DLNA/DTCP stream conversion for secure media playback
A process for converting a DTCP-IP transport stream into HLS format, comprising receiving an encrypted DTCP-IP transport stream comprising DTCP frames at a secondary device from a source device, with each of the plurality of DTCP frames comprising encrypted 16-byte portions, forming chunks from the DTCP frames by grouping encrypted 16-byte portions into a chunk, adding HLS padding bytes to the end of each chunk and encrypting the HLS padding bytes to form an encrypted chunk, loading each of the encrypted chunks and a playlist to a media proxy server at the secondary device, loading a DTCP key onto a security proxy server, and providing the playlist, each of the encrypted chunks, and the DTCP key to a native media player on the secondary device, such that the native media player follows the playlist to decrypt the encrypted chunks using the DTCP key and plays back the chunks.
1. A process for converting a DTCP-IP transport stream into HLS format, comprising:
receiving an encrypted DTCP-IP transport stream at a secondary device from a source device, said encrypted DTCP-IP transport stream comprising a plurality of DTCP frames, each of said plurality of DTCP frames comprising a plurality of encrypted 16-byte portions;
forming chunks from one of said plurality of DTCP frames by grouping one or more of its plurality of encrypted 16-byte portions into a chunk;
adding HLS padding bytes to the end of said chunk and encrypting said HLS padding bytes, such that said chunk and the encrypted HLS padding bytes form an encrypted chunk;
loading each of said encrypted chunks, and a playlist of said encrypted chunks, to a media proxy server at said secondary device;
loading a DTCP key onto a security proxy server at said secondary device, said DTCP Key having been obtained from said source device; and
providing said playlist, each of said encrypted chunks, and said DTCP key to a native media player on said secondary device, such that said native media player follows said playlist to decrypt said encrypted chunks using said DTCP key and plays back said chunks.
2. The process of claim 1 , wherein one of said chunks contains a final 16 byte portion from one of said plurality of DTCP frames, and said process further comprises:
decrypting said final 16 byte portion;
replacing DTCP padding bytes within said final 16 byte portion with HLS padding bytes; and
re-encrypting said final 16 byte portion to form one of said encrypted chunks.
3. The process of claim 1 , wherein said playlist includes a value describing the time length of each encrypted chunk.
4. The process of claim 3 , wherein said time length is determined by decrypting some or all of said encrypted DTCP-IP transport stream to form a clear transport stream, finding PCRs within said clear transport stream, and determining said time length at least in part by the length of time between PCRs in said clear transport stream.
5. The process of claim 1 , further comprising finding an initialization vector for said chunk by finding a preceding 16-byte portion that immediately preceded the 16-byte portion used as the first portion in said chunk within said DTCP frame, and using that preceding 16-byte portion as said initialization vector for said chunk.
6. The process of claim 5 , further comprising including said initialization vector for said chunk in said playlist.
7. A process for converting a DTCP-IP transport stream into HLS format, comprising:
receiving an encrypted DTCP-IP transport stream at a secondary device from a source device, said encrypted DTCP-IP transport stream comprising a plurality of DTCP frames, each of said plurality of DTCP frames comprising a plurality of encrypted 16-byte portions;
forming chunks from one of said plurality of DTCP frames by grouping one or more of its plurality of encrypted 16-byte portions into a chunk;
adding HLS padding bytes to the end of said chunk and encrypting said HLS padding bytes, such that said chunk and the encrypted HLS padding bytes form an encrypted chunk;
loading each of said encrypted chunks, and a playlist of said encrypted chunks, to a media proxy server at said secondary device;
loading a DTCP key onto a security proxy server at said secondary device, said DTCP Key having been obtained from said source device; and
providing said playlist, each of said encrypted chunks, and said DTCP key to a native media player on said secondary device, such that said native media player follows said playlist to decrypt said encrypted chunks using said DTCP key and plays back said chunks,
wherein said playlist includes a value describing the time length of each encrypted chunk, and
wherein said clear transport stream has a constant bitrate, and said time length is determined by the number of bits for each chunk, as found by counting bits from said constant bitrate.
8. A process for converting a DTCP-IP transport stream into HLS format, comprising:
receiving an encrypted DTCP-IP transport stream at a secondary device from a source device, said encrypted DTCP-IP transport stream comprising a plurality of DTCP frames, each of said plurality of DTCP frames comprising a plurality of encrypted 16-byte portions;
forming chunks from one of said plurality of DTCP frames by grouping one or more of its plurality of encrypted 16-byte portions into a chunk;
adding HLS padding bytes to the end of said chunk and encrypting said HLS padding bytes, such that said chunk and the encrypted HLS padding bytes form an encrypted chunk;
loading each of said encrypted chunks, and a playlist of said encrypted chunks, to a media proxy server at said secondary device;
loading a DTCP key onto a security proxy server at said secondary device, said DTCP Key having been obtained from said source device; and
providing said playlist, each of said encrypted chunks, and said DTCP key to a native media player on said secondary device, such that said native media player follows said playlist to decrypt said encrypted chunks using said DTCP key and plays back said chunks,
wherein said playlist includes a value describing the time length of each encrypted chunk, and
wherein said clear transport stream has a variable bitrate, and said time length is determined by the number of bits for each chunk, as found from an average bitrate for said clear transport stream by counting bits from said average bitrate.
9. A process for converting a DTCP-IP transport stream into HLS format, comprising:
receiving an encrypted DTCP-IP transport stream at a secondary device from a source device, said encrypted DTCP-IP transport stream comprising a plurality of DTCP frames, each of said plurality of DTCP frames comprising a plurality of encrypted 16-byte portions;
forming chunks from one of said plurality of DTCP frames by grouping one or more of its plurality of encrypted 16-byte portions into a chunk;
adding HLS padding bytes to the end of said chunk and encrypting said HLS padding bytes, such that said chunk and the encrypted HLS padding bytes form an encrypted chunk;
loading each of said encrypted chunks, and a playlist of said encrypted chunks, to a media proxy server at said secondary device;
loading a DTCP key onto a security proxy server at said secondary device, said DTCP Key having been obtained from said source device; and
providing said playlist, each of said encrypted chunks, and said DTCP key to a native media player on said secondary device, such that said native media player follows said playlist to decrypt said encrypted chunks using said DTCP key and plays back said chunks,
wherein said playlist includes a value describing the time length of each encrypted chunk, and
wherein said time length is determined by using a clock to divide said encrypted DTCP-IP transport stream into said chunks at preselected time intervals.
10. A process for converting a DTCP-IP transport stream into HLS format, comprising:
receiving an encrypted DTCP-IP transport stream at a secondary device from a source device, said encrypted DTCP-IP transport stream comprising a plurality of DTCP frames, each of said plurality of DTCP frames comprising a plurality of encrypted 16-byte portions;
forming chunks from one of said plurality of DTCP frames by grouping one or more of its plurality of encrypted 16-byte portions into a chunk;
adding HLS padding bytes to the end of said chunk and encrypting said HLS padding bytes, such that said chunk and the encrypted HLS padding bytes form an encrypted chunk;
loading each of said encrypted chunks, and a playlist of said encrypted chunks, to a media proxy server at said secondary device;
loading a DTCP key onto a security proxy server at said secondary device, said DTCP Key having been obtained from said source device;
providing said playlist, each of said encrypted chunks, and said DTCP key to a native media player on said secondary device, such that said native media player follows said playlist to decrypt said encrypted chunks using said DTCP key and plays back said chunks; and
receiving and storing said encrypted DTCP-IP transport stream in its entirety at local storage within said secondary device, and forming said chunks from the local storage only on a request for playback at a subsequent time.