Systems, devices and automated processes provide robust, computationally-efficient and secure protection of media content or other electronic data stored on a user-supplied storage device through the use of efficient file system encryption. Only certain portions of the content are encrypted by the host device, thereby reducing the computational demand in comparison to encrypting all of the content. By selecting the particular portions to encrypt, the formatting and structure of the stored data can be concealed, thereby making the use of the unencrypted content very difficult, if not impossible. In implementations based upon the XFS file system, for example, the superblocks that store header information about the files stored on the drive can be encrypted, thereby rendering the unencrypted content

A robust, computationally-efficient and secure system is described for streaming content from a server to a client device via the Internet or another digital network. Various aspects relate to automated processes, systems and devices for securing a media stream with efficient yet effective digital cryptography. In particular, content may be transmitted in transport stream (TS) format in which all packets are encrypted (e.g., using a cipher block chain), in which control packets are exempted from encryption (e.g., using an electronic codebook), or in any other manner.

A playback method using a playback device that plays a system stream file is provided. The playback device includes an individual decryption key that is owned individually by each of playback devices, and a common decryption key that is owned in common by a plurality of playback devices. The system stream file includes a first system stream file configured to be played back using both the individual decryption key and the common decryption key, and a second system stream file configured to be played back using only the common decryption key among the individual decryption key and the common decryption key. The method includes identifying whether the system stream file to be playback is the first system stream file or the second system stream file, in accordance with a file extension of the system stream file, and selecting a decryption process of the system stream file.

Systems and methods for partial frame encryption in accordance with embodiments of the invention are disclosed. In one embodiment, the method receives a video bitstream that includes several frames, each frame including several independently encoded compression units within the frame, encrypts a portion of each of several compression units in several frames, and generates an output bitstream that includes the several independently encoded compression units including the encrypted portions of the compression units.

A method, receiver, and server enable content protection over broadcast channels. A method for receiving a media license includes receiving broadcast media data including at least a portion that is protected and requesting a message from a content decryption module (CDM) of the receiver. The method includes receiving a license signaling message including encrypted license data and identifying one or more hash codes in the license signaling message. Additionally, the method includes identifying the encrypted license data for the receiver based on a mapping between the one or more hash codes and a hash of the message from the CDM. A server for providing a media license sends, to a receiver or a group of receivers, a license signaling message including encrypted license data and a license message hash indicating a hash code used to identify the receiver or the group of receivers for the encrypted license data.

Techniques related to securely providing artificial intelligence inference on protected video content in a vision processing unit are discussed. Such techniques include decrypting encrypted video via a neural network processor of the vision processing unit by providing the neural network processor direct memory access to a security engine of the vision processing unit and applying a machine learning model to the decrypted video content using the neural network processor such that a host and other components of the vision processing unit do not have access to the decrypted video content.

A method in a pattern encryption protection scheme may efficiently decrypt data blocks in a timely manner. In the method, a processor may receive a frame of data blocks. The frame may include a plurality of pattern-encrypted subsamples, and each pattern-encrypted subsample may include one or more encrypted data blocks and one or more unencrypted data blocks in accordance with a predetermined pattern. The processor may determine a first buffer portion and a second buffer portion based on a number of the data blocks in the frame and the predetermined pattern. The processor may sort the data blocks by copying the encrypted data blocks into the first buffer portion and by copying the unencrypted data blocks into the second data buffer portion. The processor may perform a decryption call to a crypto engine to generate corresponding decrypted data blocks using the sorted encrypted data blocks in the first buffer portion.

A system, method and apparatus for protecting a media program having a plurality of frames is disclosed. In one embodiment, the method comprises receiving an encrypted plurality of compressed frames in a client device, wherein at least a first portion of the plurality of frames is corrupted before encryption according to one or more corruption operations; decrypting the plurality of compressed frames, decompressing the plurality of compressed frames to recover the plurality of frames, including the first portion of frames corrupted according to the one or more corruption operations, storing the plurality of frames in a frame buffer, extracting the stored plurality of frames from the frame buffer for processing by a graphics processing unit of the client device, at least substantially decorrupting at least some of the corrupted plurality of frames according to one or more decorruption operations in the graphics processing unit, and providing the plurality of frames including the decorrupted plurality of frames for display.

A device and a method for processing an image by a multimedia device that supports encryption and decryption are provided. The device includes a thumbnail image of an original image is obtained and the original image is encrypted using a first encryption scheme. An encrypted image frame is generated such that the encrypted image frame includes an identity field in which marker information is recorded between a first image field in which the obtained thumbnail image is recorded and a second image field in which the encrypted original image is recorded. The marker information indicates whether the encrypted image frame includes the second image field.

A method of decrypting a streaming image includes: receiving a packet including at least an item which is encrypted, the item including at least one parameter used for decoding image data included in the streaming image; decrypting the item; and decoding the image data included in the streaming image based on the decrypted item, wherein the image data is not encrypted.