Transmitting and processing protected content

• US 20030182579A1
• Filed: 06/04/2003
• Published: 09/25/2003
• Est. Priority Date: 08/24/2000
• Status: Active Grant

• Current Assignee: Thomson Licensing SA (Vantiva SA)
• Original Assignee: Thomson Licensing SA (Vantiva SA)
• Inventors: Leporini, David, Surcouf, Andre, Dublanchet, Frederic, Gaude, Nicolas, Delaunay, Eric
• Granted Patent: US 7,848,521 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/165 Centralised control of user terminal subsequent to an upstream request signal H04N7/17345; Registering at central by two-way working H04N7/17309
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

Disclosed herein is method of transmitting data, comprising transmitting conditional access information and content management information independently.

Claims

1. A method of transmitting data, comprising transmitting conditional access information and content management information independently.

2. A method according to claim 1, wherein the content management information is transmitted by a content provider.

3. A method according to claim 1 or 2, wherein the content management information is transmitted via a broadcast centre.

4. A method according to any of the preceding claims, further comprising transmitting content, the conditional access information being for conditioning access to the content, and the content management information being for managing the content.

5. A method according to claim 4, wherein the content is transmitted independently of the content management information, and may be transmitted independently of the conditional access information.

6. A method according to any of the preceding claims, wherein the content management information comprises at least one reference to conditional access information.

7. A method according to any of the preceding claims, further comprising encrypting the content management information.

8. A method according to any of the preceding claims, wherein the transmitted content management information comprises a device identifier specifying at least one device for which the content management information is intended.

9. A method according to claim 8, wherein the content management information is generated in dependence on the device identifier.

10. A method according to any of the preceding claims, further comprising receiving the conditional access information, receiving the content management information, and combining the received conditional access information and content management information into a combined data unit.

12. A method according to claim 10 or 11, further comprising storing the combined data unit.

13. A method according to any of claims 10 to 12, further comprising encrypting the combined data unit with an encryption key, the encryption key preferably being associated with a device, subscriber, commercial offer, or content.

14. A method according to claim 13, wherein an equivalent of the encryption key is stored in a removable security module.

15. A method according to claim 13 or 14, further comprising causing the encryption key to expire.

16. A method according to any of claims 13 to 15, further comprising creating a further data unit comprising an equivalent of the encryption key, and encrypting the further data unit with a further encryption key, the further encryption key preferably being associated with a device, subscriber, commercial offer, or content.

17. A method according to claim 16, further comprising distributing to another party the combined data unit and further data unit, and preferably content.

18. A method according to any of claims 10 to 17, the combined data unit relating to a given time, and the step of combining the conditional access information and the content management information further comprising storing in the combined data unit a timing value related to the given time, whereby the timing value can subsequently be used to enforce time-shifting restrictions.

19. A method according to any of the preceding claims, further comprising receiving content, the conditional access information being for conditioning access to the content, and the content management information being for managing the content.

20. A method according to claim 19, further comprising storing the content independently to the combined data unit.

21. A method according to claim 19 or 20, further comprising storing a locator which associates the combined data unit with a portion of the content.

22. A method according to any of claims 19 to 21, wherein at least part of the content corresponds to a cryptoperiod.

23. A method according to any of claims 19 to 22, further comprising re-encrypting the content.

24. A method according to claim 22 and 23, wherein the size of the cryptoperiod is modified by the re-encryption.

25. A method according to any of claims 19 to 24, further comprising receiving a request to use the content, receiving the combined data unit, extracting the conditional access information and content management information from the combined data unit, and validating the request in dependence on the conditional access information and the content management information.

27. A method according to claim 25 or 26, further comprising extracting descrambling data from the conditional access data for descrambling at least part of the content, and outputting the descrambling data.

28. A method according to any of claims 19 to 27, further comprising reproducing a portion of the content.

29. A method according to claim 28, further comprising buffering descrambling data for descrambling at least part of the content.

30. A method according to any of claims 19 to 29, further comprising obtaining descrambling data corresponding to the current position within the content, obtaining further descrambling data corresponding to at least one different position within the content, and storing the further descrambling data.

31. A method according to any of claims 10 to 30, further comprising modifying the combined data unit, and storing the modified combined data unit.

32. A method according to claim 31, wherein the modification is in accordance with a prevailing content usage mode.

33. A method according to any of the preceding claims, wherein the content management information is received at a receiver/decoder.

110. A broadcast system adapted to perform a method according to any of claims 1 to 33.

111. A computer program for carrying out a method according to any of claims 1 to 33.

113. A computer program product for carrying out a method according to any of claims 1 to 33.

115. A signal embodying a computer program according to claim 111 or 112.

117. A computer product having an operating system which supports a computer program according to claim 111 or 112.

118. A computer readable medium having stored thereon a program according to claim 111 or 112.

11. A method of receiving data, comprising receiving conditional access information, receiving content management information, and combining the received conditional access information and content management information into a combined data unit.

26. A method of validating a request to use content, comprising receiving a request to use the content, receiving a combined data unit comprising conditional access information and content management information, extracting the conditional access information and content management information from the combined data unit, and validating the request in dependence on the conditional access information and the content management information.

