Stream Encryption Using Intrinsic Block Boundaries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption systems for streamed digital content struggle with arbitrary payload boundaries, making it difficult to manipulate and re-transmit streams efficiently, and lack the ability to apply different encryption schemes to various sub-streams within a stream, leading to unnecessary encryption and lack of control over content distribution.
Innovation Solution
A method where each sub-stream is divided into logical blocks based on intrinsic partitions, encrypted, and then divided into payloads, allowing for efficient manipulation without decryption, and a stream architecture that includes a header object with RM descriptions for each sub-stream to specify protection schemes and keys, enabling flexible rights management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the entire stream is encrypted as a single unit with arbitrary payload boundaries, then security is maintained, but manipulation and re-transmission require full decryption and re-encryption which is inefficient
Solution Approach 1:
The patent divides the encrypted stream into separate encrypted sub-streams (video, audio, data) that can be independently manipulated. Each sub-stream is encrypted with its own key and can be processed separately, eliminating the need to decrypt and re-encrypt the entire stream during manipulation operations.
Solution Approach 2:
The patent applies encryption to individual sub-streams before they are combined into the final stream. This preliminary encryption of separate components allows for efficient later manipulation without requiring full decryption, as the sub-streams remain encrypted throughout the manipulation process.
2Adaptability or versatility
If a single encryption scheme is applied to all sub-streams, then implementation is simple, but flexibility in content distribution and rights management is reduced
Solution Approach 1:
The patent applies different encryption schemes and keys to different sub-streams based on their specific requirements. Video sub-streams can use one encryption method while audio sub-streams use another, allowing each component to be protected according to its specific security and distribution needs.
Solution Approach 2:
The patent creates a unified stream structure that can accommodate multiple encryption schemes simultaneously. The system is designed to handle diverse encryption methods for different sub-streams while maintaining a consistent overall architecture, providing both versatility and universality.
3Reliability
If the stream is left unprotected, then manipulation is easy, but control over content distribution and prevention of unauthorized copying is lost
Solution Approach 1:
By segmenting the stream into separately encrypted sub-streams, the patent enables selective manipulation of individual components without requiring full decryption. This maintains security control while improving operational ease for legitimate manipulation tasks.
Solution Approach 2:
The patent introduces an intermediary encrypted structure where sub-streams are protected but can be accessed by authorized systems through proper key management. This intermediary layer maintains security while allowing controlled manipulation by legitimate users.
Data Source
AI summary
A stream of content has multiple sub-streams, where each sub-stream comprises a part of the content and is divisible into logical blocks bounded by intrinsic partitions. For each sub-stream, a specification of the logical blocks bounded by the intrinsic partitions is defined and the sub-stream is divided into the logical blocks bounded by the intrinsic partitions. Each divided logical block is encrypted and then divided into one or more portions to produce corresponding pieces of data, and each piece of data is placed into a data packet as a payload thereof. Each data packet is transmitted to a recipient thereof, and the recipient can retrieve the pieces of data from the payloads of the packets, reconstruct the encrypted logical blocks, and manipulate the sub-stream on a per-logical block basis without necessarily decrypting each encrypted logical block.