Mechanism for partial encryption of data streams
View Patent ↗Embodiments of the invention are generally directed to partial encryption of data stream. An embodiment of a method includes receiving, at a data transmitting device, a data stream having content including one or more of audio content, video content, and control content, determining one or more content that are to be encrypted. The method further includes partially encrypting the data stream by encrypting the one or more content, and leaving other content unencrypted, and transmitting, from the data transmitting device, the partially encrypted data stream to a data receiving device.
1. A method performed at a source device, the method comprising:
receiving a first type of content selected from a group of audio content, video content, and control content, and a second type of content selected from the group, the second type of content different from the first type of content;
determining the first type of content to be encrypted and the second type of content to remain unencrypted;
inserting, in a data stream, a first flag between a first guardband character and the first type of content, the first flag indicating the first type of content to be encrypted for transmission of the first type of content;
inserting, in the data stream, a second flag between a second guardband character and the second type of content, the second flag indicating the second type of content to remain unencrypted during transmission of the second type of content;
encrypting the first type of content but not the second type of content, an encrypted version of the first type of content accessible by an intermediate device but not by a sink device, an unencrypted version of the second type of content accessible by the intermediate device and the sink device, the intermediate device separate and distinct from the source device and the sink device, the intermediate device performing analysis or modification of the data stream based on the first flag indicating the first type of content to be encrypted and the second flag indicating the second type of content to remain unencrypted, and sending the analyzed or modified data stream to the sink device; and
transmitting the data stream including the first flag, the encrypted version of the first type of content, the second flag, and the unencrypted version of the second type of content to the intermediate device.
2. The method of claim 1 , wherein the first type of content and the second type of content comprise High-Definition Multimedia Interface (HDMI)-based contents or Mobile High-Definition Link (MHL)-based contents, and wherein the encryption of the first type of content is based on a High-bandwidth Digital Content Protection (HDCP) protocol.
3. A system comprising:
a source device configured to:
receive a first type of content selected from a group of audio content, video content, and control content, and a second type of content selected from the group, the second type of content different from the first type of content,
determine the first type of content to be encrypted and the second type of content to remain unencrypted,
insert, in a data stream, a first flag between a first guardband character and the first type of content, the first flag indicating the first type of content to be encrypted for transmission of the first type of content,
insert, in the data stream, a second flag between a second guardband character and the second type of content, the second flag indicating the second type of content to remain unencrypted during transmission of the second type of content,
encrypt the first type of content but not the second type of content, an encrypted version of the first type of content accessible by an intermediate device but not by a sink device, an unencrypted version of the second type of content accessible by the intermediate device and the sink device, the intermediate device separate and distinct from the source device and the sink device, the intermediate device performing analysis or modification of the data stream based on the first flag indicating the first type of content to be encrypted and the second flag indicating the second type of content to remain unencrypted, and sending the analyzed or modified data stream to the sink device, and
transmit the data stream including the first flag, the encrypted version of the first type of content, the second flag, and the unencrypted version of the second type of content to the intermediate device;
the intermediate device performing analysis or modification of the data stream based on the first flag and the second flag, and sending the analyzed or modified data stream to the sink device; and
the sink device to receive the analyzed or modified data stream from the intermediate device.
4. The system of claim 3 , wherein the source device comprises a partial encryption mechanism to encrypt the first type of content of the data stream.
5. The system of claim 3 , wherein the first type of content and the second type of content comprise High-Definition Multimedia Interface (HDMI)-based contents or Mobile High-Definition Link (MHL)-based contents, and wherein the encryption of the first type of content is based on a High-bandwidth Digital Content Protection (HDCP) protocol.
