A memory storing AV data for playing back encrypted video on a playback device is provided. The AV data includes a system stream file including encrypted video information, and a management information file. The system stream file includes a first segment in which is repeated a first data unit that can be individually decrypted using a first decryption key, and has a second data unit of the same data size as the first data unit but cannot be decrypted by the first decryption key. The system stream file also includes a second segment which can all be decrypted using a second decryption key that the playback device has in common with another playback device. The management information file has a time map in which are correlated I-picture serving as random access point, and a presentation clock time of the I-picture. The I-picture is multiplexed in the second segment.

A system and method for providing load balanced secure media content and data delivery in a distributed computing environment is disclosed. Media content is segmented and encrypted into a set of individual encrypted segments on a centralized control center. Each individual encrypted segment has the same fixed size. The complete set of individual encrypted segments is staged to a plurality of intermediate control nodes. Individual encrypted segments are mirrored from the staged complete set to a plurality of intermediate servers. Requests are received from clients for the media content at the centralized control center. Each individual encrypted segment in the set is received from one of an intermediate control node and an intermediate server optimally sited from the requesting client. The individual encrypted segments are reassembled into the media content for media playback.

A system and method for facilitating content delivery with end-to-end encryption in a network architecture using a common intermediary mezzanine distribution format (CMZF). An edge media router (EMR) device is provided in one embodiment that is configured to receive a media content asset packaged in a CMZF container structure, wherein the media content asset is provided as CMZF-formatted media content in a CMZF stream scheme. The CMZF container structure, configured to facilitate carriage of ISOBMFF track and track metadata data objects as well as sample variants in PES payload in additional elementary streams, is operative to carry each bitrate representation of the media content asset encrypted in one or more encryption schemes at a headend. Upon receipt, the EMR device is configured to repackage the media content asset to generate one or more output formats without reencrypting the media content asset for storage at a storage node and/or for downstream delivery.

The present invention provides a conditional access method for an intelligent operating system that comprises a trusted execution environment. A digital TV module acquires all channel messages and a control management message. A media play module distributes a DescramblerId and sends the acquired videoPid, audioPid, casId, ecmPid and emmPid and the descrambler message DescramblerId to a conditional access module. The conditional access module selects a registered conditional access application module according to the casId. The conditional access application module acquires corresponding ecm Data and emm Data from the digital TV module, and sends the ecm Data and emm Data to the conditional access module. The conditional access module sends the messages to a trusted application module. The trusted application module performs parse to acquire EK1, EK2 and ECW. The security chip controls a descrambler corresponding to the DescramblerId to perform descrambling according to the acquired messages.

Embedding of digital tokens within a digital video can occur cryptographically using a public key in some embodiments. The digital video may be altered in a variety of ways so that the video itself contains an integrated token that can represent various quantities. Audiovisual data can be altered to contain both a token and a perceptible user auditory or visual cue as to the presence of the encrypted digital token. A video with an embedded digital token may be sent to users on the Internet. A video recipient may be able to view the video and also take additional action or gain additional functionality from the digital token embedded in the video. Tokens can be embedded by altering video metadata so that the perceptible video content itself is not changed in some embodiments.

Techniques are described for communicating encoded data using start code emulation prevention. The described techniques include obtaining at least one partially encrypted packet, identifying at least one portion of the packet that is unencrypted, and determining that the identified unencrypted portion(s) emulates a start code. Start code emulation prevention data or emulation prevention bytes (EPBs) may be inserted into only the encrypted portion of the packet. The modified packet may be communicated to another device/storage, along with an indication of which portion(s) of the packet are unencrypted. Upon receiving the packet and indication, the receiving device may identify and remove the EPBs in the identified unencrypted portion(s) of the packet, and decrypt the packet to recover the data. In some aspects, upon identifying the indication, the receiving device may only search for EPBs in the unencrypted portion(s) of the packet, thus yielding a more efficient start code emulation prevention process.

A method for accessing protected multimedia includes receiving an encrypted fragment of the multimedia content and receiving a key for decrypting it, using the key to decrypt the fragment, thereby obtaining an unscrambled fragment, replacing original bits of the unscrambled fragment with different substituted bits to obtain a modified fragment, and reconstructing the modified fragment is reconstructed by replacing substituted bits of the extracted modified fragment with the original bits. The resulting reconstructed fragment is then decoded and the resulting decoded fragment is sent to a multimedia appliance to be enjoyed by a human viewer.

A system and method for providing load balanced secure media content and data delivery in a distributed computing environment is disclosed. Media content is segmented and encrypted into a set of individual encrypted segments on a centralized control center. Each individual encrypted segment has the same fixed size. The complete set of individual encrypted segments is staged to a plurality of intermediate control nodes. Individual encrypted segments are mirrored from the staged complete set to a plurality of intermediate servers. Requests are received from clients for the media content at the centralized control center. Each individual encrypted segment in the set is received from one of an intermediate control node and an intermediate server optimally sited from the requesting client. The individual encrypted segments are reassembled into the media content for media playback.

A module having access to a secure memory and an unsecure memory, the module configured to: read, from the secure memory via a secure channel, a decrypted decoded rendition of a base layer of a video signal, wherein the decrypted decoded rendition of the base layer has a first resolution; read, from the unsecure memory, a decoded rendition of an enhancement layer of the video signal, wherein decoded rendition of the enhancement layer has a second resolution, wherein the second resolution is higher than the first resolution; generate an upsampled decrypted decoded rendition of the base layer of the video signal by upsampling the decrypted decoded rendition of the base layer such that the upsampled decrypted decoded rendition of the base layer has the second resolution; apply the decoded rendition of the enhancement layer to the upsampled decrypted decoded rendition of the base layer to generate an output plane; output the output plane, via the secured channel, to the secure memory for storage in the secure memory, wherein the output plane is for use in outputting by an output module to a display.

The present disclosure relates to an image processing apparatus and an image processing method which enable reproduction of content data to be more reliably controlled. For example, with respect to a segment with which reproduction control for stream data obtained by encoding image data is carried out, a verification code of the stream data of the segment is produced, and the verification code produced is added to the stream data of the segment. In addition, for example, with respect to a segment with which reproduction control for stream data obtained by encoding image data is carried out, a verification code of the stream data of the segment is produced, the verification code produced and a verification code added to the stream data of the segment are compared with each other, and the reproduction of the stream data of the segment, a following segment, or both of them is controlled in response to agreement or disagreement between the verification codes. The present disclosure, for example, can be applied to an image producing apparatus, an image encoding apparatus, an image decoding apparatus or the like.