Secure Video Processing via Private Memory Buffer Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for secure video processing of high-resolution video streams lack an additional layer of security, as decrypted media content can be accessed unlawfully by compromised devices, such as set-top boxes, due to its storage in public memory accessible by central processing units.

Innovation Solution

The method involves storing an encrypted video stream in a public stream buffer and allocating a private stream buffer in private memory, where decryption occurs, and the decrypted stream is stored, ensuring it is only accessible through a video decoder unit, thus preventing direct access by the central processing unit.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If decrypted video stream is stored in public memory accessible by central processing unit, then processing efficiency is improved, but security of decrypted media content deteriorates

Engineering Contradiction:
Improveprocessing efficiencyVSAvoidsecurity of decrypted media content
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent divides memory into separate public and private regions. The private stream buffer is allocated in private memory that is inaccessible to the central processing unit, while the public stream buffer remains in public memory for efficient access. This segmentation allows decrypted content to be stored securely in private memory while maintaining processing efficiency through the public buffer interface.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a buffer management unit as an intermediary component that handles data transfer between the public and private stream buffers. This intermediary manages the decryption process and coordinate data flow between the decryption unit, public buffer, and private buffer, ensuring secure access control while maintaining processing efficiency.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If private stream buffer is allocated in private memory inaccessible to central processing unit, then security of decrypted media content is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity of decrypted media contentVSAvoidmemory architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The buffer management unit performs multiple functions: it manages allocation of private stream buffers, coordinates decryption operations, handles data transfer between public and private buffers, and verifies buffer locations. This multi-functional approach consolidates complexity into a single management component rather than distributing it across multiple separate systems.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system implements self-verification through the buffer management unit, which automatically verifies the existence of buffer locations before access. The decryption unit and video decoder unit operate independently with defined access protocols, reducing the need for complex external control mechanisms.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11095937B2Method and device for secure video processing
Publication Date: 2021.08.17 LIBERTY GLOBAL EURO HLDG
  • US11095937B2 patent drawing
  • US11095937B2 patent drawing

AI summary

A method is described for secure video processing. The method comprises storing an encrypted video stream (1) in a public stream buffer (2) in public memory accessible by a central processing unit (4) and allocating a private stream buffer (6) at a buffer location in private memory which is accessible by a decryption unit (10), wherein the private memory is not accessible for the central processing unit (4). The method then comprises decrypting the encrypted video stream (1) in the public stream buffer (2) to the private stream buffer (6) at the allocated buffer location (8) in private memory as an associated decrypted video stream (5); appending the allocated buffer location (8) to the public stream buffer (2); and configuring a video decoder unit (12) to read the decrypted video stream (5) from the private stream buffer (6) at the buffer location (8) for further processing.