Secure Video Manifest Generation Using Session-Based Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing video streaming systems lack secure delivery mechanisms for manifest files, as they are typically standard text files that can be easily readable and not unique to each video player, posing security risks and inefficiencies in video playback.
Innovation Solution
A method and apparatus for generating single-use, per-user encryption keys to encrypt manifest files, where a manifest server generates a session ID and uses it to create a unique encryption key for each video player, ensuring that only the encrypted manifest file can be decrypted by the corresponding video player.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single manifest file is generated for each encoded video signal and distributed to all video players, then the device complexity is reduced and ease of operation is improved, but security is compromised because the manifest file is easily readable and not unique to each player
Solution Approach 1:
The patent segments the manifest file delivery system by creating unique manifest files for each video player instance. Instead of one shared manifest file, each player receives a customized manifest that is encrypted with a unique key derived from player-specific identifiers (device ID, session ID, user ID). This segmentation approach enhances security by ensuring that each player can only access its own manifest file, preventing unauthorized access to video content.
Solution Approach 2:
The patent applies local quality by customizing the manifest file content and encryption for each specific video player. Each manifest file contains player-specific information and is encrypted with a unique key, making the security properties local to each player-instance rather than uniform across all players. This allows the system to maintain simplicity in key management while achieving per-player security.
2Reliability
If separate manifest files are generated for each video player with unique information, then security is improved, but the device complexity and difficulty of delivery increase
Solution Approach 1:
The patent implements a universal manifest file template that can be dynamically customized for each video player. The manifest file structure remains consistent across all players, but specific fields (such as encryption keys, player identifiers, and content URLs) are dynamically populated based on the requesting player's characteristics. This multi-functionality approach allows a single manifest template to serve all players while maintaining per-player security, greatly simplifying the delivery process.
Solution Approach 2:
The patent changes parameters within the manifest file based on the specific video player requesting it. Key parameters such as the encryption key (derived from player ID, session ID, and user ID), player-specific identifiers, and potentially content selection parameters are dynamically modified for each player. This parameter customization enables secure per-player manifest files without requiring completely separate file generation processes, thus easing delivery operations.
3Ease of manufacture
If standard text manifest files are used, then ease of manufacture and readability are improved, but security is worsened because they can be easily read by any device
Solution Approach 1:
The patent applies preliminary action by pre-generating unique encryption keys for each video player before the manifest file is created or accessed. These keys are derived from player-specific identifiers (device ID, session ID, user ID) and are used to encrypt the manifest file content in advance. This preliminary key generation and encryption process maintains the simplicity of manifest file creation while fundamentally enhancing security, as the encrypted manifest cannot be read without the corresponding player-specific key.
Solution Approach 2:
The patent replaces the mechanical approach of relying on text file format simplicity with a cryptographic substitution. Instead of using plain text manifest files that are inherently readable, the system substitutes encryption mechanisms to protect the manifest content. The manifest file structure remains similar to traditional formats for compatibility, but the content is encrypted using player-specific keys, replacing the reliance on text format security with cryptographic security while maintaining ease of generation.
Data Source
AI summary
A method to provide secure delivery of a manifest file for use in playback of a video signal on a video player. The method includes establishing a connection with the video player, wherein the connection has a session identifier identifying the connection with the video player, receiving a request from the video player for the video signal, wherein the video signal is associated with the manifest file created for the video signal, customizing, using the session identifier identifying the connection with the video player, the manifest file created for the video player to provide a customized manifest file that is unique to the video player, the customized manifest file to be used in playback of the video signal on the video player, encrypting the customized manifest file using a manifest encryption key which is based on the session identifier identifying the connection with the video player, and transmitting the encrypted manifest file to the video player.