Abstract: A system for multi-stream security processing and distributing digital media streams includes a headend, a network, and at least one receiver. The headend is generally configured to generate encrypted digital media streams. The network may be coupled to the headend and configured to receive the encrypted digital media streams. The at least one receiver may be coupled to the network and configured to receive the encrypted digital media streams and present a decrypted version of the encrypted digital media streams. At least one of the headend and the at least one receiver include a security processor that may be configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams.

Abstract: A system for multi-stream security processing and distributing digital media streams includes a headend, a network, and at least one receiver. The headend is generally configured to generate encrypted digital media streams. The network may be coupled to the headend and configured to receive the encrypted digital media streams. The at least one receiver may be coupled to the network and configured to receive the encrypted digital media streams and present a decrypted version of the encrypted digital media streams. At least one of the headend and the at least one receiver include a security processor that may be configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams.

Abstract: A method of traffic regulation in a packet communication network involves a token bucket associated with a subscriber. Packets arriving at the regulator are handled in accordance with the token bucket configuration. The method involves measuring a demand placed on the network by the subscriber. The token bucket configuration is dynamically adjusted based on the demand. Another method of traffic regulation handles packets arriving at the regulator in accordance with first and second token bucket configurations. The first token bucket regulates packet rate while the second token bucket regulates data rate. Another method of traffic regulation involves handling packets in accordance with a token bucket configuration, where the amount of tokens to be removed is based on the amount of the flow and is further based on a classification of the flow. Packet-level devices for traffic regulation are also contemplated.

Abstract: Tokens and policy descriptors are used for dynamic on demand session management in a distributed and scalable architecture for on demand sessions and resource management. The architecture includes an on demand client, a purchase server, and a session manager. A purchase token is generated at the purchase server and assigned to the on demand client. The purchase token represents at least one requested asset. In response to an on demand session set-up request corresponding to the purchase token from the on demand client to the session manager, the purchase token is expanded to generate at least one dynamic policy management descriptor for the on demand session. This provides token-based purchase authorization and policy management for on demand services.

Abstract: A system for on demand session and resource management in an on demand platform for delivery of on demand digital assets is distributed and scalable. A session manager manages on demand sessions. A resource manager manages resources associated with the on demand delivery of a digital asset to an on demand client. The architecture is partitioned into logical components. Each logical component interfaces with at least one other logical component through a defined interface. The session manager is a separate logical component from the resource manager.

Abstract: A system for on demand session and resource management in an on demand platform for the delivery of on demand digital assets involve a session manager, a plurality of resource managers, and a resource manager redirector. These components cooperate to provide a distributed and scalable system for on demand session and resource management. Redirection of session and resource signaling messages among various session and resource managers by the resource manager redirector allows the unavailability of devices or resources to remain transparent to the session manager. The resource manager redirector redirects messages from the session manager as appropriate.

Abstract: A cryptographic media stream system for ensuring media stream content is only consumed in authorized regions. The system includes at least one encryption/decryption key source configured to provide at least one of a regional key and a timezone key, where the regional key and the timezone key are globally unique keys, a media encryption engine that receives an unencrypted media stream and encrypts the encrypted media stream, and a media decryption engine that receives the encrypted media stream, and decrypts the encrypted media stream in response to at least one of the regional key and the timezone key.

Abstract: A content storage method and system for use in a content distribution network are provided. A personal file locker is established on the network for a user. A content-storage-request database is established. The database tracks requests by the user for placing video programs into the user's file locker for personal use by the user. Upon the broadcasting of a video program for which there exists a request by the user to place the video program into the user's file locker, the requested video program is stored in the user's file locker. The stored video program is then made available to the user for viewing. Alternative approaches to content storage methods and systems are also described, including the use of a buffer enhancement to enable the performance of operations on “live” television.

Abstract: A controller for managing media stream decryption keys includes a media decryption engine, a table, and a content key list. The media decryption engine receives an encrypted media stream from a headend and presents a decrypted media stream to a receiving device in response to a decryption key, wherein the decryption key is a function of a content key. The table contains a content key index and a plurality of corresponding content keys. Content keys that correspond to a particular encrypted media stream are selected from the content key list using an index from the content key table, and that is referenced by an identifier received from a headend in connection with the encrypted media stream.

Abstract: A system for processing digital media streams includes a headend, a network, at least one set top box (STB), and at least one receiving device. The headend may be configured to generate the digital media streams. The network may be in communication with the headend and configured to receive the digital media streams. The at least one STB may be in communication with the network and configured to receive the digital media streams and present at least one of the digital media streams or a decoded version of at least one of the digital media streams. The at least one receiving device may be in communication with a respective at least one STB to receive at least one of the digital media streams. At least one of the headend, the at least one STB, and the receiving device comprises a media processing sub-system configured to provide for substantially immediately displaying a user viewable image on a display screen of the receiving device during channel changing.

Abstract: A content storage method and system for use in a content distribution network are provided. A personal file locker is established on the network for a user. A content-storage-request database is established. The database tracks requests by the user for placing video programs into the user's file locker for personal use by the user. Upon the broadcasting of a video program for which there exists a request by the user to place the video program into the user's file locker, the requested video program is stored in the user's file locker. The stored video program is then made available to the user for viewing. Alternative approaches to content storage methods and systems are also described.

Abstract: A system for multi-stream security processing and distributing digital media streams includes a headend, a network, and at least one receiver. The headend is generally configured to generate encrypted digital media streams. The network may be coupled to the headend and configured to receive the encrypted digital media streams. The at least one receiver may be coupled to the network and configured to receive the encrypted digital media streams and present a decrypted version of the encrypted digital media streams. At least one of the headend and the at least one receiver include a security processor that may be configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams.

Abstract: An apparatus for use in a hybrid fiber coax (HFC) network provides the HFC forward path spectrum from the head end to a network fiber node. The apparatus includes a head end modulator. The modulator directly receives a switchable digital data signal and internally processes the switchable digital data signal to produce the HFC forward path spectrum that directly drives the node. The HFC forward path spectrum may be directly converted to an analog optical signal by the modulator itself or by an optical conversion device immediately following the modulator.

Abstract: A method of traffic regulation in a packet communication network involves a token bucket associated with a subscriber. Packets arriving at the regulator are handled in accordance with the token bucket configuration. The method further involves measuring a demand placed on the packet communication network by the subscriber. The token bucket configuration for the subscriber is dynamically adjusted based on the demand. Another method of traffic regulation handles packets that arrive at the regulator in accordance with first and second token bucket configurations. The first token bucket regulates packet rate while the second token bucket regulates data rate. Another method of traffic regulation involves handling packets in accordance with a token bucket configuration, where the amount of tokens to be removed is based on the amount of the flow and is further based on a classification of the flow. Packet-level devices for traffic regulation are also contemplated.