(12) United States Patent
`Colligan et al.
`
`I 1111111111111111 11111 lllll 111111111111111 11111 1111111111111111 IIII 11111111
`US006415031Bl
`US 6,415,031 Bl
`Jul. 2, 2002
`
`(10) Patent No.:
`(45) Date of Patent:
`
`(54) SELECTIVE AND RENEWABLE
`ENCRYPTION FOR SECURE DISTRIBUTION
`OF VIDEO ON-DEMAND
`
`5,666,487 A
`5,721,778 A
`
`..... 395/200.76
`9/1997 Goodman et al.
`2/1998 Kubota et al. ................ 380/10
`
`(75)
`
`Inventors: Michael R. Colligan, Sunnyvale; Yong
`Ho Son, Palo Alto; Christopher
`Goode, Menlo Park, all of CA (US)
`
`Primary Examiner-Matthew Smithers
`(74) Attorney, Agent, or Firm-Moser, Patterson &
`Sheridan LLP
`
`(73) Assignee: Diva Systems Corporation, Redwood
`City, CA (US)
`
`(57)
`
`ABSTRACT
`
`( *) Notice:
`
`Subject to any disclaimer, the term of this
`patent is extended or adjusted under 35
`U.S.C. 154(b) by O days.
`
`(21) Appl. No.: 09/528,580
`
`(22) Filed:
`
`Mar. 20, 2000
`
`Related U.S. Application Data
`
`( 63) Continuation-in-part of application No. 09/267,800, filed on
`Mar. 12, 1999, now Pat. No. 6,229,895.
`( 60) Provisional application No. 60/131,162, filed on Apr. 26,
`1999, and provisional application No. 60/128,224, filed on
`Apr. 7, 1999.
`
`Int. Cl.7 ............................ H04N 7/167; H04L 9/00
`(51)
`(52) U.S. Cl. ........................................ 380/200; 713/160
`(58) Field of Search .............................. 725/29, 31, 87;
`380/200, 210, 211, 239; 713/153, 160,
`162
`
`(56)
`
`References Cited
`
`U.S. PATENT DOCUMENTS
`
`Selective encryption is provided in a process which
`includes: determining whether a predetermined criterion is
`satisfied; setting a selective encryption status field if the
`predetermined criterion is satisfied; and encrypting an unen(cid:173)
`crypted payload to generate an encrypted payload, and
`constructing a packet with the encrypted payload, if the
`predetermined criterion is satisfied. The predetermined cri(cid:173)
`terion may be one of several criteria, each of which reduce
`the required amount of encryption and decryption while
`maintaining a high level of security. Renewable encryption
`is provided in a process which includes: copying a first
`encrypted digital video program from a remote server to a
`video source; decrypting the first encrypted digital video
`program using a first key to generate an unencrypted digital
`video program; encrypting the unencrypted digital video
`program using a second key to generate a second encrypted
`digital video program; transmitting the second encrypted
`digital video program from the video source to the remote
`server; and deleting the first encrypted digital video program
`from the remote server.
`
`5,420,866 A
`
`5/1995 Wasilewski .............. 370/110.1
`
`23 Claims, 24 Drawing Sheets
`
`SET PAYLOAD UNIT
`YES
`> - - - START INDICATOR FLAG r - - - . i
`1208
`
`ENCRYPT TS
`PAYLOAD
`1210
`
`NO
`
`RESET (TO ZERO)
`PAYLOAD UNIT START
`INDICATOR FLAG
`1204
`
`CONSTRUCT TS PACKET
`WITH UNENCRYPTED
`TS PAYLOAD
`1206
`
`CONSTRUCT TS PACKET
`WITH ENCRYPTED TS
`PAYLOAD
`1212
`
`1200
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0001
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 1 of 24
`
`US 6,415,031 Bl
`
`BROADCAST
`SOURCE
`102
`
`PREMIUM
`BROADCAST
`SOURCE
`104
`
`DISTRIBUTION CENTER 106
`
`SECONDARY
`DISTRIBUTION
`NETWORK
`108
`
`110d
`
`IIOc
`
`SUBSCRIBER
`STATION IIOa
`
`IIOb
`
`100
`
`FIG.
`
`I.
`
`(PRIOR ART)
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0002
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 2 of 24
`
`US 6,415,031 Bl
`
`-..._
`
`ex:
`<(
`er:
`0
`er:
`a..
`---
`.
`C'f
`.
`(!)
`it
`
`r
`
`0
`w
`>-
`<(
`a.. 01
`....J
`
`CJ) -r-
`ON
`0
`w
`0
`>
`
`o a:: ""I
`Wwo
`XIN
`ow.__(/)
`w ....J O ....J
`0 a..
`<(
`- r I Z
`> -' ..._ <.9
`~ s (/)
`
`,J
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0003
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`tit = ~
`
`~
`~
`0'I
`
`~
`~
`~
`
`e r.n
`
`.i:..
`N
`0 ..,
`V4
`.....
`rJ1 =(cid:173)
`
`('t>
`('t>
`
`0 s
`
`N
`"'N
`
`~ F-
`
`"""'" ~ = """'"
`
`~
`~
`•
`'J'J.
`d •
`
`300
`
`FIG. 3A (PRIOR ART)
`
`318
`
`VIDEO DISPLAYED
`
`.
`
`-.
`
`316
`
`UNSCRAMBLED
`
`VIDEO
`
`.
