Detecting man-in-the-middle attacks in adaptive streaming
Systems and methods for adaptively streaming video content to a wireless transmit/receive unit (WTRU) or wired transmit/receive unit may include obtaining a media presentation description that comprises a content authenticity, requesting a key for a hash-based message authentication code; receiving the key for the hash-based message authentication code, determining a determined hash for a segment of the media presentation description, requesting a reference hash for the segment from a server, receiving the reference hash for the segment from the server, and comparing the reference hash to the determined hash to determine whether the requested hash matches the determined hash.
1. A method for streaming video content, comprising:
a device receiving a media presentation description (MPD) file, the MPD file comprising a content authenticity XML element;
the device sending a hypertext transfer protocol (HTTP) request for a media segment based on the MPD file;
the device receiving the media segment from a content server;
the device deriving an algorithm from the content authenticity XML element comprised in the MPD file;
the device computing an authentication hash for the media segment using the algorithm derived from the content authenticity XML element;
the device sending an HTTP request message that comprises a request for a server-provided hash associated with the media segment, the request for the server-provided hash comprising the computed authentication hash;
the device receiving the server-provided hash; and
the device determining authenticity of the media segment by comparing the computed authentication hash and the server-provided hash.
2. The method of claim 1 , further comprising sending at least one diagnostic parameter in the HTTP request message.
3. The method of claim 2 , wherein the at least one diagnostic parameter comprises at least one of an Internet Protocol (IP) address of the content server that provided the media segment, device location information, a cell tower identification, a wireless access point identifier, or signal strength.
4. The method of claim 1 , further comprising encrypting the HTTP request message.
5. The method of claim 1 , wherein the algorithm is a digest algorithm.
6. The method of claim 1 , further comprising embedding the computed authentication hash into a uniform resource locator (URL) parameter.
7. The method of claim 1 , further comprising determining an HTTP header,
wherein sending the HTTP request message further comprises using the HTTP header to send the computed authentication hash in the HTTP request message.
8. The method of claim 1 , further comprising receiving an HTTP response message comprising an indication of whether the server-provided hash is available or an error message.
9. The method of claim 1 , wherein sending the HTTP request message comprises sending the HTTP request message to the content server or an integrity verification server.
10. A device for adaptively streaming video content, comprising:
a processor programmed with executable instructions to:
receive a media presentation description (MPD) file, the MPD file comprising a content authenticity XML element;
send a hypertext transfer protocol (HTTP) request for a media segment based on the MPD file;
receive the media segment from a content server;
derive an algorithm from the content authenticity XML element comprised in the MPD file;
compute an authentication hash for the media segment using the algorithm derived from the content authenticity XML element;
send an HTTP request message that comprises a request for a server-provided hash associated with the media segment, the request for the server-provided hash comprising the computed authentication hash;
receive the server-provided hash; and
determine authenticity of the media segment by comparing the computed authentication hash and the server-provided hash.
11. The device of claim 10 , wherein the processor is further programmed with executable instructions to send at least one diagnostic parameter in the HTTP request message.
12. The device of claim 11 , wherein the at least one diagnostic parameter comprises at least one of an internet protocol (IP) address of the content server that provided the media segment, device location information, a cell tower identification, a wireless access point identifier, or signal strength.
13. The device of claim 10 , wherein the processor is further programmed with executable instructions to encrypt the HTTP request message.
14. The device of claim 10 , wherein the algorithm is a digest algorithm.
15. The device of claim 10 , wherein the processor is further programmed with executable instructions to embed the computed authentication hash into a uniform resource locator (URL) parameter.
16. The device of claim 10 , wherein the processor is further programmed with executable instructions to generate an HTTP header,
wherein the processor programmed with executable instructions to send the HTTP request message is further programmed with executable instructions to use the HTTP header to send the computed authentication hash in the HTTP request message.
17. The device of claim 10 , wherein the processor is further programmed with executable instructions to receive an HTTP response message comprising an indication of whether the server-provided hash is available or an error message.