DASH Streaming Encryption via MPD Metadata
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional DASH systems using HTTPS for service-level protection face delays due to full handshake requirements and cannot be cached, necessitating encryption at each CDN node, which increases complexity and cost.
Innovation Solution
A method and apparatus for encrypting and decrypting data content segments and non-media segments using a DASH MPD, employing service protection encryption independent of DRM, with a processor, transmitter, and receiver units to manage encryption and decryption processes, allowing for efficient service-level protection without the need for full handshake and caching at CDN nodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If HTTPS is used for service-level protection in conventional DASH systems, then data content security is improved, but system complexity and cost increase due to full handshake requirements and inability to cache
Solution Approach 1:
The patent segments the encryption process by introducing separate encryption layers: service-level encryption for protecting segment requests/responses and content-level encryption for the actual media content. This segmentation allows each layer to be optimized independently, reducing overall system complexity while maintaining security.
Solution Approach 2:
The patent introduces an intermediary encryption mechanism that operates between the client and CDN nodes. This intermediary layer enables caching of encrypted segments at CDN nodes without requiring full HTTPS handshakes at each node, thereby reducing complexity while preserving security through the use of encryption proxies or intermediaries.
2Reliability
If HTTPS is used for service-level protection, then data content security is improved, but transmission speed decreases due to full handshake delays
Solution Approach 1:
The patent applies preliminary action by establishing service-level encryption credentials and keys before actual content transmission begins. The MPD (Media Presentation Description) is pre-configured with encryption information, allowing subsequent segment requests to be processed faster without repeated full handshakes, thus improving transmission speed while maintaining security.
Solution Approach 2:
The patent introduces dynamic encryption key management where encryption keys and credentials can be updated and refreshed during the streaming session. This dynamic approach allows the system to maintain security while optimizing transmission speed by reusing established encryption channels and avoiding repeated authentication handshakes.
3Reliability
If encryption is performed at each CDN node, then service-level protection is improved, but operational complexity increases
Solution Approach 1:
The patent makes the encryption mechanism universal by designing a standardized encryption framework that can be implemented consistently across all CDN nodes. The service-level encryption using HTTP headers and the content-level encryption using segment encryption create a universal protocol that simplifies operations by providing a unified approach rather than node-specific implementations.
Solution Approach 2:
The patent enables copying of encrypted segments at CDN nodes without requiring decryption and re-encryption at each node. The encrypted segments can be copied and distributed directly, maintaining security while significantly reducing operational complexity at CDN nodes compared to performing active encryption operations at each location.
4Reliability
If conventional HTTPS protection is used, then data security is improved, but caching capability is lost
Solution Approach 1:
The patent implements a nested encryption structure where content-level encryption is nested within service-level encryption. The MPD and segment metadata contain content encryption information, while the HTTP transport layer uses service-level encryption. This nested structure allows CDN nodes to cache the outer encrypted layers while the inner content remains protected, enabling caching capability without compromising data security.
Data Source
AI summary
A method comprising encrypting a segment in response to receiving a segment request to generate an encrypted segment, and sending the encrypted segment, wherein encrypting the segment comprises encrypting a data content segment and a non-media segment in accordance with information provided in a dynamic adaptive streaming over hypertext transfer protocol (HTTP) (DASH) media presentation description (MPD), and wherein encrypting the segment generates an encrypted data content segment and an encrypted non-media segment. A method comprising sending a segment request, receiving an encrypted segment, wherein the encrypted segment comprises an encrypted data content segment and an encrypted non-media segment, and decrypting the encrypted segment in accordance with information provided in a DASH MPD to generate a data content segment and a non-media segment, wherein the non-media segment comprises a non-playable media.