`
`-
`
`308
`
`VIDEO SCRAMBLED
`
`,,
`
`306
`
`VIDEO DECRYPTED
`
`--
`
`~
`
`WITH OTHER SIGNALS -
`VIDEO MULTIPLEXED
`
`310
`
`-VIDEO TRANSPORTED
`
`TO CENTER 304
`
`-
`
`314
`
`-
`
`DEMULTIPLEXED AT
`
`STATION
`
`SIGNAL
`
`'
`
`~
`
`-
`
`MULTIPLEXED SIGNAL
`
`STATIONS 312 -
`SUBSCRIBER
`DISTRIBUTED TO
`
`ENCRYPTED 302
`PREMIUM VIDEO
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0004
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`00
`i,-
`~
`b
`(1)
`i,(cid:173)
`~
`O"I
`r:.,J.
`
`i,-
`
`e
`
`FIG. 38. (PRIOR ART)
`
`350
`
`,i;;..
`N
`
`0 ...,
`~ ....
`'J). =(cid:173)~
`
`,i;;..
`
`~
`
`N
`0
`0
`N
`~N
`~
`
`"""" ~ = """"
`
`~
`~
`•
`r:Jl
`d •
`
`360
`
`AT STATIONS
`
`AUTHORIZATION
`
`NEW
`
`DIGITAL TV USING
`FULLY DECRYPT
`
`RECEIVE AND
`
`362
`
`OF BILLING CYCLE?
`
`END
`
`YES
`
`NO
`
`351
`
`BILLIING CYCLE
`START OF NEW
`
`358
`
`STATIONS
`
`SUBSCRIBER
`DIGITAL TV TO
`BROADCAST
`
`KEY 356
`
`.,
`
`NEW ENCRYPTION
`REAL-TIME USING 1
`
`...
`
`DIGITAL TV IN
`
`FULLY ENCRYPT
`
`354
`
`ENCRYPTION KEY I
`CHANGE TO NEW
`
`~I
`
`I
`
`STATIONS 352
`
`TO SUBSCRIBER
`AUTHORIZATIONS
`DISTRIBUTE NEW
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0005
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 5 of 24
`
`US 6,415,031 Bl
`
`BROADCAST
`SOURCE
`!02
`
`PREMIUM
`BROADCAST
`SOURCE
`!Qi
`
`VIDEO
`ON-DEMAND
`SOURCE
`402
`
`DISTRIBUTION CENTER 106
`
`SECONDARY
`DISTRIBUTION
`NETWORK
`108
`
`110d
`
`IIOc
`
`FIG. 4.
`
`SUBSCRIBER
`STATION IIOo
`
`110b
`
`400
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0006
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`i,-
`~
`i,-
`~
`b
`(1)
`i,(cid:173)
`~
`O'I
`rJ'J.
`e
`
`,i;;..
`N
`0 ....,
`~ ....
`'JJ. =(cid:173)~
`
`O'I
`
`~
`
`N
`0
`0
`N
`~N
`~
`
`~ = ......
`~ ......
`~
`•
`r:JJ.
`d •
`
`520
`
`VIDEO DECRYPTED
`
`
`-~
`
`522
`
`VIDEO DISPLA YEO
`
`50
`
`STATION
`
`•
`
`518
`
`DEMULTIPLEXED AT
`
`SIGNAL
`
`508
`
`SUBSCRIBER STATION
`
`RECEIVED FROM
`
`REQUEST FOR VIDEO
`
`f
`
`506
`
`REMOTE SERVER
`VIDEO STORED IN
`
`..
`
`..
`
`-
`
`516
`
`SUBSCRIBER STATION
`
`DISTRIBUTED TO
`
`MULTIPLEXED SIGNAL
`
`
`-.
`
`WITH OTHER SIGNALS
`VIDEO MULTIPLEXED
`
`514
`
`•
`
`--
`
`VIDEO DECRYPTED
`
`510
`
`. -
`
`512
`
`RE-ENCRYPTED
`
`VIDEO
`
`TO REMOTE SERVER
`VIDEO TRANSPORTED
`
`504
`
`..
`
`-
`
`VIDEO ENCRYPTED
`
`502
`
`ON-DEMAND
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0007
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`i,-
`~
`i,-
`~
`b
`(It
`i,-
`~
`O'I
`rJ'J.
`e
`
`,i;;..
`N
`0 ....,
`-..J
`~ ....
`'JJ. =-~
`
`N
`0
`0
`N
`~N
`
`~ = :-
`
`~ = ......
`~ ......
`~
`•
`r:JJ.
`d •
`
`521
`
`-
`
`DECRYPTED
`
`VIDEO
`
`518
`
`AT STATION
`
`DEMULTIPLEXED
`
`SIGNAL
`
`522
`
`DISPLAYED
`
`VIDEO
`
`I
`
`I
`
`FIG. 58
`
`550
`
`SUBSCRIBER STATION
`
`516
`
`514
`
`-
`
`VIDEO MULTIPLEXED H MULTIPLEXED SIGNAL H
`
`DISTRIBUTED TO
`
`WITH OTHER SIGNALS
`
`I
`
`512
`
`-
`
`RE -ENCRYPTED
`
`VIDEO
`
`506
`
`-
`
`~ REMOTE SERVER
`VIDEO STORED IN
`
`508
`
`SUBSCRIBER STATION
`
`RECEIVED FROM
`
`REQUEST FOR VIDEO
`
`510
`
`504
`
`502
`
`DECRYPTED
`
`VIDEO
`
`• I
`
`• I TO REMOTE SERVER I
`VIDEO TRANSPORTED
`
`I
`
`VIDEO ENCRYPTED
`
`ON-DEMAND
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0008
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`i,-
`~
`i,-
`~
`b
`(1)
`i,(cid:173)
`~
`O'I
`rJ'J.
