Patent ID: 9203811
Filing Date: 2015-12-01
Classification: A01N,A23K,A23L,A23V,A61K,H04L,H04N

Abstract:
1. A server apparatus supporting authenticated encryption in a network, comprising: a receiver configured to receive an unencrypted media segment; a processor configured to: select an encryption key, an initialization vector, and an additional authentication data (AAD), wherein the AAD is derived by calculation at a client and specified by a CryptoPeriod attribute; encrypt the media segment; configure the media segment for transfer in a Dynamic Adaptive Streaming over Hypertext Transfer Protocol (HTTP) (DASH) media; assign a segment number to the encrypted media segment; append an authentication tag to the encrypted media segment; store the encrypted media segment with the appended authentication tag; and update a Media Presentation Description (MPD) associated with the encrypted media segment with the appended authentication tag, wherein the MPD comprises an AAD Base attribute with an AAD base value, wherein the AAD value is the sum of the segment number and the AAD Base attribute value; and a transmitter configured to transmit the encrypted media segment with the appended authentication tag to a destination, wherein the encrypted media segment with the appended authentication tag is one media segment in a Period, and wherein a single combination of the encryption key and the initialization vector is used only once during the Period.