Single pass parallel encryption method and apparatus

Patent metadata

Field	Value
Publication number	US-10863138-B2
Application number	US-201615169262-A
Country	US
Kind code	B2
Filing date	May 31, 2016
Priority date	May 31, 2016
Publication date	Dec 8, 2020
Grant date	Dec 8, 2020

Abstract

Apparatuses, methods and storage medium associated with single pass parallel encryption are disclosed herein. In embodiments, an apparatus for computing may comprise an encryption engine to encrypt a video stream. The encryption engine may comprise a plurality of encryption pipelines to respectively encrypt a plurality of video sub-streams partitioned from the video stream in parallel in a single pass as the video sub-streams are being generated. The plurality of encryption pipelines may use a corresponding plurality of multi-part encryption counters to encrypt the corresponding video sub-streams as the video sub-streams are being generated. Each of the multi-part encryption counters used by one of the encryption pipelines may comprise a sub-portion that remains constant while encoding the corresponding video sub-stream, but the sub-key is unique for the one encryption pipeline, and differs from corresponding sub-portions of the multi-part encryption counters used by the other encryption pipelines. Other embodiments may be disclosed or claimed.

First claim

What is claimed is:

1. An apparatus for computing, comprising:
an encryption engine to encrypt a video stream;
wherein the encryption engine comprises a plurality of encryption pipelines to respectively encrypt a plurality of video sub-streams partitioned from the video stream in parallel in a single pass as the video sub-streams are being generated;
wherein the plurality of encryption pipelines use a corresponding plurality of multi-part encryption counters to encrypt the corresponding video sub-streams as the video sub-streams are being generated; and
wherein each of the multi-part encryption counters used by each of the encryption pipelines comprises a sub-portion that remains constant for the encryption pipeline while the encryption pipeline encodes the corresponding video sub-stream, and wherein the sub-portions of the multi-part encryption counters of the encryption pipelines that remain constant for the respective encryption pipelines are unique, and differ from each other.

2. The apparatus of claim 1 , wherein the unique sub-portions of the multi-part encryption counters used by the encryption pipelines respectively identify the encryption pipelines.

3. The apparatus of claim 1 , wherein each of the multi-part encryption counters of each of the encryption pipelines comprises three sub-portions, of which the unique sub-portion of each encryption pipeline that remains constant while encoding the corresponding video sub-stream, and differs from corresponding sub-portions of the multi-part encryption counters used by the other encryption pipelines, is one of the three sub-portions.

4. The apparatus of claim 3 , wherein each of the multi-part encryption counters of each of the encryption pipelines comprises a plurality of bits, and wherein a first of the three sub-portions of each multi-part encryption counter forms the most significant bits of the multi-part encryption counter, and the first sub-portion remains constant while encoding the video sub-streams, and the first sub-portion is the same for all multi-part encryption counters used by the all encryption pipelines.

5. The apparatus of claim 4 , wherein the first sub-portion of each of the multi-part encryption counters of each of the encryption pipelines that is the same for all multi-part encryption counters used by the all encryption pipelines identifies a common encryption session of the encryption pipelines.

6. The apparatus of claim 5 , wherein a second of the three sub-portions of each multi-part encryption counter of each of the encryption pipelines forms the next most significant bits of the multi-part encryption counter, and the second sub-portion is the unique sub-portion of each encryption pipeline that remains constant while encoding the corresponding video sub-stream, and differs from corresponding sub-portions of the multi-part encryption counters used by the other encryption pipelines.

7. The apparatus of claim 6 , wherein a third of the three sub-portions of each multi-part encryption counter of each of the encryption pipelines forms the least significant bits of the multi-part encryption counter, and the third sub-portion increments as the corresponding video sub-stream is encoded by the corresponding encryption pipeline.

8. The apparatus of claim 7 , wherein each third sub-portion of each multi-part encryption counter of each of the encryption pipelines starts with a value 0, and increments by 1, after n number of bytes of the corresponding video sub-stream the encryption pipeline are encoded.

