Media Stream Segmentation for Granular Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing media stream systems struggle with complex access control and privacy management, particularly in scenarios requiring encryption and decryption of unbounded data streams, which is resource-intensive and inefficient, especially when handling personally identifiable information (PII) and supporting multiple user groups with varying access permissions.
Innovation Solution
Implement a hierarchical data structure for media streams using fusion streams, which are composed of fusion nodes and elementary streams, enabling granular access control through time-varying symmetric encryption, asymmetric key encryption for session keys, and centralized or distributed authentication, allowing secure, scalable, and synchronized media streaming.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional decryption and re-encryption of complete data streams is implemented to manage access control for multiple user groups, then access control flexibility is improved, but resource consumption increases significantly
Solution Approach 1:
The patent segments the media stream into multiple encrypted versions, each accessible to different user groups. Instead of decrypting and re-encrypting the entire stream for each user, the system pre-segments the stream into distinct encrypted portions (e.g., first portion for first user group, second portion for second user group), thereby reducing computational overhead while maintaining access control flexibility.
Solution Approach 2:
The patent applies preliminary encryption to divide the media stream into multiple encrypted versions before distribution. By pre-encrypting different portions of the stream for different user groups ahead of time, the system avoids the need for real-time decryption and re-encryption operations, significantly reducing resource consumption during actual access.
2Reliability
If encryption is applied to all streams to meet privacy requirements, then security is improved, but access control complexity increases
Solution Approach 1:
The patent segments the encrypted stream into distinct portions, each accessible to specific user groups. This segmentation simplifies access control by allowing the system to grant access to entire segments rather than managing complex permission sets for individual data points within encrypted streams.
Solution Approach 2:
The patent applies different encryption and access control policies to different portions of the media stream based on local requirements. Each segment can have its own encryption level and access rules tailored to specific user groups, rather than applying a uniform complex access control mechanism across the entire stream.
3Adaptability or versatility
If complete data streams are decrypted and re-encrypted for each user group, then granular access control is achieved, but processing time increases
Solution Approach 1:
The patent performs encryption and segmentation of media streams in advance, creating multiple encrypted versions for different user groups before distribution. This preliminary processing eliminates the need for time-consuming decryption and re-encryption operations when users actually access the content, significantly reducing processing delays.
Solution Approach 2:
The patent divides the media stream into distinct segments that can be independently encrypted and distributed to different user groups. This segmentation allows the system to provide granular access control by simply selecting which pre-encoded segments to deliver, rather than performing complex real-time encryption operations.
4Ease of manufacture
If traditional system architectures are used to manage complex scenarios with multiple user groups and privacy requirements, then implementation simplicity is maintained, but system capability to handle complex scenarios deteriorates
Solution Approach 1:
The patent implements a segmented stream architecture where media content is divided into distinct encrypted portions, each accessible to specific user groups. This segmentation enables the system to handle complex multi-user scenarios with different privacy requirements while maintaining relatively simple implementation through standardized segment management and delivery mechanisms.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
A media playback system for presenting to a user a composition of a plurality of media streams. It has a media selection component configured to receive a scenario dataset, to receive user input for selecting viewing times defining segments of media and composition selections, and to output a list of segments of media from the scenario dataset that are authorized to be viewed by the user. The system has a playback control component configured to retrieve from media storage at least the segments of media from the output list of segments, to decode the segments of media, and to compile composition instructions. The system has a media playback component configured to receive the rendered media and the composition instructions.