System and method for security processing media streams

• US 7,620,179 B2
• Filed: 01/29/2004
• Issued: 11/17/2009
• Est. Priority Date: 01/29/2004
• Status: Active Grant

• Current Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Original Assignee: Comcast Cable Holdings LLC (Comcast Corporation)
• Inventors: Fahrny, James William, Compton, Charles
• Primary Examiner(s): Vu; Kim
• Assistant Examiner(s): GYORFI, THOMAS A
• Application Number:
  US10/767,980
• Publication Number:
  US 20050169468A1
• Time in Patent Office: 2,119 Days
• Field of Search: 380/210
• US Class Current: 380/210
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system for multi-stream security processing and distributing digital media streams includes a headend, a network, and at least one receiver. The headend is generally configured to generate encrypted digital media streams. The network may be coupled to the headend and configured to receive the encrypted digital media streams. The at least one receiver may be coupled to the network and configured to receive the encrypted digital media streams and present a decrypted version of the encrypted digital media streams. At least one of the headend and the at least one receiver include a security processor that may be configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams.

Claims

1. A system for multi-stream security processing and distributing digital media streams, the system comprising:

a headend configured to generate encrypted digital media streams and download software;

a network coupled to the headend and configured to receive the encrypted digital media streams and downloaded software; and

at least one receiver coupled to the network and configured to receive the encrypted digital media streams and downloaded software and to present a decrypted version of the encrypted digital media streams based on the downloaded software, wherein the receiver comprises a security processor configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams, the security processor operative to store the downloaded software and to securely configure, renew, and re-configure at least one of encryption and decryption by the security processor based on the downloaded software;

wherein the security processor comprises a plurality of digital stream encryption/decryption engines that are selectively parallel coupled by a controller for simultaneous operation in response to a predetermined security configuration;

wherein the security configuration comprises at least one of Data Encryption Standard (DES), Triple DES (3-DES), Advanced Encryption Standard (AES), and Common Scrambling Algorithm (CSA).

2. The system of claim 1 wherein the media streams are at least one of a video stream, and audio stream, and a video plus audio stream.

3. The system of claim 1 wherein the security configuration comprises at least one of a secure download, RSA key management, multiple security key management, authentication, copy protection, and digital signatures.

4. The system of claim 1 wherein the security processor further comprises at least one of a memory containing a hash, engine encryption/decryption configuration logic, a random number generator, a multiplier, and a memory containing a dynamic feedback arrangement scrambling technique (DFAST) algorithm coupled in parallel to the controller and configured to provide multiple key management for at least one of conditional access and digital rights management.

5. The system of claim 1 wherein the security processor further comprises at least one of a swappable random access memory (RAM) and a swappable flash memory containing the predetermined security configuration.

6. The system of claim 1 wherein the security processor provides role-based authentication that is used by an authorized user for at least one of configuration, reconfiguration, and renewal.

7. The system of claim 1, wherein the receiver is at least one of a set top box (STB), and a receiver or transceiver for at least one of digital televison, high definition digital television (HDTV), audio, MP3, text messaging, and game digital streams.

8. The system of claim 1, wherein the receiver is a set top box (STB) and the system further comprises an additional receiving device including the security processor, coupled to the STB and configured to receive and decrypt the encrypted digital media streams using the security processor.

9. A method of multi-stream security processing and distributing digital media streams, the method comprising:

generating encrypted digital media streams at a headend;

coupling a network to the headend and receiving the encrypted digital media streams at the network;

coupling a receiver to the network, the receiver receiving a software download from the network;

receiving the encrypted digital media streams at the receiver, and presenting a decrypted version of the encrypted digital media streams using the receiver;

re-configuring a security processor in the receiver based on the software download to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams; and

storing the software download in the security processor;

wherein the security processor comprises a plurality of digital stream encryption/decryption engines that are selectively coupled by a controller for simultaneous operation in response to a predetermined security configuration;

wherein the security configuration comprises at least one of Data Encryption Standard (DES), Triple DES (3-DES), Advanced Encryption Standard (AES), and Common Scrambling Algorithm (CSA).

10. The method of claim 9 wherein the media streams are at least one of a video stream, and audio stream, and a video plus audio stream.

11. The method of claim 9 wherein the security configuration comprises at least one of a secure download, RSA key management, multiple security key management, authentication, copy protection, and digital signatures.

12. The method of claim 9 wherein the security processor further comprises at least one of a memory containing a hash, engine encryption/decryption configuration logic, a random number generator, a multiplier, and a memory containing a dynamic feedback arrangement scrambling technique (DFAST) algorithm coupled to the controller and configured to provide multiple key management for at least one of conditional access and digital rights management.

13. The method of claim 9 wherein the security processor further comprises at least one of a swappable random access memory (RAM) and a swappable flash memory containing the predetermined security configuration.

14. The method of claim 9 further comprising:

presenting the encrypted digital media streams from the receiver; and

coupling an additional receiving device including the security processor to the receiver and receiving and decrypting the encrypted digital media streams at the receiving device using the security processor.

15. The method of claim 9 wherein the security processor provides role-based authentication that is used by an authorized user for at least one of configuration, reconfiguration, and renewal.

16. For use in a system for multi-stream security processing and distributing digital media streams, a security processor configured to provide at least one of simultaneous multiple media stream decryption and encryption processing, the security processor comprising:

a controller operative to be programmed through authenticated firmware downloads from a headend, each firmware download operative to modify media stream processing by the security processor;

a memory for storing the downloaded firmware; and

a plurality of digital stream encryption/decryption engines that are selectively coupled by the controller for simultaneous operation in response to a predetermined security configuration downloaded to the controller;

wherein the security configuration comprises at least one of Data Encryption Standard (DES), Triple DES (3-DES), Advanced Encryption Standard (AES), and Common Scrambling Algorithm (CSA).

17. The security processor of claim 16 wherein the media streams are at least one of a video stream, and audio stream, and a video plus audio stream.

18. The security processor of claim 16 wherein the security configuration comprises at least one of a secure download, RSA key management, multiple security key management, authentication, copy protection, and digital signatures.

19. The security processor of claim 16 wherein the security processor further comprises at least one of a memory containing a hash, engine encryption/decryption configuration logic, a random number generator, a multiplier, and a memory containing a dynamic feedback arrangement scrambling technique (DFAST) algorithm coupled to the controller and configured to provide multiple key management for at least one of conditional access and digital rights management.

20. The security processor of claim 16 wherein the security processor further comprises at least one of a swappable random access memory (RAM) and a swappable flash memory containing the predetermined security configuration.

21. The security processor of claim 16 wherein the system for multi-stream security processing and distributing digital media streams comprises a headend, a network electrically coupled to the headend, a set top box (STB) coupled to the network, and a receiver coupled to the STB, and the security processor is implemented in connection with at least one of the headend, the network, the STB, and the receiver.

22. The security processor of claim 16 wherein the security processor provides role-based authentication that is used by an authorized user for at least one of configuration, reconfiguration, and renewal.

23. The security processor of claim 16 wherein the security processor is implemented in connection with a receiver or a transceiver that is at least one of a set top box (STB), and a receiver or transceiver for at least one of digital televison, high definition digital television (HDTV), audio, MP3, text messaging, and game digital streams.