Processing transport packets

1. A method comprising:

receiving at a relay node transport packets transmitted from a transmitting node as an encrypted data stream for routing to a destination node;

determining by the relay node whether transport packets are missing from the encrypted data stream; and

generating substitute data for transport packets that are identified as missing based on the determining, the substitute data generated from the encrypted data stream using corresponding correction data units formed from operations performed on the encrypted data, such that recovery of transport packets that are missing occurs at the relay node without performing decryption operations upon the encrypted data stream.

2. A method as recited in claim 1 , further comprising obtaining the correction data units from the transmitting node wherein the operations performed on the encrypted data to generate the error correction data units occur at the transmitting node.

3. A method as recited in claim 1 , wherein the correction data units are included within the transport packets that are received.

4. A method as recited in claim 1 , further comprising:

obtaining the correction data units separately from the transport packets of the encrypted data stream.

5. A method as recited in claim 1 , wherein determining by the relay node whether transport packets are missing from the encrypted data stream includes monitoring sequence numbers associated with received transport packets to identify when transport packets are received out of sequence.

6. The method of claim 1 , wherein the correction data units are forward error correction data units.

7. The method of claim 1 , wherein each of the received transport packets comprises an unencrypted header having information identifying the content of transport packet and a payload.

8. The method of claim 1 , wherein payloads associated with said transport packets are configured to include at least encrypted data stream units.

9. The method of claim 8 , wherein at least some of the payloads of said transport packets are further configured to include correction data units used for generating the substitute data.

10. A method as recited in claim 1 , further comprising:

forming output transport packets for routing from the relay node to the destination node, the output transport packets configured to contain the substitute data that is generated; and

transmitting the output transport packets from the relay node.

11. A method as recited in claim 10 , further comprising:

generating new correction data units at the relay node for the output transport packets; and

communicating the new correction data for error correction of the output transport packets by one or more nodes to which the output transport packets are transmitted.

12. A method as recited in claim 1 , wherein the operations performed on the encrypted data to generate the error correction data units comprise XOR operations applied to units of the encrypted data.

13. A relay node comprising:

a processing unit;

a computer program product comprising instructions that, when executed by the processing unit, cause the relay node to perform operations for processing transport packets including:

receiving an encrypted data stream for routing to a destination node;

determining by the relay node whether transport packets are missing from the encrypted data stream; and

generating substitute data for transport packets that are identified as missing based on the determining, the substitute data generated from the encrypted data stream using corresponding correction data units formed from operations performed on the encrypted data, such that recovery of transport packets that are missing occurs at the relay node without performing decryption operations upon the encrypted data stream.

14. The relay node of claim 13 , wherein the instructions further cause the relay node to implement a packetiser configured to generate, at the relay node, a packetized data stream including the substitute data for transmission from the relay node.

15. The relay node of claim 14 , wherein the instructions further cause the relay node to implement a generator configured to generate new correction data units corresponding to the packetized data stream including the substitute data.

16. The relay node of claim 15 , wherein each of the received transport packets comprises an unencrypted header having information identifying the content of transport packet and a payload including at least encrypted data.

17. A transmitting node comprising:

an encoder configured to obtain data to be transmitted to a destination node via a relay node and encode the data to form a data stream;

an encryption block configured to encrypt the data stream to produce an encrypted data stream;

a error correction generator configured to, after encryption of the data stream, perform operations upon the encrypted data stream to generate corresponding correction data units, the correction data units configured to enable the relay node to recover transport packets of the encrypted data stream that are lost during transmission without having to perform decryption operations at the relay node; and

a network interface configured to enable communication of the encrypted data stream and the corresponding correction data units for receipt by the relay node for processing.

18. The transmitting node of claim 17 , wherein the encrypted data stream is packetized into transport packets each having an unencrypted header containing information identifying the content of transport packet and a payload including at least encrypted data.

19. The transmitting node of claim 17 , wherein at least some of said payloads for the transport packets are further configured to include correction data units generated by the error correction generator.

20. The transmitting node of claim 17 , wherein the transmitting node is configured to communicate the correction data units and the encrypted data stream to the relay node as separate data streams.