`e
`
`,i;;..
`N
`0 ....,
`00
`~ ....
`'JJ. =(cid:173)~
`
`~
`
`N
`0
`0
`N
`~N
`~
`
`~ = ......
`~ ......
`~
`•
`r:JJ.
`d •
`
`600
`
`FIG. 6.
`
`618
`
`VIDEO DISPLAYED
`
`--
`
`VIDEO DECRYPTED
`
`616
`
`~
`
`-
`
`STATION 608
`
`FROM SUBSCRIBER
`REMOTE SERVER
`
`RECEIVED BY
`
`REQUEST FOR VIDEO
`
`~
`
`-
`
`WITH OTHER SIGNALS
`VIDEO MULTIPLEXED
`
`610
`
`-
`-
`
`STATION
`
`614
`
`-
`
`DEMULTIPLEXED AT
`
`SIGNAL
`
`,,
`
`STATION
`
`612
`
`SUBSCRIBER
`
`DISTRIBUTED TO
`
`MULTIPLEXED SIGNAL
`
`606
`
`REMOTE SERVER
`VIDEO STORED IN
`
`.
`
`-
`
`-TO REMOTE SERVER
`VIDEO TRANSPORTED
`
`604
`
`ENCRYPTED
`
`602
`
`ON-DEMAND VIDEO
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0009
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`~ co
`0 w
`Ul
`~
`~
`0-,
`r:.,J.
`~
`
`~
`
`~
`N
`
`'° 0 ...,
`~ ....
`r:Jl =(cid:173)~
`
`~
`
`N = = N
`~N
`~
`
`618
`
`VIDEO DISPLAYED
`
`1
`
`706
`
`-
`
`DECRYPTED
`VIDEO FULLY
`
`608
`
`SUBSCRIBER STATION
`
`RECEIVED FROM
`
`REQUEST FOR VIDEO
`
`f
`
`-..
`
`614
`
`AT STATION
`
`SIGNAL DEMULTIPLEXED
`
`704
`
`~
`
`ENCRYPTION OF VIDEO
`
`COMPLETE
`
`"""'" ~ = """'"
`
`~
`~
`•
`rJ'J.
`
`e •
`
`REMOTE SERVER
`VIDEO STORED IN
`
`606
`
`.
`
`-
`
`TO REMOTE SERVER
`VIDEO TRANSPORTED
`
`604
`
`-
`-
`
`.
`
`-
`-
`
`SUBSCRIBER STATION
`
`612
`
`DISTRIBUTED TO
`
`MULTIPLEXED SIGNAL
`
`+
`
`610
`
`WITH OTHER SIGNALS
`VIDEO MULTIPLEXED
`
`ENCRYPTED
`
`702
`
`ON-DEMAND VIDEO PRE-
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0010
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 10 of 24
`
`US 6,415,031 Bl
`
`c::
`
`w > Cl:'.'. w Cl)~,
`
`WO
`I- ~
`0
`~
`w
`c::
`
`,l
`
`N
`0
`
`~
`I
`I
`I
`\
`
`'
`------------------- -------------------
`
`0::
`0
`I-
`>- 0
`(L col
`0:: co
`0
`z
`w
`
`~
`
`-
`
`-
`-
`
`'
`
`z a:::
`00
`-
`I-
`I- <(
`(L z ~,
`>- - 0
`o:: 0 co
`() c::
`zO
`wO
`()
`
`-
`-
`
`'l
`
`n
`
`a::: 0::
`ow
`I- j
`(LO 01
`>- c:: ~
`0:: I- co
`Oz
`zo
`w ()
`
`w
`0
`c::
`::,
`Cl) NI
`0
`I- 0
`z co
`w
`I-
`z
`0
`0
`
`c::
`w
`C)
`<(
`z
`<(
`~ col
`I- g
`z
`w
`I-
`z
`0
`0
`
`I
`I
`I
`L _________________________________________ J
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0011
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 11 of 24
`
`US 6,415,031 Bl
`
`UJ >-
`~ en
`I- 0 a:::
`owo
`W Cl I-
`_J <( a.. (01
`:::> 0 >- 0
`0 _J 0:: 0)
`woo
`IWZ
`oow
`I- >
`
`Cl) -
`
`<(
`
`a
`
`Oz
`~o
`:::> I-
`0 a..
`w >-
`I 0:: "-t"I
`0 0 °
`Cl) z O>
`0W
`w 0::
`00
`>
`-
`LL
`
`n
`
`I
`0
`UJ 0:: u
`1-oO
`0.. LL 0..
`~ >- w
`oUJ ~ col
`-
`- z~
`o
`WC) I- m
`oz _J
`w U') <(
`Cl :JI-
`>
`z
`-
`
`1f
`
`0
`w
`a:::
`0 00
`> I- I-
`fil@ ~ ~1
`
`1-Cl)Om
`a.. Cf.) a:.::
`>- <( 0
`0:: 0... 0
`u u
`z
`w
`
`gJ
`
`oi
`•
`(!)
`it
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0012
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`i,-
`~
`i,-
`~
`b
`(1)
`i,(cid:173)
`~
`O'I
`rJ'J.
