System and method for activating individualized software modules in a digital broadcast environment

• US 20050005286A1
• Filed: 11/15/2001
• Published: 01/06/2005
• Est. Priority Date: 11/15/2001
• Status: Active Grant

• Current Assignee: WSOU Investments, LLC (WSOU Holdings, LLC)
• Original Assignee: Nokia Corporation
• Inventors: Kangas, Mauri, Koskela, Antti, Koivisto, Kyosti
• Granted Patent: US 7,376,625 B2
• Time in Patent Office: Days
• US Class Current: 725/31
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: H04N 21/235 Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/25858 involving client software characteristics, e.g. OS identifier
• CPC Class Codes: H04N 21/4108 characterised by an identification number or address, e.g. local network address protecting specific internal or external computer components using identification number G06F21/73; network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4586 Content update operation triggered locally, e.g. by comparing the version of software modules in a DVB carousel to the version stored locally deployment, distribution, installation, update of software G06F8/65; error detection or correction of the data by redundancy during software upgrading G06F11/1433; arrangements for updating broadcast information or broadcast-related information H04H60/25
• CPC Class Codes: H04N 21/8173 End-user applications, e.g. Web browser, game
• CPC Class Codes: H04N 7/165 Centralised control of user terminal subsequent to an upstream request signal H04N7/17345; Registering at central by two-way working H04N7/17309

Abstract

A system and method is disclosed for enabling individualized software functions in a device. In accordance with one embodiment of the present invention software is distributed as omnibus installations containing various software modules that are initially turned off. The user gains access to the turned off modules by requesting a certificate from a system provider. The system provider creates and transmits a certificate containing the information required to enable the desired module. The device can then use the certificate to access the desired software.

Claims

1. A method for providing selective use of locked software modules on a receiver comprising:

decrypting an encrypted certificate stored on a storage medium;

using part of the decrypted certificate to initialize the locked software modules indicated by the certificate, including setting a code enabled flag corresponding to the enabled modules;

receiving a request for the use of a specific locked software module;

checking the code enabled flag corresponding to the specific locked software module to see if it can be used; and

if the flag indicates use is allowed, using the specific locked software module.,

2. The method of claim 1 further comprising:

checking the integrity of the certificate.

3. The method of claim 2 wherein checking the certificate integrity comprises:

applying a hash function to at least a portion of the certificate and a hash string;

comparing the result to a hash result stored in the certificate.

4. The method of claim 2 further comprising:

disabling the receiver if the integrity check fails.

18. The method of claim 1I wherein the encrypted certificate is received as part of a DVB transport stream.

5. A method for obtaining enhanced software capabilities comprising:

transmitting a features request and a receiver ID from a first device to a system provider;

the system provider;

receiving the features request and the receiver ID at the system provider;

generating a certificate to enable the requested features;

retrieving a secret key associated with the receiver ID;

encrypting at least part of the certificate using the secret key;

transmitting the encrypted certificate;

receiving the encrypted certificate at the first device; and

decrypting the encrypted certificate using a secret key stored at the first device.

6. The method of claim 5 wherein the features request is transmitted from the first device via a two-way system.

7. The method of claim 5 wherein the encrypted certificate is transmitted as part of a DIB transport stream.

8. The method of claim 5 further comprising:

the system provider;

applying a hash function to at least a portion of the certificate and a hash string;

incorporating the result in to the certificate;

the first device;

applying the hash function to the same portion of the certificate and a locally stored copy of the hash string; and

comparing its result to the result stored in the certificate.

9. A method for enhancing software capabilities on a receiver comprising:

receiving a features request and a receiver ID;

generating a certificate to enable the requested features;

retrieving a key associated with the receiver ID;

encrypting at least part of the certificate using the key; and

transmitting the encrypted certificate.

10. A method for obtaining enhanced software capabilities comprising:

transmitting a features request and a receiver ID from a first device to a system provider;

receiving an encrypted certificate at the first device; and

decrypting the encrypted certificate using a secret key stored at the first device.

11. The method of claim 10 further comprising:

using part of the decrypted certificate to initialize any locked software modules indicated by the certificate, including setting a code enabled flag corresponding to the enabled modules;

receiving a request for the use of a specific locked software module;

checking the code enabled flag corresponding to the specific locked software capability to see if it can be used; and

if the flag indicates use is allowed, using the specific locked software capability.

12. The method of claim 11 further comprising:

checking the integrity of the certificate.

15. The method of claim 10 wherein the features request is transmitted from the first device via a two-way system.

16. The method of claim 10 wherein the encrypted certificate is received as part of a DVB transport stream.

17. The method of claim 11 wherein the features request is transmitted from the first device via a two-way system.

13. The method of claim 13 wherein the step of checking certificate integrity comprises:

applying a hash function to at least a portion of the certificate and a hash string;

comparing the result to a hash result stored in the certificate.

14. The method of claim 13 further comprising:

disabling the receiver if the integrity check fails.

19. An apparatus capable of providing individualized software functions comprising:

means for interfacing with a user;

means for generating a receiver identification code;

means for transmitting a new function request, including the receiver identification code;

means for receiving a certificate; and

means for using a code in the certificate to enable a new function.

20. The apparatus of claim 19 further comprising:

means for encrypting the receiver identification code;

21. The apparatus of claim 19 further comprising:

means for authenticating the certificate.

22. The apparatus of claim 19 further comprising:

means for decrypting the certificate.

23. An apparatus capable of providing individualized software functions comprising:

means for interfacing with a user;

means for generating a receiver identification code;

means for encrypting the receiver identification code;

means for transmitting a new function request, including the receiver identification code;

means for receiving a certificate;

means for authenticating the certificate;

means for decrypting the certificate; and

means for using a code in the certificate to enable the new function.