CN101710964B - Method for enciphering and deciphering MPEG2 transport stream packets - Google Patents

Abstract

The invention provides a method for enciphering and deciphering MPEG2 transport stream packets. The method comprises the following steps of: based on the length of L bits, dividing the payload of transport stream packets into n subgroups of P1, P2, P3 till Pn; enciphering the ith subgroup Pi of the payload of the transport stream packets, and outputting the cipher subgroup Ci which is the enciphered result of the bit-by-bit XOR value of Pi and IVi-1 by using a secret key K, wherein n is less than n and not less than 1; if the length of the subgroup Pn is equal to L bits, the cipher subgroup Cn output after enciphering the subgroup Pn is the enciphered result of the bit-by-bit XOR value of Pn and IVn-1 by using the secret key K; and if the length t of the subgroup Pn is less than L bits, adding L-t zeros at the right of Pn, then XORing the result with added zeros and the enciphered result of IVn-1, and finally outputting the first t bits of the XOR result as the cipher of Pn (Cn). The invention has the advantages of high safety performance and easy implementation.

Description

The encryption and decryption method of MPEG2 transport stream data packet

Technical field

The present invention relates to the digital content protection technology, relate in particular to the encipher-decipher method that adopts the transport stream data packet of MPEG2 standard compression in a kind of digital interface content protective system.

Background technology

MPEG2 MPTS in the digital television broadcasting system is transferred to user side through radio network (wired, satellite or ground) after the front end scrambling.Typical ustomer premises access equipment adopts the separation between machine and card technology to receive MPTS: the MPTS of scrambling descrambling in smart card; MPTS behind the descrambling through the digital interface between smart card and the main frame (for example; PCMCIA; USB) arrive main frame, MPTS is accomplished demultiplexing, source coding and output in main frame.

As shown in Figure 1, MPTS is made up of continuous packet.Packet has the form of standard, and its total length is 188 bytes, and wherein preceding 4 bytes are packet packet header, next is optional elongated adaptation field, is the payload of some bytes at last.

In order to guarantee the fail safe of MPEG2 MPTS the time, need in card, the payload to MPTS encrypt again, and data packet head, adaptation field and total length of data packets remain unchanged through the digital interface between card and the main frame.Existing at present three standards define the encryption method here.

1, " CableCARD Copy Protection 2.0 Specification " adopt ECB (Electric Code Book, the electronic code book) pattern of TDES algorithm that the payload of transport stream data packet is encrypted in (2009-05-08); If the length of payload is not the integral multiple of 64 bits, need to use Cipher-Text Stealing technology (specifically seeing the U.S. Patent application of US005684876A) to keep fixing data packet length.

2, adopt CBC (Cipher Block Chaining, the link of the encrypted word group) pattern of aes algorithm data to be surrounded by effect load to encrypt in " CI Plus Specification:Content Security Extensions to the Common Interface.V1.2.2009-4-16 "; If the length of payload is not the integral multiple of 128 bits, adopt the method for transparent transmission tail data to keep fixing data packet length.

3, the CBC pattern that adopts aes algorithm in " Digital Video Broadcasting Content Protection Copy Management.Rev.1.2007-7 " is surrounded by data and imitates load and encrypt; If the length of payload is not the integral multiple of 128 bits, need to adopt other a kind of Cipher-Text Stealing technology (specifically seeing the U.S. Patent application of US20080137851A1) to keep fixing data packet length.

Said method all adopts the block cipher with fixing input length and fixing output length that the payload of packet is carried out encryption and decryption.The block length of supposing block cipher is the L bit, at first payload is divided into the grouping of some L bits when then encrypting, and then each grouping is encrypted.If the length of payload is not the integral multiple of block length L, then need special means to handle.In addition, the CBC pattern of employing block cipher has higher fail safe to the payload encryption of transport stream data packet than the employing ecb mode, adopts the Cipher-Text Stealing technology can effectively solve the problem that loaded length is not a block cipher block length integral multiple.

Summary of the invention

The present invention proposes a kind of encryption and decryption method of MPEG2 transport stream data packet; The present invention is based on block cipher; Can support two kinds of conventional cryptography patterns of CBC and PCBC, also support the higher FFM pattern of a kind of fail safe to encrypt, have the security performance height, realize simple advantage.

