High throughput network encryptionusing CCAP

Patent metadata

Field	Value
Publication number	US-9888270-B2
Application number	US-201313923180-A
Country	US
Kind code	B2
Filing date	Jun 20, 2013
Priority date	Mar 15, 2013
Publication date	Feb 6, 2018
Grant date	Feb 6, 2018

Abstract

A video distribution network includes a distribution plant and a first bulk encryption device connected to the distribution plant, wherein the bulk encryption device outputs a first encrypted video service stream to the distribution plant via an internet protocol (IP) interface.

First claim

What is claimed is:

1. A video distribution network comprising:
a distribution plant comprising an internet protocol interface to an internet protocol network;
an entitlement control management generation device;
a first bulk encryption device connected to said distribution plant via a first interface, said first bulk encryption device receiving a video input stream and performing a network encryption and a conditional access encryption on said video input stream in creating a first encrypted video service stream, wherein said first bulk encryption device outputs said first encrypted video service stream to said distribution plant via said first interface, and said distribution plant outputs said first encrypted video service stream via said internet protocol network, wherein said conditional access encryption is controlled by a said entitlement control management generation device; and
a plurality of hub sites disposed at an edge of said video distribution network and receiving said first encrypted video service stream from said distribution plant, each of said hub sites processing said first encrypted video service stream into one or more video outputs transmitted to a consumer premises equipment.

2. The video distribution network of claim 1 , further comprising a second bulk encryption device connected to said distribution plant, wherein said second bulk encryption device outputs a second encrypted video service stream to said distribution plant, wherein content of said first encrypted video service stream and content of said second encrypted video service stream are identical.

3. The video distribution network of claim 1 , wherein said first bulk encryption device maps programs of said video input stream from a source to content of said first encrypted video service stream output to said distribution plant.

4. The video distribution network of claim 3 , wherein said video input stream is one of a Multi Program Transport Stream and a Single-Program Transport Stream.

5. The video distribution network of claim 3 , wherein said first encrypted video service stream is an encrypted Multi Program Transport Stream, and wherein said first bulk encryption device receives a Single-Program Transport Stream and performs said network encryption and said conditional access encryption on said Single-Program Transport Stream in creating an encrypted Single-Program Transport Stream, wherein said first bulk encryption device outputs said encrypted Single-Program Transport Stream to said distribution plant via said first interface, and said distribution plant outputs said encrypted Single-Program Transport Stream via said internet protocol network.

6. The video distribution network of claim 5 , wherein each of said hub sites further comprise a downstream Edge Quadrature Amplitude Modulation (EQAM) device disposed at an edge of said video distribution network multiplexing said encrypted Multi Program Transport Stream and said encrypted Single-Program Transport Stream into a plurality of outputs.

7. The video distribution network of claim 1 , wherein said first bulk encryption device joins a plurality of Multi Program Transport Streams in generating said first encrypted video service stream.

8. The video distribution network of claim 1 , wherein each of said hub sites further comprises a downstream Converged Cable Access Platform (CCAP) device and said processing of said first encrypted video service stream further comprises a further encryption of said first encrypted video service stream.

9. The video distribution network of claim 1 , wherein each of said hub sites further comprise a downstream Converged Cable Access Platform (CCAP) device disposed at an edge of said video distribution network and said processing of said first encrypted video service stream further comprises a further encryption of said first encrypted video service stream.

10. The video distribution network of claim 1 , wherein said first bulk encryption device is connected one of a national data center of said distribution plant and a market data center of said distribution plant.

11. The video distribution network of claim 1 , wherein said first bulk encryption device is configured to output said first encrypted video service stream through an internet protocol transport network of said distribution plant.

12. A Converged Cable Access Platform (CCAP) device disposed at a source center and configured to perform a bulk encryption function, said CCAP device comprising: a persistent storage device storing a control plane; a memory; and at least one processor, coupled to said memory, and operative, when said control plane is to loaded into said memory, to:
configure said CCAP device to receive a plurality of input transport streams including at least one Single-Program Transport Stream and one Multi-Program Transport Stream;
and configure said CCAP device to generate an encrypted output transport stream as one of an encrypted Single-Program Transport Stream output and an encrypted Multi-Program Transport Stream output from each of said input transport streams and depending on a configuration file of the CCAP device, and to output, by said CCAP device, said encrypted input transport stream to at least one downstream CCAP device via an internet protocol interface.

13. The CCAP device of claim 12 , further comprising: an input transport stream interface connected to said source center; and an output transport stream interface connected to an internet protocol network configured to transport said encrypted input transport stream to an edge of said internet protocol network and a distribution network.

14. The CCAP device of claim 12 , wherein said output transport stream interface is an internet protocol output.

Assignees

• Time Warner Cable Entpr Llc

Inventors

• Dang Niem
• Gonder Tom
• Arnts Peter J
• Erichsen Kirk
• Floyd Brian
• Kelsen Michael

Classifications

• H04N21/64707

  for transferring content from a first network to a second network, e.g. between IP and wireless · CPC title

• H04H60/14

  Arrangements for conditional access to broadcast information or to broadcast-related services · CPC title

• H04N21/64715

  Protecting content from unauthorized alteration within the network (verifying the information received for network security in communication control or processing H04L63/12; integrity in wireless network security H04W12/10) · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04N21/6118

  involving cable transmission, e.g. using a cable modem · CPC title