Provided are an apparatus and a method for processing conditional access system (CAS)-based content. A method of operating a broadcast receiving apparatus includes: receiving a broadcast stream that includes content encrypted based on a CAS; extracting, from the received broadcast stream, CAS information for decrypting the encrypted content; receiving an entitlement control message (ECM) having a preset format based on the CAS information generated in a different format for each broadcasting business operator; and displaying the content decrypted based on the ECM.

A method and apparatus for providing a license to a client device, the license providing a key for decrypting a content instance. In one embodiment, the method comprises accepting a token request, the token request having client device credentials including a client device identifier (client ID) and a content instance identifier (content ID), deriving a private key according to a token key seed, a token key identifier (token key ID), and the content ID, generating a token having a payload and a token identifier (token ID) and being digitally signed according to the derived private key; transmitting the generated token to the client; and providing the license to the client device according to the generated token.

Systems and methods of managing personal video recordings are disclosed for providing a network personal video recorder (nPVR) that manages PVR recordings for a plurality of users. Recording scheduling information from a recording request received at the nPVR is checked against existing scheduled recordings and a new recording is scheduled in accordance with the received recording scheduling information if an existing scheduled recording does not already exist. The recording scheduling information received in respective recording requests are associated with respective users to facilitate playback of recorded content and digital rights management.

Aspects of the subject disclosure may include, for example, identifying unselected video content items and preconfiguring playback views for unselected video content items. During a warm-up phase, access to the unselected video content items is precoordinated individually with a separate video player, manifests and license/key are retrieved in anticipation for possible selection for playback. Subsequent selection of one of the unselected video content items initiates playback responsive to selection without repeating any of the preconfiguring, preauthorizing or fetching. Other embodiments are disclosed.

Systems and methods for managing data are disclosed. One method can comprise receiving a first request for a service, wherein the first request is associated with a first rights package. The first rights package can be processed to determine access to the service. An evaluation key can be generated, wherein the evaluation key represents the determination of access relating to the processing of the first rights package. A second request for a service can be received, wherein the second request is associated with a second rights package. The second rights package can be processed using the evaluation key.

A system for transcoding a media stream includes at least one network interface; at least one memory; and at least one processor each coupled to one or more of the at least one network interface and one or more of the at least one memory. The at least one processor is configured to publish, via a messaging bus, a segment transcode request in a segment transcode request queue, retrieve the segment transcode request by a transcode worker thread, wherein the first transcode worker thread monitors the segment transcode request queue, transcode by a second transcode worker thread a segment referenced by the segment transcode request, determine by the manifest processor whether the second transcode worker thread has completed transcoding the segment and is still operating, and, if not, transcode the segment by a third transcode worker thread, and store the transcoded segment.

Aspects of the subject disclosure may include, for example, a user device that attaches to a radio access network of a mobile network and requests services. The user device creates a virtual network function on the device to support the service. The virtual network function may include a user plane virtual network function, a control plane virtual network function, or both. Other embodiments are disclosed.

A system for validating an authorization request to facilitate controlling access to content or computer commands, in which the access is requested by multiple entities operated on discrete computing environments. The techniques make use of a system including a switchboard and a rule engine that collect parameter sets required for validation from the entities and dynamically generate a lock and key combination based on the collected parameter sets. The key of the lock and key combination allows the system to validate each entity independently regardless of the required parameters specified in the lock and key combination.

A video player for playing a video stream that receives a master playlist identifying at least one variant playlist identifying a video file encoded as a series of video frames that when decoded provide the video stream. The video player based upon a configuration tag in the master playlist selectively determining whether the video file is to be processed in a trusted execution environment. The trusted execution environment of the video player selectively includes at least one of (i) hack one, only hack one; (ii) output and link protection; (iii) hardware root of trust; and (iv) forensic watermarking, and decrypts and/or decodes the video stream in such an environment.

A method is provided for managing key rotation (use of series of keys) and secure key distribution in over-the-top content delivery. The method provided supports supplying a first content encryption key to a content packaging engine for encryption of a first portion of a video stream. Once the first content encryption key has expired, a second content encryption key is provided to the content packaging engine for encryption of a second portion of a video stream. The method further provides for notification of client devices of imminent key changes, as well as support for secure retrieval of new keys by client devices. A system is also specified for implementing a client and server infrastructure in accordance with the provisions of the method.