IP delivery of secure digital content

• US 7,747,853 B2
• Filed: 03/31/2004
• Issued: 06/29/2010
• Est. Priority Date: 06/06/2001
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Candelore, Brant L.
• Primary Examiner(s): Korzuch, William R
• Assistant Examiner(s): DOAN, TRANG T
• Application Number:
  US10/815,371
• Publication Number:
  US 20040181666A1
• Time in Patent Office: 2,281 Days
• Field of Search: 713/160, 713/163, 380/200, 380/212, 380/214, 380/217, 726/13, 726/31, 725/109, 725/112, 725/143, 725/144
• US Class Current: 713/160
• CPC Class Codes: H04N 21/23476 by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/2362 Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4344 Remultiplexing of multiplex streams, e.g. by modifying time stamps or remapping the packet identifiers
• CPC Class Codes: H04N 21/4345 Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/43607 Interfacing a plurality of external cards, e.g. through a DVB Common Interface [DVB-CI]
• CPC Class Codes: H04N 21/43853 involving multiplex stream decryption arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/44055 by partially decrypting, e.g. decrypting a video stream that has been partially encrypted
• CPC Class Codes: H04N 21/4516 involving client characteristics, e.g. Set-Top-Box type, software version or amount of memory available
• CPC Class Codes: H04N 21/454 Content or additional data filtering, e.g. blocking advertisements
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

According to one embodiment, a digital stream, inclusive of an Internet Protocol (IP) datagram, is transmitted to a digital device. IP datagram comprises an IP header and a body segmented including a plurality of packets in an MPEG format such as MPEG-2 or MPEG-4 for example. The plurality of packets comprises (i) a first packet including a payload having content and a header that comprises a first packet identifier to indicate a type of the content contained in the payload of the first packet, and (ii) a second packet including a payload and a secondary packet identifier to indicate that its payload includes content duplicative of the content contained in the first packet. The second packet precedes the first packet in the digital stream. Upon detecting the presence of duplicative content, the duplicative content is recovered, but the content contained in the payload of the first packet is disregarded.

Claims

1. A method for providing content from a head-end to a digital device, comprising:

producing an Internet Protocol (IP) datagram including an IP header and a body that includes a plurality of packets in a Moving Picture Experts Group (MPEG) format, the plurality of packets including a first packet and a second packet preceding the first packet, the first packet including a first packet identifier to indicate a type of data stored in a payload of the first packet and the payload of the first packet is either video or audio encrypted using a first key, and a second packet including a secondary packet identifier to indicate that the second packet includes data that is (i) duplicative of the data contained in the payload of the first packet and (ii) encrypted differently than the data contained in the payload of the first packet, and to cause the digital device to discard the data contained in the first packet, the duplicative data being in a payload of the second packet and being either the video or the audio encrypted using a second key different than the first key; and

transmitting the IP datagram from the head-end.

2. The method of claim 1, wherein the first packet identifier is a unique value to indicate whether the payload of the first packet includes video, audio or data.

3. The method of claim 1, wherein the IP header comprises a version field to identify an IP version number, a length field to indicate either a length of the IP datagram or a length of the IP header, a source address field to include an IP address of the head-end and a destination address field to include an IP address of the digital device.

4. The method of claim 1, wherein a header of the first packet comprises the first packet identifier.

5. The method of claim 3, wherein prior to producing the IP datagram, the method further comprising:

determining whether the destination address field of the IP header is loaded with a multicast IP address,

if video is to be transmitted, each of the plurality of packets exclusively comprises a PID having a first value; and

if audio is to be transmitted, each of the plurality of packets exclusively comprises a PID having a second value differing from the first value.

16. The method of claim 1, wherein the data stored in the payload of the first packet is video encrypted using a first encryption algorithm and the duplicative data in the payload of the second packet is the video encrypted using a second encryption algorithm different than the first encryption algorithm.

