Client-Side Proxy for Secure Media Streaming Protocol Conversion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional methods for streaming digital media, such as FLV containers, face security risks due to exposure of decrypted content on client devices and high server costs associated with proprietary protocols like RTMP, while using HTTP for streaming can compromise content security.
Innovation Solution
A client-based container and protocol proxy device is employed to securely download and decrypt digital media content using a first container and protocol, and then convert it to a second container and protocol, ensuring secure delivery and playback while maintaining flexibility in streaming mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If RTMP protocol is used to stream FLV container, then content security is improved through encryption, but server configuration cost increases significantly
Solution Approach 1:
The patent introduces a client-side proxy as an intermediary component that handles the complex RTMP protocol operations locally. The proxy intercepts HTTP requests, converts them to RTMP protocol, manages encryption/decryption operations, and forwards data to the media player. This mediator approach transfers the server configuration burden to the client device, allowing secure content delivery without expensive server-side RTMP infrastructure.
Solution Approach 2:
The patent implements a copy of the RTMP protocol stack within the client-side proxy rather than requiring the server to run the full RTMP protocol. The proxy contains protocol converters and encryption modules that replicate RTMP functionality locally, enabling secure streaming through protocol copying at the client end rather than requiring complex server configuration.
2Ease of manufacture
If HTTP protocol is used to stream FLV container, then server cost is reduced, but content security deteriorates due to exposure of decrypted content on client device
Solution Approach 1:
The proxy acts as a security intermediary between the HTTP server and the media player. It receives encrypted content from the server via HTTP, maintains security by keeping the content encrypted during transmission, then converts and delivers it to the media player. This intermediary position allows the system to benefit from HTTP's low cost while preventing the security vulnerabilities of direct unencrypted delivery.
Solution Approach 2:
The proxy performs preliminary encryption of content before it reaches the client device and maintains this encrypted state throughout the delivery process. By preparing and maintaining the encrypted state in advance and during transmission, the system prevents the content from being exposed in clear text on the client device, thus preserving security while using cost-effective HTTP protocols.
3Ease of operation
If decrypted FLV container is exposed on client device, then media player can play content, but unauthorized copying and distribution becomes possible
Solution Approach 1:
The proxy serves as a controlled intermediary that manages the decryption process. It decrypts content only when needed for playback and immediately re-encrypts it before delivery to the media player. This intermediary control ensures the media player receives decrypted content for playback while preventing unauthorized copying by maintaining encryption integrity throughout the delivery chain.
Solution Approach 2:
The proxy implements a time-sensitive decryption and re-encryption process that rushes through the content delivery pipeline quickly. By minimizing the time content remains in decrypted state and continuously re-encrypting it during transmission, the system enables smooth playback while reducing the window of opportunity for unauthorized copying and distribution.
Data Source
AI summary
Various embodiments are directed towards employing a container and communication protocol proxy component within a client device to receive securely real-time streamed, progressively downloaded, or adaptively streamed container over a network using one container and communication protocol, and to securely decrypt the container and provide it to a media player using a different container and communications protocol. In one embodiment, the container is in Flash Video (FLV) file format. A browser or the media player on the client device may be used to request the container. The requested container is sent over one communication protocol and intercepted by the container and communication protocol proxy component. The container may be received as selectively encrypted container. The container and communication protocol proxy component then may enable decryption of the container and providing of it to the media player using another container and communication protocol combination.