`e
`
`,i;;..
`N
`0 ....,
`'"""' N
`~ ....
`'JJ. =(cid:173)~
`
`~
`
`N
`0
`0
`N
`~N
`~
`
`~ = ......
`~ ......
`~
`•
`r:JJ.
`d •
`
`1018
`
`2ND EPOCH BEGINS
`1ST EPOCH ENDS AND
`
`•
`
`1016
`
`SENT TO RS
`
`RE-ENCRYPTED VIDEO
`
`-
`-
`
`1006
`
`RENEWAL
`
`VIDEO SCHEDULED FOR
`
`•
`
`-RS TO COORDINATOR
`VIDEO COPIED FROM
`
`-
`
`1004
`
`1020
`
`1ST EPOCH
`
`1~
`
`DELET VERSION FOR
`2ND EPOCH AND MAY
`RS USES VERSION FOR
`
`1014
`
`COORDINATOR
`
`PASSED TO
`
`RE-ENCRYPTED VIDEO
`
`-
`
`-
`
`1008
`
`ENCRYPTOR
`
`VIDEO LOADED BY PRE-
`AT SCHEDULED TIME,
`
`1012
`
`EPOCH
`
`USING KEY FOR 2ND
`
`VIDEO RE-ENCRYPTED
`
`•
`
`1010
`
`~
`
`-
`
`EPOCH
`
`USING KEY FOR 1ST
`VIDEO DECRYPTED
`
`--
`1002
`NEARS
`
`(cid:141)
`
`END OF 1 ST EPOCH
`
`606 (FIG. 7)
`
`REMOTE SERVER (RS)
`
`(ENCRYPTED) ON
`VIDEO STORED
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0013
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 13 of 24
`
`US 6,415,031 Bl
`
`~I
`
`........
`I-
`0::
`<(
`
`0:::
`0
`0::
`
`~
`
`0.. --• q:
`"'"" .
`(!)
`tt:
`
`~I
`
`0
`<(
`0
`
`_j
`
`~
`
`CJ)
`I-
`
`N
`0 .......
`.......
`a:::
`w
`0
`<(
`LU
`I
`Cl)
`I-
`
`CJ)
`
`I-w
`
`~
`t)
`<(
`0..
`Cl)
`LU
`0..
`
`CJ)
`cow
`<X) I(cid:173)
`..- >-
`co
`
`LL
`<(
`
`u
`u
`
`(.)
`LL
`<(
`
`u
`CJ)
`
`0 -0..
`
`0..
`I-
`
`-Cl)
`-LU
`
`I-
`
`uw
`ZI->- >-
`CJ) co
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0014
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 14 of 24
`
`US 6,415,031 Bl
`
`-I-
`
`er:
`<(
`0::::
`0
`0:: a..
`.__.
`•
`Ql
`"'""
`"'""
`c;
`il::
`
`~I
`
`0:::: w
`0
`<( w
`:c
`Cl)
`w a..
`
`I- Cl) ww
`[5 ~
`<( CD
`0... <(
`
`Cl) I-w <(
`0... 0
`
`(9 Cl) zw
`8~
`<C m
`0...
`
`_J
`
`<( Cl) Zo
`0 _J
`-w
`I- -
`0... LL
`0
`
`I- I
`Cl) w I-w ~ c.,
`a.. 0 Z
`<( w
`a.. _J
`
`~
`
`<( wo
`0:: -
`I-
`Cl)
`
`1-wX
`0:: 0 u:
`~ow
`Cl) 0 ~
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0015
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`i,-
`~
`i,-
`~
`b
`(1)
`i,(cid:173)
`~
`O'I
`rJ'J.
`e
`
`,i;;..
`N
`0 ....,
`'"""' Ul
`~ ....
`'JJ. =(cid:173)~
`
`~
`
`N
`0
`0
`N
`~N
`~
`
`~ = ......
`~ ......
`~
`•
`r:JJ.
`d •
`
`FIG. 12A.
`
`1200
`
`PAYLOAD
`
`1212
`
`WITH ENCRYPTED TS
`
`CONSTRUCT TS PACKET
`
`TS PAYLOAD
`
`1206
`
`WITH UNENCRYPTED
`
`CONSTRUCTTSPACKET
`
`INDICATOR FLAG
`
`1204
`
`PAYLOAD UNIT START
`
`RESET (TO ZERO)
`
`PAYLOAD
`
`1210
`
`ENCRYPT TS
`
`I
`
`.. 1 START INDICATOR FLAG 1
`
`1208
`
`SET PAYLOAD UNIT
`
`~
`
`YES
`
`NO
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0016
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`(cid:141)
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 16 of 24
`
`US 6,415,031 Bl
`
`l(cid:173)o..
`>- 0
`a::: <( uo
`w ....J a::>I
`0 >- I.O
`1-1~ ~
`0 (/)
`zl(cid:173)o
`
`0
`
`0 z
`
`(/)
`w
`>-
`
`C'-·
`I-
`(/) I.O
`(9 N
`
`UJ vi
`:s~
`
`u..
`
`0
`<(
`0
`....J
`~
`
`Cl. (/) ~1
`>-a:::
`()
`w
`0
`
`~
`
`I- N
`I-
`Cl.
`
`.
`al
`,...
`('I
`
`•
`(!)
`ii:
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0017
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 17 of 24
`
`US 6,415,031 Bl
`
`0
`<{
`0
`....J
`~ a.
