Method and device for protecting an incoming stream comprising an elementary stream consisting of video packets
A method of protecting an incoming stream, the incoming stream including at least one incoming elementary video stream, the incoming elementary video stream including a succession of incoming video packets, the method characterized by the disassembling of the incoming stream for separating a current packet; the encryption of the current packet with a session key, the building of a confidentiality metadata packet including a time stamp field corresponding to a time stamp of the current packet and a confidentiality field containing the session key, the encryption of the confidentiality data packet with an encryption key, and the assembling of an outgoing stream including an outgoing elementary stream grouping together the encrypted current packets and an elementary confidentiality metadata stream including the encrypted confidentiality metadata packets.
1 . A method for protecting an incoming stream, the incoming stream comprising at least one incoming elementary video stream, the incoming elementary video stream comprising a succession of incoming video packets, the method comprising:
disassembling the incoming stream for separating a current packet;
encrypting the current packet with a session key;
building a confidentiality metadata packet comprising a time stamp field corresponding to a time stamp of the current packet, and a confidentiality field using the session key;
encrypting the confidentiality data packet with an encryption key; and
assembling an outgoing stream comprising an outgoing elementary stream grouping together the encrypted current packets and an elementary stream of confidentiality metadata comprising the encrypted confidentiality metadata packets.
2 . The method according to claim 1 , further comprising:
acquiring at least one indicator; and
determining a level of confidentiality for the current packet from the indicator or from each indicator,
wherein the confidentiality metadata packet further comprises a field of level of confidentiality having the level of confidentiality determined for the current packet.
3 . The method according to claim 2 , wherein the encryption key is selected according to the level of confidentiality determined for the current packet.
4 . The method according to claim 1 , wherein said acquiring comprises filtering the incoming packet for evaluating at least one indicator.
5 . The method according to claim 1 , wherein the incoming stream further comprises an elementary stream of context metadata, and wherein said disassembling is used for separating a current context metadata packet.
6 . The method according to claim 5 , wherein the current video packet is encrypted with a first session key, and the context metadata packet is encrypted with a second session key.
7 . The method according to claim 6 , wherein the confidentiality metadata packet comprises a first confidentiality field using the first session key and a second confidentiality field using the second session key.
8 . The method according to claim 1 , wherein the outgoing stream follows the Motion Picture Expert Group-Transport Stream-MPEG-TS protocol.
9 . The method according to claim 1 , wherein the confidentiality metadata packet comprises additional fields in order to be compatible with the Motion Imagery Standards Profile-MISP standard.
10 . A protection device implementing a protection method according claim 1 on an incoming stream, the incoming stream comprising at least one incoming video elementary stream.
11 . A non-transitory computer-readable medium comprising instructions which, when executed by a computer, cause the computer to implement a protection method according to claim 1 on an incoming stream, the incoming stream comprising an incoming video elementary stream, the incoming elementary video stream comprising a succession of incoming video packets.