Abstract: The present invention makes it possible to encrypt a portion of a tile image to be subject to wavelet transformation at or above a desired resolution level without the need to manage multiple encryption keys. The invention divides the sub-bands generated with each wavelet transformation into a plurality of precincts, treats aggregations of encrypted data of precincts of the same phase of sub-bands of the same layer as a tile part, and defines a tree structure in which tile parts having higher frequency encrypted data are positioned at higher level nodes. An encryption unit then generates encryption key information for tile parts of the highest level node based on route key information generated from encrypted data for the entire tile, and generates encryption key information for encrypting tile parts other than those of the highest node by unidirectional transformation of encryption key information for tile parts of higher level nodes.

Abstract: A method and apparatus for securing and, optionally, distributing an information stream by divided the information stream into a collection of segments and compressing the segments, rearranging the order of the segments and encrypting the segments.

Abstract: Disclosed is apparatus for processing an encrypted data stream within a computer system adapted to receive the encrypted data stream from a data storage device. A data output device is coupled to a computer system and has a plurality of data output areas. An encrypted data stream is transferred from a data storage device to the data output device, the encrypted data stream being for output to one of the plurality of data output areas. The encrypted data stream is received and decrypted to produce a clear data stream for output to one of the plurality of data output areas. A decryption means receives a decryption key from the computer system, the decryption key relating only to the encrypted stream associated with the one of the plurality of data output areas.

Abstract: A transmitter of the present invention includes: an encrypting unit operable to encrypt at least one of digital AV information and descriptor information relating to the digital AV information, and to generate encrypted information; a tool list generating unit operable to generate tool list information having a tool ID indicating a tool required for decrypting the encrypted information; a control graph generating unit operable to generate control graph information indicating an incorporating position of the tool in a receiver; an IPMP protection information generating unit operable to generate IPMP descriptor information for describing the tool list information and the control graph information with a descriptor having a name space indicating IPMP or IPMP protection information; and a packaging unit operable to package the digital AV information including the encrypted information and the IPMP descriptor information, and outputting package information.

Abstract: The invention provides a system that preserves the synchronization of the audio and video presented at a secure conferencing site without necessitating decryption, decompression, compression, and encryption of signals at the hub. The presently preferred embodiment of the invention provides an apparatus and method for synchronizing audio and video in encrypted videoconferences that comprises a plurality of conference sites; and a hub for receiving a compressed and encrypted, composite audio and video signal from each site, for determining a currently active site, and for transmitting said composite audio and video signal from said currently active site to all other sites; said hub receiving a compressed and encrypted audio only signal from each site; wherein said hub routes all incoming compressed and encrypted audio only signals to each site.

Abstract: A method and apparatus for image compression using temporal and resolution layering of compressed image frames, and which provides encryption and watermarking capabilities. In particular, layered compression allows a form of modularized decomposition of an image that supports flexible encryption and watermarking techniques. Using layered compression, the base layer and various internal components of the base layer can be used to encrypt a compressed layered movie data stream. By using such a layered subset of the bits, the entire picture stream can be made unrecognizable by encrypting only a small fraction of the bits of the entire stream. A variety of encryption algorithms and strengths can be applied to various portions of the layered stream, including enhancement layers. Encryption algorithms or keys can be changed at each slice boundary as well, to provide greater intertwining of the encryption and the picture stream.

Abstract: A video communication system is disclosed which allows one or more of the participants to selectively participate anonymously by scrambling regions of the video of arbitrary shape, such as the face of the participant. Initially, the video content is analyzed to locate an arbitrary shape of interest, such as a human face or part of a human body. Once the region of interest is located, it is scrambled, for example, in conjunction with two well known video coding schemes; MPEG-4 and Motion JPEG-2000. The arbitrary regions can be scrambled in the image-domain prior to coding, in the transform-domain during coding, or in the bit stream domain after coding.

Abstract: The disclosure describes methods for using digital watermarking to authenticate digital media signals, such as images, audio and video signals. It also describes techniques for using embedded watermarks to repair altered parts of a media signal when alteration is detected. Alteration is detected using hashes, digital watermarks, and a combination of hashes and digital watermarks.

