Single Pass Parallel Video Encryption Using Multi-Part Counters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption methods for High-Definition Digital Content Protection (HDCP) require a two-pass process for encoding and encrypting video streams, which is inefficient and may compromise security, especially with the advent of parallel encoding techniques for High Efficiency Video Coding (HEVC) across multiple hardware pipes, where predicting the encoded bitstream size is challenging.
Innovation Solution
Implementing a single pass parallel encryption technology using a plurality of encryption pipelines that encrypt video sub-streams in parallel, each utilizing a multi-part encryption counter (MPC) with unique sub-portions to ensure secure and efficient encryption without waiting for complete encoding, thereby supporting HDCP and avoiding reuse of MPCs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If two-pass encoding and encryption is used, then security is maintained, but processing time and productivity are reduced
Solution Approach 1:
The video stream is divided into multiple independent sub-streams that can be encrypted in parallel. Each sub-stream is processed by a separate encryption pipeline with its own counter, allowing simultaneous encryption without compromising security while significantly reducing total processing time.
Solution Approach 2:
Counters are pre-initialized for each encryption pipeline before parallel processing begins. This preliminary setup allows each pipeline to independently encrypt its sub-stream without waiting for others, eliminating the sequential bottleneck while maintaining cryptographic security through proper counter management.
2Productivity
If parallel encoding is used, then encoding speed is improved, but prediction of encoded bitstream size becomes impossible
Solution Approach 1:
The encoded bitstream is segmented into multiple sub-streams corresponding to different parallel encoding pipelines. By treating each sub-stream independently with its own encryption counter, the system can process them in parallel while maintaining the ability to track and manage each segment's encryption state separately.
Solution Approach 2:
The encryption counter is modified to include pipeline-identifying sub-portions that remain constant for each pipeline. This parameter change allows the system to track encryption state per-pipeline rather than globally, enabling parallel processing while maintaining security and predictability.
3Productivity
If multiple encryption pipelines are used, then single-pass parallel encryption is achieved, but counter management complexity increases
Solution Approach 1:
The encryption counter is segmented into multiple sub-portions, with specific sub-portions remaining constant for each pipeline. This segmentation allows each pipeline to have a unique, predictable counter pattern without requiring complex coordination, simplifying management while enabling parallel operation.
Solution Approach 2:
Each encryption pipeline is assigned specific sub-portions of the counter that are unique to that pipeline. This local differentiation allows each pipeline to operate independently with its own counter characteristics, reducing overall system complexity while maintaining security through diversity.
Data Source
AI summary
Apparatuses, methods and storage medium associated with single pass parallel encryption are disclosed herein. In embodiments, an apparatus for computing may comprise an encryption engine to encrypt a video stream. The encryption engine may comprise a plurality of encryption pipelines to respectively encrypt a plurality of video sub-streams partitioned from the video stream in parallel in a single pass as the video sub-streams are being generated. The plurality of encryption pipelines may use a corresponding plurality of multi-part encryption counters to encrypt the corresponding video sub-streams as the video sub-streams are being generated. Each of the multi-part encryption counters used by one of the encryption pipelines may comprise a sub-portion that remains constant while encoding the corresponding video sub-stream, but the sub-key is unique for the one encryption pipeline, and differs from corresponding sub-portions of the multi-part encryption counters used by the other encryption pipelines. Other embodiments may be disclosed or claimed.