Secure Live TV Streaming via Proxy Key Delivery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional HTTP Live Streaming (HLS) does not effectively address the secure delivery of encryption keys for live television streaming on mobile devices, lacking protection for the key-fetching process.
Innovation Solution
A client device implements a media player and a proxy application that requests a playlist from a media server, modifies it to include local encryption key access parameters, and securely communicates the encryption key to the media player, using HTTPS to ensure secure delivery independent of the key security system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional HLS is used to stream live television on mobile devices, then basic media delivery is achieved, but encryption key delivery lacks security protection
Solution Approach 1:
The patent introduces a key delivery server as an intermediary component between the media server and mobile device. This server specifically handles encryption key distribution through secure HTTPS connections, separating the key delivery function from the media streaming function. The intermediary receives encrypted media content, extracts encryption keys, and delivers them through a dedicated secure channel, thereby enhancing key delivery security without requiring complete system redesign.
2Reliability
If HTTPS is used to obtain encryption keys from server, then key transmission security is improved, but the key-fetching process remains vulnerable
Solution Approach 1:
The patent implements preliminary authentication and session establishment before encryption key delivery. The mobile device first establishes a secure HTTPS connection with the key delivery server, performs authentication, and obtains a secure session context. Only after this preliminary secure setup is complete does the actual encryption key transmission occur. This preliminary action ensures that the communication channel is already protected before sensitive key material is exchanged, eliminating vulnerabilities in the key-fetching process.
3Ease of operation
If encryption keys are delivered through conventional HLS, then media content can be decrypted, but the key delivery process lacks independent security protection
Solution Approach 1:
The patent segments the streaming system into distinct functional components: media content delivery through HLS, and encryption key delivery through a separate HTTPS-based key delivery server. The media stream and key stream are independently managed through different protocols and servers. This segmentation allows each component to be optimized for its specific purpose while providing independent security protection for key delivery, without compromising media decryption capability.
Data Source
AI summary
A client device implements a media player and a proxy application. The media player controls playback of media content on the client device. The proxy application is implemented to request a playlist from a media server, where the playlist corresponds to the media content. The proxy application receives the playlist from the media server, and the playlist includes encryption key reference parameters to obtain an encryption key. The proxy application modifies the playlist to include local encryption key access parameters for the media player, and the modified playlist is communicated to the media player. The proxy application can then receive a request for the encryption key from the media player that utilizes the local encryption key access parameters included in the modified playlist, and the proxy application securely communicates the encryption key to the media player.