6. An apparatus comprising:
a receiver configured to receive a first type of content selected from a group of audio content, video content, and control content, and a second type of content selected from the group, the second type of content different from the first type of content;
a partial encryption mechanism configured to:
determine the first type of content to be encrypted and the second type of content to remain unencrypted,
insert, in a data stream, a first flag between a first guardband character and the first type of content, the first flag indicating the first type of content to be encrypted for transmission of the first type of content,
insert, in the data stream, a second flag between a second guardband character and the second type of content, the second flag indicating the second type of content to remain unencrypted during transmission of the second type of content, and
encrypt the first type of content but not the second type of content, an encrypted version of the first type of content accessible by an intermediate device but not by a sink device, an unencrypted version of the second type of content accessible by the intermediate device and the sink device, the intermediate device separate and distinct from the apparatus and the sink device, the intermediate device performing analysis or modification of the data stream based on the first flag indicating the first type of content to be encrypted and the second flag indicating the second type of content to remain unencrypted, and sending the analyzed or modified data stream to the sink device; and
a transmitter configured to transmit the data stream including the first flag, the encrypted version of the first type of content, the second flag, and the unencrypted version of the second type of content to the intermediate device.
7. The apparatus of claim 6 , wherein the first type of content and the second type of content comprise High-Definition Multimedia Interface (HDMI)-based contents or Mobile High-Definition Link (MHL)-based contents, and wherein the encryption of the first type of content is based on a High-bandwidth Digital Content Protection (HDCP) protocol.
8. A non-transitory machine-readable medium having stored thereon instructions which, when executed by a machine, cause a source device to:
receive a first type of content selected from a group of audio content, video content, and control content, and a second type of content selected from the group, the second type of content different from the first type of content;
determine the first type of content to be encrypted and the second type of content to remain unencrypted;
insert, in a data stream, a first flag between a first guardband character and the first type of content, the first flag indicating the first type of content to be encrypted for transmission of the first type of content;
insert, in the data stream, a second flag between a second guardband character and the second type of content, the second flag indicating the second type of content to remain unencrypted during transmission of the second type of content;
encrypt the first type of content but not the second type of content, an encrypted version of the first type of content accessible by an intermediate device but not by a sink device, an unencrypted version of the second type of content accessible by the intermediate device and the sink device, the intermediate device separate and distinct from the source device and the sink device, the intermediate device performing analysis or modification of the data stream based on the first flag indicating the first type of content to be encrypted and the second flag indicating the second type of content to remain unencrypted, and sending the analyzed or modified data stream to the sink device; and
transmit the data stream including the first flag, the encrypted version of the first type of content, the second flag, and the unencrypted version of the second type of content to the intermediate device.
9. The non-transitory machine-readable medium of claim 8 , wherein the first type of content and the second type of content comprise High-Definition Multimedia Interface (HDMI)-based contents or Mobile High-Definition Link (MHL)-based contents, and wherein the encryption of the first type of content is based on a High-bandwidth Digital Content Protection (HDCP) protocol.
10. The method of claim 1 , wherein the first guardband character comprises a value indicating encrypted data island period or encrypted video data period, and wherein the second guardband character comprises another value indicating unencrypted data island period or unencrypted video data period.
11. The system of claim 3 , wherein the first guardband character comprises a value indicating encrypted data island period or encrypted video data period, and wherein the second guardband character comprises another value indicating unencrypted data island period or unencrypted video data period.
12. The apparatus of claim 6 , wherein the first guardband character comprises a value indicating encrypted data island period or encrypted video data period, and wherein the second guardband character comprises another value indicating unencrypted data island period or unencrypted video data period.
13. The non-transitory machine-readable medium of claim 8 , wherein the first guardband character comprises a value indicating encrypted data island period or encrypted video data period, and wherein the second guardband character comprises another value indicating unencrypted data island period or unencrypted video data period.
14. The method of claim 1 , further comprising removing one or more portions of the second type of content from the data stream without affecting the first type of content or decryption of the first type of content at the sink device.
15. The non-transitory machine-readable medium of claim 8 , further comprising instructions when executed by the machine cause the source device to remove one or more portions of the second type of content from the data stream without affecting the first type of content or decryption of the first type of content at the sink device.