Trusted Decryption Module for Secure Media Stream Navigation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
On untrusted platforms, accessing navigational data from monolithically encrypted media streams poses a security risk as both headers and payloads need to be decrypted, exposing the payload to potential attacks.
Innovation Solution
Implementing a Trusted Decryption Module that decrypts only the monolithically encrypted media streams, allowing navigational headers to be accessible to software while keeping the payload secure, using a secure partition and trusted components to manage decryption and rendering.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If monolithic encryption is used for media streams, then security protection is improved, but access to navigational data requires decrypting the entire stream which exposes payloads to security risks
Solution Approach 1:
The patent segments the media stream into separate navigational headers and payload portions, applying different encryption treatments to each. The headers are encrypted with a first key while payloads use a second key, allowing selective decryption of only the header portion without exposing the payload to untrusted components.
Solution Approach 2:
Different encryption keys and decryption behaviors are applied to different parts of the media stream. The navigational headers use one encryption scheme for accessibility, while payloads use another for security, creating local quality differences in the encryption approach based on the functional requirements of each segment.
2Reliability
If discrete encryption is applied to media payloads while leaving headers unencrypted, then payload security is improved, but the system complexity increases due to separate decryption processes
Solution Approach 1:
The system segments the decryption process into two independent paths: one for navigational headers and one for payloads. Each segment can be decrypted separately using its own key, allowing the system to manage complexity through structured separation rather than monolithic processing.
Solution Approach 2:
The patent introduces an intermediary decryption module that coordinates the separate decryption processes for headers and payloads. This intermediary layer manages the complexity by providing a unified interface for decryption while maintaining separate encryption keys and processing paths for security.
3Ease of operation
If entire media streams are decrypted to access navigational data, then navigation accessibility is improved, but security protection against malicious applications deteriorates on untrusted platforms
Solution Approach 1:
The patent segments the media stream into navigational headers and payloads, allowing the system to decrypt and make accessible only the header portion needed for navigation while keeping the payload encrypted and inaccessible to untrusted applications, thus maintaining security while enabling navigation.
Solution Approach 2:
The system extracts only the necessary navigational header information from the encrypted stream, decrypts it separately, and makes it accessible to software applications without extracting or exposing the payload data, thereby providing navigation functionality while maintaining payload security.
Data Source
AI summary
A method, apparatus and system enabling software access to navigational data in a decrypted media stream while protecting stream payloads. In one embodiment, a filter may route an encrypted content stream and associated information to a secure partition having a trusted computing component for decryption. Upon decryption, the trusted computing component may store the decrypted payload of the content in a secure storage location accessible to the trusted computing component. Thereafter, the decrypted navigational header information of the content may be used to navigate to the decrypted content via a trusted component such as a trusted rendering unit in the secure partition.