Dynamic MPEG Transport Stream Encryption via Data-Seeded Key Multiplexing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing copy protection systems for pay-per-view systems are vulnerable to unauthorized copying due to the availability of tools that enable reverse-engineering of data transmission systems, leading to substantial revenue losses for content providers.
Innovation Solution
A method involving the use of a random number generator seeded with data to generate encryption keys, which are then used to encrypt both the data and the encryption keys themselves, with the encrypted keys being multiplexed with the data to form a secure output, utilizing advanced encryption standards like AES for secure transmission and decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption systems are used with static keys, then implementation is simple, but security is vulnerable to reverse-engineering
Solution Approach 1:
The patent applies dynamics by transforming static encryption keys into dynamic keys that change continuously through a key evolution function. The key schedule generates a new key for each block of data, and the key modification function alters keys based on counter values and data-dependent adjustments, ensuring that no two encryption operations use the same key state.
Solution Approach 2:
The patent segments the encryption key into multiple components including a base key, counter-dependent modifications, and data-dependent adjustments. The key schedule divides the master key into multiple sub-keys, and the key modification function further segments the key into different operational states based on counter values and input data blocks.
2Reliability
If encryption keys are transmitted separately from data, then key management is simpler, but security is compromised by key interception
Solution Approach 1:
The patent merges the encryption key with the data stream by embedding the modified key within the encrypted data blocks themselves. The key modification function incorporates data blocks into the key generation process, causing the key to evolve as data is processed, effectively combining key management with data transmission in a single integrated stream.
Solution Approach 2:
The patent introduces a key modification function as an intermediary between the base encryption key and the final encryption key used for each block. This intermediary layer modifies the base key using counter values and data-dependent operations, creating a secure bridge that transforms a static secret into a dynamic encryption key without exposing the base key.
3Productivity
If the same encryption key is used for multiple data blocks, then processing is faster, but security is weakened by key repetition patterns
Solution Approach 1:
The patent implements periodic action through the counter mechanism that systematically increments through different values for each encryption operation. The counter cycles through a defined range, and the key modification function applies periodic transformations based on counter values, creating a regular pattern of key changes that maintains security while enabling efficient batch processing.
Solution Approach 2:
The patent changes key parameters dynamically by modifying the encryption key based on counter values and data block characteristics. The key schedule and key modification function alter key parameters such as sub-key selection, rotation amounts, and substitution tables, ensuring that each encryption operation uses a uniquely modified key state while maintaining consistent processing throughput.
Data Source
AI summary
One embodiment involves encrypting an MPEG transport stream by seeding a random number generator with a seed derived from at least a portion of the MPEG transport stream to produce a random number output. At least one program key and at least one modification key are generated from the random number output. At least portions of the MPEG transport stream are encrypted with the program key. At least one stored key is modified according to the modification key to produce a message segment key. The program key and the modification key are encrypted with the message segment key. The encrypted MPEG transport stream, the encrypted program key, and the encrypted modification key are multiplexed to form a multiplexed output.