Interleaved watermarking

1. A Headend apparatus comprising:

a watermark processor to:

receive a primary video stream; and

select a plurality of sections of the primary video stream in which to embed units of data for use in watermarking;

generate a plurality of secondary video streams from the plurality of sections of the primary video stream as input;

group the plurality of secondary video streams in a plurality of groups so that each one group of the plurality of groups includes at least two secondary video streams from the plurality of secondary video streams, the plurality of secondary video streams including the units of data for use in watermarking across a plurality of cryptoperiods in an end user device which selects one secondary video stream from the at least two secondary video streams in each one group every one cryptoperiod of the plurality of cryptoperiods for rendering as part of a composited video stream in order to embed the units of data of an identification in the composited video stream, wherein in each one cryptoperiod of the plurality of cryptoperiods the watermark processor is operative to generate different groups of the plurality of groups of secondary video streams from different non-overlapping portions of the primary video stream and wherein in each one cryptoperiod of the plurality of cryptoperiods at least one secondary video stream of the at least two secondary video streams in a first group of the plurality of groups is different from each one of the at least two secondary video streams in a second group of the plurality of groups;

an encryption processor to:

generate a plurality of control words for each one of the plurality of secondary video streams;

encrypt each one of the plurality of secondary video streams with a different control word of the plurality of control words;

change the different control word of each one of the plurality of secondary video streams every one cryptoperiod of the plurality of cryptoperiods;

generate a control word for the primary video stream;

encrypt the primary stream with the control word of the primary video stream; and

change the control word of the primary video stream every one cryptoperiod of the plurality of cryptoperiods; and

a timing processor to arrange a timing of the plurality of secondary video streams in each of the plurality of cryptoperiods so that portions of the plurality of secondary video streams including the units of data are synchronized with a plurality of watermarking gaps in the primary video stream.

2. The apparatus according to claim 1 , wherein each one of the at least two secondary video streams in a first group of the plurality of groups is different from each one of the at least two secondary video streams in a second group of the plurality of groups.

3. The apparatus according to claim 1 , further comprising an entitlement control message generation processor to generate at least one entitlement control message for each of the plurality of cryptoperiods, the at least one entitlement control message for each one cryptoperiod including information to enable the end-user device to generate a control word for the one cryptoperiod for decrypting the one secondary video stream in each one group.

4. The apparatus according to claim 1 , further comprising a multiplexer to multiplex the plurality of secondary video streams in a transport stream.

5. The apparatus according to claim 1 , wherein a first video stream of the plurality of secondary video streams in one group of the plurality of groups includes a first unit of data and a second video stream of the plurality of secondary video streams in the one group of the plurality of groups includes a second unit of data different from the first unit of data.

6. The apparatus according to claim 1 , wherein in each one cryptoperiod of the plurality of cryptoperiods each one of the plurality of secondary video streams is encrypted with a different control word.

7. An end-user device, comprising:

a receiver to receive a primary video stream and a plurality of secondary video streams generated from a plurality of sections of the primary video stream, the plurality of secondary video streams being grouped in a plurality of groups so that each one group of the plurality of groups includes at least two secondary video streams from the plurality of secondary video streams, the plurality of secondary video streams including units of data for use in watermarking across a plurality of cryptoperiods, wherein in each one cryptoperiod of the plurality of cryptoperiods different groups of the plurality of groups of secondary video streams have been generated from different non-overlapping portions of the primary video stream and wherein in each one cryptoperiod of the plurality of cryptoperiods at least one secondary video stream of the at least two secondary video streams in a first group of the plurality of groups is different from each one of the at least two secondary video streams in a second group of the plurality of groups;

a demultiplexer to select one secondary video stream from the at least two secondary video streams in each one group for rendering as part of a composited video stream in order to embed the units of data of an identification in the composited video stream; and

a decryption processor to:

receive at least one entitlement control message for each of the plurality of cryptoperiods;

