System and Method for Security Processing Media Streams

Abstract

A system for multi-stream security processing and distributing digital media streams includes a headend, a network, and at least one receiver. The headend is generally configured to generate encrypted digital media streams. The network may be coupled to the headend and configured to receive the encrypted digital media streams. The at least one receiver may be coupled to the network and configured to receive the encrypted digital media streams and present a decrypted version of the encrypted digital media streams. At least one of the headend and the at least one receiver include a security processor that may be configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams.

1 . A receiver, comprising:
 a security processor configured to provide at least one of encryption and decryption processing of digital media streams, the security processor being operative to store downloaded software and to securely configure at least one of encryption and decryption based on the downloaded software,   wherein said receiver is configured to receive encrypted digital media streams and to present a decrypted version of the encrypted digital media.   
   
   
       2 . The receiver of  claim 1  wherein the encrypted digital media streams comprise at least one of a video stream, and audio stream, and a video plus audio stream. 
   
   
       3 . The receiver of  claim 1  wherein the security processor comprises a plurality of digital stream encryption/decryption engines that are selectively parallel coupled by a controller for simultaneous operation in response to a predetermined security configuration. 
   
   
       4 . The receiver of  claim 3  wherein the security configuration comprises at least one of Data Encryption Standard (DES), Triple DES (3-DES), Advanced Encryption Standard (AES), and Common Scrambling Algorithm (CSA). 
   
   
       5 . The receiver of  claim 3  wherein the security configuration comprises at least one of a secure download, RSA key management, multiple security key management, authentication, copy protection, and digital signatures. 
   
   
       6 . The receiver of  claim 3  wherein the security processor further comprises at least one of a memory containing a hash, engine encryption/decryption configuration logic, a random number generator, a multiplier, and a memory containing a dynamic feedback arrangement scrambling technique (DFAST) algorithm coupled in parallel to the controller and configured to provide multiple key management for at least one of conditional access and digital rights management. 
   
   
       7 . The receiver of  claim 3  wherein the security processor further comprises at least one of a swappable random access memory (RAM) and a swappable flash memory containing the predetermined security configuration. 
   
   
       8 . The receiver of  claim 3  wherein the security processor provides role-based authentication that is used by an authorized user for at least one of configuration, reconfiguration, and renewal. 
   
   
       9 . The receiver of  claim 1 , wherein the receiver is at least one of a set top box (STB), and a receiver or transceiver for at least one of digital television, high definition digital television (HDTV), audio, MP3, text messaging, and game digital streams. 
   
   
       10 . The receiver of  claim 1 , wherein the receiver is a set top box (STB) and the receiver is coupled to a second receiving device including the security processor, and wherein the second receiving device is configured to receive and decrypt the encrypted digital media streams using the security processor. 
   
   
       11 . The receiver of  claim 1 , wherein the security processor is configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams. 
   
   
       12 . A method of multi-stream security processing and distributing digital media streams, the method comprising:
 generating encrypted digital media streams;   transmitting the encrypted digital media streams to a receiver via a distribution network; and   transmitting software to the receiver over the distribution network, wherein the software comprises instructions for the receiver to reconfigure a security processor to provide at least one of encryption and decryption processing of the digital media streams by the security processor.   
   
   
       13 . The method of  claim 12  wherein the media streams are at least one of a video stream, and audio stream, and a video plus audio stream. 
   
   
       14 . The method of  claim 12  wherein the security processor comprises a plurality of digital stream encryption/decryption engines that are selectively coupled by a controller for simultaneous operation in response to a predetermined security configuration. 
   
   
       15 . The method of  claim 14  wherein the security configuration comprises at least one of Data Encryption Standard (DES), Triple DES (3-DES), Advanced Encryption Standard (AES), and Common Scrambling Algorithm (CSA). 
   
   
       16 . The method of  claim 14  wherein the security configuration comprises at least one of a secure download, RSA key management, multiple security key management, authentication, copy protection, and digital signatures. 
   
   
       17 . The method of  claim 14  wherein the security processor further comprises at least one of a memory containing a hash, engine encryption/decryption configuration logic, a random number generator, a multiplier, and a memory containing a dynamic feedback arrangement scrambling technique (DFAST) algorithm coupled to the controller and configured to provide multiple key management for at least one of conditional access and digital rights management. 
   
   
       18 . The method of  claim 14  wherein the security processor further comprises at least one of a swappable random access memory (RAM) and a swappable flash memory containing the predetermined security configuration. 
   
   
       19 . The method of  claim 12  wherein the security processor provides role based authentication that is used by an authorized user for at least one of configuration, reconfiguration, and renewal. 
   
   
       20 . The method of  claim 12 , wherein the security processor is configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams. 
   
   
       21 . A headend device, comprising:
 a processor; and   memory storing computer executable instructions that, when executed by the processor, configure the headend device to perform:
 transmitting software to a receiver over a distribution network, wherein the software contains instructions that cause the receiver to reconfigure a security processor to provide at least one of encryption and decryption processing of digital media streams. 
   
   
   
       22 . The headend device of  claim 21  wherein the media streams are at least one of a video stream, and audio stream, and a video plus audio stream.