The present invention adopts following technical scheme to realize: a kind of encryption method of MPEG2 transport stream data packet, and it comprises:

Steps A: the payload of transport stream data packet is divided into n grouping: P ₁, P ₂, P ₃..., P _nWherein preceding n-1 length of dividing into groups is the L bit, last grouping P _nLength be less than or equal to the L bit, n is more than or equal to 1;

Step B: i grouping Pi to payload in the transport stream data packet carries out encryption, output ciphertext block C _i, this ciphertext block C _iFor using key K to P _iWith IV _I-1Carry out the result of enciphering transformation by bit XOR value, wherein, n＞i>=1;

Step C: if grouping P _nLength equal the L bit, then to grouping P _nEncryption after the ciphertext block C that exports _nFor using key K to P _nWith IV _N-1Carry out the result of enciphering transformation by bit XOR value; If grouping P _nLength t less than the L bit, at P _nThe right mend L-t " 0 ", then with result after the zero padding and IV _N-1The encrypted result XOR, at last with XOR result's preceding t bit as P _nCiphertext C _nOutput;

Wherein, IV _iBe conversion F (Mode, P _i, C _i, IV _I-1) intermediate variable of output, and IV _iLength be L, and one of them input parameter Mode of conversion F value respectively when selecting CBC pattern, PCBC pattern and FFM pattern for use: 0,1 and 2.

Wherein, if the payload of transport stream data packet only constitutes a grouping P ₁, then adopt the CFB pattern to P ₁Encrypt, suppose P ₁Length be t, t≤L is at first at P ₁The right mend L-t " 0 ", then with result after the zero padding and IV ₀The encrypted result XOR, at last with XOR result's preceding t bit as P ₁Ciphertext C ₁Output.

Wherein, when i=1, first grouping of encryption transport stream data packet P ₁Input parameter IV ₀, and parameter Mode and key K all are shared parameters known between encryption side and the deciphering side.

In addition, the present invention discloses a kind of decryption method of MPEG2 transport stream data packet, and it comprises:

Steps A: the payload of the MPEG2 transport stream data packet of encrypting is divided into n grouping (n＞1): C ₁, C ₂, C ₃..., C _n, wherein preceding n-1 length of dividing into groups is the L bit, last grouping P _nLength be less than or equal to the L bit, n is more than or equal to 1;

Step B: to i grouping C of payload in the transport stream data packet _iCarry out decryption processing, the grouping P of i payload in the output transport stream packet _i, this grouping P _iFor to ciphertext block C _iDecipher conversion earlier, again with IV _I-1Obtain by the bit XOR, wherein, n＞i>=1;

Step C: if last ciphertext block C _nLength equal the L bit, then to grouping C _nDecryption processing after the payload grouping P that exports _nFor to ciphertext block C _nDecipher conversion earlier, and and IV _N-1Obtain by the bit XOR; If ciphertext block C _nLength t less than the L bit, at C _nThe right mend L-t " 0 ", then with result after the zero padding and IV _N-1The encrypted result XOR, at last with XOR result's preceding t bit as the payload P that divides into groups _nOutput;

Wherein, IV _iBe conversion F (Mode, P _i, C _i, IV _I-1) intermediate variable of output, and IV _iLength be L, and one of them input parameter Mode of conversion F value respectively when selecting CBC pattern, PCBC pattern and FFM pattern for use: 0,1 and 2.

Wherein, if the payload of the transport stream data packet of encrypting only constitutes a grouping C ₁, then adopt the CFB pattern to C ₁C is supposed in deciphering ₁Length be t, t≤L is earlier at C ₁The right mend L-t " 0 ", then with result after the zero padding and IV ₀The encrypted result XOR, at last with XOR result's preceding t bit payload P as deciphering back transport stream data packet ₁Output.

Wherein, when i=1, first grouping of decryption processing transport stream data packet C ₁Input parameter IV ₀, and parameter Mode and key K all are shared parameters known between encryption side and the deciphering side.

Compared with prior art, the present invention has following beneficial effect:

The present invention is based on and divide into groups to encrypt or decryption processing, and support multiple encrypted work pattern, have the strong advantage of applicability.In addition; When the length of effective load is not the integral multiple of password block length; The present invention uses the method that is similar to the CFB pattern that the nubbin data are handled, and technological simple a lot of than Cipher-Text Stealing to the nubbin data processing method, and fail safe is equivalent to the CFB pattern.

Description of drawings

Fig. 1 is the composition structural representation of the MPTS of reference format;

Fig. 2 is the payload encryption method among the present invention;

Payload nubbin encryption method among Fig. 3 the present invention;

Payload decryption method among Fig. 4 the present invention;

Payload nubbin decryption method among Fig. 5 the present invention.