`
`U)
`t-
`
`0:: w
`0
`<{ w
`I
`U)
`.....
`
`C'\I
`0
`T"""
`T"""
`
`C'\I
`0
`('I')
`T"""
`
`t-w
`~ 0
`Oo
`<{ T"""
`Q. T"""
`U)
`t-
`
`•
`(¥)
`"I--
`•
`C)
`ii:
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0018
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 18 of 24
`
`US 6,415,031 Bl
`
`(0
`0
`"¢
`..-
`
`"¢
`0
`"¢
`..-
`
`Cf)
`I-
`Cf) J: Cf) -I
`I- _J
`I-
`t-1-o<CC/)
`(.) ~ w 0:: I-
`::l1-I- ow
`o::wa..u.:::.::::
`1-:::.::::>-oU
`(/) (.) c:: <( <(
`z <( (.) 0 a..
`0 a.. z -1
`(.) w >-
`<( a..
`
`_J
`_J
`<(
`0 0:: Cf)
`<( 0 I-
`0 u.w
`_JO:::.::::
`>- w (.)
`<( I- <(
`a.. a.. a..
`Cf) >- Cf)
`I- c:: I-
`(.) z w
`
`~I
`
`•
`
`~
`,...
`•
`C>
`ti:
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0019
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`~
`~
`~
`~
`b
`(It
`~
`°' ~
`rJ'J.
`e
`
`1,0
`1---'
`
`,i;;..
`N
`0 ....,
`(0 ...
`'JJ. =- (0
`
`N
`0
`0
`N
`~N
`
`~ = :-
`
`~ = ......
`~ ......
`~
`•
`rJJ.
`d •
`
`1410
`
`I
`
`PAYLOAD
`
`1419
`
`WITH ENCRYPTED TS
`CONSTRUCT TS PACKET I
`
`I
`
`I
`
`PAYLOAD
`
`1418
`
`ENCRYPT TS
`
`FIG. 14B.
`
`TS PAYLOAD
`
`1422
`
`WITH UNENCRYPTED
`
`CONSTRUCT TS PACKET
`
`1420
`FIELD
`
`ENCRYPTION STATUS
`
`SELECTIVE
`
`RESET (TO ZERO)
`
`STATUS FIELD
`ENCRYPTION
`
`1416
`
`SET SELECTIVE
`
`NO
`
`YES
`
`DATA INDICATED?
`
`1414
`
`I-FRAME
`
`TS PAYLOAD
`
`1412
`
`PARSE PES HEADER IN
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0020
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`i,-
`~
`i,-
`~
`b
`(It
`i,-
`~
`O'I
`rJ'J.
`e
`
`~ ....
`'JJ. =-~
`
`,i;;..
`N
`0 ....,
`0
`N
`
`N
`0
`0
`N
`~N
`
`~ = :-
`
`~ = ......
`~ ......
`~
`•
`r:JJ.
`d •
`
`I
`
`1430
`
`PAYLOAD
`
`1419
`
`FIG. 14C.
`
`TS PAYLOAD
`
`1422
`
`WITH ENCRYPTED TS
`
`CONSTRUCTTSPACKETI
`
`WITH UNENCRYPTED
`
`CONSTRUCT TS PACKET
`
`I
`
`I
`
`I
`
`PAYLOAD
`
`1418
`
`ENCRYPT TS
`
`STATUS FIELD
`ENCRYPTION
`SET SELECTIVE
`
`1416
`
`I
`
`YES
`
`1420
`FIELD
`
`ENCRYPTION STATUS
`
`SELECTIVE
`
`RESET (TO ZERO)
`
`NO
`
`TS PAYLOAD
`
`1412
`
`PARSE PES HEADER IN
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0021
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`~
`~
`~
`~
`b
`(It
`~
`°' ~
`rJ'J.
`e
`
`,i;;..
`N
`0 ....,
`I--'
`N
`(0 ...
`'JJ. =- (0
`
`~
`
`N
`0
`0
`N
`N
`~
`
`~
`
`~ = ......
`~ ......
`~
`•
`rJJ.
`d •
`
`I
`
`1440
`
`PAYLOAD
`
`1419
`
`WITH ENCRYPTED TS
`CONSTRUCT TS PACKET I
`
`FIG. 14D.
`
`TS PAYLOAD
`
`1422 --
`
`WITH UNENCRYPTED
`
`CONSTRUCT TS PACKET
`
`I
`
`I
`
`PAYLOAD
`
`1418
`
`ENCRYPT TS
`
`H
`
`STATUS FIELD
`ENCRYPTION
`SET SELECTIVE
`
`1416
`
`I
`
`YES
`
`1420
`FIELD
`
`ENCRYPTION STATUS
`
`SELECTIVE
`
`RESET (TO ZERO)
`
`NO
`
`TS PAYLOAD
`
`1412
`
`PARSE PES HEADER IN
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0022
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`~ ....
`r:J'l =-~
`
`N ,,.
`0 ...,
`
`N
`N
`
`N
`Q
`Q
`N
`~N
`
`~ = :-
`
`~ = ....
`~ ....
`""d
`•
`'J).
`~ •
`
`I
`
`I
`
`PAYLOAD
`
`1418
`
`ENCRYPT TS
`
`SET SELECTIVE H
`
`STATUS FIELD
`ENCRYPTION
`
`1416
`
`i-,,.
`~
`i-,,.
`Q w
`Ul
`i-,,.