6. A method for receiving content from a head-end by a digital device, comprising:

receiving an Internet Protocol (IP) datagram including an IP header and a body segmented including a plurality of packets in a Moving Picture Experts Group (MPEG) format, the plurality of packets comprises (i) a first packet of the plurality of packets including a payload having content being video or audio encrypted using a first key and a header that comprises a first packet identifier to indicate a type of the content contained in the payload of the first packet, and (ii) a second packet of the plurality of packets including a payload and a secondary packet identifier to indicate that the payload of the second packet includes content duplicative of the content contained in the payload of the first packet, the duplicative content in the payload of the second packet being the video or the audio encrypted using a second key different than the first key;

recovering the duplicative content contained in the payload of the second packet; and

disregarding the content contained in the payload of the first packet.

7. The method of claim 6, wherein the second packet precedes the first packet.

8. The method of claim 6, wherein content stored in the payload of the first packet is video encrypted using a first encryption algorithm and the duplicative content in the payload of the second packet is the video encrypted using a second encryption algorithm different than the first encryption algorithm.

9. The method of claim 6, wherein content stored in the payload of the first packet is audio encrypted using a first key and the duplicative content in the payload of the second packet is the audio encrypted using a second key different than the first key.

10. A software packet filter program embodied in a machine readable medium and executed by a processor, the software program comprising:

a first program block to extract a plurality of packets from an incoming Internet Protocol (IP) datagram, the plurality of packets comprises (i) a first packet of the plurality of packets including a payload having content being video or audio encrypted using a first key and a header that comprises a first packet identifier, and (ii) a second packet of the plurality of packets preceding the first packet, the second packet including a payload and a secondary packet identifier, the payload of the second packet including content being the video or the audio encrypted using a second key different than the first key;

a second program block to determine that the second packet identifier identifies the content contained within the payload of the second packet is duplicative of the content contained in the payload of the first packet; and

a third program block to recover the duplicative content contained in the payload of the second packet and disregard the content contained in the payload of the first packet.

11. The software packet filter program of claim 10, wherein the third program block disregards the content contained in the payload of the first packet by discarding the content contained in the payload of the first packet and thereby refraining from recovering the payload of the first packet when the second packet identifier of the second packet preceding the first packet is set to a predetermined value.

12. The software packet filter program of claim 10, wherein the duplicative content contained in the payload of the second packet is video encrypted using a first key and the content in the payload of the first packet is the video encrypted using a second key different than the first key.

13. The software packet filter program of claim 10 further comprising:

a fourth program block to provide the duplicative content to a descrambler situated within a digital device.

14. A method for receiving content from a head-end by a digital device, comprising:

receiving an Internet Protocol (IP) datagram including a plurality of Packetized Elementary Stream (PES) packets, the plurality of PES packets comprises (i) a first PES packet of the plurality of PES packets including a first packet identifier (PID1) to indicate a type of content contained in the PES packet being at least one of video and audio encrypted using a first key, and (ii) a second PES packet of the plurality of PES packets including a secondary packet identifier to indicate that the second PES packet includes content duplicative of the content contained in the first PES packet the duplicative content of the second PES packet being the at least one of the video and audio encrypted using a second key different than the first key;

recovering the duplicative content contained in the second PES packet; and

disregarding the content contained in the first PES packet.

15. The method of claim 14, wherein the content stored in the payload of the first packet is video encrypted using a first encryption algorithm and the duplicative content in the payload of the second packet is the video encrypted using a second encryption algorithm different than the first encryption algorithm.

17. A digital device, comprising:

means for receiving an Internet Protocol (IP) datagram including a plurality of packets, the plurality of packets comprises (i) a first packet including a first packet identifier to indicate a type of content contained in the first packet, and (ii) a second packet including a secondary packet identifier to indicate that the second packet includes content that is identical to the content contained in the first packet and encrypted differently from the content contained in the first packet, wherein the content stored in the first packet being video or audio encrypted using a first key and the content in the second packet being duplicative content that is the video or the audio encrypted using a second key different than the first key;

means for recovering the duplicative content contained in the second packet; and

means for disregarding the content contained in the first packet.