Aoevideo

A Case for a Multi-Key Secure Video Proxy: Theory, Design and Implementation S.F. Yeung, John C. S. Lui, David K. Y.Yau ACM Multimedia 2002

Multi-Key Secure Video Proxy ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Why Video Proxy ? ,[object Object],[object Object],[object Object],[object Object],[object Object]

Client-Server Infrastructure source Client 1 Client 2 Client 3 Client N Server bandwidth (fan-out) is very limited Long haul bottleneck paths Packets get dropped

Why Video Proxy ? ,[object Object],[object Object],[object Object]

Client-Proxy-Server Infrastructure source Client A1 Client A2 Client A3 Client AN Client B1 Client B2 Client B3 Client BN Client P1 Client P2 Client P3 Client PN Proxy A Proxy B Proxy P

Why Secure Video Proxy ? ,[object Object],[object Object],[object Object]

Background ,[object Object],[object Object],[object Object]

Secure Client-Server Infrastructure source Client 1 Client 2 Client 3 Client N Encrypt using client 1’s key Encrypt using client 2’s key Encrypt using client 3’s key Encrypt using client N’s key ,[object Object],[object Object],[object Object]

Proxy Caching with Decrypted Content source Client A1 Client A2 Proxy A Encrypt with Proxy’s key Decrypted Content Encrypt with Client A1’s key Encrypt with Client A2’s key ,[object Object],[object Object]

Proxy Caching with Encrypted Content source Client A1 Client A2 Proxy A Encrypt with Proxy’s key Encrypted Content Decrypt using proxy’s key Encrypt using client i ’s key ,[object Object],[object Object],[object Object]

Related Work ,[object Object],[object Object]

Proxy Caching with Corrupted Content source Client A1 Client A2 Intentionally Corrupted Content Part for reconstruction (via secure channel) Proxy ,[object Object],[object Object],[object Object],[object Object]

Proxy Caching with VES Encryption source Client A1 Client A2 Proxy A Encrypt with Proxy’s key Encrypted Content Encrypt using VES encryption ,[object Object],[object Object]

Secure Video Proxy Requirement ,[object Object],[object Object],[object Object]

Definition of Asymmetric Reversible Parametric Sequence ( ARPS ) ,[object Object],[object Object],[object Object],D -1 D 0 D 1 D N f(D -1 , e 0 ) f(D 0 , e 1 ) f(D 1 , e 2 ) f(D N-1 , e N ) f(D N , e N+1 ) D 1 D N f(D 0 , e 1 ) f(D 1 , e 2 ) f(D N-1 , e N ) f(D N , e N+1 ) * * * * * * * * * *

Use ARPS to design proxy with the following properties ,[object Object],[object Object],[object Object]

Use ARPS to design proxy with the following properties (Continue) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

ARPS f sequence for the secure video proxy e 0 e 1 e 2 e N Client 1 Client 2 Client N source D -1 D 0 D 1 D 2 D N Video Proxy

Our Design ,[object Object],[object Object],[object Object]

Implement ARPS f using Multi-Key RSA ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Implement ARPS f using Multi-Key RSA ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Operations between source and proxy request Ack(e 1 , n) D 0 (using e 0 ) request authentication and key generation (e 0 , e 1 , d 1 , n, phi) Data encryption caching or relaying Server Proxy

Operations between proxy and client request(eCert) Ack(e 1 , [d 1 ], n) D 0 (using e 0 ) Authentication and key generation Data encryption D 1 (using e 1 ) Server Proxy Client 1 Request request(eCert) Data encryption Data decryption Ack([d 1 ], n) Retrieve d 1 ,[object Object],[object Object]

Encryption Configuration Parameters Packet 0 (1400 bytes) Packet 1 (1400 bytes) Packet 2 (1400 bytes) Packet 3 (1400 bytes) Encryption block Encryption sub-block S pkt = 1400 bytes, I = 2, P = 0.5 and B = 4

Secure Multimedia Library - SML ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Secure Multimedia Library - SML ,[object Object],SML_InitSession(); SML_Accept(); SML_SendRps(); SML_SendEncryptRps(); SML_InitSession(); SML_Connect(); SML_ReceiveRps(); StoreData(); Server Proxy SML_InitSession(); SML_ProxyAccept(); SML_SendRps(); ReadData(); SML_SendReEncryptRps(); Proxy SML_InitSession(); SML_ConnectProxy(); SML_ReceiveRps(); SML_ReadDecryptRps(); Client

Secure Multimedia Library - SML ,[object Object],SML_InitSession(&session); SML_NewKeyPair(&session, 512, 65537, CRYPTO_KEY_RSA); SML_SaveKeyPair(&session, "key.rsa", "passwd"); if (SML_Connect(&session)) { SML_ReceiveRps(&session); for (i=0; i<total_pkt; i++) { SML_ReadDecryptRps(&session, buffer, buf_size); } } SML_DestroySession(&session);

Secure Multimedia Library - SML ,[object Object],SML_InitSession(&session); SML_LoadKeyPair(&session, “key.rsa”, “passwd”, CRYPTO_KEY_RSA); if (SML_Accept(&session)) { SML_LoadRps(&session, “movie_0.rps”); SML_SendRps(&session); for (i=0; i<total_pkt; i++) { SML_SendEncryptECP(&session, buffer, buf_size); } } SML_DestroySession(&session);

Encryption Configuration Parameters t = proxy throughput, M = Number of concurrent MPEG-1 streams that could support. B = 1 63.04 11.82 62.56 11.73 62.56 11.73 62.40 11.70 57.10 10.7 62.08 11.64 I = 10 62.82 11.78 62.72 11.76 62.08 11.64 61.66 11.56 52.24 10.17 48.32 9.06 I = 5 62.77 11.77 54.19 10.16 40.20 7.54 32.52 5.91 25.81 4.84 21.87 4.10 I = 2 53.90 10.10 30.90 5.8 21.60 4.05 16.60 3.11 13.5 2.53 11.36 2.13 I = 1 M T M t M t M t M t M t P = 0.043 P = 0.086 P = 0.120 P = 0.171 P = 0.214 P = 0.257

Aoevideo

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Aoevideo

Similar to Aoevideo (20)

More from Pptblog Pptblogcom

More from Pptblog Pptblogcom (20)

Recently uploaded

Recently uploaded (20)

Aoevideo