Security processing system and method for HTTP live streaming

摘要

Disclosed are a security processing system and method for HLS transmissions. An aspect of the invention provides a content key conversion device connected over a network to a content proxy device configured to provide encryption key information to a content operating device for a content received from a content provider device of an external network. The content key conversion device includes: a reception part that receives a double encryption key of a content from the content proxy device; an interface part that receives key decryption information corresponding to the double encryption key from an encryption key provider device of an external network; a decryption part that decrypts the double encryption key of the content using the key decryption information and thereby converts the double encryption key to an encryption key; and a transmission part that transmits the encryption key converted by the decryption part to the content proxy device.

主权项

1. A content key conversion device comprising:
a processor configured to control:
a reception part that receives a double encryption key of an encrypted content from a content proxy device, the encrypted content provided by a content provider device of an external network;an interface part that receives a key-encryption key corresponding to the double encryption key from an encryption key provider device of an external network; anda transmission part that transmits an encryption key, converted by decrypting the double encryption key of the encrypted content using the key-encryption key, to the content proxy device, wherein the content key conversion device is connected over a local network to the content proxy device, the content proxy device is connected over the local network to a content operating device on which the encrypted content is consumed by a user and transmits the encryption key to the content operating device, the reception part receives metadata of the key-encryption key from the content proxy device, the interface part receives the key-encryption key from the encryption key provider device using address information included in the metadata of the key-encryption key, and the content provider device is configured to:
generate a first index file, the first index file including address information of the encrypted content and address information of the encryption key for decrypting the encrypted content,generate a second index file based on the first index file, the second index file including address information of the encrypted content, address information of a double encryption key obtained by double-encrypting the encryption key using a key-encryption key, and metadata of the key-encryption key, andupon receiving a request to replay a content from the user, transmit the second index file of the requested content to the content proxy device.