A system is provided that includes a plurality of nodes and a plurality of instances of a distributed media rights transaction ledger associated with the plurality of the nodes. The plurality of nodes includes a first node associated with a first participant and a second node associated with a second participant. The first node interacts with the second node based on a defined protocol in a communication network. The first node receives a request for playback of a media content from a content consumer associated with a consumer device. The second node provides media content rights associated with media content to at least one of the first participant or the content consumer. Each instance of the distributed media rights transaction ledger includes a plurality of media content rights transactions corresponding to at least an acquisition of the media content rights by the first participant or the content consumer.

A system is provided that includes a plurality of nodes and a plurality of instances of a distributed media rights transaction ledger associated with the plurality of the nodes. The plurality of nodes includes a first node associated with a first participant and a second node associated with a second participant. The first node interacts with the second node based on a defined protocol in a communication network. The first node receives a request for playback of a media content from a content consumer associated with a consumer device. The second node provides media content rights associated with media content to at least one of the first participant or the content consumer. Each instance of the distributed media rights transaction ledger includes a plurality of media content rights transactions corresponding to at least an acquisition of the media content rights by the first participant or the content consumer.

Disclosed is a method for maintaining security of video data of a decryption server. The method comprises registering at least one of an internet protocol (IP) address and a media access control (MAC) address of the security devices, generating a plurality of public key and private key pairs, encrypting and storing private keys comprised in the plurality of public key and private key pairs using a master key provided from a master key management unit, selecting any one of a plurality of public key and private key pairs when the access of the security device is approved and providing a certificate comprising the selected public key to the security device, receiving a symmetric key encrypted with the public key of the certificate from the security device, and decrypting the private key using the master key provided from the master key management unit.

Disclosed is a method for maintaining security of video data of a decryption server. The method comprises registering at least one of an internet protocol (IP) address and a media access control (MAC) address of the security devices, generating a plurality of public key and private key pairs, encrypting and storing private keys comprised in the plurality of public key and private key pairs using a master key provided from a master key management unit, selecting any one of a plurality of public key and private key pairs when the access of the security device is approved and providing a certificate comprising the selected public key to the security device, receiving a symmetric key encrypted with the public key of the certificate from the security device, and decrypting the private key using the master key provided from the master key management unit.

Apparatus and methods for content fragmentation, distribution, protection, and re-constitution within a content distribution network. In one embodiment, the apparatus and methods enable distribution of content fragments to edge nodes (which may include user or subscriber CPE), thereby enabling edge networks or membership groups to be established wherein content can be shared solely at the edge. In one variant, high data bandwidth, symmetric uplink/downlink, low latency PHY links (e.g., 5G NR-compliant wireless interfaces) between the edge nodes participating in the edge networks or membership groups are used such that particular quality of service/experience performance requirements can be met. Distribution of the fragments also advantageously enhances redundancy and security.

Apparatus and methods for content fragmentation, distribution, protection, and re-constitution within a content distribution network. In one embodiment, the apparatus and methods enable distribution of content fragments to edge nodes (which may include user or subscriber CPE), thereby enabling edge networks or membership groups to be established wherein content can be shared solely at the edge. In one variant, high data bandwidth, symmetric uplink/downlink, low latency PHY links (e.g., 5G NR-compliant wireless interfaces) between the edge nodes participating in the edge networks or membership groups are used such that particular quality of service/experience performance requirements can be met. Distribution of the fragments also advantageously enhances redundancy and security.

Systems and methods for digital watermarking at a content distribution network, CDN, node are described, whereby source data intended for at least one recipient is received from an origin server, the source data including a plurality of encrypted segments interleaved with at least one non-encrypted segment. Metadata is detected in the source data, the metadata identifying each non-encrypted segment, and in response, the source data is modified for each recipient, by embedding a recipient-specific digital watermark to at least a portion of a non-encrypted segment in the source data. The modified source data is then transmitted to each respective recipient. Other embodiments are also described and claimed.

A method to provide secure delivery of a manifest file for use in playback of a video signal on a video player. The method includes establishing a connection with the video player, wherein the connection has a session identifier identifying the connection with the video player, receiving a request from the video player for the video signal, wherein the video signal is associated with the manifest file created for the video signal, customizing, using the session identifier identifying the connection with the video player, the manifest file created for the video player to provide a customized manifest file that is unique to the video player, the customized manifest file to be used in playback of the video signal on the video player, encrypting the customized manifest file using a manifest encryption key which is based on the session identifier identifying the connection with the video player, and transmitting the encrypted manifest file to the video player.

A method to provide secure delivery of a manifest file for use in playback of a video signal on a video player. The method includes establishing a connection with the video player, wherein the connection has a session identifier identifying the connection with the video player, receiving a request from the video player for the video signal, wherein the video signal is associated with the manifest file created for the video signal, customizing, using the session identifier identifying the connection with the video player, the manifest file created for the video player to provide a customized manifest file that is unique to the video player, the customized manifest file to be used in playback of the video signal on the video player, encrypting the customized manifest file using a manifest encryption key which is based on the session identifier identifying the connection with the video player, and transmitting the encrypted manifest file to the video player.

This application provides an online-streamer image model file transmission method and computing device in co-hosting during livestreaming. The method includes: receiving an online-streamer image model file sent by a first online streamer end, and obtaining a target obfuscation key and a target encryption type; determining to-be-encrypted bytes in the online-streamer image model file based on the target encryption type, and encrypting the to-be-encrypted bytes based on the target obfuscation key to obtain an encrypted online-streamer image file; and receiving an interaction request between the first online streamer end and a second online streamer end, and sending the encrypted online-streamer image file to the second online streamer end based on the interaction request.