Abstract: A computer-implemented method is described for processing multimedia channels comprising: encrypting a first group of multimedia channels using a first type of encryption to produce a first group of encrypted multimedia channels; encrypting the first group of multimedia channels using a second type of encryption to produce a second group of encrypted multimedia channels; concurrently transmitting the first group of encrypted multimedia channels with the second group of multimedia channels to a plurality of multimedia subscribers having multimedia receivers capable of decrypting the first group of encrypted multimedia channels and/or the second group of multimedia channels.

Abstract: A system and method for encrypting and/or compressing an input data string is disclosed. The input data string is divided into a plurality of blocks of data that each contains a plurality of bits of data. A block code is used to identify the size of each of the blocks of data. The blocks of data are analyzed to determine how frequently different groups of bits of data are present within each block of data. The blocks of data are also analyzed to determine whether certain relationships among the groups of bits of data exist within the blocks of data. After the blocks of data are analyzed, and in response to the analyses, a control code is generated for each block of data through the use of a control code index. After the control code for each block of data is generated, a position code is also generated for each block of data in response to the control code for the corresponding block of data.

Abstract: A selective encryption encoder and method of dual selective encryption. The selective encryption encoder has a packet identifier that identifies packets of at least one specified packet type, the at least one specified packet type being any of a plurality of packet types including packets containing a video slice headers or packets carrying data appearing in an active area of the image. A packet duplicator duplicates the identified packets to produce first and second sets of the identified packets. The packets are sent to and from a primary encryption encoder to encrypt the first set of identified packets under a first encryption method. A secondary encrypter encrypts the second set of identified packets under a second encryption method.

Abstract: A system and method for authentication of JPEG image data enables the recipient to ascertain whether the received image file originated from a known identified source or whether the contents of the file have been altered in some fashion prior to receipt. A unique hashing function is derived from a first section of image data contained in the JPEG compressed image in such a way that any changes subsequently made to the first section of image data is reflected in a different hashing function being derived from a signature string is embedded into a next section of the image data. Since the embedding of a previous section's integrity checking number is done without modifying the JPEG bit stream, any JPEG decoder can thereafter properly decode the image.

Abstract: A device and method thereof for encoding and encrypting data. The device includes a segmenter adapted to receive the data and segment at least a portion of the data into regions, a scalable encoder adapted to scalably encode at least one of the regions into scalably encoded data, and a progressive encrypter adapted to progressively encrypt at least a portion of the scalably encoded data into progressively encrypted scalably encoded data. In one embodiment, progressively encrypted scalably encoded data are provided to a packetizer in real time. In another embodiment, the device includes a storage unit adapted to store progressively encrypted scalably encoded data. In this latter embodiment, data can then be extracted from storage and provided to a packetizer.

Abstract: A video recording/reproducing apparatus combined with a camera adapted to control a target information amount according to the nature and properties of an animated image to be photographed, and a recording control method for the same are provided. A target information amount control microcomputer (7) controls an encoding and compressing apparatus (10) by a target bit rate to carry out predetermined compressive encoding on the animated image data from a filter computing unit (4) so as to create an encoded bit stream. The filter computing unit (4) is given a filter coefficient to convert the animated image data into data of a resolution that is suited for encoding.

Abstract: The invention, an electronic book selection and delivery system, is a new way to distribute books and other textual information to bookstores, libraries and consumers. The primary components of the system are a subsystem for placing text in a video signal format and a subsystem for receiving and selecting text that is placed in the video signal format. The system configuration for consumer use contains additional components and optional features that enhance the system, namely: (1) an operation center, (2) a video distribution system, (3) a home subsystem, including reception, selection, viewing, transacting and transmission capabilities, and (4) a billing and collection system. The operation center and/or video distribution points perform the functions of manipulation of text data, security and coding of text, cataloging of books, messaging center, and uplink functions.

Abstract: An encryption arrangement for multiple encryption of television programs. A system according to embodiments of the present invention multiple encrypts only a portion of the data required for full presentation of a television program to permit coexistence of multiple conditional access encryption systems associated with multiple manufacturer's set-top boxes within a single system. In one embodiment, only critical packets such as those carrying a payload incorporating packetized elementary stream header information is encrypted. By only encrypting a portion of the program, dramatically less bandwidth is consumed than the alternative of multiple encryption of all program data, thus permitting a larger number of programs to be carried over the same bandwidth while permitting coexistence of multiple conditional access systems in a single cable television system.

