Abstract: A method and a user device are disclosed for securing streaming content decryption. The method includes receiving at the user device a manifest for requested content, the manifest providing a Content Encryption Key (CEK) that is encrypted using a first public Key Encryption Key (KEK), a corresponding first private KEK being stored in secure storage on the user device; decrypting, inside a secure processing zone on the user device, the CEK using the first private KEK to create a decrypted content key; decrypting, inside the secure processing zone, requested content using the decrypted content key to form decrypted content; and providing the decrypted content to a decoder on the mobile user device.

Abstract: A method, system and non-transitory computer-readable medium for distributing adaptive bitrate (ABR) media are disclosed. The method includes initially ingesting a first ABR media element at a first network node and receiving, at the first network node, a second ABR media element that was initially ingested at a second node. The method further includes initiating distribution of the first and second ABR media elements from the first network node to a first plurality of network nodes.

Abstract: A method is provided for managing over-the-top delivery of content through a plurality of content delivery networks (CDN). The method provided works transparently with standard HTTP servers supporting an initial request for content from a client to a first preferred CDN. If the first CDN does not have the content, the method includes provisions for the first CDN to acquire the content from a second CDN, or for the client to request the content from a second CDN directly. A system is also specified for implementing a client and server infrastructure in accordance with the provisions of the method.

Abstract: A method for enforcing entitlements includes configuring a wide variety of entitlements at a server; determining applicable combination of entitlements for a given client request; sending entitlements to the requesting client securely; handling entitlement information securely on a plurality of client devices at run time; storing entitlement information securely on a plurality of client devices for offline use; and enforcing entitlements on a plurality of client devices. The method employs manipulation of manifest files by a proxy that may be included in the client device or located in the network.

Abstract: A method is provided for managing over-the-top delivery of content through a plurality of content delivery networks (CDN). The method provided works transparently with standard HTTP servers supporting an initial request for content from a client to a first preferred CDN. If the first CDN does not have the content, the method includes provisions for the first CDN to acquire the content from a second CDN, or for the client to request the content from a second CDN directly. A system is also specified for implementing a client and server infrastructure in accordance with the provisions of the method.

Abstract: A method for enforcing entitlements includes configuring a wide variety of entitlements at a server; determining applicable combination of entitlements for a given client request; sending entitlements to the requesting client securely; handling entitlement information securely on a plurality of client devices at run time; storing entitlement information securely on a plurality of client devices for offline use; and enforcing entitlements on a plurality of client devices. The method employs manipulation of manifest files by a proxy that may be included in the client device or located in the network.

Abstract: A system and method for facilitating directory limit based storage scheme for uploading media segments in multiple directories at one or more media servers. Directory limit parametric information may be provided or otherwise configured in an upload profile of a packager node to construct URLs based on the directory parametric information for identifying locations in a directory tree structure that may be configured to map to a variety of physical and/or virtual storage schemes.

Abstract: A media distribution system and method with sample variants for normalized encryption involves encrypting a main track of a media content asset using a first encryption scheme and encrypting a sample variant track of the media content asset using a second encryption scheme, and performing at least one of: storing the encrypted main track and encrypted sample variant track of the media content asset packaged in a storage format, and transmitting the encrypted main track and the encrypted sample variant track in a distribution container format to an edge media router (EMR) device configured to repackage the media content asset into a delivery container format without reencrypting the media content asset.

Abstract: A method, device and computer program for providing privacy during delivery of ABR media content to an ABR OTT client device are shown. The method receives an ABR manifest for an ABR media asset; the ABR manifest includes a segmentation-units index that points to segmentation-units in the ABR media asset. Using the segmentation-units index and a customization process, randomized byte-range requests for portions of the ABR media asset are produced and sent. Responsive to receiving the randomized byte-ranges, the ABR media asset is reassembled in order and provided to a media player in the client device.

Abstract: A method, system and non-transitory computer-readable medium for distributing adaptive bitrate (ABR) media are disclosed. The method includes initially ingesting a first ABR media element at a first network node and receiving, at the first network node, a second ABR media element that was initially ingested at a second node. The method further includes initiating distribution of the first and second ABR media elements from the first network node to a first plurality of network nodes.

Abstract: A Multicast Adaptive Bitrate (MABR) Bandwidth Control Agent (BCA) configured to manage bandwidth of a plurality of MABR data streams in an Internet Protocol Television (IPTV) over Data Over Cable Service Interface Specification (DOCSIS) system, wherein a bandwidth bottleneck exists on either an inbound, IP-network side of a Cable Modem Termination System (CMTS) or on an outbound, DOCSIS/RF-network side of the CMTS. The MABR BCA configures multiple virtual pipes on the inbound, IP-network side of the CMTS when the bottleneck is on the outbound, DOCSIS/RF-network side of the CMTS. One virtual pipe is configured for each service group to manage the bandwidth per service group for output RF ports on the CMTS. When the bottleneck is on the inbound, IP-network side of the CMTS, the MABR BCA configures one virtual pipe on the inbound, IP-network side to manage the bandwidth for input Ethernet ports on the CMTS.

