device to request identification in information from the destination device; and

if the identification information is received from the display device, determining from the identification information, if the destination device is an encryption capable device.

6. The method of claim 5, further comprising:

if no identification information is received in a preselected period of time after requesting identification information, restricting the output of the source device over the first, second and third lines to unencrypted video signals which are not subject to restrictions prohibiting their transmission in unencrypted form over analog transmission lines, the unencrypted video signals being fourth, fifth and sixth video signals.

7. The method of claim 6, wherein the source device is a display adapter, the method further comprising:

storing session keys used to encrypt video data on the display adapter; and

limiting export of video data subject to copy constraints to video data that is in encrypted form.

8. The method of claim 7, further comprising:

interfacing with electronics devices through a 1394 interface.

9. The method of claim 5, wherein the identification information received from the destination device includes a digital certificate confirming identify of the destination device if the destination device is an encryption capable device;

and wherein determining if the destination device is an encryption capable device includes the act of checking the received identification information to determine if said received identification information includes said digital certificate.

10. A method of generating encrypted analog first, second and third signals (R′

, G′

, B′

, respectively) from first, second, and third analog input signals (R, G, B, respectively) the method comprising;

seudo-randomly generating at least one of a plurality of matrix coefficients, a₁, a₂, a₃, b₁, b₂, b₃, c₁, c₂, c₃;

using an encryption circuit to perform a matrix multiplication operation to generate the encrypted analog first, second, and third signals, according to the following equations;

R′

=a₁R+b₁G+c₁B

G′

=a₂R+b₂G+c₂B

B′

=a₃R+b₃G+c₃B

wherein the matrix coefficients are generated such that each of the R′

, G′ and

B′

signals will be the product of summing two signals in the set of analog signals R, G, B and subtraction one of the signals in the set of analog signals R, G, B.

11. The method of claim 10, wherein the matrix coefficients are generated such that the set of matrix coefficients a₁, b₁, c₁ include two values which are the same and one value that is different.

12. The method of claim 11, wherein the matrix coefficients are further generated such that:

the set of matrix coefficients, a₂, b₂, c₂ include two values which are the same and one value that is different; and

the set of matrix coefficient a₃, b₃, c₃ include two values which are the same and one value that is different.

13. The method of claim 12, wherein the matrix coefficients are further generated such that:

the set of matrix coefficients a₁, a₂, a₃ include two values which are the same and one value the is different;

the set of matrix coefficients b₁, b₂, b₃ include two values which are the same and one value that is different; and

the set of matrix coefficients c₁, c₂, c₃ include two values which are the same and one value that is different.

14. One or more computer-readable media containing computer executable instructions which when executed cause a computing device to perform the method recited in claim 10.

15. The method of claim 11, wherein the two values which are the same are positive values and the value which is different is a negative value.

16. The method of claim 15, wherein the matrix coefficients correspond to a 3×

3 array of matrix coefficients, each row of coefficients including two coefficients of the same value and one coefficient of a different value.

17. The method of claim 16, wherein the two coefficients of the same value are positive valued coefficients and the one coefficient of a different value is a negative value coefficient.

18. The method of claim 10, wherein the matrix multiplication operation includes the acts of:

performing analog multiplication operations to multiply the R, G, and B signals by the coefficients a₁, b₁, c₁, respectively.

19. The method of claim 10, wherein the first, second and third signals correspond to red, green and blue video signals, respectively.

20. The method of claim 19 performed by a source device and further comprising:

communication with a destination device to establish a content encryption key to be used as an input to the pseudo-random number generator.

21. The method of claim 20, further comprising:

using a different content encryption key when encrypting portions of the first, second and third video signals which correspond to different lines of an image.

22. A communication method comprising the steps of:

using a pseudo-random number generator to generate output values; and

modifying first, second and third signals, by performing a matrix multiplication operation thereon utilizing matrix coefficients which are a function of at least one of the pseudo-random output values, the modified first, second, and third signals being encrypted analog signals so as to define first, second and third encrypted analog signals; and

transmitting the first, second and third encrypted analog signals to a destination device;

wherein said matrix multiplication involves summing an integer multiple of two of the first, second and third signals and subtracting an integer multiple of another one of said first second and third signals to produce the first encrypted analog signal.

23. The method of claim 22, wherein the matrix multiplication operation includes the act of:

performing a plurality of analog signal multiplication operations.

24. The method of claim 23, wherein the matrix multiplication operation includes the act of:

performing a plurality of analog signal addition operations.

25. One or more computer-readable media containing computer executable instructions which when executed cause a computing device to perform the method recited in claim 22.

26. The method of claim 22, further comprising:

establishing an encryption key with the destination device; and

using the encryption key as an input to the pseudo-random number generator, said one pseudo-random output value being generated as a function of the encryption key.

27. The method of claim 26, further comprising:

operating the destination device to decrypt the first, second and third encrypted analog signals utilizing the encryption key.

28. The method of claim 27, wherein operating the destination device to decrypt the first, second and third encrypted analog signals comprises the act of performing a matrix multiplication operation on the first, second and third encrypted analog signals utilizing matrix coefficients generated from said at least one pseudo-random output value.