Abstract: A semiconductor memory includes a memory array and a scramble/descramble unit. The scramble/descramble unit scrambles read data read from the memory array to generate output data, and descrambles a received scrambled signal to generate a command for the memory array. The scramble/descramble unit updates a method of generating keys used for scrambling/descrambling when one selected between at least two out of the scrambled signal, the command, the read data, and the output data satisfies prescribed conditions, respectively.

Abstract: A method and a circuit for marking with a binary code a video sequence compressed by motion calculation, from one picture to another, of macroblocks dividing each picture, the digital pictures being distributed in at least two categories according to whether they are coded integrally or by the motion vectors of the macroblocks with respect to the previous picture or to the previous and next pictures, which includes, at least for the pictures coded by motion vectors, only marking the macroblocks for which the motion vectors are greater than a predetermined threshold.

Abstract: An image forming apparatus has a scanner capable of reading, from an original having a wireless tag unit attached thereto, an original image and data stored in the wireless tag unit. The original image read by the scanner can be duplicated by a duplicating unit. Moreover, a user who can use the image forming apparatus is preset, and user information representing a security level for user is registered into a database in advance. When a user executed duplication of an original, user authentication is performed on the basis of the user information registered in the database. If data of a security level for management is stored in the wireless tag unit, the security level for user is compared with the security level for management, and also in accordance with the result of the user authentication, it is determined whether duplication of the original is permitted or not. Thus, the duplication is permitted or prohibited.

Abstract: Techniques for securely and adaptively delivering multimedia content. It is assumed that a set of alternate access units for each time slot is obtained. Then, the encryption stream index of each access unit from the set of alternate access units of the previous time slot are obtained. An encryption stream index is then assigned to each access unit in the set of alternate access units in the current time slot, such that the encryption index increases over time. Thus, the invention overcomes the problem of encrypting a multimedia stream that may have multiple access units for each time slot by selecting the encryption index for each access unit such that the encryption index increases, regardless of which access unit the delivery system (e.g., server) selects for transmission.

Abstract: A system for time validation comprises a terminal (1) with means (7,7?) for tuning in to a number of different carrier frequencies (a-e), an authorisation device (6), e.g. a smart card, capable of communicating with the terminal (1) and means (2,5) to transmit time stamps, using a modulated signal having a carrier frequency, to the terminal (1). The authorisation device (6) comprises means (8) for selecting a carrier frequency to tune in to for retrieving a time stamp. A terminal (1) and authorisation device (6) are provided for use in the system. A computer program is suitable for loading into a programmable device, e.g. a smart card, to use it as an authorisation device (6) for use in such a system.

Abstract: A method for producing and for subsequently decrypting a protected stream of compressed video content is described herein. The method includes receiving an input stream of compressed video content containing a sequence of frames. A set of encrypted frames are created by encrypting selected frames of the sequence of frames in accordance with a frame encryption function. The method further includes generating frame decryption information necessary to decrypt the set of encrypted frames. In a particular implementation the protected stream is assembled using the set of encrypted frames, unencrypted frames from the input stream, and the frame decryption information. The decryption process is initiated by receiving the protected stream of compressed video content and the corresponding frame decryption information. In this regard the frame decryption information includes data distinguishing the encrypted frames from the unencrypted frames of the compressed video content within the protected stream.

Abstract: The present invention is a compression method for compressing digital data. The data is strings of digital values, which can be broken down to a series of 1's and 0's. The present inventive method uses a chaotic system to compress the data. The first step in the inventive method is generating a plurality of periodic orbits that correspond to a plurality of control bit strings. Each of the periodic orbits is formed with a series of numeric values. The next step is to convert the numeric values of the periodic orbits to digital data values, similar in form to the data to be compressed. The digital data values of the periodic orbits are then organized to identically match the original digital data values. Then the control bit strings corresponding to the organized digital data values of the periodic orbits are identified and saved in order, such that applying the control bit strings to the chaotic system will regenerate the original data.

Abstract: In a signal processing device and its method as well as a program storing medium, psychological auditory sense analysis of the survival state of an input signal of the time when the input signal has been compressed is performed in response to the compression processing, and the result of the very analysis is outputted as the psychological auditory sense encoded information, and digital watermarking information is superimposed on the input signal on the basis of the psychological auditory sense encoded information, so that it is possible to easily realize digital watermarking information that has large compression resistance and digital watermarking information that has small compression resistance.

