Light weight transport stream streaming protocol for live transcoding system
A robust, computationally-efficient and secure system is described for streaming content from a server to a client device via the Internet or another digital network. Various aspects relate to automated processes, systems and devices for securing a media stream with efficient yet effective digital cryptography. In particular, content may be transmitted in transport stream (TS) format in which all packets are encrypted (e.g., using a cipher block chain), in which control packets are exempted from encryption (e.g., using an electronic codebook), or in any other manner.
1. An automated process performed by a host device that transmits a media stream to a remotely-located media player device via a digital network, the host device comprising a processor, a memory, a storage interface configured to physically and electrically couple to a user-provided storage device and a network interface to the digital network, wherein the automated process comprises:
receiving digital media content by the host device;
storing the received digital media content on the user-provided storage device in an MPEG-2 transport stream format, wherein the MPEG-2 transport stream comprises a plurality of packets including control packets and data packets;
receiving, by the host device, a unique identifier that identifies a user of the remotely-located media player device;
creating, by the host device, a digital key based upon the received unique identifier;
subsequently receiving a request for the media stream from the remotely-located media player device; and
in response to the received request, the host device:
encrypting all of the control packets and only a portion of the data packets of the MPEG-2 transport stream, wherein the encrypting comprises encrypting data packets of the media stream but not encrypting header packets of the media stream, and wherein only the data packets of the media stream are encrypted with a cipher block chain (CBC) encryption routine prior to transmission using the digital key created by the host device based upon the unique identifier;
encapsulating all of the packets of the MPEG-2 transport stream in user datagram protocol (UDP) packets; and
transmitting the encapsulated packets of the MPEG-2 transport stream to the remotely-located client device via the digital network for decryption of the data packets using the unique identifier and playback of the MPEG-2 transport stream to the user of the remotely-located client device.
2. The automated process of claim 1 wherein the digital media content is received, stored and transmitted in the transport stream format.
3. The automated process of claim 1 wherein the packets of the media stream are encrypted with an electronic codebook (ECB) encryption routine prior to transmission.
4. The automated process of claim 3 wherein the ECB encryption routine is AES-ECB.
5. A host device comprising:
a memory configured to store computer-executable instructions;
a network interface to communicate via a digital network;
a storage interface to physically and electrically couple with a user-supplied storage device; and
a processor, wherein the processor is configured to execute the computer-executable instructions to perform an automated process that comprises:
receiving digital media content by the host device in an MPEG-2 transport stream;
storing the received digital media content on the user-provided storage device in the MPEG-2 transport stream format, wherein the MPEG-2 transport stream comprises a plurality of packets including control packets and data packets;
receiving, by the host device, a unique identifier that identifies a user of the remotely-located media player device;
creating, by the host device, a digital key based upon the received unique identifier;
subsequently receiving a request for the MPEG-2 media stream from the remotely-located media player device; and
in response to the received request, the host device:
encrypting all of the control packets and only a portion of the data packets of the MPEG-2 media stream, wherein the encrypting comprises encrypting data packets of the media stream but not encrypting header packets of the media stream, and wherein only the data packets of the media stream are encrypted with a cipher block chain (CBC) encryption routine prior to transmission using the digital key created by the host device based upon the unique identifier;
encapsulating all of the packets of the MPEG-2 transport stream in user datagram protocol (UDP) packets; and
transmitting the encapsulated packets of the MPEG-2 transport stream to the remotely-located client device via the digital network for decryption of the data packets using the unique identifier and playback of the MPEG-2 transport stream to the user of the remotely-located client device.
6. The host device of claim 5 wherein the digital media content is received, stored and transmitted in the transport stream format.
7. The host device of claim 5 wherein the packets of the MPEG-2 media stream are encrypted with an electronic codebook (ECB) encryption routine prior to transmission.
8. The host device of claim 7 wherein the ECB encryption routine is AES-ECB.
9. The host device of claim 8 wherein the data packets of the MPEG-2 media stream are encrypted with a cipher block chain (CBC) encryption routine prior to transmission.
10. The host device of claim 5 wherein the host device is a media encoder device that receives broadcast television signals via an antenna, that demodulates the received broadcast television signals, that stores the demodulated broadcast television signals in the MPEG-2 transport stream format on the user-supplied storage device, and that produces the media stream transmitted to the client device from the demodulated broadcast television signals stored in the MPEG-2 transport stream format on the user-supplied storage device.
11. An automated process performed by a media encoder device that receives broadcast television signals via an antenna and that transmits a media stream to a remotely-located media player device via a digital network, the media encoder device comprising a processor, a memory, a storage interface configured to physically and electrically couple to a user-provided storage device and a network interface to the digital network, wherein the automated process comprises:
receiving broadcast television signals via the antenna;
demodulating the received broadcast television signals to extract digital media content, wherein the digital media content is received as a transport stream having an MPEG-2 format comprising a plurality of packets including control packets and data packets;
storing the demodulated digital media content on the user-provided storage device in the MPEG-2 format;
receiving, by the host device, a unique identifier that identifies a user of the remotely-located media player device;
creating, by the host device, a digital key based upon the received unique identifier;
subsequently receiving a request for the media stream from the remotely-located media player device; and
in response to the received request, the host device:
encrypting all of the control packets and only a portion of the data packets of the transport stream in the MPEG-2 format with a cipher block chain (CBC) encryption routine prior to transmission, wherein the CBC encryption routine is AES-CBC, wherein the encrypting comprises encrypting data packets of the media stream but not encrypting header packets of the media stream, and wherein only the data packets of the media stream are encrypted with a cipher block chain (CBC) encryption routine prior to transmission using the digital key created by the host device based upon the unique identifier;
encapsulating all of the packets of the transport stream in user datagram protocol (UDP) packets; and
transmitting the encapsulated packets of the transport stream in the MPEG-2 format to the remotely-located client device via the digital network for decryption of the data packets using the unique identifier and playback of the MPEG-2 transport stream to the user of the remotely-located client device.