`1;.
`O'I
`rJ').
`~
`
`I
`
`1450
`
`PAYLOAD
`
`1419
`
`WITH ENCRYPTED TS
`CONSTRUCT TS PACKET I
`
`FIG. 14E.
`
`CONSTRUCT TS PACKET
`
`WITH UNENCRYPTED
`
`TS PAYLOAD
`
`1422
`
`ENCRYPTION STATUS
`
`SELECTIVE
`
`RESET (TO ZERO)
`
`NO
`
`1420
`FIELD
`
`I
`
`YES
`
`INCREMENT COUNTER
`
`1452
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0023
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`~
`~
`~
`~
`b
`(It
`~
`°' ~
`rJ'J.
`e
`
`,i;;..
`N
`0 ....,
`~
`N
`(0 ...
`'JJ. =- (0
`
`N
`0
`0
`N
`~N
`
`~ = :-
`
`~ = ......
`~ ......
`~
`•
`rJJ.
`d •
`
`I
`
`I
`
`I
`
`I
`
`PAYLOAD
`
`1418
`
`ENCRYPT TS
`
`SET SELECTIVE H
`
`STATUS FIELD
`ENCRYPTION
`
`1416
`
`I
`
`YES
`
`I
`
`1460
`
`PAYLOAD
`
`1419
`
`WITH ENCRYPTED TS
`
`CONSTRUCT TS PACKET
`
`FIG. 14F.
`
`TS PAYLOAD
`
`1422 --
`
`WITH UNENCRYPTED
`
`CONSTRUCT TS PACKET
`
`1420
`FIELD
`
`ENCRYPTION STATUS
`
`SELECTIVE
`
`RESET (TO ZERO)
`
`NO
`
`NUMBER
`
`1462
`
`GENERATE RANDOM
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0024
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`U.S. Patent
`
`Jul. 2, 2002
`
`Sheet 24 of 24
`
`US 6,415,031 Bl
`
`I(cid:173)
`Q. >- Cl
`a=<( uo
`w ..J (01
`1-1~ ';2
`O>-O
`z l(cid:173)o
`
`0 CJ)
`
`Cl
`
`0 z
`
`Cf)
`w
`>-
`
`C'-·
`I-
`
`w stl
`
`Cf) 0
`(!) I.O
`<( T""
`....J
`LL
`
`Q.
`
`Cl
`<(
`0
`....J >-<(
`Cf) ~1
`Q. >-0:::
`() w
`0
`
`I- N
`I-
`
`T""
`
`It)
`~
`.
`C)
`ii:
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0025
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`US 6,415,031 Bl
`
`1
`SELECTIVE AND RENEWABLE
`ENCRYPTION FOR SECURE DISTRIBUTION
`OF VIDEO ON-DEMAND
`
`CROSS-REFERENCES TO RELATED
`APPLICATIONS
`
`The present application is based on provisional applica(cid:173)
`tion "Selective Encryption," Ser. No. 60/131,162, filed Apr.
`26, 1999, by inventors Michael Colligan, Yong Ho Son, and
`Christopher Goode. The present application is also based on
`provisional application "Time Dependency on Pre(cid:173)
`Encryption for Video On-Demand Systems," Ser. No.
`60/128,224, filed Apr. 7, 1999, by inventor Yong Ho Son. In
`addition, the present application is a continuation-in-part of
`utility application "Secure Distribution of Video
`On-Demand," Ser. No. 09/267,800, filed Mar. 12, 1999, now
`U.S. Pat. No. 6,229,895, by inventors Yong Ho Son and
`Christopher Goode.
`
`BACKGROUND OF THE INVENTION
`
`5
`
`2
`distribution of digital video on-demand. Selective encryp(cid:173)
`tion is provided in a process which includes: determining
`whether a predetermined criterion is satisfied; setting a
`selective encryption status field if the predetermined crite-
`rion is satisfied; and encrypting an unencrypted payload to
`generate an encrypted payload, and constructing a packet
`with the encrypted payload, if the predetermined criterion is
`satisfied. The predetermined criterion may be one of several
`criteria, each of which reduce the required amount of
`10 encryption and decryption while maintaining a high level of
`security. Renewable encryption is provided in a process
`which includes: copying a first encrypted digital video
`program from a remote server to a video source; decrypting
`the first encrypted digital video program using a first key to
`15 generate an unencrypted digital video program; encrypting
`the unencrypted digital video program using a second key to
`generate a second encrypted digital video program; trans(cid:173)
`mitting the second encrypted digital video program from the
`video source to the remote server; and deleting the first
`20 encrypted digital video program from the remote server.
`
`25
`
`1. Field of the Invention
`This invention relates generally to the field of video
`distribution networks. In particular, this invention relates to
`secure video distribution networks.
`2. Description of the Background Art
`Security is an important issue for video distribution
`networks. Issues of security are particularly important with
`regards to the distribution of digital video.
`Distribution of digital cable television channels currently 30
`follows a broadcast model in that the digital cable television
`channels are broadcast from the broadcast source to many
`subscriber stations at once. Security for the distribution of
`digital cable television channels also follows a broadcast
`model. A digital cable television channel is fully encrypted 35
`in real-time at the time of the broadcast from the broadcast
`source. Authorization keys allow subscribing users to
`decrypt and view the broadcast content. Such authorization
`keys must somehow, at sometime, be delivered to the
`subscribing users. It is not practical to deliver authorization 40
`keys at the same time that encrypted content is broadcast
`because verification of the delivery is difficult to do imme(cid:173)
`diately and interactively using current cable television net(cid:173)
`works. Hence, delivery of the authorization keys occurs
`periodically on a time-based schedule, where the periodicity 45
`of the delivery is known as a time quantum or time epoch.