9. The apparatus of claim 8 , wherein each multi-part encryption counter of each of the encryption pipelines comprises 128 bits, the first sub-portion that remains at the same constant to identify the common encryption session of the encryption pipelines forms the 64 most significant bits, the second sub-portion that remains at one of the different unique constants to identify the encryption pipeline forms the next 4 most significant bits, the third sub-portion that varies forms the 60 least significant bits, and n equals 16.

10. The apparatus of claim 1 , wherein the plurality of video sub-streams are encoded video sub-streams; and wherein the apparatus further comprises an encoder, having a plurality of coding engines, to receive frames of the video stream, partition each frame of the video stream into a plurality of sub-frames, encode multiple ones of the plurality of sub-frames of the frames in parallel, and output the parallel encoded sub-frames of the frames as the plurality of video sub-streams.

11. The apparatus of claim 10 , further comprising a processor having a plurality of processor cores; wherein either or both of the encoders and the encryption engine are operated by the processor.

12. A method for computing, comprising:
receiving, by a plurality of encryption pipelines of an encryption engine, a plurality of video sub-streams partitioned from a video stream;
respectively encrypting, by the plurality of encryption pipelines, the plurality of video sub-streams in parallel in a single pass as the video sub-streams are being generated;
wherein encrypting comprises the plurality of encryption pipelines using a corresponding plurality of multi-part encryption counters to encrypt the corresponding video sub-streams in a single pass as the video sub-streams are being generated; and
wherein each of the multi-part encryption counters used by each of the encryption pipelines comprises a sub-portion that remains constant for the encryption pipeline while the encryption pipeline encodes the corresponding video sub-stream, and wherein the sub-portions of the multi-part encryption counters of the encryption pipelines that remain constant for the respective encryption pipelines are unique, and differ from each other.

13. The method of claim 12 , wherein the unique sub-portions of the multi-part encryption counters used by the encryption pipelines respectively identify the encryption pipelines.

14. The method of claim 13 , wherein each of the multi-part encryption counters of each of the encryption pipelines comprises three sub-portions, of which the unique sub-portion of each encryption pipeline that remains constant while encoding the corresponding video sub-stream, and differs from corresponding sub-portions of the multi-part encryption counters used by the other encryption pipelines, is one of the three sub-portions.

15. The method of claim 14 , wherein each of the multi-part encryption counters of each of the encryption pipelines comprises a plurality of bits, and wherein a first of the three sub-portions of each multi-part encryption counter forms the most significant bits of the multi-part encryption counter, and the first sub-portion remains constant while encoding the video sub-streams, and the first sub-portion is the same for all multi-part encryption counters used by the all encryption pipelines;
wherein the first sub-portion of each of the encryption pipelines identifies a common encryption session of the encryption pipelines;
wherein a second of the three sub-portions of each multi-part encryption counter of each of the encryption pipelines forms the next most significant bits of the multi-part encryption counter, and the second sub-portion is the unique sub-portion of each encryption pipeline that remains constant while encoding the corresponding video sub-stream, and differs from corresponding sub-portions of the multi-part encryption counters used by the other encryption pipelines;
wherein a third of the three sub-portions of each multi-part encryption counter of each of the encryption pipelines forms the least significant bits of the multi-pa

Assignees

• Intel Corp

Inventors

• Krishnan Vidhya
• Vembu Balaji
• Sodhi Sandeep S
• Devanand Priyadarsini

Classifications

• H04L9/065 Primary

  Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3 · CPC title

• H04N21/2347

  involving video stream encryption · CPC title

• H04L2209/125

  Parallelization or pipelining, e.g. for accelerating processing of cryptographic operations · CPC title

• H04L2209/60

  Digital content management, e.g. content distribution · CPC title

• H04L2209/34

  Encoding or coding, e.g. Huffman coding or error correction · CPC title