Mediaword compression for network digital media recorder applications

• US 9,473,736 B2
• Filed: 10/24/2013
• Issued: 10/18/2016
• Est. Priority Date: 10/24/2013
• Status: Active Grant

• Current Assignee: ARRIS Enterprises LLC (CommScope Holding Company, Inc.)
• Original Assignee: ARRIS Enterprises LLC (CommScope Holding Company, Inc.)
• Inventors: Vince, Lawrence D.
• Primary Examiner(s): Kumar, Pankaj
• Assistant Examiner(s): ANDRAMUNO, FRANKLIN S
• Application Number:
  US14/062,129
• Publication Number:
  US 20150121417A1
• Time in Patent Office: 1,090 Days
• Field of Search: 725/25, 725/115
• US Class Current: 1/1
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/2747 Remote storage of video programs received via the downstream path, e.g. from the server
• CPC Class Codes: H04N 21/4135 external recorder interface circuits between an apparatus for recording television signals and a television receiver H04N5/775
• CPC Class Codes: H04N 21/42623 involving specific decryption arrangements
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4353 involving decryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 5/765 Interface circuits between an apparatus for recording and another apparatus
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17309 Transmission or handling of upstream communications
• CPC Class Codes: H04N 9/8045 using predictive coding

Abstract

In response to receiving from a subscriber both a request to record content and a unique requester key, a network DVR identifies an asset associated with the request. The network DVR segments the asset in to a series of segments, assigns a mediaword to each segment for compression, encrypts each of the segments using an encryption key, and records the encrypted asset segments in an encrypted dictionary storage as definitions, i.e., dictionary entries. The encrypted key and the mediaword are forwarded to a requester handler flow in the network DVR that generates requester-specific encrypted copies using the requester key received from the subscriber. The mediaword, encrypted encryption key, and the encrypted asset segments are stored in and retrievable for the corresponding requester.

Claims

1. A network digital media recorder comprising:

an input for receiving requests from a plurality of requesters to record content, wherein each of the requests to record content includes an identity of the requested content and a requester-specific encryption key,

a processor for forwarding the identity of the requested content to an ingress and for forwarding the requester-specific encryption key to a requester key handler;

the ingress for receiving media content and identifying one or more media contents that is associated with the requests to record content;

a compression dictionary creator for;

for each of the associated one or more media contents, encrypting segments of each media content using a variable encryption key generated for each segment;

assigning a mediaword to each of the encrypted segments;

the requester key handler for, for each of the plurality of requesters and for each requester'"'"'s request to record content received at the network digital video recorder;

identifying the encrypted segments that correspond to the requester'"'"'s request to record content, and

encrypting, using the requester'"'"'s requester-specific encryption key, each of the variable encryption keys used to encrypt each of the encrypted segments that corresponds to the respective requester'"'"'s request to record content, and

a requester content storage for storing each of the requester-specific encrypted variable encryption keys and the mediaword assigned to the respective encrypted segments.

2. The network digital media recorder of claim 1, wherein each variable encryption key used to encrypt a respective media content segment is only recoverable by a requester associated with a requester-specific encryption key used to encrypt the variable encryption key.

3. The network digital media recorder of claim 1, wherein only the requester associated with the requester-specific encryption key is provided access to the encrypted segments of the associated media content to prevent a rebroadcast of the media content.

4. The network digital media recorder of claim 1, wherein the assigned mediaword identifies a location within storage that the respective encrypted segment is located.

5. The network digital media recorder of claim 1, further comprising creating individual storage slots in a requester content storage on behalf of each requester for storing encrypted variable encryption keys and mediawords.

6. The network digital media recorder of claim 1, further comprising:

receiving a request for playback of content from a requester associated with at least one request to record content, wherein the request for playback of content includes the identity of the requester'"'"'s requester-specific encryption key and the mediaword assigned to a desired encrypted segment;

forwarding the requester'"'"'s requester-specific encryption key and the encrypted variable encryption key used to encrypt the desired encrypted segment associated with the mediaword to a decryptor;

recovering the variable encryption key by decrypting using the requester'"'"'s requester-specific encryption key;

fetching the desired encrypted segment identified by the mediaword from storage;

decrypting the encrypted media segment with the recovered variable encryption key.

7. A method comprising:

receiving, at a network server, requests from a plurality of requesters to record content, wherein each of the requests to record content includes an identity of the requested content and a requester-specific encryption key;

identifying one or more media contents received at the network server that is associated with one or more of the requests to record content;

for each of the associated one or more media contents, encrypting segments of the media content using a variable encryption key generated for each segment;

assigning a mediaword to each of the encrypted segments; and

for each of the plurality of requesters and for each requester'"'"'s request to record content;

identifying the encrypted segments that correspond to the requester'"'"'s request to record content,

encrypting, using the requester'"'"'s requester-specific encryption key, each of the variable encryption keys used to encrypt each of the encrypted segments that corresponds to the respective requester'"'"'s request to record content, and

storing, in a network server location, each of the requester-specific encrypted variable encryption keys for each encrypted segment and the respective mediaword assigned to the respective encrypted segment.