`The time epoch is typically related to the billing cycle (for
`example, monthly) for the cable television service.
`Unlike distribution of digital cable television channels,
`distribution of digital video on-demand (VOD) follows a 50
`pointcast model in that the content is transmitted from a
`video server to each individual viewer. Due to the nature of
`pointcasting, a security scheme for digital VOD which is
`based on the model provided by security for cable television
`broadcasts would be impractical and expensive. First, fully 55
`encrypting the digital VOD in real-time every time the
`digital video is transmitted from the server to an individual
`viewer is quite expensive in both cost and space usage for
`encryption equipment. Second, having a time epoch corre(cid:173)
`lated to the billing cycle of the digital VOD service (for 60
`example, monthly) is a scheduling scheme that may create
`security risks which inhibits optimal protection of the con(cid:173)
`tent.
`
`BRIEF DESCRIPTION OF THE DRAWINGS
`FIG. 1 is a schematic diagram of a conventional cable
`distribution network (100).
`FIG. 2 is a flow chart depicting a conventional insecure
`process (200) for distributing video content via a conven(cid:173)
`tional cable distribution network (100).
`FIG. 3A is a flow chart depicting a conventional secure
`process (300) for distributing premium video content via a
`conventional cable distribution network (100).
`FIG. 3B is a flow chart depicting a conventional secure
`process (350) for distributing digital television broadcasts
`via a conventional cable distribution network (100).
`FIG. 4 is a schematic diagram of a cable distribution
`network ( 400) including a video on-demand source ( 402) in
`accordance with a preferred embodiment of the present
`invention.
`FIG. SA is a flow chart depicting a secure process (500)
`for distributing video on-demand content via a cable distri(cid:173)
`bution network ( 400) in accordance with a first aspect of the
`present invention.
`FIG. SB is a flow chart depicting a secure process (550)
`for distributing video on-demand content via a cable distri(cid:173)
`bution network ( 400) in accordance with a second aspect of
`the present invention.
`FIG. 6 is a flow chart depicting a secure process (600) for
`distributing video on-demand content via a cable distribu(cid:173)
`tion network ( 400) in accordance with a third aspect of the
`present invention.
`FIG. 7 is a flow chart depicting a secure process (700) for
`distributing video on-demand content via a cable distribu(cid:173)
`tion network ( 400) in accordance with a fourth aspect of the
`present invention.
`FIG. 8 is a schematic diagram showing interconnected
`components relating to encryption within the VOD source
`( 402) in accordance with the fourth aspect of the present
`invention.
`FIG. 9 is a flow chart depicting an initial process (900) for
`encrypting (502,602, or 702) content at a VOD source ( 402)
`in accordance with a preferred embodiment of the present
`invention.
`FIG. 10 is a flow chart depicting a renewal process (1000)
`65 for encrypting (502, 602, or 702) content at a VOD source
`( 402) in accordance with a preferred embodiment of the
`present invention.
`
`SUMMARY OF THE INVENTION
`The present invention solves the problems discussed
`above by selective and renewable encryption for secure
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0026
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`US 6,415,031 Bl
`
`10
`
`20
`
`3
`FIG. llA is a schematic diagram showing a conventional
`MPEG-2 transport stream (TS) packet (1100).
`FIG. llB is a schematic diagram showing a conventional
`MPEG-2 Packetized Elementary Stream (PES) packet
`(1150).
`FIG. 12A is a flow chart depicting a process for selective
`encryption (1200) utilizing a payload unit start indicator (SI)
`in accordance with a first embodiment of the present inven(cid:173)
`tion.
`FIG. 12B is a flow chart depicting a process for selective
`decryption (1250) utilizing the payload unit start indicator
`(SI) in accordance with the first embodiment of the present
`invention.
`FIG. 13 is a schematic diagram showing a TS packet
`(1100) including a selective encryption status field (1302) in
`accordance with a second embodiment of the present inven(cid:173)
`tion.
`FIG. 14A is a flow chart depicting a first process for
`encryption (1400) in accordance with the second embodi(cid:173)
`ment of the present invention.
`FIG. 14B is a flow chart depicting a second process for
`encryption (1410) in accordance with the second embodi(cid:173)
`ment of the present invention.
`FIG. 14C is a flow chart depicting a third process for
`encryption (1430) in accordance with the second embodi(cid:173)
`ment of the present invention.
`FIG. 14D is a flow chart depicting a fourth process for
`encryption (1440) in accordance with the second embodi(cid:173)
`ment of the present invention.
`FIG. 14E is a flow chart depicting a fifth process for
`encryption (1450) in accordance with the second embodi(cid:173)
`ment of the present invention.
`FIG. 14F is a flow chart depicting a sixth process for
`encryption (1460) in accordance with the second embodi(cid:173)
`ment of the present invention.
`FIG. 15 is a flow chart depicting a process for decryption
`(1500) in accordance with the second embodiment of the
`present invention.
