Validation of signatures of a video stream encoded in layers
There is provided techniques for providing digital signatures to a video stream encoded in layers. Each layer comprises encoded image frames. A digital signature for layer k=0 is provided by providing by generating signing data for layer k=0 and generating the digital signature for layer k=0. A respective digital signature for each layer k=1, . . . , K−1 is provided by, for each layer k=1, . . . , K−1 generating signing data, and generating the digital signature for layer k by encrypting the signing data, or a hash thereof, for layer k with the private key of the private-public key pair. The digital signatures for all the layers are provide to the video stream.
1 . A method for providing digital signatures to a video stream encoded in layers k=0, . . . , K−1, wherein each of the K layers comprises encoded image frames, the method being performed by a transmitter wherein the transmitter has access to a private-public key pair, and wherein the method comprises:
providing a digital signature for a base layer 0 by:
generating signing data for the base layer 0 by hashing the encoded image frames of the base layer 0; and
generating the digital signature for the base layer 0 by encrypting the signing data, or a hash thereof, for the base layer 0 with a private key of the private-public key pair;
providing a respective digital signature for each enhancement layer k=1, . . . , K−1 by, for each enhancement layer k=1, . . . , K−1:
generating signing data for the enhancement layer k by hashing the encoded image frames of the enhancement layer k and a link to the base layer 0 or any other previous layer 1 to k−1 on which the enhancement layer k is dependent, wherein the link is the digital signature of said base layer 0 or said any other previous layer 1 to k−1; and
generating the digital signature for the enhancement layer k by encrypting the signing data, or a hash thereof, for the enhancement layer k with the private key of the private-public key pair; and
providing the respective digital signatures for each layer k=0, . . . , K−1 to its own layer k=0, . . . , K−1 in the video stream.
2 . The method according to claim 1 , wherein the signing data for layer k=0, . . . , K−1 is either a hash list of all hashed encoded image frames of layer k or a hash of all the hashed encoded image frames of layer k.
3 . The method according to claim 1 , wherein the video stream comprises at least one group of pictures, GOP, and wherein one digital signature for each of the K layers is generated per each GOP.
4 . The method according to claim 1 , wherein the method further comprises:
transmitting the encoded image frames of layer k=0 and the digital signature for layer k=0 in video sub-stream k=0.
5 . The method according to claim 1 , wherein the any other previous layer 1 to k−1 comprises one or more intermediate enhancement layers.
6 . A method for validating digital signatures of a video stream encoded in layers k=0, . . . , K−1, wherein each of the K layers comprises encoded image frames, wherein the method is performed by a receiver, wherein the receiver has access to a public key of a private-public key pair of a transmitter, and wherein the method comprises:
validating a digital signature for a base layer 0 by verifying that signing data of the encoded image frames of the base layer 0 matches a decrypted digital signature for the base layer 0, the decrypted digital signature for the base layer 0 being decrypted from the digital signature for the base layer 0 using the public key; and
validating a respective digital signature for the enhancement layer k=1, . . . , K−1 by, for the enhancement layer k=1, . . . , K−1, verifying that signing data of the encoded image frames of the enhancement layer k and a link to the base layer 0 or to any other previous layer 1 to k−1 on which the enhancement layer k is dependent matches a decrypted digital signature for the enhancement layer k, the decrypted digital signature for the enhancement layer k being decrypted from the digital signature for the enhancement layer k using the public key, wherein the link is the digital signature of said base layer 0 or said any other previous layer 1 to k−1; and wherein the respective digital signature for each layer k=0, . . . , K−1 is provided to its own layer k=0, . . . , K−1 in the video stream.
7 . A transmitter for providing digital signatures to a video stream encoded in layers k=0, . . . , K−1, wherein each of the K layers comprises encoded image frames, wherein the transmitter has access to a private-public key pair, the transmitter comprising processing circuitry, the processing circuitry being configured to cause the transmitter to:
provide a digital signature for a base layer 0 by:
generating signing data for the base layer 0 by hashing the encoded image frames of the base layer 0; and
generating the digital signature for the base layer 0 by encrypting the signing data, or a hash thereof, for the base layer 0 with a private key of the private-public key pair;
provide a respective digital signature for each enhancement layer k=1, . . . , K−1 by, for each enhancement layer k=1, . . . , K−1:
generating signing data for the enhancement layer k by hashing the encoded image frames of the enhancement layer k and a link to the base layer 0 or to another other previous layer 1 to k−1 on which enhancement layer k is dependent, wherein the link is the digital signature of said base layer 0 or said any other previous layer 1 to k−1; and
generating the digital signature for the enhancement layer k by encrypting the signing data, or a hash thereof, for the enhancement layer k with the private key of the private-public key pair; and
provide the respective digital signatures for each layer k=0, . . . , K−1, to its own layer k=0, . . . , K−1, in the video stream.
