A video player for playing a video stream that receives a master playlist identifying at least one variant playlist identifying a video file encoded as a series of video frames that when decoded provide the video stream. The video player based upon a configuration tag in the master play list selectively determining whether the video file is to be processed in a trusted execution environment. The trusted execution environment of the video player selectively includes at least one of (i) hack one, only hack one; (ii) output and link protection; (iii) hardware root of trust; and (iv) forensic watermarking, and decrypts and/or decodes the video stream in such an environment.

A method is provided for managing key rotation (use of series of keys) and secure key distribution in over-the-top content delivery. The method provided supports supplying a first content encryption key to a content packaging engine for encryption of a first portion of a video stream. Once the first content encryption key has expired, a second content encryption key is provided to the content packaging engine for encryption of a second portion of a video stream. The method further provides for notification of client devices of imminent key changes, as well as support for secure retrieval of new keys by client devices. A system is also specified for implementing a client and server infrastructure in accordance with the provisions of the method.

A method is provided for managing key rotation (use of series of keys) and secure key distribution in over-the-top content delivery. The method provided supports supplying a first content encryption key to a content packaging engine for encryption of a first portion of a video stream. Once the first content encryption key has expired, a second content encryption key is provided to the content packaging engine for encryption of a second portion of a video stream. The method further provides for notification of client devices of imminent key changes, as well as support for secure retrieval of new keys by client devices. A system is also specified for implementing a client and server infrastructure in accordance with the provisions of the method.

The present invention relates in particular to a pairing method between a multimedia unit and one operator having an operator identifier, the multimedia unit having a multimedia unit identifier and receiving conditional access data from said operator, the method being characterized in that: receiving by the multimedia unit a multimedia unit key formed by applying a first cryptographically function to a personalization key and to the multimedia unit identifier; receiving by the operator an operator key formed by applying a second cryptographically function to said personalization key and to the operator identifier; said multimedia unit further having a function of the multimedia unit and said operator further having a function of the operator, these functions being such that the result of the application of the function of the operator to said operator key and to said multimedia unit identifier is equal to the result of the application of the function of the multimedia unit to said multimedia unit key and to said operator identifier, this result forming a pairing key between said multimedia unit and said operator.

A display device (100) including at least: an array of display blocks, each display block comprising luminous elements (118) and a driving circuit (122) for the luminous elements; an array of control circuits (114) associated with the display blocks; a video card receiving an encrypted digital signal to be displayed and sending the encrypted digital data to be displayed to the control circuits; and wherein each control circuit includes: a first memory circuit (116) receiving and storing the encrypted digital data; a second memory circuit (124) storing a decryption key; a decryption circuit (136) decrypting the encrypted digital data using the decryption key.

A method and apparatus for multiplexing and de-multiplexing video data. The method of multiplexing the video data involves syntax to a header of transmission unit data that is used to multiplex a clean random access (CRA) picture used in a random access, wherein the predetermined syntax indicates a reproduction status of the CRA picture, i.e., normal reproduction or reproduction according to a random access.

In one embodiment, a consumer device is assigned, at a broadcast headend to one of at least two groups of consumer devices, the two groups including a first group of consumer devices which is required to play content of a second type in order to view content of a first type and a second group of consumer devices which is not required to play content of the second type in order to view content of the first type. A video broadcast stream is sent from the broadcast headend to the consumer device, the video broadcast stream comprising content of the first type sent associated with a first packet ID (PID) and content of the second type sent associated with a second PID, wherein the first PID and the second PID are processed at the consumer device at the same time. An entitlement management message (EMM) is sent from the broadcast headend to the consumer device according to its group of consumer devices, the EMM being of one of a first type of EMM for devices of the first device type and a second type of EMM for devices of the second device type. An entitlement control message (ECM) stream is sent from the broadcast headend to the consumer device, the ECM stream including comprising three types of ECMs: ECM_P_i_start which enables the consumer device to produce a control word which decrypts a first portion of the content of the first type; ECM_A_(i−1) which enables the consumer device to produce a control word which decrypts content of the second type; and ECM_P_i_rest which enables the consumer device to produce a control word which decrypts a second portion of the content of the first type. Related hardware, systems and methods are also described.

A method and apparatus for decoding a compressed video is disclosed. The method comprises scrambling the compressed video, to produce a scrambled compressed video; delivering the scrambled compressed video to a decoder, for decoding the scrambled compressed video to produce a scrambled decompressed video; receiving from the decoder the scrambled decompressed video; and descrambling the scrambled decompressed video, to produce a descrambled decompressed video.

A method and an apparatus can include a system processor control and a system controller. The system controller can retrieve data from at least one database, the data including information associated with at least one of subscribers, multimedia content, and customer premises equipment. The system processor can formulate an input dataset from the retrieved data, perform nonlinear manifold clustering on the input dataset to formulate clusters, and determine a recommendation of multimedia content, the recommendation of multimedia content being based on a metric distance between a subscriber and a multimedia content. The system controller can transmit, to a customer premises equipment of the subscriber, the recommendation of multimedia content.

An image processing apparatus includes: a central processing unit (CPU) configured to process data; a random access memory (RAM) which includes a first storage area which stores the data processed by the CPU and a second storage area different from the first storage area; and a RAM controller configured to authorize the CPU to access the first storage area and block the CPU from accessing the second storage area so that the data loaded to the second storage area can be prevented from being copied by the CPU.