for each one cryptoperiod of the plurality of cryptoperiods, generate a control word for decrypting the selected one secondary video stream in each one group for the one cryptoperiod based on the at least one entitlement control message of the one cryptoperiod;

for each one cryptoperiod of the plurality of cryptoperiods, decrypt the selected one secondary video stream in each one group based on the control word of the selected one secondary video steam of the one group;

for each one cryptoperiod of the plurality of cryptoperiods, generate a control word for the primary video stream for the one cryptoperiod based on the at least one entitlement control message of the one cryptoperiod; and

for each one cryptoperiod of the plurality of cryptoperiods, decrypt the primary video stream based on the control word of the primary video stream; and wherein portions of the plurality of secondary video streams including the units of data are synchronized with a plurality of watermarking gaps in the primary video stream.

8. The device according to claim 7 , wherein each one of the at least two secondary video streams in a first group of the plurality of groups is different from each one of the at least two secondary video streams in a second group of the plurality of groups.

9. The device according to claim 7 , further comprising a decoder to decode the selected one secondary video stream in each one group for rendering as part of the composited video stream embedding the units of data of the identification in the composited video stream.

10. The device according to claim 7 , wherein a first video stream of the plurality of secondary video streams in one group of the plurality of groups includes a first unit of data and a second video stream of the plurality of secondary video streams in the one group of the plurality of groups includes a second unit of data different from the first unit of data.

11. A method comprising:

receiving a primary video stream;

selecting a plurality of sections of the primary video stream in which to embed units of data for use in watermarking;

generating a plurality of secondary video streams from the plurality of sections of the primary video stream as input;

grouping the plurality of secondary video streams in a plurality of groups so that each one group of the plurality of groups includes at least two secondary video streams from the plurality of secondary video streams, the plurality of secondary video streams including the units of data for use in watermarking across a plurality of cryptoperiods in an end user device which selects one secondary video stream from the at least two secondary video streams in each one group every one cryptoperiod of the plurality of cryptoperiods for rendering as part of a composited video stream in order to embed the units of data of an identification in the composited video stream, wherein in each one cryptoperiod of the plurality of cryptoperiods different groups of the plurality of groups of secondary video streams are generated from different non-overlapping portions of the primary video stream and wherein in each one cryptoperiod of the plurality of cryptoperiods at least one secondary video stream of the at least two secondary video streams in a first group of the plurality of groups is different from each one of the at least two secondary video streams in a second group of the plurality of groups;

generating a plurality of control words for each one of the plurality of secondary video streams;

encrypting each one of the plurality of secondary video streams with a different control word of the plurality of control words;

changing the different control word of each one of the plurality of secondary video streams every one cryptoperiod of the plurality of cryptoperiods

generating a control word for the primary video stream;

encrypting the primary stream with the control word of the primary video stream;

changing the control word of the primary video stream every one cryptoperiod of the plurality of cryptoperiods; and

arranging a timing of the plurality of secondary video streams in each of the plurality of cryptoperiods so that portions of the plurality of secondary video streams including the units of data are synchronized with a plurality of watermarking gaps in the primary video stream.

12. The method according to claim 11 , wherein each one of the at least two secondary video streams in a first group of the plurality of groups is different from each one of the at least two secondary video streams in a second group of the plurality of groups.

13. The method according to claim 11 , further comprising generating at least one entitlement control message for each of the plurality of cryptoperiods, the at least one entitlement control message for each one cryptoperiod including information to enable the end-user device to generate a control word for the one cryptoperiod for decrypting the one secondary video stream in each one group.

14. The method according to claim 11 , further multiplexing the plurality of secondary video streams in a transport stream.

15. The method according to claim 11 , wherein a first video stream of the plurality of secondary video streams in one group of the plurality of groups includes a first unit of data and a second video stream of the plurality of secondary video streams in the one group of the plurality of groups includes a second unit of data different from the first unit of data.

16. The method according to claim 11 , wherein in each one cryptoperiod of the plurality of cryptoperiods each one of the plurality of secondary video streams is encrypted with a different control word.