8. The method of claim 7, wherein the assigned mediaword identifies a location within storage that the respective encrypted segment is located.

9. The method of claim 7, further comprising creating individual storage slots in a requester content storage on behalf of each requester for storing encrypted variable encryption keys and mediawords.

10. The method of claim 7, further comprising, for each of the plurality of requesters and for each requester'"'"'s request to record content, encrypting, using the requester'"'"'s requester-specific encryption key, the assigned mediaword for each of the encrypted segments that corresponds to the requester'"'"'s request to record content.

11. The method of claim 7, further comprising discarding the generated variable encryption key after the respective encrypted segment is encrypted.

12. The method of claim 7, further comprising:

receiving a request for playback of content from a requester associated with at least one request to record content, wherein the request for playback of content includes an identity of the requester'"'"'s requester-specific encryption key and the mediaword assigned to a desired encrypted segment;

forwarding the requester'"'"'s requester-specific encryption key and the encrypted variable encryption key used to encrypt the desired encrypted segment associated with the mediaword to a decryptor;

recovering the variable encryption key by decrypting using the requester'"'"'s requester-specific encryption key;

fetching the desired encrypted segment identified by the mediaword from storage;

decrypting the encrypted media segment with the recovered variable encryption key.

13. The method of claim 7, wherein each variable encryption key used to encrypt a respective media content segment is only recoverable by a requester associated with a requester-specific encryption key used to encrypt the variable encryption key.

14. The method of claim 13, wherein only the requester associated with the requester-specific encryption key is provided access to the encrypted segments of the associated media content to prevent a rebroadcast of the media content.

15. A method comprising:

receiving, at a network digital media recorder, a request to record content, wherein the request includes an identity of the requested content and a requester-specific encryption key;

identifying media content received at the network digital media recorder that is associated with the requested content;

encrypting segments of the associated media content in accordance with the request to record content, wherein each of the encrypted segments is encrypted using a respective variable encryption key;

assigning a mediaword to each of the encrypted segments, wherein each assigned mediaword identifies a storage location of a respective encrypted segment;

encrypting each variable encryption key using the requester-specific encryption key, wherein encrypting each variable encryption key using the requester-specific encryption key comprises;

receiving the requester-specific encryption key associated with the requester,

receiving the variable encryption key used to encrypt each encrypted segment of one or more media contents associated with requests to record content received at the network digital media recorder;

identifying the encrypted segments associated with the requester'"'"'s request to record content;

encrypting, based on the requester'"'"'s requester-specific encryption key, the variable encryption key for each identified encrypted segment.; and

storing, in a network digital media recorder location, each of the requestor-specific encrypted variable encryption keys associated with each of the encrypted segments and the mediaword assigned to each of the encrypted segments,

wherein each variable encryption key encrypted with the requester-specific encryption key is recoverable only to a requester associated with the requester-specific encryption key, thereby limiting access to each of the encrypted segments encrypted to the requester of the requested content.

16. The method of claim 15, wherein the requester causes the requester-specific encryption key to be provided to the network digital media recorder upon issuing a request to record content.

17. The method of claim 15, further comprising:

receiving a request for playback of content from the requester, wherein the request for playback of content includes an identity of the requester'"'"'s requester-specific encryption key and the mediaword assigned to a desired encrypted segment;

forwarding the requester'"'"'s requester-specific encryption key and the encrypted variable encryption key used to encrypt the desired encrypted segment associated with the mediaword to a decryptor;

recovering the variable encryption key by decrypting using the requester'"'"'s requester-specific encryption key;

fetching the desired encrypted segment identified by the mediaword from storage;

decrypting the encrypted media segment with the recovered variable encryption key.

18. The method of claim 15, wherein only the requester associated with the requester-specific encryption key is provided access to the encrypted segments of the associated media content to prevent a rebroadcast of the media content.

19. A non-transitory computer-readable storage medium having stored thereon instructions that, when executed, cause a processor to:

identify media content received at a network digital media recorder that is associated with a request to record content;

encrypt segments of the associated media content in accordance with the request to record content, wherein each of the encrypted segments is encrypted using a respective variable encryption key;

assigning a mediaword to each of the encrypted segments, wherein each assigned mediaword identifies a storage location of a respective encrypted segment;

encrypting each variable encryption key using a requester-specific encryption key received with the request to record content; and

store each of the requestor-specific encrypted variable encryption keys associated with each of the encrypted segments and the mediaword assigned to each of the encrypted segments,

wherein each variable encryption key encrypted with the requester-specific encryption key is recoverable only to a requester associated with the requester-specific encryption key, thereby limiting access to each of the encrypted segments encrypted to the requester of the requested content.