Abstract: Apparatus and methods are provided for multiplexing and selectively encrypting application flows, such as VoIP services, over a pre-allocated bandwidth reservation protocol session. According to one embodiment, a pre-allocated reservation protocol session, such as an RSVP session, is shared by one or more individual application sessions. The reservation protocol session is pre-allocated over a path between a first network device associated with a first user community and a second network device associated with a second user community based upon an estimated usage of the path for individual application sessions between users of the first and second user communities. Subsequently, the one or more individual application sessions are dynamically aggregated by multiplexing application flows associated with the one or more individual application sessions onto the pre-allocated reservation protocol session at the first network device and demultiplexing at the second network device.

Abstract: A method and apparatus (200) for embedding a watermark in an information signal bit-stream are described. The method comprises receiving a portion of an information signal bit-stream (MPEG2). A first copy of the received portion is stored in a first buffer (220). A second copy of the received portion is watermarked, and the resulting watermarked signal stored in a second buffer (240). At predetermined intervals, a check is performed to determine if the bit-rate of the received portion has been changed by being watermarked. If the check determines the bit-rate has changed, the first copy of the received portion from the first buffer is output. Otherwise the watermarked signal from the second buffer is output.

Abstract: An encryption key is generated in response to a plurality of information pieces being bases for the encryption key. Original information is encrypted into encryption-resultant information in response to the generated encryption key. The encryption-resultant information is divided into units. Each of the units is loaded with encryption control information for identifying the plurality of information pieces being the bases for the encryption key.

Abstract: In a method for controlling the use of a program signal in a broadcast system, comprising one or more broadcasters and a number of receivers, at least a part of the receivers can be provided with a storage medium for storing program signals. The program signal comprises content signals of a first and a second type, wherein the second type of content signals is inserted in time slots in the first type of content signals. At least the first type of content signals is scrambled using control words as scrambling keys to obtain a scrambled program signal. The program signal is scrambled using control words as scrambling keys and the scrambled program signal is broadcasted together with entitlement control messages (ECM's) containing the control words in an encrypted manner using a second key. Decrypting means are provided at each receiver for retrieving the control words from the ECM's by decrypting the ECM's, wherein the control words are delivered by the decrypting means for descrambling the program signal.

Abstract: Input material data is encoded to form contents data. Intellectual property information on intellectual property rights in technological aspects necessary for forming the contents data is formed. The intellectual property information is added to the contents data.

Abstract: A copy-protected-state indicating MPEG-TS data output unit (3) holds a bit stream obtained by previously compressing and encoding image and/or audio data representing that recording desired by the user has ended in failure because the contents is copy-protected. When copy control information (V2) outputted from an IEEE 1394 interface (1) indicates a copy-protected state, a selecting unit (20) selects copy-protected-state indicating MPEG-TS data (V3) outputted from the copy-protected-state indicating MPEG-TS data output unit (3) and outputs it as to-be-recorded MPEG-TS data (V4). Thereby, the data (V3) is recorded.

Abstract: A cellular phone has distributed encrypted content data and an encrypted content key stored in a memory. The encrypted content key data read out from the memory is decrypted by a decryption processing unit using key data Kp stored in a Kp hold unit, and then applied to a audio reproduction module. A decryption processing unit decrypts encrypted content data read out from the memory using a content key Kc extracted by the decryption processing unit to reproduce content data Dc.

Abstract: A method for examining an electronic representation of an item for a watermark, the method including examining at least a first electronic representation of an item for a watermark in accordance with a first watermark definition, receiving a signal indicating that a second watermark definition is to be used for examining electronic representations, and examining at least a second electronic representation of an item for a watermark in accordance with the second watermark definition. Related apparatus and methods are also provided.

Abstract: A system and method for representing and maintaining redundant data sets utilizing system DNA transmission and transcription techniques comprising a system of symbolic exchange used for data transmission whose lexicon is based on the provision of unique and consistent identifiers (or symbols) for transmitted data utilizing “sticky byte” factoring. A protocol is provided for determining which entries (comprising unique identifier to corresponding data pairs) in a local lexicon (or “Primordial Data Pool”) are contained in a remote lexicon and can, therefore, be used in a transmission in lieu of the data itself. A mechanism is further provided through which the local lexicon can add newly presented unique identifier to corresponding data pairs to one or more remote lexicons.

