A method is provided for managing key rotation (use of series of keys) and secure key distribution in over-the-top content delivery. The method provided supports supplying a first content encryption key to a content packaging engine for encryption of a first portion of a video stream. Once the first content encryption key has expired, a second content encryption key is provided to the content packaging engine for encryption of a second portion of a video stream. The method further provides for notification of client devices of imminent key changes, as well as support for secure retrieval of new keys by client devices. A system is also specified for implementing a client and server infrastructure in accordance with the provisions of the method.

Provided is novel technology for secure security data transmission and more particularly for registering network-enabled security devices such as IP cameras to a security server over a public network such as to a cloud-based security service. An enrolment server is provided that is logged into using a computing device to request and receive an activation code for the security device. The activation code is then provided to the security device, e.g. directly by the computing device. The Security device authenticates itself based on the activation code and in one example provides a public key that will be used to verify its registration. Data transmissions by the device are secured in part on the basis of its registration.

A method for securely receiving a multimedia content by a client device operated by one or more operator(s) involving a dedicated provisioning server of a security provider managing symmetric secrets used by the client devices and operators license servers. The provisioning server provides to the client device one or more generations of operator specific unique device secrets, which are then exploited by the various operators' license servers to deliver licenses such that authorized client devices can consume protected multimedia contents.

Aspects of the subject disclosure may include, for example, a local server coupled to a plurality of client devices. The local server may receive encrypted content from one or more content sources and provide the content to the client devices. The local server and client devices may be part of a multi-client environment such as a hotel or conference center. The local server does not decrypt and re-encrypt content, thereby allowing the use of low cost equipment. Other embodiments are disclosed.

Methods and systems are provided for encoding audio data from an audio file, wherein the audio data comprises audio samples. Audio data is segmented from the audio file in order to obtain at least one segment. Each segment comprises a time interval of the audio data, and each segment also comprises a plurality of audio samples grouped in frames. A segment index and a description stream containing the segment index is then generated. The segment index comprises the position of the segments within the audio file. A segment stream containing the audio data of one particular segment is then generated. At least part of the audio data is encrypted during the generation of the segment stream with an encryption key.

A method is provided for managing key rotation (use of series of keys) and secure key distribution in over-the-top content delivery. The method provided supports supplying a first content encryption key to a content packaging engine for encryption of a first portion of a video stream. Once the first content encryption key has expired, a second content encryption key is provided to the content packaging engine for encryption of a second portion of a video stream. The method further provides for notification of client devices of imminent key changes, as well as support for secure retrieval of new keys by client devices. A system is also specified for implementing a client and server infrastructure in accordance with the provisions of the method.

The present invention provides methods, apparatuses, and systems for delivering protected streaming content to a receiving device. In an aspect of the present invention, a broadcaster provides streaming content. To ensure viewers are properly authorized, the streaming content is encrypted with a traffic key. The traffic key is provided to the users via a key stream message, which is encrypted with a service key. The user obtains at least one rights object from a rights issuers and the at least one rights object includes the service key so that the streaming content may be used. The at least one rights object also contains information regarding usage rights that may be configured by the rights issuer so that, depending on the user and/or the receiving device, different rights may be available. The key stream message may include a program category variable value that indicates the type of content and in conjunction with the rights object, determines what usage rights exist for the streaming content.

Aspects of the subject disclosure may include, for example, a user device that attaches to a radio access network of a mobile network and requests services. The user device creates a virtual network function on the device to support the service. The virtual network function may include a user plane virtual network function, a control plane virtual network function, or both. Other embodiments are disclosed.

Techniques for a trusted system for secure content distribution and trusted recording of content consumption are described. In some embodiments, the trusted system transcodes and transcrypts a media content item using a key obtained from a content provider and one or more keys based on an entitlement from a service provider to generate an encrypted media content item. The trusted system further receives a request to provide the media content item to a client device. The trusted system also obtains a signed audit token recording the request upon an authorization by the service provider based on the entitlement and a confirmation by the content provider, where the signed audit token is signed by the content provider and the service provider. The trusted system additionally provides the one or more keys for decrypting the encrypted media content item and reports the signed audit token.

A method to provide secure delivery of a manifest file for use in playback of a video signal on a video player. The method includes establishing a connection with the video player, wherein the connection has a session identifier identifying the connection with the video player, receiving a request from the video player for the video signal, wherein the video signal is associated with the manifest file created for the video signal, customizing, using the session identifier identifying the connection with the video player, the manifest file created for the video player to provide a customized manifest file that is unique to the video player, the customized manifest file to be used in playback of the video signal on the video player, encrypting the customized manifest file using a manifest encryption key which is based on the session identifier identifying the connection with the video player, and transmitting the encrypted manifest file to the video player.