8 . A receiver for validating digital signatures of a video stream encoded in layers k=0, . . . , K−1, wherein each of the K layers comprises encoded image frames, wherein the receiver has access to a public key of a private-public key pair of a transmitter, the receiver comprising processing circuitry, the processing circuitry being configured to cause the receiver to:
validate a digital signature for a base layer 0 by verifying that signing data of the encoded image frames of the base layer 0 matches a decrypted digital signature for the base layer 0, the decrypted digital signature for the base layer 0 being decrypted from the digital signature for the base layer 0 using the public key; and
validate a respective digital signature for an enhancement layer k=1, . . . , K−1 by, for the enhancement layer k=1, . . . , K−1, verifying that signing data of the encoded image frames of the enhancement layer k and a link to the base layer 0 or to any other previous layer 1 to k−1 on which the enhancement layer k is dependent matches a decrypted digital signature for the enhancement layer k, the decrypted digital signature for the enhancement layer k being decrypted from the digital signature for the enhancement layer k using the public key, wherein the link is the digital signature of said base layer 0 or said any other previous layer 1 to k−1; and
wherein the respective digital signature for each layer k=0, . . . , K−1 is provided to its own layer k=0, . . . , K−1 in the video stream.
9 . A computer program for providing digital signatures to a video stream encoded in layers k=0, . . . , K−1, wherein each of the K layers comprises encoded image frames, the computer program comprising computer code which, when run on processing circuitry of a transmitter having access to a private-public key pair, causes the transmitter to:
provide a digital signature for a base layer 0 by:
generating signing data for the base layer 0 by hashing the encoded image frames of the base layer 0; and
generating the digital signature for the base layer 0 by encrypting the signing data, or a hash thereof, for the base layer 0 with a private key of the private-public key pair;
provide a respective digital signature for each enhancement layer k=1, . . . , K−1 by, for each enhancement layer k=1, . . . , K−1:
generating signing data for the enhancement layer k by hashing the encoded image frames of the enhancement layer k and a link to the base layer 0 or to any other previous layer 1 to k−1 on which the enhancement layer k is dependent, wherein the link is the digital signature of said base layer 0 or said any other previous layer 1 to k−1; and
generating the digital signature for the enhancement layer k by encrypting the signing data, or a hash thereof, for the enhancement layer k with the private key of the private-public key pair; and
provide the respective digital signatures for each layer k=1, . . . , K−1 to its own layer k=1, . . . , K−1 in the video stream.
10 . A computer program for validating digital signatures of a video stream encoded in layers k=0, . . . , K−1, wherein each of the K layers comprises encoded image frames, the computer program comprising computer code which, when run on processing circuitry of a receiver having access to a public key of a private-public key pair of a transmitter, causes the receiver to:
validate a digital signature for a base layer 0 by verifying that signing data of the encoded image frames of the base layer 0 matches a decrypted digital signature for the base layer 0, the decrypted digital signature for the base layer 0 being decrypted from the digital signature for the base layer 0 using the public key; and
validate a respective digital signature for enhancement layer k=1, . . . , K−1 by, for the enhancement layer k=1, . . . , K−1, verifying that signing data of the encoded image frames of the enhancement layer k and a link to the base layer k 0 or any other previous layer 1 to k−1 on which the enhancement layer k is dependent matches a decrypted digital signature for the enhancement layer k, the decrypted digital signature for the enhancement layer k being decrypted from the digital signature for the enhancement layer k using the public key, wherein the link is the digital signature of said any base layer 0 or said any other previous layer 1 to k−1, and wherein each respective digital signature for each layer k=0, . . . , K−1 is provided to its own layer k=0, . . . , K−1 in the video stream.