Home Gateway Secure Key Exchange for IP Streaming

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional systems for securing communication in IP content streaming systems lack effective methods to ensure secure content delivery and unauthorized access prevention, particularly in home gateways handling multiple client devices and diverse content formats.

Innovation Solution

A home gateway system that utilizes a key server to generate and manage content keys through a signed key exchange protocol like RSA, enabling content scrambling and descrambling for secure delivery, with the home gateway recovering root-content keys and generating content keys for encryption and decryption processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional systems are used for securing communication in IP content streaming, then basic content delivery is possible, but secure content delivery and unauthorized access prevention are insufficient

Engineering Contradiction:
Improvesecure content deliveryVSAvoidunauthorized access
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent segments the content delivery process into multiple secure stages: content encryption at the server, secure key distribution through the gateway, and controlled decryption at the client device. Each stage has specific security measures applied, creating layered protection against unauthorized access while maintaining reliable content delivery.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The home gateway acts as an intermediary between the content server and client devices, performing critical security functions including key management, authentication, and secure content distribution. This mediator role enables the gateway to enforce security policies and prevent unauthorized access while facilitating legitimate content delivery to multiple devices.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If home gateway handles multiple client devices and diverse content formats, then service versatility is improved, but security management complexity increases

Engineering Contradiction:
Improvemulti-device content deliveryVSAvoidsecurity management
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The home gateway is designed as a universal security platform that handles multiple client devices, various content formats, and different delivery scenarios through a unified key management system. This multi-functional approach allows the gateway to serve diverse needs while centralizing security management, reducing overall system complexity despite the variety of services provided.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9438415B2Method and system for securing communication on a home gateway in an IP content streaming system
Publication Date: 2016.09.06 AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE LTD
  • US9438415B2 patent drawing
  • US9438415B2 patent drawing
  • US9438415B2 patent drawing

AI summary

A home gateway, which enables communication with a plurality of devices, recovers a root-content key from a key server of a service provider for secure delivery of content requested by a client device. The recovered root-content key is utilized to generate a content key for corresponding content scrambling. The home gateway communicates the scrambled content to the client device. The home gateway utilizes the RSA protocol to request the root-content key from the key server. The root-content key is recovered from the received key index. The content key is encrypted utilizing a public key and delivered to the client device. The key server distributes the public key to the gateway through authentication messages. The client device utilizes its own private key to recover the content key by decrypting the encrypted content key. The scrambled content from the home gateway is descrambled using the recovered content key for content consumption.