Security system and method of in-flight entertainment device rentals having self-contained audiovisual presentations
A security method for in-flight entertainment device (IFED) rentals having self-contained audiovisual presentations is disclosed. A self-contained IFED has internal storage configured to contain current releases of movies and other audiovisual presentations. The method provides layers of security including a unique bit stream encoding format, watermarking, camera artifacts, file encryption, hard drive encryption, input-output encryption, physically unique connectors, and a tamper-resistant casing for the self-contained IFEDs.
1. A method comprising:
receiving an audiovisual master file from a movie recording studio or other organization containing an audiovisual presentation including a to-be-released or recently released movie, the audiovisual master file being in a first encoded and compressed format;
adding watermark characters to the encoded audiovisual master file, the watermark characters identifying time and place of encoding;
adding camera artifacts to the encoded audiovisual master file;
encrypting the encoded audiovisual master file to create an encrypted encoded audiovisual master file;
generating keys associated with the encrypted encoded audiovisual master file for using in decoding the encrypted encoded audiovisual master file;
transmitting the encrypted encoded audiovisual master file and the associated keys to a distribution point host computer;
loading the transmitted encrypted encoded audiovisual master file on the distribution point host computer;
linking the distribution point host computer with a self-contained entertainment device and establishing bidirectional authentication between the distribution point host computer and the self-contained entertainment device through use, in part, of an input-output of the self-contained entertainment device, wherein the self-contained entertainment device including a display, processor and hard drive integrally formed in a single, portable device;
after bi-directional authentication occurs, using the distribution point host computer to delete at least some of the previously loaded encrypted encoded audiovisual master files from the self-contained entertainment device;
using the distribution point host computer to transfer the newly loaded encrypted encoded audiovisual master file and keys associated with the newly loaded encrypted encoded audiovisual master file to the self-contained entertainment device to which the distribution point host computer is linked without decryption of the newly loaded encrypted encoded audiovisual master file being transferred to the self-contained entertainment device; and
storing the newly loaded encrypted encoded audiovisual master file and the keys associated with the newly loaded encrypted encoded audiovisual master file on the hard drive of the self-contained entertainment.
2. The method of claim 1 further including using the self-contained entertainment device to subsequently decrypt the newly loaded encrypted encoded audiovisual master file stored on the encrypted hard drive of the self-contained entertainment device using the keys associated with the newly loaded encrypted encoded audiovisual master file stored on an encrypted hard drive of the self-contained entertainment device to display audiovisual presentation of the newly loaded encrypted encoded audiovisual master file stored on the encrypted hard drive of the self-contained entertainment device to a person who rented the self-contained entertainment device.
3. The method of claim 1 , wherein adding camera artifacts to the encoded audiovisual master file includes adding elements invisible to the naked eye upon display of the audiovisual master file, but visible to the naked eye upon display of a video recording of the audiovisual master file.
4. A self-contained entertainment device, comprising:
a sound output;
a visual display;
a processor;
encrypted audiovisual files;
an encrypted hard drive containing the encrypted audiovisual files;
a hard drive decryptor configured for decrypting the encrypted hard drive;
a file decryptor for decrypting the encrypted files using one or more keys associated with respective audio visual files and received from a distribution device;
an input-output with a unique physical configuration;
an input-output authenticator configured to authenticate the distribution device attempting to communicatively link to the input-output only during a limited time window;
a case being secured with anti-tamper fasteners, the case being portable and housing the visual display, processor and encrypted hard drive; and
an evidentiary seal positioned to rupture when a portion of the case is disassembled.
5. The device of claim 4 , wherein the device is an in-flight entertainment device for use during a commercial airline flight, is portable within the aircraft of the commercial airline flight, and is disconnected from the distribution device during the commercial airline flight.
6. The device of claim 4 , wherein the input-output provides write access to a distribution point host computer, but does not provide read access to the distribution point host computer.
7. The device of claim 4 , wherein the hard drive decryptor and file decryptor are on a same physical device.
8. The device of claim 7 , wherein the hard drive decryptor is configured to use decryption methods separate from those used by the file decryptor to decrypt individual encrypted files.
9. The device of claim 4 , wherein the input-output is on an in-flight entertainment device and the unique physical configuration includes a shape complementary to a shape of a uniquely formed connector configured to physically couple the device to a distribution point host computer, the shape being unique relative to a communication protocol of the input-output.
10. The device of claim 9 , wherein the unique physical coordination is configured to communicate through a standard communication protocol.
11. The device of claim 10 , wherein the standard communication protocol includes at least one of USB 2.0 or IEEE 1394, while the uniquely formed connector has a shape other than that for a respective one of USB 2.0 or IEEE 1394.
12. The device of claim 4 , wherein the input-output is a hard-wired connection configured to provide a sole and exclusive source for external access to update content on the encrypted hard drive.
13. The device of claim 4 , wherein the input-output authenticator is configured to require a physical disconnection and reconnection between the distribution device and the device at the input-output when authentication is attempted outside of the limited time window.
14. A method comprising:
receiving an audiovisual master file from a movie recording studio or other organization containing an audiovisual presentation, the audiovisual presentation being a to-be-released or recently released movie, the audiovisual master file being in a first encoded and compressed format;
encrypting the encoded audiovisual master file to create an encrypted encoded audiovisual master file;
generating keys associated with the encrypted encoded audiovisual master file for using in decoding the encrypted encoded audiovisual master file;
transmitting the encrypted encoded audiovisual master file and the associated keys to a distribution point host computer;
loading the transmitted encrypted encoded audiovisual master file on the distribution point host computer;
linking the distribution point host computer with a self-contained entertainment device and establishing bi-directional authentication between the distribution point host computer and the self-contained entertainment device through use, in part, of an input-output of the self-contained entertainment device, the input-output being configured to connect to an input-output authenticator configured to perform authentication of the distribution point host computer only during a limited time window, the self-contained entertainment device also including a processor, display and hard drive integrally embedded within a single, portable housing;
using the distribution point host computer to transfer the newly loaded encrypted encoded audiovisual master file and keys associated with the newly loaded encrypted encoded audiovisual master file to the self-contained entertainment device to which the distribution point host computer is linked; and
storing the newly loaded encrypted encoded audiovisual master file and the keys associated with the newly loaded encrypted encoded audiovisual master file on the hard drive of the self-contained entertainment device to which the distribution point host computer is linked.
15. A self-contained, portable entertainment device, comprising:
a sound output;
a visual display;
a processor;
encrypted audiovisual files;
an encrypted hard drive containing the encrypted audiovisual files;
a hard drive decryptor configured for decrypting the encrypted hard drive;
a file decryptor for decrypting the encrypted files using one or more keys received from a distribution device; and
an input-output authenticator configured to authenticate the distribution device attempting to communicatively link to the input-output, and to do so only during a limited time window.
16. The device of claim 15 , wherein the device includes an in-flight entertainment device and the device attempting to communicatively link to the input-output is a distribution point computer, and wherein the in-flight entertainment device is configured to display the decrypted audiovisual files on the visual display after disconnection from the distribution point host computer.
17. The system of claim 16 , wherein the in-flight entertainment device is configured for use during a commercial airline flight, separate from the distribution point host computer.