Decryption and variant processing
A plurality of byte ranges forms a sample for content output from a player device, and includes at least one double-encrypted byte range. The plurality of byte ranges is stored in a secured memory, and the at least one double-encrypted byte range is partially decrypted to generate at least one decrypted singe-encrypted byte range. The plurality of byte ranges is stored in an unsecured memory using the at least one decrypted single-encrypted byte range in place of the at least one double-encrypted byte range.
1. A player device, comprising:
an unsecured memory;
a secured memory; and
a secured processor configured to:
receive a plurality of byte ranges from the unsecured memory including at least one double-encrypted byte range and at least one of a single-encrypted byte range and an unencrypted byte range, the plurality of byte ranges forming a sample for content output from the player device;
store the received plurality of byte ranges in the secured memory;
partially decrypt the at least one double-encrypted byte range to generate at least one decrypted single-encrypted byte range; and
store in the unsecured memory the plurality of byte ranges using the at least one decrypted single-encrypted byte range in place of the at least one double-encrypted byte range and including the at least one of the single-encrypted byte range and the unencrypted byte range.
2. The player device of claim 1 , wherein the secured processor is further configured to order the plurality of byte ranges before storing in the unsecured memory, the plurality of byte ranges including the at least one decrypted single-encrypted byte range.
3. The player device of claim 1 , further comprising an unsecured processor configured to perform Network Abstraction Layer (NAL) repacking of the plurality of byte ranges including the at least one decrypted single-encrypted byte range stored in the unsecured memory.
4. The player device of claim 1 , wherein the secured processor is further configured to:
receive from the unsecured memory the plurality of byte ranges including the at least one decrypted single-encrypted byte range;
fully decrypt the plurality of byte ranges; and
store the fully decrypted plurality of byte ranges in the secured memory.
5. The player device of claim 4 , further comprising a decoder configured to:
access from the secured memory the fully decrypted plurality of byte ranges; and
decode the fully decrypted plurality of byte ranges.
6. The player device of claim 5 , wherein the decoder is further configured to access the fully decrypted plurality of byte ranges from the secured memory using Inter-Process Communication (IPC) on a secure audio/video path.
7. The player device of claim 1 , further comprising an unsecured processor configured to execute a producer thread before the secured processor receives the plurality of byte ranges from the unsecured memory, the producer thread including at least one of caching a file received by the player device, decompressing the received file, reading sample metadata from the decompressed file, reading sample data including the plurality of byte ranges from the decompressed file, and storing the sample data in a read buffer of the unsecured memory.
8. The player device of claim 7 , wherein the unsecured processor is further configured to execute part of a consumer thread, the consumer thread including obtaining sample data from the read buffer in a particular order for further execution of the consumer thread by the secured processor.
9. A method of operating a player device, the method comprising using a secured processor of the player device for:
receiving a plurality of byte ranges from an unsecured memory of the player device, the plurality of byte ranges including at least one double-encrypted byte range and at least one of a single-encrypted byte range and an unencrypted byte range, and wherein the plurality of byte ranges forms a sample for content output from the player device;
storing the received plurality of byte ranges in a secured memory of the player device;
partially decrypting the at least one double-encrypted byte range to generate at least one decrypted single-encrypted byte range; and
storing in the unsecured memory the plurality of byte ranges using the at least one decrypted single-encrypted byte range in place of the at least one double-encrypted byte range and including the at least one of the single-encrypted byte range and the unencrypted byte range.
10. The method of claim 9 , further comprising ordering the plurality of byte ranges using the secured processor before storing in the unsecured memory, the plurality of byte ranges including the at least one decrypted single-encrypted byte range.
11. The method of claim 9 , further comprising using an unsecured processor of the player device for performing Network Abstraction Layer (NAL) repacking of the plurality of byte ranges including the at least one decrypted single-encrypted byte range stored in the unsecured memory.
12. The method of claim 9 , further comprising using the secured processor for:
receiving from the unsecured memory the plurality of byte ranges including the at least one decrypted single-encrypted byte range;
fully decrypting the plurality of byte ranges; and
storing the fully decrypted plurality of byte ranges in the secured memory.
13. The method of claim 12 , further comprising using a decoder of the player device for:
accessing from the secured memory the fully decrypted plurality of byte ranges; and
decoding the fully decrypted plurality of byte ranges.
14. The method of claim 13 , wherein the decoder accesses the fully decrypted plurality of byte ranges from the secured memory using Inter-Process Communication (IPC) on a secure audio/video path.
15. The method of claim 9 , further comprising using an unsecured processor of the player device for executing a producer thread before the secured processor receives the plurality of byte ranges from the unsecured memory, the producer thread including at least one of caching a file received by the player device, decompressing the received file, reading sample metadata from the decompressed file, reading sample data including the plurality of byte ranges from the decompressed file, and storing the sample data in a read buffer of the unsecured memory.
16. The method of claim 15 , further comprising using the unsecured processor for executing part of a consumer thread, the consumer thread including obtaining sample data from the read buffer in a particular order for further execution of the consumer thread by the secured processor.
17. A player device, comprising:
an unsecured memory;
a secured memory; and
means for:
receiving a plurality of byte ranges from the unsecured memory including at least one double-encrypted byte range and at least one of a single-encrypted byte range and an unencrypted byte range, the plurality of byte ranges forming a sample for content output from the player device;
storing the received plurality of byte ranges in the secured memory;
partially decrypting the at least one double-encrypted byte range to generate at least one decrypted single-encrypted byte range; and
storing in the unsecured memory the plurality of byte ranges using the at least one decrypted single-encrypted byte range in place of the at least one double-encrypted byte range and including the at least one of the single-encrypted byte range and the unencrypted byte range.
18. The player device of claim 17 , further comprising means for ordering the plurality of byte ranges before storing in the unsecured memory, the plurality of byte ranges including the at least one decrypted single-encrypted byte range.
19. The player device of claim 17 , further comprising an unsecured processor configured to perform Network Abstraction Layer (NAL) repacking of the plurality of byte ranges including the at least one decrypted single-encrypted byte range stored in the unsecured memory.
20. The player device of claim 17 , further comprising means for:
receiving from the unsecured memory the plurality of byte ranges including the at least one decrypted single-encrypted byte range;
fully decrypting the plurality of byte ranges; and
storing the fully decrypted plurality of byte ranges in the secured memory.