Abstract: A system and method for distributing watermarked media content assets wherein a main track of a media content asset is provided with a first watermarking payload and at least one variant track is provided with a second watermarking payload. A plurality of composite segments of the media content asset are generated for distribution, wherein each composite segment includes a portion of the main track and corresponding portion of at least one variant track. The composite segments may be uploaded to a delivery node operative to deliver segments responsive to a unique watermarking signature provided by a client controller operating in conjunction with a watermarking session manager.

Abstract: A method, system and non-transitory computer-readable medium for distributing adaptive bitrate (ABR) media are disclosed. The method includes initially ingesting a first ABR media element at a first network node and receiving, at the first network node, a second ABR media element that was initially ingested at a second node. The method further includes initiating distribution of the first and second ABR media elements from the first network node to a first plurality of network nodes.

Abstract: Media content is delivered to a variety of mobile devices in a protected manner based on client-server architecture with a symmetric (private-key) encryption scheme. A media preparation server (MPS) encrypts media content and publishes and stores it on a content delivery server (CDS), such as a server in a content distribution network (CDN). Client devices can freely obtain the media content from the CDS and can also freely distribute the media content further. They cannot, however, play the content without first obtaining a decryption key and license. Access to decryption keys is via a centralized rights manager, providing a desired level of DRM control.

Abstract: A client device for media playback includes a user-installable media client application which implements the client-side of a digital rights management (DRM) system. The client device employs secure boot and verifies the user-installed application. The application is hardened against reverse engineering, and it utilizes a special API provided by the client device to tie into the secure boot, bridging the gap between the secure boot and the client-side of the DRM system contained within the application.

Abstract: A method is provided for performing targeted ad insertion in over-the-top delivery of content by detecting ad replacement opportunities in a live content stream and preparing the content for seamless replacement with segmented HTTP adaptive streaming delivery. The method includes provisions for multi-stage proxy-based segment replacement for targeted ad delivery. The method provided works transparently with standard HTTP adaptive streaming clients. A system is also specified for implementing a client and server content delivery infrastructure in accordance with the provisions of the method.

Abstract: A method and system is provided for controlling bandwidth rate limiting and client rendering rate limiting in a video delivery network. The method provides network service providers with a means for overriding video delivery data rates selected through dynamic client bitrate adaptation, as well as video data rendering rates of the clients, to limit the impact of network congestion. A system is also specified for implementing a client and a proxy computer in accordance with the method. The system works transparently with standard HTTP-based video delivery systems and includes an HTTP proxy cache infrastructure to support bandwidth rate limiting and client rending rate limiting. The system further provides for administrative overrides of client bitrate selection and client bandwidth usage.

Abstract: A method and system is provided for controlling bandwidth rate limiting and client rendering rate limiting in a video delivery network. The method provides network service providers with a means for overriding video delivery data rates selected through dynamic client bitrate adaptation, as well as video data rendering rates of the clients, to limit the impact of network congestion. A system is also specified for implementing a client and a proxy computer in accordance with the method. The system works transparently with standard HTTP-based video delivery systems and includes an HTTP proxy cache infrastructure to support bandwidth rate limiting and client rending rate limiting. The system further provides for administrative overrides of client bitrate selection and client bandwidth usage.

Abstract: A system and method for distributing content in a network architecture using a common intermediary mezzanine distribution format (CMZF). A media content asset may be processed for packaging in a CMZF container structure configured to carry each bitrate representation of the media content in a valid CMZF stream scheme, the media content encrypted in one or more encryption schemes. The CMZF formatted media content may be provided to an origin server for file-based distribution over a network which is of one of the following types; unmanaged network, managed network, or a combination thereof, and/or to a streaming network node for stream-based distribution over a over a network which is of one of the following types; unmanaged network, managed network, or a combination thereof. In one embodiment, the CMZF container structure may be based on an MPEG-TS format extended to facilitate carriage of ISOBMFF track and track metadata data objects in PES payload in additional elementary streams.

Abstract: A system and method for facilitating directory limit based storage scheme for uploading media segments in multiple directories at one or more media servers. Directory limit parametric information may be signaled in an MPD document for enabling a DASH client device to construct URLs based on the received directory parametric information via a modified/extended SegmentTemplate element of the MPD document.