Synamedia Limited

Cisco Technology, Inc.

Gareth John Bowen

Ian Bastable

Carol Etta Iturralde

Eric Colin Friedrich

Zorach Reuven Wachtfogel

Avraham A Poupko

Shabtai Atlow

Keith Millar

Dan Ariel Elbert

Matthew Francis Caulfield

Anatoly Seldin

Max Sorkin

Vadim Kharitonsky

Lawrence Sol Rublin

Kevin Scott Kirkup

James Cunningham

Peter Gibbs

Moshe Elad

Matthew F Caufield

Kevin S Kirkup

Techniques for a trusted system for secure content distribution and trusted recording of content consumption are described. In some embodiments, the trusted system transcodes and transcrypts a media content item using a key obtained from a content provider and one or more keys based on an entitlement from a service provider to generate an encrypted media content item. The trusted system further receives a request to provide the media content item to a client device. The trusted system also obtains a signed audit token recording the request upon an authorization by the service provider based on the entitlement and a confirmation by the content provider, where the signed audit token is signed by the content provider and the service provider. The trusted system additionally provides the one or more keys for decrypting the encrypted media content item and reports the signed audit token.

Secure content distribution and trusted recording of content consumption

A method for identifying a data segment includes receiving a first data segment associated with a first recording time; receiving a second data segment associated with a second recording time, comparing: the first recording time with the second recording time, a first time reference value with a second time reference value, and a first length enumeration for first data packets with a second length enumeration for second data packets; determining, based on the comparing, a match between the first data segment and the second data segment; and identifying the first data segment as the same as the second data segment based on the determining.

Systems and methods for data processing, storage, and retrieval from a server

Techniques for secure fast channel change in live content streaming are described. In some embodiments, during content preparation, a packager and/or an encoder encrypts media content items at both the service level (e.g., by encrypting a first portion of the plurality of segments with a service level access key unique to a service) and the channel level (e.g., by encrypting a second portion of the plurality of segments with a channel level access key unique to a channel associated with the service). On the receiving end, a client device (e.g., a media player) requests a service level access key prior to content acquisition. As such, a client can join any channel on a segment protected with the service level key without waiting for a license for that channel first, and the channel license can be acquired in parallel with the content acquisition during channel switching.

Secure fast channel change

A system for maximizing storage of encrypted content in a storage system includes one or more processors; and a storage medium storing instructions. When executed, the instructions may configure the one or more processors to: receive, from a first client device, a first data structure encrypted commutatively with a first key and a common key, the receiving system lacking access to the common key; receive the first key and a first segment identifier; receive, from a second client device, a second data structure encrypted commutatively with a second key and the common key; receive a second segment identifier; using the first key, partially decrypt the first data structure; storing the partially decrypted first data structure; and selectively storing a copy of the second data structure based on whether content of the first data structure corresponds to content of the second data structure.

Content recognition systems and methods for encrypted data structures

Techniques for rapid video on demand (VOD) media content breach response are described. In some embodiments, during content preparation, a server generates an encrypted media content item by generating a first encrypted portion using a first key derived from a first seed that is of a first type and generating a second encrypted portion using a second key derived from a second seed that is of a second type. In some embodiments, the server classifies the first portion in a first category (e.g., a prioritized category) and the second portion in a second category (e.g., a non-prioritized category). During a breach response, the server repairs the encrypted media content item by re-encrypting portions in the first category, e.g., re-encrypting the first encrypted portion using a replacement key derived from a replacement seed that is of the first type, and updating encryption metadata.

Prioritized content encryption for rapid breach response

A method of selectively decrypting encrypted data may include selecting a plurality of encrypted data bits between and including a first encrypted data bit and a last encrypted data bit; for each encrypted data bit from the plurality of encrypted data bits: determining a corresponding encrypted block and a block number that contains the encrypted data bit, determining a corresponding counter for the determined block number, determining a bit position of the encrypted data bit within the determined encrypted block, selecting a counter bit at the bit position within the counter, encrypting the counter, and executing an XOR operation between the encrypted data bit and the corresponding encrypted counter bit.

