Secure transcoding of content

Patent metadata

Field	Value
Publication number	US-9516364-B2
Application number	US-74913010-A
Country	US
Kind code	B2
Filing date	Mar 29, 2010
Priority date	Mar 29, 2010
Publication date	Dec 6, 2016
Grant date	Dec 6, 2016

Abstract

A source device determines content rights for encrypted content in the first encoding standard using a first rights data file. The source device creates a second rights data file for transcoded content in the second encoding standard. The source device performs a key management operation including communicating a decryption key for the encrypted content in the first encoding standard to a transcoder. The source device transfers the encrypted content in the first encoding standard to the transcoder. The transcoder decrypts the encrypted content, transcodes the content from the first encoding standard to the content in the second encoding standard, and re-encrypts the content in the second encoding standard using a second encryption key. The transcoder then transfers the encrypted content in the second encoding standard to an indicated device.

First claim

What is claimed is:

1. A source device having encrypted content in a first encoding standard, the source device comprising:
a data storage configured to store a first rights data file, wherein the first rights data file includes a first content ID, and a first encryption key, and indicates content rights including whether transcoding of the encrypted content in the first encoding standard to encrypted content in a second encoding standard is allowed;
a processor configured to
determine the content rights for the encrypted content in the first encoding standard using the first rights data file;
in response to determining the transcoding of the encrypted content into the second encoding standard is allowed, create a second rights data file for transcoded content in the second encoding standard, wherein the second rights data file includes a second content ID, and a second encryption key, and indicates second content rights;
perform a key management operation including communicating a decryption key for the encrypted content in the first encoding standard and the second encryption key for the encrypted content in the second encoding standard to a transcoder; and
transfer the encrypted content in the first encoding standard to the transcoder.

2. The source device of claim 1 , wherein the source device is further configured to:
receive a transfer request from a second device for the encrypted content in the second encoding standard;
authenticate the second device;
verify whether the content rights for the encrypted content in the first encoding standard allow the transfer request; and
transfer the decryption key and the encrypted content in the second encoding standard to the second device.

3. The source device of claim 2 , wherein the source device is further configured to
remove or keep the encrypted content in the first encoding standard and remove or keep the encrypted content in the second encoding standard.

4. The source device of claim 1 , wherein the source device is further configured to authenticate the transcoder.

5. The source device of claim 1 , wherein the first rights data file and the second rights data file comprise a single content rights data file having two segments, wherein one segment includes content rights for the encrypted content in the first encoding standard and another segment includes content rights for the encrypted content in the second encoding standard.

6. The source device of claim 1 , wherein the first rights data file and the second rights data file comprise separate data files; and
an external secure file links the first rights data file and the second rights data file and is used to enforce the content rights of each of the encrypted content in the first encoding standard and the second encoding standard.

7. The source device of claim 1 , wherein the second content rights in the second rights data file are created based on the content rights in the first rights data file.

8. The source device of claim 1 , wherein the second encoding standard is used to derive the second encryption key from the second encryption pre-key.

9. The source device of claim 1 , and further including a transcoder configured to maintain a binding of content rights data to the second encryption key after transcoding of the encrypted content in the first encoding standard to the encrypted content in the second encoding standard.

10. The source device of claim 1 , wherein the content rights of the encrypted content in the first encoding standard differs from the second content rights of the encrypted content in the second encoding standard.

11. The source device of claim 1 , wherein the content rights for the encrypted content in the first encoding standard comprises a first layer of digital rights management (DRM) protection and a second layer of DRM protection is provided by domain rights policy determined by an administrator.

12. The source device of claim 1 , wherein the source device is a set top box.

13. A transcoding device for transcoding content from a first encoding standard to a second encoding standard, the transcoding device comprising:
an interface coupled to a source device; and
a transcoder receiving the encrypted content in the first encoding standard via the interface from the source device, receiving a decryption key via the interface from the source device, and receiving a second rights data file including a second content ID, and a second encryption key via the interface from the source device, and
the transcoder decrypting the encrypted content in the first encoding standard using the decryption key received from the source device, transcoding the content in the first encoding standard to the content in the second encoding standard, re-encrypting the content in the second encoding standard to form encrypted content in the second encoding standard using the second encryption key, and transferring the encrypted content in the second encoding standard to at least one of the source device and a second device indicated by the source device.

14. A method for transcoding encrypted content:
at a source device, determining content rights for encrypted content in a first encoding standard using a first rights data file, wherein the first rights data file includes a first content ID, and a first encryption key, and indicates whether transcoding of the encrypted content in the first encoding standard to encrypted content in a second encoding standard is allowed;
creating a second rights data file for transcoded content in the second encoding standard, wherein the second rights data file includes a second content ID, and a second encryption key, the second encryption key being derived from a second encryption pre-key, in response to a determination that transcoding of the encrypted content in the first encoding standard to encrypted content in the second encoding standard is allowed;
authenticating a transcoder;
performing a key management operation including communicating a decryption key for the encrypted content in the first encoding standard and an encryption key for the encrypted content in the second encoding standard to the transcoder; and
transferring the encrypted content in the first encoding standard to the transcoder;
and decrypting the encrypted content in the first encoding standard using the decryption key, transcoding the encrypted content into the second encoding standard, re-encrypting the transcoded content in the second encoding standard to form encrypted content in the second encoding standard using the encryption key, and transferring the encrypted content in the second encoding standard to at least one of the source device and a second device indicated by the source device.

15. The method of claim 14 , further comprising:
receiving a transfer request from a second device for the encrypted content in the second encoding standard;
verifying whether the content rights for the encrypted content in the first encoding standard allow the transfer request; and
transferring the decryption key and the encrypted content in the second encoding standard to the second device.

16. The method of claim 15 , further comprising:
removing or keeping the encrypted content in the first encoding standard; and
removing or keeping the encrypted content in the second encoding standard.

17. The method of claim 14 , further comprising:
providing a second layer of DRM protection using a domain rights policy determined by an administrator, the content rights for the encrypted content in the first encoding standard comprising a first layer o

Assignees

• Peterka Petr
• Johnson Gerald R
• Mangalore Geetha
• Shamsaasef Rafie
• Google Technology Holdings LLC

Inventors

• Peterka Petr
• Johnson Gerald R
• Mangalore Geetha
• Shamsaasef Rafie

Classifications

• H04N21/2347

  involving video stream encryption · CPC title

• H04N21/2541 Primary

  Rights Management (protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08) · CPC title

• H04N21/2343

  involving reformatting operations of video signals for distribution or compliance with end-user requests or end-user device requirements {(video transcoding H04N19/40; media packet handling at the source H04L65/762)} · CPC title

• H04L2209/603

  Digital right managament [DRM] · CPC title

• H04L9/0819

  Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062) · CPC title