Video slice and active region based multiple partial encryption

• US 7,376,233 B2
• Filed: 10/18/2002
• Issued: 05/20/2008
• Est. Priority Date: 01/02/2002
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Pedlow, JR., Leo M., Candelore, Brant L., Derovanessian, Henry
• Primary Examiner(s): Truong, Thanhnga
• Assistant Examiner(s): KLIMACH, PAULA W
• Application Number:
  US10/273,905
• Publication Number:
  US 20030159139A1
• Time in Patent Office: 2,041 Days
• Field of Search: 713/176, 713/165, 713/189, 380/37, 380/54, 380/217, 380/28
• US Class Current: 380/217
• CPC Class Codes: H04N 21/23476 by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/23608 Remultiplexing multiplex streams, e.g. involving modifying time stamps or remapping the packet identifiers
• CPC Class Codes: H04N 21/2362 Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2365 Multiplexing of several video streams
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4344 Remultiplexing of multiplex streams, e.g. by modifying time stamps or remapping the packet identifiers
• CPC Class Codes: H04N 21/4345 Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/4347 Demultiplexing of several video streams
• CPC Class Codes: H04N 21/43607 Interfacing a plurality of external cards, e.g. through a DVB Common Interface [DVB-CI]
• CPC Class Codes: H04N 21/44055 by partially decrypting, e.g. decrypting a video stream that has been partially encrypted
• CPC Class Codes: H04N 21/4516 involving client characteristics, e.g. Set-Top-Box type, software version or amount of memory available
• CPC Class Codes: H04N 21/454 Content or additional data filtering, e.g. blocking advertisements
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A selective encryption encoder and method of dual selective encryption. The selective encryption encoder has a packet identifier that identifies packets of at least one specified packet type, the at least one specified packet type being any of a plurality of packet types including packets containing a video slice headers or packets carrying data appearing in an active area of the image. A packet duplicator duplicates the identified packets to produce first and second sets of the identified packets. The packets are sent to and from a primary encryption encoder to encrypt the first set of identified packets under a first encryption method. A secondary encrypter encrypts the second set of identified packets under a second encryption method.

Claims

1. A method of partially multiple encrypting a digital video signal, comprising:

examining unencrypted packets of data in the digital video signal to identify at least one specified packet type, the at least one specified packet type comprising at least one of packets having an_intra slice_flag indicator set, packets having an intra slice_indicator set and packets containing an intra_coded macroblock;

encrypting packets identified as being of the specified packet type using a first encryption method to produce first encrypted packets;

encrypting the packets identified as being of the specified packet type using a second encryption method to produce second encrypted packets;

replacing the unencrypted packets of the specified packet type with both the first encrypted packets and the second encrypted packets in the digital video signal to produce a partially multiple encrypted video signal; and

transmitting the partially multiple encrypted video signal.

2. The method according to claim 1, wherein the at least one specitied packet type further comprises packets containing a video slice header appearing in an active region of a video frame.

3. The method according to claim 1, wherein the at least one specified packet type further comprises any packet carrying data describing an active region of a video frame.

4. The method according to claim 1, wherein the at least one specified packet type further comprises I Frame packets.

5. The method according to claim 4, wherein the at least one specified packet type further comprises packets containing motion vectors in a first P frame following an I Frame.

6. The method according to claim 1, wherein the at least one specified packet type further comprises packets that carry data for a slice containing an intra_coded macroblock.

7. The method according to claim 1, wherein the at least one specified packet type further comprises packets that carry data for a slice containing multiple intra_coded macroblocks.

8. The method according to claim 1, wherein the at least one specified packet type further comprises packets containing data from a first macroblock following the video slice header.

9. The method according to claim 1, wherein the at least one specified packet type further comprises packets containing anchor data.

10. The method according to claim 9, wherein the video signal is progressively refreshed and wherein at least one specified packet type further comprises P Frame packets.

11. A computer readable medium storing instructions which, when executed on a programmed processor, carry out the method of encrypting a digital video signal according to claim 1.

12. The computer readable medium of claim 11, wherein the medium comprises an electronic storage medium.

13. A method of partially multiple encrypting a digital video signal, comprising:

examining unencrypted packets of data in the digital video signal to identify at least one specified packet type, the at least one specified packet type comprising at least one of packets having an_intra_slice flag indicator set, packets having an intra_slice indicator set and packets containing an intra_coded macroblock;

encrypting packets identified as being of the specified packet type using a first encryption method to produce first encrypted packets;

encrypting the packets identified as being of the specified packet type using a second encryption method to produce second encrypted packets;

replacing the unencrypted packets of the specified packet type with both the first encrypted packets and the second encrypted packets in the digital video signal to produce a partially multiple encrypted video signal; and

transmitting the partially multiple encrypted video signal.

