A system and method for securely streaming encrypted digital media content out of a digital container to a user's media player. This streaming occurs after the digital container has been delivered to the user's machine and after the user has been authorized to access the encrypted content. The user's operating system and media player treat the data stream as if it were a being delivered over the Internet (or other network) from a streaming web server. However, no Internet connection is required after the container has been delivered to the user and the data stream suffers no quality loss due to network traffic or web server access problems. In this process of the invention, the encrypted content files are decrypted and fed to the user's media player in real time and are never written to the user's hard drive or storage device. This process makes unauthorized copying of the digital content contained in the digital container virtually impossible.

Secure streaming container

This document describes the Secure Real-time Transport Protocol (SRTP), a profile of the Real-time Transport Protocol (RTP), which can provide confidentiality, message authentication, and replay protection to the RTP traffic and to the control traffic for RTP, the Real-time Transport Control Protocol (RTCP).

/pdf/the-secure-real-time-transport-protocol-srtp-3rvxgkjhxk.pdf

The Secure Real-time Transport Protocol (SRTP)

In embodiments of the present invention improved capabilities are described for a virtualization environment adapted for development and deployment of at least one software workload, the virtualization environment having a metamodel framework that allows the association of a policy to the software workload upon development of the workload that is applied upon deployment of the software workload. This allows a developer to define a security zone and to apply at least one type of security policy with respect to the security zone including the type of security zone policy in the metamodel framework such that the type of security zone policy can be associated with the software workload upon development of the software workload, and if the type of security zone policy is associated with the software workload, automatically applying the security policy to the software workload when the software workload is deployed within the security zone.

System and method for a cloud computing abstraction layer with security zone facilities

The Internet of Things (IoT) is the next wave of innovation that promises to improve and optimize our daily life based on intelligent sensors and smart objects working together. Through Internet Protocol (IP) connectivity, devices can now be connected to the Internet, thus allowing them to be read, controlled, and managed at any time and at any place. Security is an important aspect for IoT deployments. However, proprietary security solutions do not help in formulating a coherent security vision to enable IoT devices to securely communicate with each other in an interoperable manner. This paper gives an overview of the efforts in the Internet Engineering Task Force (IETF) to standardize security solutions for the IoT ecosystem. We first provide an in-depth review of the communication security solutions for IoT, specifically the standard security protocols to be used in conjunction with the Constrained Application Protocol (CoAP), an application protocol specifically tailored to the needs of adapting to the constraints of IoT devices. Since Datagram Transport Layer Security (DTLS) has been chosen as the channel security underneath CoAP, this paper also discusses the latest standardization efforts to adapt and enhance the DTLS for IoT applications. This includes the use of 1) raw public key in DTLS; 2) extending DTLS record Layer to protect group (multicast) communication; and 3) profiling DTLS for reducing the size and complexity of implementations on embedded devices. We also provide an extensive review of compression schemes that are being proposed in IETF to mitigate message fragmentation issues in DTLS.

Securing the Internet of Things: A Standardization Perspective

A direct interpretation of the term Internet of Things refers to the use of standard Internet protocols for the human-to-thing or thing-to-thing communication in embedded networks. Although the security needs are well-recognized in this domain, it is still not fully understood how existing IP security protocols and architectures can be deployed. In this paper, we discuss the applicability and limitations of existing Internet protocols and security architectures in the context of the Internet of Things. First, we give an overview of the deployment model and general security needs. We then present challenges and requirements for IP-based security solutions and highlight specific technical limitations of standard IP security protocols.

/pdf/security-challenges-in-the-ip-based-internet-of-things-14cij6cswu.pdf

Security Challenges in the IP-based Internet of Things

This document describes a key management scheme that can be used for
real-time applications (both for peer-to-peer communication and group
communication) In particular, its use to support the Secure Real-time
Transport Protocol is described in detail Security protocols for
real-time multimedia applications have started to appear This has
brought forward the need for a key management solution to support
these protocols [STANDARDS-TRACK]

/pdf/mikey-multimedia-internet-keying-3ga5tuczhl.pdf

MIKEY: Multimedia Internet KEYing

The present invention relates to an arrangement comprising means for handling switching of data packets or flows of data packets in a communication system supporting communication of packet data to functional units or processing arrangements for performing operations on the data packets. It comprises core processing means (10) with classifying means (13) for classifying packets/packet flows and defining the processing flow sequences applicable for the packets/packet flows, distributing means (12;19;22) for distributing or switching the packets/packet flows to the appropriate functional units or processing arrangements according to the applicable flow sequence, indication providing means for indicating the current position of the respective packets/packet flows in the respective applicable processing flow sequence and means (11) for detecting or retrieving packet flow sequence information such that re-classification of already classified packets can be avoided.

An arrangement and a method relating to flow of packets in communication systems

In a procedure for delivering streaming media, a Client (1) first requests the media from an Order Server (3) The Order Server authenticates the Client and sends a ticket to the Client Then, the Client sends the ticket to a Streaming Server (5) The Streaming Server checks theticket for validity and if found valid encrypts the streaming data using a standardized real-time protocol such as the SRTP and transmits the encrypted data to the Client The Client receivesthe data and decrypts them Copyrighted material adapted to streaming can be securely delivered to the Client The robust protocol used is very well suited for in particular wireless clients and similar devices having a low capacity such as cellular telephones and PDAs

Method and network for delivering streaming data

The present invention relates to an arrangement, system and method for managing rights to streaming media using a management mechanism based on a content object and a rights object. In accordance with the invention the content object comprises means for initiation of the streaming media and the rights object comprises usage rules defining the rights to use said streaming media. The invention also relates to a method of delivering and protecting digital streaming media. The initiation may comprise a session description of the streaming media, a SDP description, a URL to said streaming media or a SMIL file. Preview and super-distribution are provided. The content object is delivered like a downloadable object in a rights management system for download, thereby reusing the mechanisms for rights management of said latter system for rights management in a system for transmission of streaming media.

Method of rights management for streaming media

Method and system for securely sharing content in real-time systems over heterogeneous networks. Cryptographic mechanisms of the content are used to protect the confidentiality and the integrity of the content. The confidentiality/integrity protection may be performed either before storing the content on the content server (i.e., pre-encryption), or by the content server while the content is being sent (i.e., real-time encryption).

Fredrik Lindholm

Papers

MIKEY: Multimedia Internet KEYing

An arrangement and a method relating to flow of packets in communication systems

Method and network for delivering streaming data

Method of rights management for streaming media

Secure content sharing in digital rights management