Abstract: A device and method for embedding plural kinds of additional information or multiple bits of additional information into one picture is provided. A region information generating step generates region information to specify at least two regions in the real picture spatial or frequency space corresponding to the picture data, a coefficient sequence generating step sets at least two coefficient sequences, which are different from each other, a watermark pattern generating step allocates the coefficient sequences to each divided region to generate watermark patterns, and an embedding step embeds digital watermark information by changing the picture data using the watermark patterns.

Abstract: A recording apparatus is disclosed, that comprises a compression process means for compressing an input digital signal corresponding to a predetermined compression process and segmenting the compressed digital signal into blocks, a fixed value generating means for generating a predetermined fixed value, an adding means for adding the fixed value generated by the fixed value generating means at a predetermined timing to the blocks of the digital signal compressed by the compression process means, an encrypting means for encrypting the fixed value and the compressed digital signal added by the adding means, and a recording means for recording the fixed value and the compressed digital signal encrypted by the encrypting means to a record medium.

Abstract: A method of partially encrypting streaming media according to an embodiment of the invention comprises: receiving media in a streaming-media format; partitioning the stream-formatted media into cloak data and non-cloak data; and encrypting the cloak data such that less than all of the stream-formatted media is encrypted.

Abstract: A code stream and data indicating a normalization method are inputted to a normalization processing unit 21, and the normalization processing unit applies normalization processing to the code stream to generate a normalized code stream. Next, when signature data is inputted, a verification processing unit 22 performs encryption and decryption processing with respect to the signature data using a public key Kp and calculates a Hash value (first Hash value) and, on the other hand, calculates a Hash value of the normalized code stream (second Hash value). Next, the verification processing unit compares the first Hash value and the second Hash value and, if the first Hash value and the second Hash value are equal, judges that the code stream is not falsified. On the other hand, if the first Hash value and the second Hash value are not equal, the verification processing unit judges that the code stream is falsified.

Abstract: It is an object to provide an efficient transfer of content data. In a case of transferring the content data from a data transfer device on a primary recording medium side to a data recording device to record the content data in a secondary recording medium, a data compression system and a bit rate that are conformable to the data recording device are compared with a data compression system and a bit rate of the content data to be sent, so that a required transfer processing is brought into realization according to a result of the comparison. For instance, when both the data compression systems are equal, and the bit rate of the content data is not more than the bit rate that is conformable to the data recording device, the content data is sent as it is in an encrypted compressed data state.

Abstract: A recording apparatus is disclosed, that comprises a compression process means for compressing an input digital signal corresponding to a predetermined compression process and segmenting the compressed digital signal into blocks, a fixed value generating means for generating a predetermined fixed value, an adding means for adding the fixed value generated by the fixed value generating means at a predetermined timing to the blocks of the digital signal compressed by the compression process means, an encrypting means for encrypting the fixed value and the compressed digital signal added by the adding means, and a recording means for recording the fixed value and the compressed digital signal encrypted by the encrypting means to a record medium.

Abstract: A computer readable medium having a data packet stored therein for causing a functional change in the operation of a device is disclosed. In one embodiment, the data packet is comprised of a scalably encoded, progressively encrypted data portion. In the present embodiment, the data packet further includes a header data portion corresponding to the scalably encoded, progressively encrypted data portion. The header data portion includes information adapted to be used by a transcoder to transcode the scalably encoded, progressively encrypted, data portion.

Abstract: Certain embodiments consistent with the present invention involve a method of selectively encrypting and decoding digital video content. Certain of the packets are selected for encryption according to a selection criterion, wherein the selected packets exclude packets containing start of frame (SOF) headers. The selected packets are encrypted while retaining the packets containing the SOF headers unencrypted to form selectively encrypted digital video content. In decoding selectively encrypted digital video content, offsets are calculated for at least one of I frames and P frames from the SOF headers and the calculated offsets are stored as an offset table. The offset table can then be accessed to enable trick play of the selectively encrypted digital video content.

Abstract: An encryption arrangement for multiple encryption of television programs. A system according to embodiments of the present invention multiple encrypts only a portion of the data required for full presentation of a television program to permit coexistence of multiple conditional access encryption systems associated with multiple manufacturer's set-top boxes within a single system. PID mapping techniques are used to distinguish between multiple encryptions. By only encrypting a portion of the program, dramatically less bandwidth is consumed than the alternative of multiple encryption of all program data, thus permitting a larger number of programs to be carried over the same bandwidth while permitting coexistence of multiple conditional access systems in a single cable television system.

