Video Stream Protection Device Selective Decoding Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional video decoding systems lack security protection, making them vulnerable to unauthorized stealing of video streams, as software decoding often occurs in a non-secure layer without adequate security measures.
Innovation Solution
A video stream protection method and device that identifies data units within a video stream based on start positions and header information, determining data types, and selectively prohibits decoding of sensitive data units to prevent unauthorized access, particularly by using a control module to manage data flow between secure and non-secure processors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If video decoding is performed in a non-secure layer without security protection, then decoding functionality and ease of operation are improved, but security against unauthorized stealing of video streams deteriorates
Solution Approach 1:
The video stream is segmented into multiple data units (NAL units in H.264/H.265), and the patent selectively prohibits decoding of specific data units (particularly slice type data units) while allowing decoding of others (parameter set data units). This segmentation allows the system to maintain decoding functionality for essential parameters while protecting sensitive video content from unauthorized access.
Solution Approach 2:
Different security levels are applied to different parts of the video stream. The patent identifies specific data units based on their type and applies selective prohibition: parameter set data units are allowed for decoding to maintain functionality, while slice type data units containing actual video content are prohibited. This local differentiation resolves the contradiction by enabling decoding where needed while protecting where sensitive.
2Reliability
If all data units are prohibited from decoding to protect security, then security protection is improved, but decoding functionality and productivity deteriorate
Solution Approach 1:
Instead of prohibiting decoding of all data units (excessive action), the patent applies partial prohibition only to specific slice type data units while allowing parameter set data units to be decoded. This partial action maintains the necessary decoding functionality for video parameter interpretation while protecting the actual video content, thus avoiding complete loss of productivity.
Solution Approach 2:
The patent introduces an intermediary mechanism (the selective prohibition logic based on data unit type identification) that mediates between security requirements and decoding functionality. This intermediary allows essential parameter decoding to proceed while blocking content decoding, resolving the contradiction between security and productivity.
3Ease of operation
If video streams are fully accessible to non-secure processors for decoding, then ease of operation is improved, but vulnerability to unauthorized access increases
Solution Approach 1:
The patent applies preliminary anti-action by proactively prohibiting access to specific data units before unauthorized stealing can occur. The selective prohibition mechanism is established in advance, preventing non-secure processors from accessing slice type data units that contain video content, while still allowing them to access parameter set data units for decoding functionality.
Solution Approach 2:
The patent extracts the harmful element (access to slice type data units containing video content) from the system while retaining the useful element (access to parameter set data units for decoding). This extraction of specific data unit types resolves the contradiction by removing the vulnerability to unauthorized stealing while preserving ease of operation for legitimate decoding.
Data Source
AI summary
A video stream protection device is for protecting a video stream to be decoded. The video stream contains one or more data units each having a header section and a body section, and the header section contains header information indicative of a data type of the corresponding body section. The video stream protection device comprises: an identification module for identifying the one or more data units based on respective start positions of the one or more data units; a data type detection module for obtaining the header information of the identified data units, and determining the data type of the body section of each identified data unit based on the header information of the identified data unit; and a control module for determining whether to prohibit decoding of data of each data unit based on the data type of the body section of the data unit.