Methods and Apparatus for Key Delivery in HTTP Live Streaming

摘要

A key delivery mechanism that delivers keys to an OS platform (e.g., iOS platform) devices for decrypting encrypted HTTP live streaming data. An HTTPS URL for a stateless HTTPS service is included in the manifest for an encrypted HTTP live stream obtained by an application (e.g., a browser) on an OS platform device. The URL includes an encrypted key, for example as a query parameter value. The application passes the manifest to the OS. The OS contacts the HTTPS service to obtain the key using the URL indicated in the manifest. Since the encrypted key is a parameter of the URL, the encrypted key is provided to the HTTPS service along with information identifying the content. The HTTPS service decrypts the encrypted key and returns the decrypted key to the OS over HTTPS, thus eliminating the need for a database lookup at the HTTPS service.

主权项

1. A method implemented on a computing device, comprising:
obtaining a manifest file configured to:
indicate content for streaming from a content server to the computing device; andcontain information sufficient to access a key source from which a key for decrypting the content is available; accessing the key source according to the information in the manifest to obtain a license for the content and the key for decrypting the content; storing the key for decrypting the content at a key storage location; modifying the manifest file to include a reference usable to obtain the key from the key storage location; and communicating the modified manifest file to an operating system module configured to acquire the key from the key storage location using the reference included in the manifest, obtain the indicated content from the content server, and decrypt the content with the acquired key.