Abstract: An encryption arrangement for multiple encryption of television programs. A system according to embodiments of the present invention multiple encrypts only a portion of the data required for full presentation of a television program to permit coexistence of multiple conditional access encryption systems associated with multiple manufacturer's set-top boxes within a single system. In one embodiment, a time slicing technique is used to encrypt portions of a program on a time allocated basis. By only encrypting a portion of the program, dramatically less bandwidth is consumed than the alternative of multiple encryption of all program data, thus permitting a larger number of programs to be carried over the same bandwidth while permitting coexistence of multiple conditional access systems in a single cable television system.

Abstract: A method for encoding and decoding frames by generating a key bitstream such that the key bitstream never has to be stored is disclosed. The method consists of a key generation algorithm using a threshold matrix to generate a key that is very similar to original bitmap data. The key generation algorithm searches the bitmap for equivalent image sets that produce the same bitmaps. These equivalent image sets consist of runlength of constant image values and the actual runlength. Additionally, the image values for the runlengths are never explicitly encoded. During compression a preprocess algorithm XORs the MINIMAL number of hints required to find a equivalent image value for the runlength. The postprocess algorithm is capable of distinguishing if a single bit represents an image value adjustment hint or if it represents the end of a runlength.

Abstract: A method and apparatus for enabling use of multiple digital rights management scenarios (DRM). Unencrypted data representing digital content is examined to identify at least segments of content for encryption. The identified segments of content are duplicated and then encrypted using a first encryption method associated with a first DRM to produce first encrypted segments. Duplicates are encrypted using a second encryption method associated with a second DRM to produce second encrypted segments. A set of pointers are generated that point to the first and second encrypted segments content. A file is then created containing first and second encrypted segments of content, pointers and unencrypted content along with DRM rights data to produce a selectively encrypted multiple DRM enabled file.

Abstract: An automated method for authorizing and controlling the production of optically encoded images is provided. The method comprises receiving from a user data processor a request for authorization to produce an encoded image. The authorization request includes user-supplied data comprising at least one authentication image file. The method further comprises determining whether the user is authorized to produce an encoded image using the user-supplied data. Responsive to a determination that the user is authorized to produce an encoded image using the user-supplied data, an authentication image signature is generated from the at least one authentication image file using an image signature algorithm and a positive authorization response is returned to the user data processor. The positive authorization response includes the authentication image signature.

Abstract: There is provided an information processing apparatus/method characterized by inputting information data, generating security data to be used to protect the information data, encoding the information data to generate encoded data, extracting a unique predetermined code indicating a specific meaning from encoded data within a security section in accordance with the security data, superimposing the security data on the predetermined code, scrambling the encoded data except for the predetermined code within the security section, and outputting the superimposed predetermined code and the scrambled encoded data.

Abstract: A method for controlling access to digital information is performed based on a plurality of decryption keys sent by the information provider. A first type of decryption key instructs a user's host system to reproduce the digital information in accordance with a first level of reproduction quality degradation. Additional keys may specify other degradation levels. The quality of the digital information may be degraded based on a time condition or a use condition. Alternatively, only a portion of the information may be made viewable by a user. In order to obtain full and unrestricted access, the user must obtain a type of decryption key from the provider which removes all previous limitations on reproduction quality degradation.

Abstract: A scrambling architecture protects data streams in the operating system and hardware components of a computer by scrambling the otherwise raw data prior to the data being handled by the operating system. The architecture has a scrambler implemented at either the client or the server that adds noise to the content. More specifically, the scrambler produces periodic sets of tone patterns having varying amplitudes based on a first key. The scrambler also generates a random signal based on the first key and a second key. The tone patterns and random signal are added to the content to scramble the content. The scrambled content is then passed to the filter graph (or other processing system) where the content is processed while scrambled. Any attacker attempting to siphon off the bits during processing will steal only noisy data, which is worthless for redistribution or copying purposes. After processing, the scrambled data is passed to a driver for output.

Abstract: An apparatus in a digital network receives at least one input transport stream having a plurality of PID streams and outputs at least one transport streams. The apparatus demultiplexes the at least one input transport streams and determines whether to: decrypt packets included in the at least one input transport stream; statistically multiplex a group of PID streams included in the at least one input transport stream; and encrypt packets included in the at least one input transport stream.