Secure and personalized broadcasting of audiovisual streams by a hybrid unicast/multicast system
A process for secure distribution of digital audiovisual streams according to a standard, normalized or proprietary format including separating an original stream into two parts, transmitting the parts to addressee equipment, generating a modified main stream having a format of the original stream and complementary information with any format including digital information suitable to permit reconstruction of the original stream, and transmitting the modified stream from a distribution server via separate paths during distribution in an extended, secure multicasting mode to the addressee equipment from a secure central server passing via at least one router and at least one switch connecting the addressee equipment to the central server via at least one access point.
1. A process for secure distribution of digital audiovisual streams according to a standard, normalized or proprietary format comprising:
separating an original encoded audiovisual stream into two parts;
transmitting the parts to addressee equipment;
generating a modified main stream having a format of the original encoded audiovisual stream and complementary information with any format comprising digital information suitable to permit reconstruction of the original encoded audiovisual stream by deleting and replacing, directly on a compressed bitstream, domain information segments of the original encoded audiovisual stream, wherein the complementary information comprises the replaced information segments of the original encoded audiovisual stream; and
transmitting via separate paths:
the modified main stream in a broadcasting mode; and
the complementary information in an extended, secure multicasting mode to the addressee equipment from a secure central server passing via at least one router and at least one switch connecting the addressee equipment to the central server via at least one access point, wherein the secure multicasting mode enables in-band transmission of information relative to digital rights management.
2. The process according to claim 1 , wherein authentication between a client and the server is performed in unicast mode.
3. The process according to claim 2 , further comprising generating a session key that is unique by content and by client by the central server following the authentication.
4. The process according to claim 3 , wherein the complementary information is compressed and encrypted prior to being sent to a client.
5. The process according to claim 1 , further comprising performing management of a multicasting group in a connection layer controlling distribution of data in multicasting solely for a selected access point.
6. The process according to claim 1 , wherein managing and securing of the complementary information is performed following a multi-reception of requests for authentication by a central server and comprises compression, encryption and management of session keys.
7. The process according to claim 1 , wherein regeneration of a new session key for the client is performed as a function of a decision of a client to prolong a connection based on the lifetime of a preceding session key and is individual for each member of a multicasting group.
8. The process according to claim 1 , wherein the complementary information is secured and personalized for each client and for each multicasting session with the aid of methods of hybrid or symmetric or asymmetric encryption.
9. A system for the secure distribution of audiovisual streams comprising a device for separating an original encoded video stream into a modified main stream and into complementary information by deleting and replacing, directly on a compressed bitstream, domain information segments of the original encoded video stream, at least one multimedia server containing the audiovisual streams, at least one secure central server comprising a device for securing and personalizing the complementary information from which the complementary information is distributed, at least one telecommunication network, at least one router, at least one switch functioning as an access point for connection to addressee equipment and a device in the addressee equipment for reconstruction of the original audiovisual stream as a function of the modified main stream and the complementary information, wherein the complementary information comprises the replaced information segments of the original encoded audiovisual stream, wherein the complementary information is transmitted in an extended, secure multicasting mode that enables in-band transmission of information relative to digital rights management, and wherein the modified main stream is transmitted in a broadcasting mode.
10. The system according to claim 9 , wherein control of throughput in a multi-casting group is performed as a consequence of managing and personalizing of securing of the complementary information.