Embodiment

The invention provides a kind of encryption and decryption method of MPEG2 transport stream data packet payload.This method can provide 3 kinds of different encrypted patterns as required; Be respectively: CBC (Cipher Block Chaining; Cipher block chaining) pattern, PCBC (Propagating Cipher Block Chaining; The expansion cipher block chaining) pattern, than CBC and the higher a kind of encryption mode of PCBC fail safe, this case abbreviates the FFM pattern as.When the length of effective load is not the integral multiple of password block length; This method uses the method that is similar to the CFB pattern that the nubbin data are handled; And technological simple a lot of than Cipher-Text Stealing to the nubbin data processing method, fail safe is equivalent to the CFB pattern.

For ease of describing, elder generation is following to each parameter introduction of this case embodiment:

In this case embodiment, input parameter comprises: IV ₀, mode parameter Mode, key K, P ₁, P ₂, P ₃..., P _nWherein, IV ₀, mode parameter Mode and key K be the shared parameter between encryption side and the deciphering side; P ₁, P ₂, P ₃.., P _nBe the grouping situation of payload in the transport stream data packet, the n-1 of front length of dividing into groups all is the block length L of block cipher, last grouping P _nLength smaller or equal to L.Encryption method of the present invention is output as ciphertext block: C ₁, C ₂, C ₃..., C _nWherein, preceding n-1 length of dividing into groups all is the block length L of block cipher, and the length of last grouping equals corresponding clear packets P _nLength.E _KIt is the enciphering transformation that key K limits.

In addition, the definition of the conversion F that relates in this case subsequent descriptions is following: the input parameter of conversion F has 4, is respectively: IV _I-1, P _i, C _iAnd Mode, i>=1 here; The output of conversion F is intermediate variable IV _i(i>=1), IV _iLength be L.The value of mode parameter Mode has three: 0,1 and 2, represent CBC pattern, PCBC pattern and the FFM pattern of encryption method respectively.

representative is by the bit XOR among the figure.When the Mode value is 0, and F (0, P _i, C _i, IV _I-1)=C _i, (i>=1); When the Mode value is 1, $F(1,P_i,C_i,{\mathrm{IV}}_{i-1})=P_i\⊕C_i,(i\≥1);$ When the Mode value is 2, $F(2,P_i,C_i,{\mathrm{IV}}_{i-1})={\mathrm{IV}}_{i-1}\⊕P_i\⊕C_i,(i\≥1).$

Encryption method of the present invention is when encrypting a MPEG2 transport stream data packet, and at first the payload with packet is divided into n grouping (n＞1): P ₁, P ₂, P ₃..., P _nWherein preceding n-1 length of dividing into groups is the L bit, last grouping P _nLength smaller or equal to the L bit.

As shown in Figure 2, if last grouping P _nLength equal the L bit, then the cipher mode of n clear packets is consistent, promptly to i grouping P of payload in the MPEG2 transport stream data packet _iThe ciphertext block C that exports after the encryption carries out (n>=i>=1) _iFor using key K to P _iWith IV _I-1Carry out the result of enciphering transformation by bit XOR value, can represent with following formula:

$C_i=E_K(P_i\⊕{\mathrm{IV}}_{i-1}),$ Wherein, IV _i=F (Mode, P _i, C _i, IV _I-1), n>=i>=1.

As shown in Figure 3, if last grouping P _nLength less than the L bit, then before the cipher mode of n-1 clear packets be consistent, but last grouping P _nAdopt the cipher mode of similar CFB pattern.Suppose grouping P _nLength be t, t＜L is at first at P _nThe right mend L-t " 0 ", then with result after the zero padding and IV _N-1The encrypted result XOR, at last with XOR result's preceding t bit C _n ^*As P _nCiphertext C _nOutput.Can represent with following formula:

$C_i=E_K(P_i\⊕{\mathrm{IV}}_{i-1}),$ Wherein, IV _i=F (Mode, P _i, C _i, IV _I-1), n-1>=i>=1;

${C_n}^{*}\left|\right|{C_n}^{**}=E_K\left({\mathrm{IV}}_{n-1}\right)\⊕P_n\left|\right|00,$ C _n＝C _n ^*。

Certainly, if the payload of transport stream data packet only constitutes a grouping, promptly n=1 then adopts the CFB pattern to P ₁Encrypt.Suppose P ₁Length be t, t≤L is at first at P ₁The right mend L-t " 0 ", then with result after the zero padding and IV ₀The encrypted result XOR, at last with XOR result's preceding t bit C ₁ ^*As P ₁Ciphertext C ₁Output.Can represent with following formula:

${{\mathrm{<figure-callout\; id="1"\; label="C"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">C</figure-callout>}}_1}^{*}\left|\right|{{\mathrm{<figure-callout\; id="1"\; label="C"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">C</figure-callout>}}_1}^{**}=E_K\left({\mathrm{IV}}_0\right)\&CirclePlus;{\mathrm{<figure-callout\; id="1"\; label="P"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">P</figure-callout>}}_1\left|\right|00,{\mathrm{<figure-callout\; id="1"\; label="C"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">C</figure-callout>}}_1={{\mathrm{<figure-callout\; id="1"\; label="C"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">C</figure-callout>}}_1}^{*}.$

As shown in Figure 4, decryption method of the present invention has following input parameter: IV ₀, mode parameter Mode, key K, C ₁, C ₂, C ₃..., C _nWherein, IV ₀, Mode and K be the parameter that share encryption side and deciphering side; C ₁, C ₂, C ₃..., C _nBe the grouping of payload in the transport stream data packet of an encryption, the n-1 of front length of dividing into groups all is the block length L of block cipher, last grouping C _nLength smaller or equal to L.Encryption method of the present invention is output as clear packets: P ₁, P ₂, P ₃..., P _nWherein, preceding n-1 length of dividing into groups all is the block length L of block cipher, and the length of last grouping equals corresponding ciphertext block C _nLength.D _KIt is the deciphering conversion that key K limits.The input parameter of conversion F has 4, is respectively: IV _I-1, P _i, C _iAnd Mode, i>=1 here; The output of conversion F is intermediate variable IV _i(i>=1), IV _iLength be L.The value of parameter Mode has three: 0,1 and 2, represent CBC pattern, PCBC pattern and the FFM pattern of encryption method respectively.

is by the bit XOR.

Decryption method of the present invention is when the MPEG2 transport stream data packet of an encryption of deciphering, and at first the payload with packet is divided into n grouping (n＞1): C ₁, C ₂, C ₃..., C _nWherein preceding n-1 length of dividing into groups is the L bit, last grouping P _nLength smaller or equal to the L bit.

If last grouping C _nLength equal the L bit, then the manner of decryption of n ciphertext block is consistent, promptly to ciphertext block C _iDecipher conversion earlier, and and IV _I-1Obtain the grouping P of i payload in the MPEG2 transport stream data packet by the bit XOR _i, can represent with following formula:

$P_i=D_K\left(C_i\right)\&CirclePlus;{\mathrm{IV}}_i,$ Wherein, IV _i=F (Mode, P _i, C _i, IV _I-1), n>=i>=1.

As shown in Figure 5, if last ciphertext block C _nLength less than the L bit, then before the manner of decryption of n-1 ciphertext block be consistent, but last grouping C _nAdopt the manner of decryption of similar CFB pattern.Suppose grouping C _nLength be t, t＜L is at first at C _nThe right mend L-t " 0 ", then with result after the zero padding and IV _N-1The encrypted result XOR, at last with XOR result's preceding t bit P _n ^*As C _nPlaintext P _nOutput.Can represent with following formula:

$P_i=D_K\left(C_i\right)\&CirclePlus;{\mathrm{IV}}_{i-1},$ Wherein, IV _i=F (Mode, P _i, C _i, IV _I-1), n-1>=i>=1;

${P_n}^{*}\left|\right|{P_n}^{**}=E_K\left({\mathrm{IV}}_{n-1}\right)\&CirclePlus;C_n\left|\right|00,P_n={P_n}^{*}.$

Certainly, if the payload of the transport stream data packet of encrypting only constitutes a grouping, promptly n=1 then adopts the CFB pattern to C ₁Deciphering.Suppose C ₁Length be t, t≤L is at first at C ₁The right mend L-t " 0 ", then with result after the zero padding and IV ₀The encrypted result XOR, at last with XOR result's preceding t bit P ₁ ^*As C ₁Plaintext P ₁Output.Can represent with following formula:

${{\mathrm{<figure-callout\; id="1"\; label="P"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">P</figure-callout>}}_1}^{*}\left|\right|{{\mathrm{<figure-callout\; id="1"\; label="P"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">P</figure-callout>}}_1}^{**}{=E}_k\left({\mathrm{IV}}_0\right)\&CirclePlus;{\mathrm{<figure-callout\; id="1"\; label="C"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">C</figure-callout>}}_1\left|\right|00,{\mathrm{<figure-callout\; id="1"\; label="P"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">P</figure-callout>}}_1={{\mathrm{<figure-callout\; id="1"\; label="P"\; filenames="H200910109747XE00011.png,H200910109747XE00021.png"\; state="\{\{state\}\}">P</figure-callout>}}_1}^{*}.$