14. The method according to claim 13, wherein the at least one specified packet type further comprises packets containing a video slice header appearing in an active region of a video frame.

15. The method according to claim 13, wherein the at least one specified packet type further comprises packets containing a video slice header.

16. The method according to claim 13, wherein the at least one specified packet type further comprises I Frame packets.

17. The method according to claim 16, wherein the at least one specified packet type further comprises packets containing motion vectors in a first P frame following an I Frame.

18. The method according to claim 13, wherein the at least one specified packet type further comprises packets that carry data for a slice containing an intra_coded macroblock.

19. The method according to claim 13, wherein the at least one specified packet type further comprises packets that carry data for a slice containing multiple intra_coded macroblocks.

20. The method according to claim 13, wherein the at least one specified packet type further comprises packets containing data from a first macroblock following the video slice header.

21. The method according to claim 13, wherein the at least one specified packet type further comprises packets containing anchor data.

22. The method according to claim 13, wherein the video signal comprises progressively refreshed video data and wherein at least one specified packet type further comprises P Frame packets.

23. A computer readable medium storing instructions which, when executed on a programmed processor, carry out the method of encrypting a digital video signal according to claim 13.

24. The computer readable medium of claim 23, wherein the medium comprises an electronic storage medium.

25. A method of partially multiple encrypting a digital video signal, comprising:

examining unencrypted packets of data in the digital video signal to identify at least one specified packet type;

encrypting packets identified as being of the specified packet type using a first encryption method to produce first encrypted packets;

encrypting the packets identified as being of the specified packet type using a second encryption method to produce second encrypted packets;

replacing the unencrypted packets of the specified packet type with the first encrypted packets and the second encrypted packets in the digital video signal to produce a partially multiple encrypted video signal;

wherein, the at least one selected packet type comprises at least one of the following;

packets containing a video slice header appearing in an active region of a video frame, any packet carrying data representing an active region of a video frame, packets having an intra_slice_flag indicator set, packets having an intra_slice indicator set, packets containing an intra_coded macroblock, packets that carry data for a slice containing an intra_coded macroblock, packets containing data from a first macroblock following the video slice header,packets containing video slice headers, and packets containing anchor data; and

transmitting the partially multiple encrypted video signal.

26. The method according to claim 25, further comprising selecting the at least one selected packet type in a control processor.

27. The method according to claim 26, wherein the selecting is carried out to satisfy constraints on an amount of bandwidth available and a selected level of security.

28. A computer readable medium storing instructions which, when executed on a programmed processor, carry out the method of encrypting a digital video signal according to claim 25.

29. The computer readable medium of claim 28, wherein the medium comprises an electronic storage medium.

30. A selective encryption encoder, comprising:

a packet identifier that identifies packets of at least one specified packet type;

a packet duplicator that duplicates the identified packets to produce first and second sets of the identified packets;

means for sending and receiving packets to and from a primary encryption encoder to encrypt the first set of identified packets under a first encryption method;

a secondary encrypter for encrypting the second set of identified packets under a second encryption method; and

wherein the packet identifier identifies packets of at least one of the following specified types;

packets containing a video slice header appearing in an active region of a video frame, any packet carrying data representing an active region of a video frame, packets having an intra_slice_flag indicator set, packets having an intra_slice indicator set, packets containing an intra_coded macroblock that carry data for a slice containing an intra_coded macroblock, packets containing data from a first macroblock following the video slice header,packets containing video slice headers, and packets containing anchor data.

31. The selective encryption encoder according to claim 30, further comprising a control processor that selects the at least one selected packet type.

32. The selective encryption encoder according to claim 31, wherein the selecting is carried out to satisfy constraints on an amount of bandwidth available and a selected level of security.

33. A selective encryption encoder, comprising:

a packet identifier that identifies packets of at least one specified packet type, the at least one specified packet type comprising a packet carrying data representing at least one of rackets having an intra_slice_flag indicator set rackets having an intra slice_indicator set and packets containing an intra coded macroblock;

a packet duplicator that duplicates the identified packets to produce first and second sets of the identified packets;

means for sending and receiving packets to and from a primary encryption encoder to encrypt the first set of identified packets under a first encryption method;

a secondary encrypter for encrypting the second set of identified packets under a second encryption method.