A method of splitting a data stream into a set of data segments may include receiving the data stream, wherein the data stream may include data packets; selecting a segment time period and a time domain; subdividing the time domain into a set of time blocks, each one of the set of time blocks having a duration of the segment time period; identifying a set of starting data packets corresponding to the set of time blocks; identifying a set of finishing data packets corresponding to the set of starting data packets; identifying a last one of the set of finishing data packets being a last data packet of a last one of the set of time blocks; and identifying the set of data segments based on the corresponding set of starting data packets and the corresponding set of finishing data packets.

A method of authenticating data received from a user device by a service provider may include receiving user credentials from the user device via a secure communication channel; upon verifying the user credentials, providing to the user device via the secure channel a permission token, where the permission token includes at least a shared secret, where a data within the permission token is not observable to the user device and a shared secret data outside the data of the permission token, the shared secret data observable to the user device; and receiving a request from the user device via a non secure communication channel, where the request may include at least the permission token and a hash digest formed using at least a portion of the shared secret data.

A method for offloading a data segment includes receiving a probe request from a user device to offload the data segment, where the probe request includes a segment identification. The method further includes sending a probe response to the user device, where the probe response includes an approval or decline of an action to be executed by the user device, the action being one of an upload or a request to retry offloading the data segment at a later time. The method further includes sending a challenge to the user device.

In one embodiment, a gateway includes a memory, and a processor to, in response to receiving a plurality of content requests, generate a plurality of network flows and flow buffers, each one content request of the plurality of content requests being served by one network flow of the plurality of network flows, and one flow buffer of the plurality of flow buffers, the one flow buffer being included in the memory, the plurality of network flows including a first flow and a second flow, the first flow serving one of the plurality of requests having a first priority level, the second flow serving one of the plurality of requests having a second priority level, the first priority level being higher than the second priority level, and run a network arbiter to give prioritize reading the first flow over reading the second flow when the first flow is non-idle.

Arbitration of competing flows

In one embodiment, a method, system, and apparatus is described, the method, system, and apparatus including the creation of a dedicated Hypertext Transfer Protocol (HTTP) Live Streaming (HLS) adaptive bitrate (ABR) timed metadata stream which is located at a designated location, the populating the dedicated HLS ABR timed metadata stream with timed metadata items which signal availability of a particular subset of a superset of all media types which are anticipated as being available in streaming media playlists and making the timed metadata items available to an application on a client device. Related methods, systems and apparatus is also described.

System and method for announcing media changes

In one embodiment, a system is described, having a processor to receive a request for download of a high priority adaptive bitrate (ABR) content item which is available for download at a higher bit rate and a lower bit rate, and a request for a download of a low priority ABR content item, which is also available for download at a higher bit rate and a lower bit rate. A byte acquisition scheduler determines a required bandwidth to download the high priority ABR content item without adapting to the lower bit rate, and determines a remaining bandwidth to download the low priority ABR content item. A download interface interfaces with an ABR server, downloads the high priority ABR content item and the low priority ABR content item, and allocates at least the required bandwidth and up to the remaining bandwidth. Related systems, apparatuses and methods are also described.

Non-real time adaptive bitrate recording scheduler

Techniques for efficiently initiating multicast data communications. Upon determining to initiate multicast network communications, embodiments determine that a first multicast group of a plurality of multicast groups is currently active. An Internet Group Management Protocol (IGMP) Join network message for a second multicast group that is currently inactive is transmitted. Upon determining that the first multicast group is currently inactive, an IGMP Join network message is transmitted for the first multicast group of the plurality of multicast groups.

Efficient multicast ABR reception

Systems, methods, and computer program products to perform an operation comprising receiving, by a media server from a client device, a first hypertext transfer protocol (HTTP) request specifying a first transfer rate for a first segment of a plurality of segments of an adaptive bitrate (ABR) video, determining, by the media server, a first expected transfer rate for transferring the first segment of the ABR video, transmitting, by the media server to the client device, a first HTTP response specifying the first expected transfer rate, and transmitting, by the media server to the client device, the first segment of the ABR video via a network.

Growing community of inventors

Chandlers Ford, United Kingdom

Gareth John Bowen