Systems and methods provide features in streaming media and video distribution by taking streaming video, including video-on-demand and live streams, and applying a dynamic visual watermark as desired by the content owner or broadcaster. The dynamic visual watermark can be a visible watermark that can be generated for each stream, viewer, or user. The techniques can retain the quality of the stream, make anti-piracy implementation feasible (typically about 1% of the cost of conventional techniques), work on live streams, work with any choice of vendor for cloud platforms, DRM providers, or other watermarking vendors, and does not require huge setup and integration to make it work. The video streaming solutions provides a tool to the broadcasters to mark every stream if desired. The video streaming solutions can be burnt in at the server-side and can be platform agnostic to the cloud platforms, software, and networks.

Video content is processed for delivery using an automated process that allows for convenient packaging of encrypted or digital rights management (DRM) protected content in a manner such that the packaged content can be efficiently stored in a content delivery network (CDN) or other content source for subsequent re-use by other media clients without re-packaging, and without excessive storage of unused content data.

A system for converting an adaptive media stream to downloadable media includes at least one network interface, at least one memory, and at least one processor. The at least one processor is configured to receive, from a requesting device, a request for converting at least a portion of a media stream into a downloadable multimedia container, initialize a plurality of worker threads, retrieve, via one of the plurality of worker threads, a segment of the media stream from a storage location, concatenate, via the one of the plurality of worker threads, the retrieved segment into a multimedia container, determine that each segment of the media stream associated with the at least a portion of the media stream is included in the multimedia container, and transmit, via the at least one network interface, the multimedia container to the requesting device.

Methods, systems, and media for protecting and verifying video files are provided. In some embodiments, a method for verifying video streams is provided, the method comprising: receiving, at a user device, a request to present a video that is associated with a video archive, wherein the video archive includes a file list, a signature corresponding to the file list, video metadata, a signature corresponding to the video metadata, and at least one encrypted video stream corresponding to the video, and wherein the file list indicates a plurality of files that are to be included in the video archive; verifying the signature corresponding to the file list; in response to determining that the signature corresponding to the file list has been verified, determining whether the plurality of files indicated in the file list are included in the video archive; in response to determining that the plurality of files indicated in the file list are included in the video archive, verifying the signature corresponding to the video metadata; in response to determining that the signature corresponding to the video metadata has been verified, requesting a decryption key corresponding to the video stream; in response to receiving the decryption key, decrypting the encrypted video stream; and causing the decrypted video stream to be presented on the user device.

A method for providing a broadcast service is provided. The method includes transmitting a user datagram protocol (UDP)/internet protocol (IP) packet including a first message, the first message containing information about a message to be signed and transmitted, and transmitting a moving picture experts group (MPEG) media transport protocol (MMTP) packet including a second message, the second message containing information about the broadcast service and information indicating whether the information about the broadcast service is signed. The first message includes an identifier of a key used to verify a signature of the message to be transmitted and signed and an identifier of a hash algorithm used to calculate a hash value of the message to be transmitted and signed.

A video player for playing a video stream that receives a master playlist identifying at least one variant playlist identifying a video file encoded as a series of video frames that when decoded provide the video stream. The video player based upon a configuration tag in the master playlist selectively determining whether the video file is to be processed in a trusted execution environment. The trusted execution environment of the video player selectively includes at least one of (i) hack one, only hack one; (ii) output and link protection; (iii) hardware root of trust; and (iv) forensic watermarking, and decrypts and/or decodes the video stream in such an environment.

The present invention relates to data rights management and more particularly to a secured system and methodology and production system and methodology related thereto and to apparatus and methodology for production side systems and are consumer side systems for securely utilizing protected electronic data files of content (protected content), and further relates to controlled distribution, and regulating usage of the respective content on a recipient device (computing system) to be limited strictly to defined permitted uses, in accordance with usage rights (associated with the respective content to control usage of that respective content), on specifically restricted to a specific one particular recipient device (for a plurality of specific particular recipient devices), or usage on some or any authorized recipient device without restriction to any one in specific, to control use of the respective content as an application software program, exporting, modifying, executing as an application program, viewing, and/or printing of electronic data files.

Embodiments are disclosed herein that relate to facilitating the discovery of authenticated content from a variety of sources. One embodiment provides a method comprising receiving a plurality of authentication tokens from the media presentation device, where each of the plurality of authentication tokens represents an established authenticated relationship between a user and a corresponding content source. The method further comprises receiving a request from the media presentation device for an electronic programming guide and sending the electronic programming guide to the media presentation device, where the electronic programming guide comprises a listing of content from a plurality of content sources corresponding to the plurality of authentication tokens.

A method for enforcing entitlements includes configuring a wide variety of entitlements at a server; determining applicable combination of entitlements for a given client request; sending entitlements to the requesting client securely; handling entitlement information securely on a plurality of client devices at run time; storing entitlement information securely on a plurality of client devices for offline use; and enforcing entitlements on a plurality of client devices. The method employs manipulation of manifest files by a proxy that may be included in the client device or located in the network.

A method of transmitting entitlement messages to content consumption devices in a access control system, the method comprising periodically transmitting entitlement messages to content consumption devices in a access control system and periodically extending an expiry time comprised in the entitlement messages. The entitlement messages comprise indicator data indicating to the content consumption devices that subsequent entitlement messages loaded into a content consumption device after a first entitlement message is loaded into the content consumption device shall not be used by the content consumption device to access protected media content.