34. The selective encryption encoder according to claim 33, wherein the at least one specified packet type further comprises packets containing a video slice header appearing in an active region of a video frame.

35. The selective encryption encoder according to claim 33, wherein the at least one specified packet type further comprises packets containing a video slice header.

36. The selective encryption encoder according to claim 33, wherein the at least one specified packet type further comprises I Frame packets.

37. The selective encryption encoder according to claim 36, wherein the at least one specified packet type further comprises packets containing motion vectors in a first P frame following an I Frame.

38. The selective encryption encoder according to claim 33, wherein the at least one specified packet type further comprises packets that carry data for a slice containing an intra_coded macroblock.

39. The selective encryption encoder according to claim 33, wherein the at least one specified packet type further comprises packets that carry data for a slice containing multiple intra_coded macroblocks.

40. The selective encryption encoder according to claim 33, wherein the at least one specified packet type further comprises packets containing data from a first macroblock following the video slice header.

41. The selective encryption encoder according to claim 33, wherein the at least one specified packet type further comprises packets containing anchor data.

42. The selective encryption encoder according to claim 33, wherein at least one specified packet type comprises P Frame packets of progressively refreshed video data.

43. A selective encryption encoder, comprising:

a packet identifier that identifies packets of at least one specified packet type, the at least one specified packet type comprising at least one of packets having an intra_slice_flag indicator set, packets having an intra_slice indicator set and packets containing an intra_coded macroblock;

a packet duplicator that duplicates the identified packets to produce first and second sets of the identified packets;

means for sending and receiving packets to and from a primary encryption encoder to encrypt the first set of identified packets under a first encryption method;

a secondary encrypter for encrypting the second set of identified packets under a second encryption method.

44. The selective encryption encoder according to claim 43, wherein the at least one specified packet type further comprises packets containing a video slice header appearing in an active region of a video frame.

45. The selective encryption encoder according to claim 43, wherein the at least one specified packet type further comprises any packet carrying data representing an active region of a video frame.

46. The selective encryption encoder according to claim 43, wherein the at least one specified packet type further comprises I Frame packets.

47. The selective encryption encoder according to claim 43, wherein the at least one specified packet type further comprises packets containing motion vectors in a first P frame following an I Frame.

48. The selective encryption encoder according to claim 43, wherein the at least one specified packet type further comprises packets that carry data for a slice containing an intra_coded macroblock.

49. The selective encryption encoder according to claim 43, wherein the at least one specified packet type further comprises packets that carry data for a slice containing multiple intra_coded macroblocks.

50. The selective encryption encoder according to claim 43, wherein the at least one specified packet type further comprises packets containing data from a first macroblock following the video slice header.

51. The selective encryption encoder according to claim 43, wherein the at least one specified packet type further comprises packets containing anchor data.

52. The selective encryption encoder according to claim 43, wherein at least one specified packet type further comprises P Frame packets of progressively refreshed video data.

53. A television set-top box, comprising:

a receiver receiving a digital television signal comprising;

a plurality of unencrypted packets; and

a plurality of duplicate sets of encrypted packets, wherein the duplicate sets of encrypted packets are of at least one selected packet type and the at least one selected packet type comprises at least one of the following;

packets containing a video slice header appearing in an active region of a video frame, any packet carrying data describing an active region of a video frame, I Frame packets, packets containing motion vectors in a first P frame following an I Frame, packets having an intra_slice_flag indicator set, packets having an intra_slice indicator set, packets containing an intra_coded macroblock, packets that carry data for a slice containing an intra_coded macroblock, packets containing data from a first macroblock following the video slice header,packets containing video slice headers, packets containing anchor data, and P Frame packets for progressively refreshed video data;

wherein each of the duplicate sets of packets is encrypted using a different encryption method;

a decrypter that decrypts one set of the plurality of duplicate sets of encrypted packets to produce decrypted packets; and

a decoder that decodes the unencrypted packets and the decrypted packets to produce a signal suitable for play on a television set.

54. A television set-top box, comprising:

a receiver receiving a digital television signal comprising;

a plurality of unencrypted packets; and

a plurality of duplicate sets of encrypted packets, wherein certain of the duplicate sets of encrypted packets carry data describing an active region of a video frame;

wherein each of the duplicate sets of packets is encrypted using a different encryption method;

a decrypter that decrypts one set of the plurality of duplicate sets of the encrypted packets to produce decrypted packets; and

a decoder that decodes the unencrypted packets and the decrypted packets to produce a signal. suitable for play on a television set.