Video Stream Packet Encryption with Privacy Metadata

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data protection methods are network-centric and lack flexibility in managing data confidentiality levels, particularly for video streams, failing to adapt to the needs of producers and consumers.

Innovation Solution

A method and device for multi-level protection of video streams by segmenting packets, applying privacy policies, and generating privacy metadata streams to ensure appropriate confidentiality levels, using cryptographic keys to encrypt and associate metadata with video packets.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If network-level protection with homogeneous confidentiality zones is used, then data segregation and access control are simplified, but flexibility in managing different confidentiality levels within the same stream is lost

Engineering Contradiction:

Improvedata segregation and access controlVSAvoidflexibility in managing confidentiality levels

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

The video stream is segmented into individual packets, each of which can be independently encrypted with different keys. This allows the system to apply different confidentiality levels to different packets within the same stream, resolving the contradiction by enabling fine-grained control while maintaining the simplicity of network-level segmentation through the use of discrete packet-level encryption units.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Different packets within the video stream are assigned different confidentiality levels and encrypted with appropriate keys based on their specific content requirements. This local differentiation allows high-resolution packets to have higher confidentiality while low-resolution packets maintain lower confidentiality, enabling adaptability without compromising overall system simplicity.

Inventive Principle:

Principle #3Local quality

2Reliability

If binary encoding/decoding protection is applied, then unauthorized access to high-resolution images is prevented, but flexibility in providing multiple confidentiality levels is limited

Engineering Contradiction:

Improveprotection against unauthorized accessVSAvoidmultiple confidentiality levels

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system changes the encryption parameter (confidentiality level) from a binary state to a multi-level state by implementing multiple confidentiality levels (first, second, and third levels). Each level uses different encryption keys and provides different security强度的, allowing the system to maintain reliable protection while providing adaptable confidentiality options for different packet types.

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The protection mechanism transitions from a static binary encoding/decoding approach to a dynamic multi-level encryption system where the confidentiality level of each packet can be adjusted based on its content and requirements. This dynamic approach allows the system to optimize security for each packet individually while maintaining overall system reliability.

Inventive Principle:

Principle #15Dynamics

3Reliability

If each packet is encrypted with different keys and metadata is added, then confidentiality and integrity are enhanced, but device complexity and processing overhead increase

Engineering Contradiction:

Improveconfidentiality and integrityVSAvoidprocessing complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by pre-defining multiple confidentiality levels and their corresponding encryption keys before processing the video stream. This preparation work is done in advance, allowing the actual packet processing to follow a standardized procedure that reduces real-time processing complexity while maintaining high confidentiality and integrity standards.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The encryption framework is designed to be universal and multi-functional, handling multiple confidentiality levels through a unified process. The same basic encryption mechanism is applied to all packets, with the only variation being the selection of appropriate keys based on predefined confidentiality levels. This universality reduces device complexity by avoiding the need for fundamentally different processing paths for different security requirements.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentEP4386607B1Method and device for protecting an incoming stream comprising an elementary stream of video packets

Publication Date: 2026.01.28 THALES SA

Figure 1
Figure 2
Figure 3

AI summary

This method of protecting an incoming stream (10), the incoming stream comprising at least one incoming video elementary stream (11), the incoming video elementary stream comprising a succession of incoming video packets (12), is characterized by: the disassembly (32) of the incoming stream to separate a current packet; the encryption of the current packet with a session key (TEK); the construction (35) of a confidentiality metadata packet comprising a timestamp field corresponding to a timestamp of the current packet and a confidentiality field containing the session key; the encryption of the confidentiality data packet with an encryption key (KEK); the assembly (36) of an outgoing stream (20) comprising an outgoing elementary stream grouping the encrypted current packets (22) and an elementary privacy metadata stream comprising the encrypted privacy metadata packets (26).