Broadcasting Server Key Distribution for Scalable Video
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional encryption techniques face challenges in scalable video distribution over the internet, particularly in managing encryption keys for temporary subscribers and preventing ex-subscribers from decrypting content, as they often require secure key distribution and management without direct contact between broadcasters and end-users.
Innovation Solution
A broadcasting server generates multiple key parts that form an encryption key, distributing each key part to user devices within a network, allowing devices to collaborate to generate a decryption key, ensuring secure decryption without direct contact with the broadcaster and preventing unauthorized access by changing the group key when subscribers leave.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If conventional encryption techniques are used with single key distribution to each subscriber, then long-term subscribers can securely access video content, but temporary subscribers cannot quickly obtain keys and ex-subscribers can still decrypt content after unsubscribing
Solution Approach 1:
The encryption key is divided into multiple key parts distributed to different subscribers. Each subscriber receives only a portion of the key, and all key parts are required to reconstruct the full decryption key. This segmentation allows dynamic key management where keys can be regenerated by redistributing key parts when subscribers join or leave, solving both the flexibility and security requirements.
Solution Approach 2:
The system implements dynamic key management where the group key can be changed at any time by redistributing key parts. When a subscriber subscribes, they receive key parts; when they unsubscribe, their key parts are revoked and a new key distribution is performed. This dynamic approach enables temporary subscriptions while maintaining continuous security.
2Ease of operation
If symmetric encryption is used with direct key distribution from broadcaster to end-user, then decryption is simple, but scalability is reduced and direct contact between broadcaster and end-user is required
Solution Approach 1:
A scalability server is introduced as an intermediary between the broadcaster and end-users. The server receives encrypted video with a group key, then distributes key parts to authorized subscribers through key distribution centers. Subscribers use these key parts to reconstruct the decryption key locally. This intermediary approach maintains symmetric encryption simplicity while enabling scalable distribution without direct broadcaster-end user contact.
3Reliability
If all video components are encrypted, then security is maximized, but computational and communication costs increase significantly
Solution Approach 1:
The system extracts and encrypts only the essential base layer of scalable video, leaving enhancement layers unencrypted. The base layer contains critical video information necessary for basic playback, while enhancement layers provide quality improvements. By encrypting only the base layer with the group key, the system maintains security for the essential content while reducing computational and communication overhead compared to encrypting all video data.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A broadcasting server connectable to a plurality of user devices and connectable to or comprising a key distribution centre, the broadcasting server comprising a processor and a memory, the broadcasting server configured to generate a plurality of key parts which together form an encryption key and/or the memory of the broadcasting server includes a plurality of key parts which together form an encryption key, the broadcasting sever is configured to: send a first key part to a first user device of said plurality of user devices, the first key part being one of the plurality of key parts, send a second key part to a second user device of said plurality of user devices, the first key part being one of the plurality of key parts, and encrypt data for broadcast with the encryption key and to broadcast the encrypted data to said plurality of user devices.