System and method for using a streaming protocol
View Patent ↗An initialization vector (IV) is employed to decrypt a block of a stream that has been encrypted with Cypher Block Chaining (CBC) encryption, without requiring decryption of previous blocks within the stream. For example, a listener who accesses a distribution point to retrieve encrypted content authenticates himself to an application server that regulates access to encrypted content on the distribution point, and responsively receives a key. The listener then requests access to a reference point within the encrypted content stream somewhere after its beginning (e.g., using preview clips). The distribution point relates the reference point to a corresponding block of the encrypted stream, and identifies an IV previously used for encryption of that block. The distribution point provides the associated encrypted block of content and the IV to the listener to enable mid-stream rendering of the encrypted content, without requiring the listener to decrypt previous blocks within the encrypted stream.
1. A method for transmitting data to a client, the method comprising the following operations performed by at least one processor:
receiving, at a distribution point, at least one portion of an encrypted stream of media, the encrypted stream associated with at least one first metadata message and at least one second metadata message;
caching the at least one first metadata message;
receiving a time-shift command from the client;
identifying a portion of the encrypted stream of media content associated with the received time-shift command;
if the identified portion includes a second metadata message, transmitting the at least one second metadata message;
receiving another first metadata message;
determining that a metadata ID corresponding to the another first metadata message matches a metadata ID corresponding to the at least one first metadata message;
removing the cached at least one first metadata message; and
caching the another first metadata message; and
transmitting the identified specified portion of the encrypted stream of media content, an initialization vector associated with the identified portion, and the cached at least one first metadata message.
2. The method of claim 1 , further comprising retrieving the initialization vector from a table of initialization vectors.
3. The method of claim 1 , wherein the identified portion does not include the cached at least one first metadata message.
4. The method of claim 3 , wherein the at least one first metadata message is contained in a portion of the encrypted stream preceding the identified portion.
5. The method of claim 1 , wherein the cached at least one first metadata message includes the initialization vector.
6. The method of claim 5 , wherein the cached at least one first metadata message further comprises content information associated with the encrypted stream of media.
7. The method of claim 1 , further comprising:
receiving a metadata message indicating that metadata should be flushed; and
removing the cached at least one first metadata message.
8. A system for transmitting data to a client, the system comprising:
at least one processor; and
a storage device that stores instructions configured to, when executed by the at least one processor, cause the processor to perform the following operations:
receive at least one portion of an encrypted stream of media, the encrypted stream associated with at least one first metadata message and at least one second metadata message;
cache the at least one first metadata message;
receive a time-shift command from the client;
identify a portion of the encrypted stream of media content associated with the received time-shift command;
if the identified portion includes a second metadata message, transmit the at least one second metadata message;
receive another first metadata message;
determine that a metadata ID corresponding to the another first metadata message matches a metadata ID corresponding to the at least one first metadata message;
remove the cached at least one first metadata message; and
cache the another first metadata message; and
transmit the identified specified portion of the encrypted stream of media content, an initialization vector associated with the identified portion, and the cached at least one first metadata message.
9. The system of claim 8 , wherein the instructions are further configured to cause the at least one processor to retrieve the initialization vector from a table of initialization vectors.
10. The system of claim 8 , wherein the identified portion does not include the cached at least one first metadata message.
11. The system of claim 10 , wherein the at least one first metadata message is contained in a portion of the encrypted stream preceding the identified portion.
12. The system of claim 8 , wherein the cached at least one first metadata message comprises the initialization vector.
13. The system of claim 12 , wherein the cached at least one first metadata message further comprises content information associated with the encrypted stream of media.
14. The system of claim 8 , wherein the instructions are further configured to cause the at least one processor to:
receive a metadata message indicating that metadata should be flushed; and
remove the cached at least one first metadata message.
15. A computer-readable storage device comprising instructions that, when executed by at least one processor, causes the at least one processor to perform the following operations:
receive at least one portion of an encrypted stream of media, the encrypted stream associated with at least one first metadata message and at least one second metadata message;
cache the at least one first metadata message;
receive a time-shift command from the client;
identify a portion of the encrypted stream of media content associated with the received time-shift command;
if the identified portion includes a second metadata message, transmit the at least one second metadata message;
receive another first metadata message;
determine that a metadata ID corresponding to the another first metadata message matches a metadata ID corresponding to the at least one first metadata message;
remove the cached at least one first metadata message; and
cache the another first metadata message; and
transmit the identified specified portion of the encrypted stream of media content, an initialization vector associated with the identified portion, and the cached at least one first metadata message.
16. The storage device of claim 15 , wherein the identified portion does not include the cached at least one first metadata message.
17. The storage device of claim 15 , wherein the cached at least one first metadata message comprises the initialization vector and content information associated with the encrypted stream of media.