Virtual Video Server Instances for Subscriber Capacity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current media delivery systems over open networks face challenges such as high costs due to increased bandwidth demands with more subscribers, inefficient access control, and vulnerability to cloning attacks, particularly in ensuring secure and timely delivery of video-on-demand services.
Innovation Solution
A distributed architecture that allows media services to be delivered through a hybrid client-server model, where entitlement control messages are only validated and distributed upon request, eliminating the need for permanent key storage in set-top boxes and enabling secure, real-time encryption and decryption processes, and dynamically distributing media content among multiple client devices to manage load and prevent hacking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple video servers are deployed to accommodate more subscribers, then the system capacity increases, but the overall cost increases considerably
Solution Approach 1:
The patent creates a virtual copy of the video server environment by containerizing the server software. Multiple isolated video server instances can run on a single physical server, each serving different subscriber groups. This eliminates the need to deploy additional physical servers when subscriber capacity needs to increase, thereby maintaining system capacity while avoiding the considerable cost increase associated with adding more physical hardware.
2Device complexity
If a single video server serves all subscribers, then the system is cost-effective, but the bandwidth requirement per subscriber path must be sufficient which increases backbone network cost
Solution Approach 1:
The patent segments the subscriber base into multiple groups, with each isolated video server instance serving a specific subscriber group. This segmentation allows the backbone network to distribute video streams to different server instances rather than delivering the same high-bandwidth stream to every subscriber path simultaneously. Each server instance handles a portion of the total bandwidth load, reducing the bandwidth requirement per subscriber path while maintaining cost-effectiveness.
3Reliability
If entitlement control messages are broadcasted to all receivers, then access control is implemented, but the system becomes vulnerable to cloning attacks and requires permanent key storage in set-top boxes
Solution Approach 1:
The patent introduces an intermediary mechanism where entitlement control messages are not broadcasted directly to all receivers but are instead validated and distributed selectively through the isolated video server instances. The server instances act as intermediaries that verify subscriber credentials and distribute decryption keys only to authorized subscribers. This eliminates the need for permanent key storage in set-top boxes and prevents cloning attacks by ensuring keys are dynamically generated and distributed through controlled channels.
4Adaptability or versatility
If video data is delivered over open networks, then service coverage is expanded, but security against unauthorized access becomes challenging
Solution Approach 1:
The patent implements dynamic security measures where entitlement control messages and decryption keys are not statically stored but are dynamically generated and distributed based on real-time subscriber authentication. The isolated video server instances dynamically validate subscriber credentials and provide time-limited access rights. This dynamic approach maintains service coverage over open networks while enhancing security against unauthorized access, as keys expire and can be revoked without requiring physical hardware changes.
Data Source
AI summary
A system for providing trickplay functionality—such as pause, instant replay, rewind, fast forward, etc—for very highly compressed video/audio data stream. Depending on the trickplay functionality, the system configures the duration of playback before a jump, the decoding speed required, the number of pictures to display per second, and the distance between jumps. The system may comprise a decoder, a picture rate controller and a display.