29. The method of claim 28, wherein the source device is a display adapter, the destination device is a display device, and the first, second and third signals are red, green and blue video signals, respectively.

30. A computer readable medium comprising:

computer executable instructions for controlling a computer device to perform the steps of;

operating a pseudo-random number generator to generate a pseudo-random output value; and

modifying first, second and third signals, by performing a matrix multiplication operation thereon utilizing matrix coefficients at least one of which is a function of the pseudo-random number output value so as to define first, second and third encrypted analog signals; and

transmitting the first, second and third encrypted analog signals to a destination device.

31. A device, comprising:

a video signal encryption circuit for encrypting, in response to a pseudo-random number, red green and blue video signals and for producing first, second and third analog encrypted video signals, wherein the video signal encryption circuit comprises a matrix multiplier for performing a matrix multiplication operation on the red, green and blue video signals;

a pseudo-random number generator circuit, coupled to the video signal encryption circuit for producing the pseudo-random number value;

an input/output interface for outputting the first, second and third encrypted analog video signals.

32. The device of claim 31, further comprising means for communicating with a destination device for establishing a session key to be used for encrypting and decrypting the red, green and blue analog encrypted video signals.

33. The device of claim 31, further comprising,

video processor circuitry for processing received video signals;

an additional input/output interface for coupling the video processor to a system bus and a IEEE 1394 compliant bus; and

a content cipher subsystem for encrypting and decrypting information communicated over the IEEE 1394 compliant bus.

34. The device of claim 31, further comprising:

a physically secure non-volatile memory device for storing encryption keys; and

means for limiting export from the device of video data, subject to copy restrictions, received in encrypted form over a IEEE 1394 bus to video data that is in an encrypted form.

35. One or more computer-readable media containing computer executable instructions which when executed cause a computing device to perform the method recited in claim 31.

36. A method of decrypting encrypted analog signals including the steps of:

generating a first decrypted analog signal from a first pair of encrypted analog signals by;

summing the two encrypted analog signals in the first pair of analog signals to produce a first sum;

dividing the first sum by a first value to produce a first decrypted analog signal; and

generating a second decrypted analog signal from a second pair of encrypted analog signals by;

summing the two encrypted analog signals in the second pair of analog signals to produce a second sum; and

dividing the second sum by a second value to produce a second decrypted analog signal;

generating a third decrypted analog signal from a third pair of encrypted analog signals by;

summing the two encrypted analog signals in the third pair of analog signals to produce a third sum; and

dividing the third sum by a third value to produce a third decrypted analog signal

comparing values in first and second rows of values to identify a first column in which the first and second rows of values include the same value, wherein the first and second rows of values are first and second rows of values included in a permutation matrix used to encrypt the analog signals included in the first pair of signals;

comparing values in second and third rows of values to identify a second column in which the second and third rows of values include the same value, the second column being different than said first column; and

controlling which one of a plurality of output lines the first decrypted analog signal is transmitted on as a function of the identified first column and which one of the plurality of output lines the second decrypted analog signal is transmitted on as a function of the identified second column, the first and second decrypted analog signals being transmitted on different output lines.

37. The method of claim 36, wherein the first, second and third values are the same.

38. The method of claim 37 wherein the first, second and third values are integer multiples of 2.

39. The method of claim 37, further comprising the step of:

periodically changing the value used for the first, second and third values as a function of the output of a pseudo-random number generator.

40. One or more computer-readable media containing computer executable instructions which when executed cause a computing device to perform the method recited in claim 36.

41. The method of claim 36, further comprising:

comparing values in a third row of values and said first row of values to identify a third column in which the third and first rows of values include the same value; and

controlling which one of a plurality of output lines the third decrypted analog signal is transmitted on as a function of the identified third column, the third decrypted analog signal being transmitted on a different output line from said first and second decrypted analog signals.

42. The method of claim 40, wherein the first and second rows of values are first and second rows of values included in a permutation matrix used to encrypt the analog signals included in the first pair of signals;

wherein the second and third rows of values are second and third rows of values included in said permutation matrix; and

wherein the third and first rows of values are third and first rows of values included in said permutation matrix.

43. The method of claim 36,

wherein the first, second and third decrypted analog signals are red, green and blue analog video signals;

and

wherein the plurality of output lines include red, green and blue output lines which are coupled to a display device.

44. A method of generating an encrypted analog signal from at least two of a first analog input signal, a second analog input signal, and a third analog input signal, the method comprising:

pseudo-randomly generating an encryption value, wherein said encryption value is a matrix coefficient and wherein said matrix multiplication operation is performed using analog multipliers;

multiplying a first one of said first, second, and third analog input signals with said encryption value to produce a multiplied signal; and

combining said multiplied signal with at least a second signal generated from a second one of said first, second and third analog input signals to produce said encrypted analog signal.

45. The method of claim 44, wherein both said multiplying and said combining are performed as part of a matrix multiplication operation.

46. One or more computer-readable media containing computer executable instructions which when executed cause a computing device to perform the method recited in claim 44.