Security Processor for Multi-Stream Media Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional media stream delivery systems lack standardization in encryption/decryption and compression/decompression technologies, leading to high costs and difficulties for vendors to upgrade, resulting in substandard services and restricted competition, as well as customer dissatisfaction due to the inability to leverage advanced technologies.

Innovation Solution

A system and method for multi-stream security processing that includes a headend, network, and receivers with a security processor capable of simultaneous multiple encryption and decryption, allowing for flexibility, adaptability, and compatibility with legacy systems, enabling the dis-aggregation of security algorithms from infrastructure components, and supporting multiple conditional access systems and digital rights management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional fixed and proprietary encryption/decryption technologies are used in media stream delivery systems, then vendor-specific implementation is achieved, but upgrade costs and difficulty increase significantly

Engineering Contradiction:
Improveencryption/decryption functionalityVSAvoidupgrade cost and difficulty
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The security processing functionality is segmented into a separate security processor component that can be independently upgraded. The system divides the STB into functional modules including a security processor, allowing the encryption/decryption component to be updated without replacing the entire device, thereby reducing upgrade costs and complexity while maintaining reliable security functionality.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The security processor is designed with universal capabilities to support multiple encryption/decryption algorithms and multiple conditional access systems simultaneously. This multi-functional design allows a single device to adapt to different security standards and future upgrades, reducing vendor lock-in and making upgrades more economical by avoiding complete system replacements.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If conventional proprietary security systems are implemented at individual deployment points, then specific security requirements are met, but system flexibility and adaptability are reduced

Engineering Contradiction:
Improvesecurity processing capabilityVSAvoidsystem flexibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The security processor implements dynamic algorithm selection and configuration capabilities, allowing the system to adapt security processing parameters in real-time based on the content being delivered and the receiver's capabilities. This dynamic approach enables the same hardware to flexibly support multiple security standards and update algorithms without physical reconfiguration, enhancing both reliability and adaptability.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The security processor acts as an intermediary component between the content delivery system and the final receiver, providing a standardized interface that can handle multiple security protocols. This intermediary layer allows the core delivery infrastructure to remain flexible while maintaining reliable security processing through the standardized security processor interface.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If multiple security systems and algorithms are supported through conventional approaches, then comprehensive security coverage is achieved, but device complexity and cost increase

Engineering Contradiction:
Improvemulti-system supportVSAvoidprocessing complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

Multiple encryption and decryption algorithms are merged into a single integrated security processor that can execute different algorithms through software configuration rather than requiring separate hardware components for each algorithm. This consolidation reduces device complexity by providing unified control and resource management while maintaining the ability to support multiple conditional access systems and security standards.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS7620179B2System and method for security processing media streams
Publication Date: 2009.11.17 COMCAST CABLE COMM LLC
  • US7620179B2 patent drawing
  • US7620179B2 patent drawing
  • US7620179B2 patent drawing

AI summary

A system for multi-stream security processing and distributing digital media streams includes a headend, a network, and at least one receiver. The headend is generally configured to generate encrypted digital media streams. The network may be coupled to the headend and configured to receive the encrypted digital media streams. The at least one receiver may be coupled to the network and configured to receive the encrypted digital media streams and present a decrypted version of the encrypted digital media streams. At least one of the headend and the at least one receiver include a security processor that may be configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams.