Method for watermarking media content and system for implementing this method

Patent metadata

Field	Value
Publication number	US-9571899-B2
Application number	US-201414786917-A
Country	US
Kind code	B2
Filing date	Apr 11, 2014
Priority date	Apr 26, 2013
Publication date	Feb 14, 2017
Grant date	Feb 14, 2017

Abstract

A method for watermarking digital media content received in a form of at least one encrypted sample to which metadata is assigned. Each sample is encrypted by means of a sample key. The metadata comprises first data, second data and a signature resulting from the first and second data. The first data is encrypted by a transport key and comprises at least a content key and watermarking metadata. The second data comprises an initialization vector so that the content key and the initialization vector form a unique pair of cryptographic data equivalent to the sample key. The method comprises the steps of extracting the metadata from the media content, decrypting the first data by using the transport key, authenticating the signed data and, in case of positive outcome, descrambling each sample by using the pair of cryptographic data, and marking each descrambled sample by using the watermarking metadata.

First claim

The invention claimed is:

1. A method for watermarking digital media content, the method comprising:
receiving the digital media content through a first interface by an application software, the digital media content being in a form of at least one encrypted sample, said digital media content being related to metadata assigned to each sample;
said sample being encrypted by means of a sample key;
said metadata comprising first data, second data and a digital signature resulting from the signature of said first and second data, the first data comprising at least a content key and watermarking metadata and at least said first data being encrypted by at least one transport key, the content key being used as first input in a cryptographic process;
the second data comprising at least an initialization vector used as second input in said cryptographic process so that the content key and the initialization vector allow to retrieve the sample key for encrypting/decrypting each sample of said digital media content;
said application software communicating through a second interface with a secure environment in charge of handling said metadata; and
said secure environment being able either to extract the transport key from a secure memory or to derive said transport key from a secret key stored in said secure memory;

instructing the application software to get said metadata and to transmit it to the secure environment;
decrypting said first data within the secure environment by means of the transport key to retrieve at least the content key in an intelligible form;
verifying the authenticity of said digitally signed first and second data;
transmitting, in response to a successful verification of the authentication of said digitally signed first and second data, the watermarking metadata to a watermarking unit and transmitting the digital media content, the content key and the initialization vector to a descrambler for descrambling each sample by means of the sample key;
transmitting each descrambled sample to the watermarking unit for digitally marking each descrambled sample by means of at least said watermarking metadata; and
transmitting the sample from the watermarking unit to the application software or to a secure media path for rendering purposes.

2. The method of claim 1 , further comprising taking countermeasures in response to a failed verification of the authentication of said digitally signed first and second data.

3. The method of claim 1 , wherein the watermarking unit further digitally marks the sample with an identification watermark specific to said secure environment to uniquely identify it, said identification watermark being extracted from said secure memory.

4. The method of claim 1 , wherein said metadata further comprises at least one flag which can have two states, the achievement of the watermarking of the scrambled sample depending on the state of said flag.

5. The method of claim 4 , wherein said metadata comprises a first flag for controlling the watermarking of each scrambled sample and a second flag, comprised in key metadata within said first data, for controlling the watermarking of a plurality of samples, the state of the second flag controlling the consideration of the first flag and the achievement of said authentication step.

6. The method of claim 2 , wherein if the authentication step provides a negative outcome, then the descrambler stops any descrambling process for at least one crypto-period, as countermeasures.

7. The method of claim 1 , wherein at least the content key is encrypted with the transport key and the watermarking metadata are encrypted with a second transport key distinct from the transport key.

8. The method of claim 1 , wherein said digital media content is a stream media content compliant with an ISO Base Media File Format and/or said cryptographic process refers to Advanced Encryption Standard process.

9. The method of claim 1 , wherein the step aiming to instruct the application software to get said metadata and to transmit it to the secure environment is performed by modifying an application layer within a standard application software.

10. The method of claim 1 , wherein the secure environment is controlled by a firmware implemented into a central processing unit within the secure environment.

11. A system for watermarking digital media content, comprising:
a computing unit configured to run application software into which said digital media content is input, through a first interface, in a form of at least one encrypted sample, the at least one encrypted sample being encrypted by means of a sample key, said digital media content being related to metadata assigned to each sample and said metadata comprising first data, second data and a digital signature resulting from the signature of said first and second data, the first data comprising at least a content key and watermarking metadata and the second data comprising at least an initialization vector, at least said first data being encrypted by at least one transport key;
a secure environment configured to communicate with the application software through a second interface, said secure environment including the following components:
a secure memory for storing at least one transport key or at least a secret key used for retrieving said transport key;
a cryptographic unit for decrypting said first data by means of said at least one transport key;
an authentication unit for authenticating the signed first and second data;
a descrambler for descrambling each sample, by means of the content key and the initialization vector;
a watermarking unit able to digitally mark each descrambled sample with at least watermarking metadata comprised in said first data;

wherein said application software is configured to extract said metadata from the digital media content or from another source before transmitting the metadata to the secure environment for processing, said second interface being further used for outputting the descrambled sample from the secure environment in view to be played by a rendering device.

12. The system of claim 11 , wherein the secure memory further comprises a unique identification watermark to be transmitted to the marking unit for adding a unique identification mark, belonging to the secure environment, during watermarking of the descrambled sample.

13. The system of claim 11 , wherein said secure environment comprises a central processing unit and a non-volatile memory into which a firmware is implemented for controlling all components of the secure environment as a secure master processing unit.

14. The system of claim 11 , wherein said secure environment is devoid of any central processing unit running a firmware for controlling its components, but is controlled by the application software as a secure processing slave unit.

15. The system of claim 11 , wherein said secure environment is a monolithic chipset.

16. The system of claim 11 , wherein said secure environment is a smartcard.

Assignees

• Nagravision Sa

Inventors

• Hunacek Didier
• Servet Patrick
• Macchetti Marco

Classifications

• H04N21/8358 Primary

  involving watermark {(protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467)} · CPC title

• H04N21/8355

  involving usage data, e.g. number of copies or viewings allowed · CPC title

• H04N21/4405

  involving video stream decryption · CPC title

• H04N21/4181

  for conditional access · CPC title

• H04N21/63345

  by transmitting keys (key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06) · CPC title