System and method for using a streaming protocol
View Patent ↗An initialization vector (IV) is employed to decrypt a block of a stream that has been encrypted with Cypher Block Chaining (CBC) encryption, without requiring decryption of previous blocks within the stream. For example, a listener who accesses a distribution point to retrieve encrypted content authenticates himself to an application server that regulates access to encrypted content on the distribution point, and responsively receives a key. The listener then requests access to a reference point within the encrypted content stream somewhere after its beginning (e.g., using preview clips). The distribution point relates the reference point to a corresponding block of the encrypted stream, and identifies an IV previously used for encryption of that block. The distribution point provides the associated encrypted block of content and the IV to the listener to enable mid-stream rendering of the encrypted content, without requiring the listener to decrypt previous blocks within the encrypted stream.
1. A host with a processor, the host comprising:
a communications interface structured and arranged to:
receive a first request from a client to access an encrypted stream of media content, and
transmit the encrypted stream to the client;
a cryptographic data store structured and arranged to store:
the encrypted stream of media content and
a table of initialization vectors, each of the initialization vectors associated with a specific portion of the encrypted stream of media content;
a processor structured and arranged to
receive a time-shift command from the client comprising a command to at least one of rewind the encrypted stream of media, pause the encrypted stream of media, or access the encrypted stream of media beginning at a specified time into the stream,
identify a specified portion of the encrypted stream of media content by associating the received time-shift command with the specified portion of the encrypted stream of media content,
access the table of initialization vectors,
retrieve, from the table of initialization vectors, a specific initialization vector associated with the identified specified portion of the encrypted stream of media content, and
instruct the communications interface to transmit the identified specified portion of the encrypted stream of media content and the specific initialization vector.
2. The host of claim 1 , wherein the processor is further structured and arranged to:
instruct the communications interface to transmit the identified specified portion of the encrypted stream of media content and the specific initialization vector to the client.
3. The host of claim 1 , wherein the processor is further structured and arranged to:
instruct the communications interface to transmit the identified specified portion of the encrypted stream of media content and the specific initialization vector to a duplicating switch for distribution to the client.
4. The host of claim 3 , wherein the processor is further structured and arranged to:
instruct the communications interface to transmit a decryption key for use in decrypting the encrypted stream of media content.
5. The host of claim 4 , wherein each portion of the encrypted stream of media is encrypted using one of multiple decryption keys.
6. The host of claim 5 , wherein the processor is further structured and arranged to:
instruct the communications interface to transmit, when a second portion of the encrypted stream of media is encrypted using a different decryption key from the immediately previous portion of the encrypted stream of media, a metadata message indicating that the second portion is encrypted using the different decryption key.
7. The host of claim 6 , wherein the metadata message comprises 0x3902.
8. The host of claim 1 , wherein the encrypted stream of media content is encrypted using a cipher-block chained encryption system.
9. A method for transmitting data to a client, comprising:
receiving, at a host with a processor, a first request from the client to access an encrypted stream of media content;
transmitting, from the host, a portion of the encrypted stream to the client;
receiving a time-shift command from the client comprising a command to at least one of: rewind the encrypted stream of media, pause the encrypted stream of media, or access the encrypted stream of media beginning at a specified time into the stream;
identifying a specified portion of the encrypted stream of media content by associating the received time-shift command with the specified portion of the encrypted stream of media content;
accessing, at the host, a table of initialization vectors;
retrieving, from the table of initialization vectors, a specific initialization vector associated with the identified specified portion of the encrypted stream of media content; and
transmitting the identified specified portion of the encrypted stream of media content and the specific initialization vector;
wherein each of the initialization vectors is associated with a specific portion of the encrypted stream of media content.
10. The method of claim 9 , further comprising:
transmitting the identified specified portion of the encrypted stream of media content and the specific initialization vector to the client.
11. The method of claim 9 , further comprising:
transmitting the identified specified portion of the encrypted stream of media content and the specific initialization vector to a duplicating switch for distribution to the client.
12. The method of claim 11 , further comprising:
transmitting a decryption key to the duplicating switch for use by the client in decrypting the encrypted stream of media content.
13. The method of claim 12 , wherein each portion of the encrypted stream of media is encrypted using one of multiple decryption keys.
14. The method of claim 12 , further comprising:
transmitting, when a second portion of the encrypted stream of media is encrypted using a different decryption key from the immediately previous portion of the encrypted stream of media, a metadata message indicating that the second portion is encrypted using the different decryption key.
15. The method of claim 14 , wherein the metadata message comprises 0x3902.
16. The method of claim 9 , wherein the encrypted stream of media content is encrypted using a cipher-block chained encryption system.
17. A system for transmitting data to a client, comprising:
a client; and
a host in communication with the client, the host comprising:
a communications interface structured and arranged to:
receive a first request from the client to access an encrypted stream of media content, and
transmit the encrypted stream to the client;
a cryptographic data store structured and arranged to store:
the encrypted stream of media content, and
a table of initialization vectors, each of the initialization vectors associated with a specific portion of the encrypted stream of media content;
a processor structured and arranged to
receive a time-shift command from the client comprising a command to at least one of: rewind the encrypted stream of media, pause the encrypted stream of media, or access the encrypted stream of media beginning at a specified time into the stream,
identify a specified portion of the encrypted stream of media content by associating the received time-shift command with the specified portion of the encrypted stream of media content,
access the table of initialization vectors,
retrieve, from the table of initialization vectors, a specific initialization vector associated with the identified specified portion of the encrypted stream of media content, and
instruct the communications interface to transmit the identified specified portion of the encrypted stream of media content and the specific initialization vector.
18. The system of claim 17 , further comprising a duplicating switch for transmitting the specified portion of the encrypted stream of media content and the specific initialization vector to the client.