Network based media processing security

Patent metadata

Field	Value
Publication number	US-12019761-B2
Application number	US-201917440395-A
Country	US
Kind code	B2
Filing date	Mar 20, 2019
Priority date	Mar 20, 2019
Publication date	Jun 25, 2024
Grant date	Jun 25, 2024

Abstract

According to an example aspect of the present invention, there is provided a method, comprising receiving from a source entity a workflow description for network based media processing ( 200 ), determining encryption requirements on the basis of an encryption descriptor in the workflow description, the encryption descriptor comprising information indicative of one or more encryption methods and at least one prioritized encryption method ( 210 ), and selecting, on the basis of the encryption descriptor, an encryption method for protecting data for at least one task of a media processing workflow generated on the basis of the workflow description ( 220 ).

First claim

The invention claimed is:

1. An apparatus comprising at least one processor, and at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus to:
receive from a source entity a workflow description for network based media processing,
determine encryption requirements on the basis of an encryption descriptor in the workflow description, the encryption descriptor comprising information indicative of one or more encryption methods and at least one prioritized encryption method, and
select, on the basis of the encryption descriptor, an encryption method for protecting data for at least one task of a media processing workflow generated on the basis of the workflow description.

2. The apparatus of claim 1 , wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to:
define, by a workflow manager, at least one task for media content encryption and/or decryption on the basis of the selected encryption method, and
include the at least one task for media content encryption and/or decryption in a workflow generated on the basis of the workflow description.

3. The apparatus of claim 1 , wherein a workflow manager is caused to apply the selected encryption method for decrypting encrypted data from the source entity before providing the data to a media processing task by a media processing entity.

4. The apparatus of claim 1 , wherein a media processing entity selected for the workflow is caused to apply the selected encryption method for communicating with another media processing entity selected for the workflow or a media sink entity of the workflow.

5. The apparatus of claim 1 , wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to:
connect a function repository in response to receiving the workflow description,
receive from the function repository function specification data for one or more media processing tasks based on the workflow description,
define one or more network based media processing tasks on the basis of the media processing function specification data from the function repository,
generate the workflow, which is representable as a directed acyclic graph, on the basis of the one or more network based media processing tasks that have been defined, and
deploy the one or more network based media processing tasks that have been defined to selected one or more media processing entities.

6. An apparatus comprising at least one processor, and at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus to:
generate a workflow description for network-based media processing,
include in the workflow description an encryption descriptor comprising information indicative of encryption methods and at least one prioritized encryption method; and
send the workflow description comprising the encryption descriptor to a workflow manager.

7. The apparatus of claim 6 , wherein the memory and computer program code are further configured to, with the processor, cause the apparatus to:
receive function specification data from a function repository; and
define the workflow description based on the received function specification data.

8. The apparatus of claim 6 , wherein the encryption descriptor associates a source entity with at least one supported encryption method.

9. The apparatus of claim 6 , wherein the encryption descriptor indicates an algorithm for generating an encryption token.

10. The apparatus of claim 6 , wherein the encryption descriptor indicates a resource locator of an encryption token in the media source or on an encryption server.

11. The apparatus of claim 6 , wherein the encryption descriptor comprises a template for generating a uniform resource locator of an encryption token.

12. The apparatus of claim 6 , wherein the encryption descriptor indicates length of an encryption token.

13. The apparatus of claim 6 , wherein the encryption descriptor comprises an encryption token.

14. The apparatus of claim 6 , wherein the encryption descriptor indicates association of a media stream and an encryption token.

15. The apparatus of claim 6 , wherein the encryption descriptor indicates lifetime, replacement period, or rotation period of an encryption token.

16. The apparatus of claim 6 , wherein the encryption descriptor indicates direction in which at least one of the encryption methods is to be used.

17. The apparatus of claim 6 , wherein the encryption descriptor comprises a priority list mapped to a list of the encryption methods.

18. The apparatus of claim 6 , wherein the encryption descriptor is included as an attribute in a security descriptor of the workflow description.

19. The apparatus of claim 6 , wherein the encryption descriptor is included as in requirements descriptor of the workflow description.

20. A method, comprising:
generating a workflow description for network-based media processing by a source entity,
including in the workflow description an encryption descriptor comprising information indicative of encryption methods and at least one prioritized encryption method; and
sending the workflow description comprising the encryption descriptor to a workflow manager.

Assignees

• Nokia Technologies Oy

Inventors

• Kammachi Sreedhar Kashyap
• You Yu
• Mate Sujeet Shyamsundar

Classifications

• G06F21/106

  Enforcing content protection by specific content processing · CPC title

• G06F21/10

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• G06F9/4818

  Priority circuits therefor · CPC title

• H04L2463/062

  applying encryption of the keys · CPC title

• G06F21/602 Primary

  Providing cryptographic facilities or services · CPC title