`
`15
`
`4
`tional cable distribution network. First, a non-premium
`video signal is transported (202) from the broadcast source
`(102) to the distribution center (106). At the distribution
`center (106), the video signal is multiplexed (204) with other
`5 signals to generate a multiplexed signal. The multiplexed
`signal is then distributed (206) from the distribution center
`(106) via the secondary distribution network (108) to the
`subscriber stations (110). At the subscriber stations (110),
`the multiplexed signal is demultiplexed (208) to isolate the
`video signal, and then the video signal is displayed 210,
`typically, on a television monitor.
`FIG. 3A is a flow chart depicting a conventional secure
`process (300) for distributing video content via a conven(cid:173)
`tional cable distribution network. First, a premium video
`signal is encrypted (302) to generate an encrypted signal.
`The encrypted signal is transported (304) from the premium
`broadcast source (104) to the distribution center (106).
`At the distribution center (106), the video signal is
`decrypted (306) to regenerate the premium video signal. The
`premium video signal is then scrambled (308)-re(cid:173)
`encrypted with a different key and multiplexed (310) with
`other signals to generate a multiplexed signal. The multi(cid:173)
`plexed signal is then distributed (312) from the distribution
`center (106) via the secondary distribution network (108) to
`25 the subscriber stations (110).
`At the subscriber stations (110), the multiplexed signal is
`demultiplexed (314) to isolate the scrambled video signal,
`the scrambled video signal is unscrambled (316), and then
`the video signal is displayed (318), typically, on a television
`30 monitor connected to a set-top box. The process in FIG. 3 is
`a typical conventional process for delivering premium video
`using scrambling. Other conventional processes also exist.
`FIG. 3B is a flow chart depicting a conventional secure
`process (350) for distributing premium digital television
`35 broadcasts via a conventional cable distribution network
`(100). The process (350) begins in a first step (351) when a
`new billing cycle starts. In a second step (352), new autho(cid:173)
`rizations are distributed from the premium broadcast source
`(104) to subscriber stations (110) via the conventional cable
`40 distribution network (100). Of course, the new authoriza(cid:173)
`tions are distributed to only subscriber stations (110) that are
`subscribing to the premium digital TV for the new billing
`cycle.
`In a third step (354), the encryption system in the pre-
`45 mium broadcast source (104) changes to a new encryption
`key for use in encrypting the premium digital TV broadcast.
`The new encryption key corrresponds to the new billing
`cycle. In a fourth step (356), the encryption system in the
`premium broadcast source (104) fully encrypts the premium
`50 digital TV in real-time using the new encryption key. In a
`fifth step (358), the encrypted premium digital TV is broad(cid:173)
`cast to the subscriber stations (110) via the conventional
`cable distribution network (100). In a sixth step (360), the
`subscriber stations (110) receive and fully decrypt the
`55 encrypted premium digital TV using the new authorizations.
`Of course, only subscriber stations (110) which are subscrib(cid:173)
`ing to the premium digital TV broadcast for the new billing
`cycle have the new authorizations and so only they are able
`to fully decrypt the encrypted broadcast.
`In a seventh step (362), a determination is made as to
`whether an end of the new billing cycle is being reached. If
`the end is not being reached, then the process (350) loops
`back to the fourth step (356) where the premium digital TV
`continues to be encrypted in real-time and then broadcast.
`65 Otherwise, if the end is being reached, then the process (350)
`goes on back to the first step (351) where a new billing cycle
`starts.
`
`DETAILED DESCRIPTION OF THE SPECIFIC
`EMBODIMENTS
`FIG. 1 is a schematic diagram of a conventional cable
`distribution network (100). The conventional cable distri(cid:173)
`bution network (100) typically includes one or more broad(cid:173)
`cast sources (102), one or more premium broadcast sources
`(104), one or more distribution centers (106), one or more
`secondary distribution networks (108), and a plurality of
`subscriber stations (110).
`The broadcast source (102) may be, for example, a local
`television station. For instance, an affiliate station of a major
`network such as ABC, NBC, CBS, FOX, or UPN. The
`premium broadcast source (104) may be, for example, a
`premium channel such as HBO, Showtime, Cinemax, and so
`on. The sources (102) and (104) may be coupled via a
`primary distribution network to the distribution center (106).
`The distribution center (106) may be, for example, a cable
`head-end. The distribution center (106) may be coupled via
`a secondary distribution network (108) to the subscriber 60
`stations (110). The secondary distribution network (108)
`may include, for example, various amplifiers, bridges, taps,
`and drop cables. Finally, the subscriber stations (110) may
`be, for example, set-top boxes and associated television
`equipment for viewing the video content by end users.
`FIG. 2 is a flow chart depicting a conventional insecure
`process (200) for distributing video content via a conven-
`
`Netflix, Inc. and Hulu, LLC - Ex. 1009, Page 0027
`IPR2020-00614 (Netflix, Inc. and Hulu, LLC v. DivX, LLC)
`
`

`

`US 6,415,031 Bl
`
`5
`FIG. 4 is a schematic diagram of a cable distribution
`network ( 400) including a video on-demand source ( 402) in
`accordance with a preferred embodiment of the present
`invention. In addition to the components of the conventional
`cable distribution network (100) shown in FIG. 1, the cable 5
`distribution network (400) shown in FIG. 4 includes a video
`on-demand source ( 402) and a remote server ( 404). The
`video on-demand source ( 402) may house, for example, a
`collection of video programs such as, for example, movies.
`As shown in FIG. 4, the remote server (404) may be located
`within the distribution center (106). The remote server ( 404)
`may include, for example, a parallel processing computer
`configured to be a video server, a disk drive array to store
`video data, and a video se