Obfuscation for protection of streaming media and other data flows
A method is provided for obfuscating program code to prevent unauthorized users from accessing video. The method includes receiving an original program code that provides functionality. The original program code is transformed into obfuscated program code defining a randomized branch encoded version of the original program code. The obfuscated program code is then stored, and a processor receiving input video data flow uses the obfuscated program code to generate an output data flow.
1. A streaming media server configured to output obfuscated program code, the streaming media server comprising a processor configured to:
receive original program code that provides a functionality;
replacing a portion of the original program code that implements at least one logical operation with replacement code, replacement performed by:
identifying the at least one logical operation from the original program code;
identifying at least one constant width randomized branching program associated with the identified at least one logical operation, the at least one constant width randomized branching program defining a plurality of permutations, each permutation implementing the at least one logical operation; and
generating obfuscated replacement code for the at least one logical operation using one or more selective ones of the plurality of permutations.
2. The streaming media server of claim 1 where the processor is configured to create the original program code functionality from a randomized branching program, the randomized branching program being created by:
combining layered branching programs with functionality corresponding to code elements of the original program code, and
randomizing the paths between nodes of adjacent layers in the layered branching programs.
3. The streaming media server of claim 2 where the processor is configured to convert the randomized branching program to program code to form the obfuscated program code, wherein the obfuscated program code provides the same functionality as the original program code.
4. The streaming media server of claim 2 where the processor is configured to create the randomized branching program by randomizing the input encodings of the layered branching programs.
5. The streaming media server of claim 4 where the processor is configured to create the randomized branching program by randomizing the output encodings of the layered branching programs.
6. The streaming media server of claim 5 where the processor is configured to randomize the input or output encodings by modifying layers in the layered branching programs in accordance with randomized encodings on input data flows, and/or desired randomized encodings on output data flows.
7. The streaming media server of claim 4 where the processor is configured to transform the randomized branching program to program code to form the obfuscated program code, wherein the obfuscated program code provides a different functionality as the original program code to process input data flows with randomized encodings.
8. The streaming media server of claim 2 wherein a layered branching program has one or a combination of the following functions, or some logical equivalent of them: IDENTITY, NOT, AND, OR, XOR, ADD, MUL.
9. The streaming media server of claim 1 where the processor is configured to perform matrix calculations to implement randomized branch encoding to transform the original program code into obfuscated program code.
10. The streaming media server of claim 2 where the processor creates the original program code functionality using matrix calculations that implement randomized branch encoding.
11. The streaming media server of claim 10 where the matrix calculations can be implemented as program code, which is an obfuscated version of the original program code.
12. The streaming media server according to claim 1 where the obfuscated program code provides one or more of the following functionalities:
decryption of input data flow;
decompression of input data flow; and
decoding of input data flow.
13. The streaming media server according to claim 12 where the input data flow is an encrypted media stream comprising media content and the obfuscated program code functionality decrypts the media stream.
14. The streaming media server according to claim 13 where the input data flow is a compressed media stream comprising media content and the obfuscated program code functionality decompresses the media stream.
15. The streaming media server according to claim 14 where the input data flow is an encoded media stream comprising media content and the obfuscated program code functionality decodes the media stream.