34. Apparatus for transmitting data, comprising means for transmitting conditional access information and content management information independently.

35. Apparatus according to claim 34, further comprising means for transmitting the content management information via a broadcast centre.

36. Apparatus according to claim 34 or 35, further comprising means for transmitting content.

37. Apparatus according to any of claims 34 to 36, wherein the means for transmitting content management information and the means for transmitting content are adapted to transmit independently.

38. Apparatus according to any of claims 34 to 37, further comprising means for inserting in the content management information at least one reference to corresponding conditional access information.

39. Apparatus according to any of claims 34 to 38, further comprising means for encrypting the content management information and preferably also comprises means for encrypting the conditional access information.

40. Apparatus according to any of claims 34 to 39, further comprising means for inserting in the content management information a device identifier specifying at least one device for which the content management information is intended.

41. Apparatus according to claim 40, further comprising means for generating content management information in dependence on the device identifier.

42. Apparatus for receiving data, comprising means for receiving conditional access information, means for receiving content management information, and means for combining the received conditional access information and content management information into a combined data unit.

43. Apparatus according to claim 42, further comprising means for storing the combined data unit.

44. Apparatus according to any claim 42 or 43, further comprising means for encrypting the combined data unit with an encryption key.

45. Apparatus according to claim 44, comprising means for storing an equivalent of the encryption key.

46. Apparatus according to claim 44 or 45, further comprising means for causing the encryption key to expire.

47. Apparatus according to any of claims 44 to 46, further comprising means for creating a further data unit comprising an equivalent of the encryption key, and means for encrypting the further data unit with a further encryption key.

48. Apparatus according to claim 47, further comprising means for distributing the combined data unit, further data unit and preferably content.

49. Apparatus according to any of claims 42 to 48, further comprising means for generating a timing value related to a given time to which the combined data unit relates.

50. Apparatus according to any of claims 42 to 49, further comprising means for receiving content.

51. Apparatus according to claim 50, wherein the means for storing the combined data unit is adapted to store the content independently of the combined data unit.

52. Apparatus according to claim 50 or 51, further comprising means for generating a locator which associates the combined data unit with a portion of the content.

53. Apparatus according to claim 52, further comprising means for storing the locator.

54. Apparatus according to any of claims 50 to 53, further comprising means for re-encrypting the content.

55. Apparatus according to any of claims 50 to 54, further comprising means for receiving a request to use the content, means for receiving the combined data unit, means for extracting the conditional access information and content management information from the combined data unit, and means for validating the request in dependence on the conditional access information and the content management information.

56. Apparatus according to any of claims 50 to 55, further comprising means for extracting descrambling data for descrambling at least part of the content from the conditional access data, and means for outputting the descrambling data.

57. Apparatus according to any of claims 50 to 56, further comprising means for reproducing the content.

58. Apparatus according to claim 57, further comprising means for buffering descrambling data.

59. Apparatus according to claim 58, wherein the means for buffering descrambling data preferably comprises means for obtaining descrambling data corresponding to the current position within the content, means for obtaining further descrambling data corresponding to at least one different position within the content, and means for storing the further descrambling data.

60. Apparatus according to any of claims 42 to 59, further comprising means for modifying the combined data unit, and means for storing the new combined data unit.

102. A receiver/decoder incorporating apparatus for receiving data according to any of claims 42 to 60 or 76 to 94.

104. A broadcast system incorporating a receiver/decoder according to claim 102 or 103.

61. Apparatus for validating a request to use content, comprising means for receiving a request to use content, means for receiving a combined data unit comprising conditional access information and content management information, means for extracting the conditional access information and content management information from the combined data unit, and means for validating the request in dependence on the conditional access information and the content management information.

62. Apparatus according to claim 61, further comprising means for extracting descrambling data for descrambling at least part of the content from the conditional access data, and means for outputting the descrambling data.

63. Apparatus according to claim 61 or 62, further comprising means for reproducing the content.

64. Apparatus according to any of claims 61 to 63, further comprising means for buffering descrambling data.

65. Apparatus according to claim 64, wherein the means for buffering descrambling data comprises means for obtaining descrambling data corresponding to the current position within the content, means for obtaining further descrambling data corresponding to at least one different position within the content, and means for storing the further descrambling data.

66. Apparatus according to any of claims 61 to 65, further comprising means for modifying the combined data unit, and means for storing the new combined data unit.

67. Apparatus according to claim 66, wherein the means for modifying the combined data unit comprises means for modifying the combined data unit in accordance with a prevailing content usage mode.

68. Apparatus for transmitting data, comprising an emitter and an associated processor adapted to transmit conditional access information and content management information independently.

69. Apparatus according to claim 68, further adapted to transmit the content management information via a broadcast centre.

70. Apparatus according to claim 68 or 69, further adapted to transmit content.

71. Apparatus according to any of claims 68 to 70, comprising an emitter and an associated processor adapted to transmit content management information and a further emitter and a further associated processor adapted to transmit content, wherein the emitter and associated processor and the further emitter and further associated processor are adapted to transmit independently.

