Encrypted Content Recognition via Nested Commutative Keys

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing encryption techniques for storing and transmitting copyrighted content across DTH, DTT, cable, and OTT systems face challenges such as redundancy and security risks due to the inability to detect overlapping content without decryption and the risk of unauthorized access when transmitting with a single key.

Innovation Solution

The system employs double encryption using a common key accessible only to client devices, allowing for partial decryption and recognition of overlapping content without exposing the cleartext, thereby reducing redundancy and enhancing security by transmitting one encryption key without risking decrypted content exposure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If copyrighted content is transmitted with a single encryption key, then transmission simplicity is improved, but security against unauthorized access deteriorates

Engineering Contradiction:
Improvetransmission simplicityVSAvoidsecurity against unauthorized access
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements nested encryption where the content is first encrypted with a content key, then the resulting ciphertext is encrypted again with a common key. This creates a nested structure where one encryption layer is inside another, allowing the content to be transmitted with only the common key while maintaining security through the inner content key layer

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 2:

The encryption system is segmented into multiple independent key layers: a content key specific to each content item and a common key used for transmission. This segmentation allows different keys to serve different security purposes, improving both transmission simplicity and security

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If each user's copy of copyrighted content is stored in full at remote storage, then user access flexibility is improved, but storage redundancy increases

Engineering Contradiction:
Improveuser access flexibilityVSAvoidstorage redundancy
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The remote storage stores content encrypted with a common key that is nested within each user's personalized encryption layer. This allows the storage system to keep encrypted copies that can be efficiently managed while users retain flexible access through their individual keys

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 2:

Instead of storing multiple full copies of content for different users, the system creates encrypted copies using the same underlying content encrypted with a common key, reducing storage requirements while maintaining user access flexibility through key-based decryption

Inventive Principle:
Principle #26Copying

3Reliability

If the remote storage cannot determine overlapping content, then content security is improved, but storage efficiency deteriorates

Engineering Contradiction:
Improvecontent securityVSAvoidstorage efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent uses cryptographic hashing to transform content into fixed-size digest values that act as unique identifiers. These hash values allow the remote storage to efficiently detect overlapping content through comparison without decrypting or exposing the actual content, maintaining security while improving storage efficiency

Inventive Principle:
Principle #32Color changes

Data Source

PatentUS11838413B2Content recognition systems and methods for encrypted data structures
Publication Date: 2023.12.05 SYNAMEDIA LTD
  • US11838413B2 patent drawing
  • US11838413B2 patent drawing
  • US11838413B2 patent drawing

AI summary

A system for maximizing storage of encrypted content in a storage system includes one or more processors; and a storage medium storing instructions. When executed, the instructions may configure the one or more processors to: receive, from a first client device, a first data structure encrypted commutatively with a first key and a common key, the receiving system lacking access to the common key; receive the first key and a first segment identifier; receive, from a second client device, a second data structure encrypted commutatively with a second key and the common key; receive a second segment identifier; using the first key, partially decrypt the first data structure; storing the partially decrypted first data structure; and selectively storing a copy of the second data structure based on whether content of the first data structure corresponds to content of the second data structure.