Claims (4)

1. the encryption method of a MPEG2 transport stream data packet is characterized in that, comprising:

Steps A: the payload of transport stream data packet is divided into n grouping: P ₁, P ₂, P ₃..., P _nWherein preceding n-1 length of dividing into groups is the L bit, last grouping P _nLength be less than or equal to the L bit, n is more than or equal to 1;

Step B: to i grouping P of payload in the transport stream data packet _iCarry out encryption, output ciphertext block C _i, this ciphertext block C _iFor using key K to P _iWith IV _I-1Carry out the result of enciphering transformation by bit XOR value, wherein, n＞i>=1;

Step C: if grouping P _nLength equal the L bit, then to grouping P _nThe ciphertext block C that exports after the encryption _nFor using key K to P _nWith IV _N-1Carry out the result of enciphering transformation by bit XOR value; If grouping P _nLength t less than the L bit, at P _nThe right mend L-t " 0 ", then with result after the zero padding and IV _N-1The encrypted result XOR, at last with XOR result's preceding t bit as P _nCiphertext C _nOutput;

Wherein, IV _iBe conversion F (Mode, P _i, C _i, IV _I-1) output intermediate variable, the definition of conversion F is following: the input parameter of conversion F has 4, is respectively: IV _I-1, P _i, C _iAnd Mode, i>=1 here; IV _iLength be L, the value of mode parameter Mode has three: 0,1 and 2, represent CBC pattern, PCBC pattern and the FFM pattern of encryption method respectively, when i=1, first grouping of encryption transport stream data packet P ₁Input parameter IV ₀, and parameter Mode and key K all are shared parameters known between encryption side and the deciphering side.

2. according to the encryption method of the said MPEG2 transport stream data packet of claim 1, it is characterized in that, if the payload of transport stream data packet only constitutes a grouping P ₁, then adopt the CFB pattern to P ₁Encrypt, suppose P ₁Length be t, t≤L is at first at P ₁The right mend L-t " 0 ", then with result after the zero padding and IV ₀The encrypted result XOR, at last with XOR result's preceding t bit as P ₁Ciphertext C ₁Output.

3. the decryption method of a MPEG2 transport stream data packet is characterized in that, comprising:

Steps A: the payload of the MPEG2 transport stream data packet of encrypting is divided into n grouping: C ₁, C ₂, C ₃..., C _n, wherein preceding n-1 length of dividing into groups is the L bit, last grouping C _nLength be less than or equal to the L bit, n is more than or equal to 1;

Step B: to i grouping C of payload in the transport stream data packet _iCarry out decryption processing, i grouping P of payload in the output transport stream packet _i, this grouping P _iFor to ciphertext block C _iDecipher conversion earlier, again with IV _I-1Obtain by the bit XOR, wherein, n＞i>=1;

Step C: if last ciphertext block C _nLength equal the L bit, then to grouping C _nDecryption processing after the payload grouping P that exports _nFor to ciphertext block C _nDecipher conversion earlier, again with IV _N-1Obtain by the bit XOR; If ciphertext block C _nLength t less than the L bit, at C _nThe right mend L-t " 0 ", then with result after the zero padding and IV _N-1The encrypted result XOR, at last with XOR result's preceding t bit as the payload P that divides into groups _nOutput;

Wherein, IV _iBe conversion F (Mode, P _i, C _i, IV _I-1) output intermediate variable, the definition of conversion F is following: the input parameter of conversion F has 4, is respectively: IV _I-1, P _i, C _iAnd Mode, i>=1 here; IV _iLength be L, the value of mode parameter Mode has three: 0,1 and 2, represent CBC pattern, PCBC pattern and the FFM pattern of encryption method respectively, when i=1, first grouping of encryption transport stream data packet P ₁Input parameter IV ₀, and parameter Mode and key K all are shared parameters known between encryption side and the deciphering side.

4. according to the decryption method of the said MPEG2 transport stream data packet of claim 4, it is characterized in that, if the payload of the transport stream data packet of encrypting only constitutes a grouping C ₁, then adopt the CFB pattern to C ₁C is supposed in deciphering ₁Length be t, t≤L is earlier at C ₁The right mend L-t " 0 ", then with result after the zero padding and IV ₀The encrypted result XOR, at last with XOR result's preceding t bit payload P as deciphering back transport stream data packet ₁Output.

Images