# US 9,160,540 B2 · Preventing playback of streaming video if ads are removed > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,160,540 B2 - Document ID: US9160540B2 - Status: Granted - Kind: B2 - Application number: 13/950,552 - Filed: 2013-07-25 - Published: 2015-01-29 - Granted: 2015-10-13 - Earliest claimed: 2013-07-25 - Assignees: Adobe Systems Incorporated - Applicants: Adobe Systems Incorporated - Inventors: Xuejun Xu; Dwight Rodgers - Web page: https://patentgrep.com/patent/US9160540B2 ## CPC - H04L 9/3247: {involving digital signatures} - H04N 5/913: for scrambling {; for copy protection} - H04N 21/26258: {for generating a list of items to be played back in a given order, e.g. playlist, or scheduling item distribution according to such list (retrieval of multimedia data based on playlists G06F16/40)} - H04N 21/4542: {Blocking scenes or portions of the received content, e.g. censoring scenes} - H04N 21/4627: Rights management {associated to the content (security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08)} - H04N 21/812: {involving advertisement data (advertising per se G06Q30/02)} - H04N 21/8355: involving usage data, e.g. number of copies or viewings allowed - H04N 21/8456: {by decomposing the content in the time domain, e.g. in time segments} - H04N 2005/91321: {the copy protection signal being a copy protection control signal, e.g. a record inhibit signal} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION ## Abstract A digitally signed manifest file includes metadata that specifies whether a policy regarding the digital signature should be enforced. The policy is then used to generate additional metadata associated with the program and ad content of the video stream. The metadata is tamper resistant so that any modification or removal of the metadata will prevent the video stream from playing. If the metadata indicates that the policy should be enforced, the digital signature of the manifest is verified by the client, and an invalid or missing signature prevents the video stream from being played back. The metadata defines which media players are allowed and/or not allowed to play back a video stream, including media players that are configured to skip or remove ads, and/or includes an encryption key identifier for verifying the digital signature. The ad content is digitally signed to prevent modification or replacement of the ad content. ## Claims ### Claim 1 A digital media processing method comprising: receiving an unsigned manifest file having, encoded in a first portion thereof, a plurality of segments in a video stream; encoding, in a second portion of the manifest file, metadata representing: a manifest signing enforcement policy including at least one of a whitelist of digital media players and a blacklist of digital media players; and an encryption key identifier associated with a first cryptographic key; encrypting each of the segments using a second cryptographic key; and digitally signing the manifest file using the second cryptographic key. ### Claim 2 (depends on 1) The method of claim 1, wherein the first cryptographic key includes an asymmetric public key, wherein the second cryptographic key includes an asymmetric private key, and wherein the method further includes storing the first cryptographic key in the manifest file. ### Claim 3 (depends on 1) The method of claim 1, wherein the first cryptographic key and the second cryptographic key each include a symmetric key. ### Claim 4 (depends on 1) The method of claim 1, further comprising canonicalizing the manifest file prior to digitally signing the manifest file. ### Claim 5 (depends on 1) The method of claim 1, wherein the manifest file further identifies each of a plurality of ad cues associated with the video stream, and wherein the method further comprises encrypting each of the ad cues using the second cryptographic key. ### Claim 6 (depends on 1) The method of claim 1, wherein the manifest file further identifies each of a plurality of ad cues associated with the video stream, and wherein the method further comprises resolving each of the ad cues into a link pointing to an ad segment, retrieving the ad segment using the link, and encrypting the ad segment using the second cryptographic key. ### Claim 7 (depends on 1) The method of claim 1, further comprising transmitting, to a digital media player, the digitally signed manifest file including the encoded whitelist or blacklist of digital media players. ### Claim 8 A digital media processing method comprising: receiving, by a digital media player, a manifest file having, encoded in a first portion thereof, a plurality of encrypted segments in a video stream and, encoded in a second portion thereof, at least one of a whitelist of digital media players and a blacklist of digital media players, the manifest file having a digital signature corresponding to a cryptographic key; extracting, from the manifest file, metadata representing: a manifest signing enforcement policy including at least one of the whitelist of digital media players and the blacklist of digital media players; and an encryption key identifier associated with the cryptographic key; determining whether the digital signature of the manifest file is valid using the cryptographic key and the encryption key identifier; and playing back the video stream in response to determining that the digital signature is valid, otherwise preventing the video stream from being played back. ### Claim 9 (depends on 8) The method of claim 8, further comprising extracting the cryptographic key from the manifest file. ### Claim 10 (depends on 8) The method of claim 8, further comprising decrypting each of the encrypted segments using the cryptographic key. ### Claim 11 (depends on 10) The method of claim 10, wherein at least one of the encrypted segments includes an ad segment. ### Claim 12 (depends on 8) The method of claim 8, wherein the manifest file further identifies each of a plurality of encrypted ad cues associated with the video stream, and wherein the method further comprises decrypting each of the encrypted ad cues using the cryptographic key. ### Claim 13 (depends on 12) The method of claim 12, further comprising resolving each of the decrypted ad cues into a link pointing to an ad segment and retrieving the ad segment using the link. ### Claim 14 (depends on 13) The method of claim 13, wherein the link is signed, and wherein the method further includes verifying the signature for the link using the cryptographic key. ### Claim 15 (depends on 8) The method of claim 8, further comprising preventing the video stream from being played back if either the digital media player is on the blacklist of digital media players or the digital media player is not on the whitelist of digital media players. ### Claim 16 A digital media processing system, comprising: a storage; and a processor operatively coupled to the storage and configured to: receive a manifest file having, encoded in a first portion thereof, a plurality of encrypted segments in a video stream and, encoded in a second portion thereof, at least one of a whitelist of digital media players and a blacklist of digital media players, the manifest file having a digital signature corresponding to a cryptographic key; extract, from the manifest file, metadata representing: a manifest signing enforcement policy including at least one of the whitelist of digital media players and the blacklist of digital media players; and an encryption key identifier associated with the cryptographic key; determine whether the digital signature of the manifest file is valid using the cryptographic key and the encryption key identifier; and play back the video stream in response to determining that the digital signature is valid, otherwise preventing the video stream from being played back. ### Claim 17 (depends on 16) The method of claim 16, wherein the processor is further configured to extract the cryptographic key from the manifest file. ### Claim 18 (depends on 16) The system of claim 16, wherein the processor is further configured to decrypt each of the encrypted segments using the cryptographic key. ### Claim 19 (depends on 16) The system of claim 16, wherein the manifest file further identifies each of a plurality of encrypted ad cues associated with the video stream, and wherein the processor is further configured to decrypt each of the encrypted ad cues using the cryptographic key. ### Claim 20 (depends on 16) The system of claim 16, wherein the processor is further configured to prevent the video stream from being played back if either (a) a digital media player that received the manifest file is on the blacklist of digital media players or (b) the digital media player is not on the whitelist of digital media players.