72. Apparatus according to any of claims 68 to 71, further comprising a processor adapted to insert in the content management information at least one reference to corresponding conditional access information.

73. Apparatus according to any of claims 68 to 72, further adapted to encrypt the content management information and preferably also adapted to encrypt the conditional access information.

74. Apparatus according to any of claims 68 to 73, further adapted to generate content management information and to insert in the content management information a device identifier specifying at least one device for which the content management information is intended.

75. Apparatus according to claim 74, wherein the processor adapted to generate content management information is further adapted to generate content management information in dependence on the device identifier.

76. Apparatus for receiving data, comprising a receiver adapted to receive conditional access information and content management information, and a processor adapted to combine the received conditional access information and content management information into a combined data unit.

77. Apparatus according to claim 76, further comprising a storage medium adapted to store the combined data unit.

78. Apparatus according to claim 76 or 77, further adapted to encrypt the combined data unit with an encryption key.

79. Apparatus according to claim 78, further comprising a removable security module adapted to store an equivalent of the encryption key.

80. Apparatus according to claim 78 or 79, further adapted to cause the encryption key to expire.

81. Apparatus according to any of claims 78 to 80, further adapted to create a further data unit comprising an equivalent of the encryption key, and to encrypt the further data unit with a further encryption key.

82. Apparatus according to claim 81, further adapted to distribute the combined data unit, further data unit and preferably content.

83. Apparatus according to any of claims 76 to 87, further comprising a timer adapted to generate a timing value related to a given time to which the combined data unit relates.

84. Apparatus according to any of claims 76 to 83, further adapted to receive content.

85. Apparatus according to claim 84, wherein the storage medium is adapted to store the content independently of the combined data unit.

86. Apparatus according to claim 84 or 85, further adapted to generate a locator which associates the combined data unit with a portion of the content.

87. Apparatus according to claim 85 or 86, wherein the storage medium adapted to store the combined data unit is further adapted to store the locator.

88. Apparatus according to any of claims 84 to 87, further adapted to re-encrypt the content.

89. Apparatus according to any of claims 84 to 88, further comprising an input adapted to receive a request to use the content, wherein the receiver is adapted to receive the combined data unit, and the processor is adapted to extract the conditional access information and content management information from the combined data unit, and is further adapted to validate the request in dependence on the conditional access information and the content management information.

90. Apparatus according to any of claims 84 to 89, further comprising an output, wherein the processor is further adapted to extract descrambling data for descrambling at least part of the content from the conditional access data, and the output is adapted to output the descrambling data.

91. Apparatus according to any of claims 84 to 90, further adapted to reproduce the content.

92. Apparatus according to claim 91, further comprising a memory adapted to buffer descrambling data.

93. Apparatus according to claim 92, further adapted to obtain descrambling data corresponding to the current position within the content, to obtain further descrambling data corresponding to at least one different position within the content, and to store the further descrambling data.

94. Apparatus according to any of claims 76 to 93, further adapted to modify the combined data unit, and to store the new combined data unit.

95. Apparatus for validating a request to use content, comprising a receiver adapted to receive a request to use the content and to receive a combined data unit comprising conditional access information and content management information, a processor adapted to extract the conditional access information and content management information from the combined data unit, and to validate the request in dependence on the conditional access information and the content management information.

96. Apparatus according to claim 95, further comprising an output, wherein the processor is adapted to extract descrambling data for descrambling at least part of the content from the conditional access data, and the output is adapted to output the descrambling data.

97. Apparatus according to claim 95 or 96, further adapted to reproduce the content.

98. Apparatus according to any of claims 95 to 97, further comprising a memory adapted to buffer descrambling data.

99. Apparatus according to any of claims 95 to 98, adapted to obtain descrambling data corresponding to the current position within the content, to obtain further descrambling data corresponding to at least one different position within the content, and to store the further descrambling data.

100. Apparatus according to any of claims 95 to 99, further adapted to modify the combined data unit, and to store the new combined data unit.

101. Apparatus according to claim 100, further adapted to modify the combined data unit in accordance with a prevailing content usage mode.

103. A receiver/decoder incorporating apparatus for validating data according to any of claims 61 to 67 or 95 to 101.

112. A computer program embodying any of the apparatus features according to any of claims 34 to 101.

114. A computer program embodying any of the apparatus features according to any of claims 34 to 101.

116. A method of transmitting a signal according to claim 112.

105. A packet comprising an Entitlement Management Message containing an identifier enabling it to be directed to a content management system.

106. A packet consisting of content management information, preferably in addition to addressing information.

107. A packet comprising content management information, conditional access information and entitlement management information.

108. A storage medium having stored thereon conditional access information and content management information as a combined data unit.

109. A combined data unit comprising conditional access information and content management information.

119. Apparatus substantially as described herein with reference to and as illustrated in the accompanying drawings.

120. A receiver/decoder substantially as described herein with reference to and as illustrated in FIGS. 4 to 6 of the accompanying drawings.

121. A broadcast system substantially as described herein with reference to and as illustrated in FIG. 1 of the accompanying drawings.

122. A method substantially as described herein with reference to FIGS. 14 to 34 of the accompanying drawings.