Method and system for conditional access

• US 20050089168A1
• Filed: 12/11/2002
• Published: 04/28/2005
• Est. Priority Date: 12/14/2001
• Status: Abandoned Application

• Current Assignee: Television and Wireless Applications Eruope AB
• Original Assignee: Television and Wireless Applications Eruope AB
• Inventors: Kahre, Ragnar
• Application Number:
  US10/498,086
• Publication Number:
  US 20050089168A1
• Time in Patent Office: Days
• US Class Current: 380/211
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/25808 Management of client data terminal profiles in network data switching protocols H04L67/303
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4182 for identification purposes, e.g. storing user identification data, preferences, personal settings or data restricting access to computer systems by authenticating users using a predetermined code in combination with an additional device, e.g. dongle or smart card G06F21/123
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 7/165 Centralised control of user terminal subsequent to an upstream request signal H04N7/17345; Registering at central by two-way working H04N7/17309

Abstract

The present invention relates to a method and a system for granting access to a system (1), in which different services are distributed over a distribution network (4). A user terminal (3) is used for decoding these services and access is granted for said user terminal (3) by means of a virtual card. The virtual card is downloaded over the distribution network (4) by means of an extra data stream (18) from a system unit 17 and is received by said user terminal (3).

Claims

1. A method for granting access to a system (1) in which different services are distributed over a distribution network (4) and in which a user terminal (3) is used to decode these services, characterised in that access is granted to said user terminal (3) by means of a virtual card, which card is downloaded over the distribution network (4) by means of an extra data stream (18) from a system unit (17) and is received by said user terminal (3).

2. Method as claimed in claim 1, characterised in that the data stream(. 18) downloading the virtual card transfers a unique user identity.

3. Method as claimed in claim 1, characterised in that the data stream (18) downloading the virtual card transfers the same functions as contained in a conventional CA card (16).

4. Method as claimed in claim 1, characterised in that the virtual card is stored in a memory (19) in the user terminal (3).

5. Method as claimed in claim 4, characterised in that said storage is effected in a flash memory.

6. Method as claimed in claim 4, characterised in that said storage is effected in a RAM memory.

7. Method as claimed in claim 1, characterised in that said downloading of the virtual card includes means for secured transfer.

8. Method as claimed in claim 7, characterised in that said means comprises encrypting.

9. Method as claimed in claim 7, characterised in that said means comprises having a user enter a code into the user terminal (3) before said virtual card may be received.

10. Method as claimed in claim 1, characterised in that said system unit is a VCD injector (17), the main task of which is to generate virtual cards.

11. Method as claimed in claim 1, characterised in that the user terminal (3) is a set-top-box (3).

12. Method as claimed in claim 1, characterised in that the distribution network (4) is a digital TV network.

13. Method as claimed in claim 1, characterised in that said services comprises at least one of the following:

TV channels, TV programmes, movies or games.

14. Method as claimed in claim 1, characterised in that said downloading is ordered by a user by means of the user'"'"'s mobile terminal, wherein a server device (20) connected to a mobile communication network sends an order to said server unit (17) to create a virtual card and send it to the user.

15. Method as claimed in claim 1, characterised in that said extra data stream includes a identity unique for said user terminal, by means of which said virtual card can only be downloaded to this user terminal.

16. A system distributing different services over a distribution network (4) and in which a user terminal (3) is used in order to decode these services characterised in that the system includes means for granting access to said system for said user terminal (3) by means of a virtual card, and means for downloading the virtual card over the distribution network (4) by means of an extra data stream (18) from a system unit (17) for reception by said user terminal (3).

17. System as claimed in claim 16, characterised in that the system unit arranged to download the virtual card by means of the data stream (18) transfers a'"'"'unique user identity.

18. System as claimed in claim 16, characterised in that the system unit (17) arranged to download the virtual card by means of the data stream (18) transfers the same functions as contained in a conventional CA card (16).

19. System as claimed in claim 16, characterised in that the system includes a memory (19) in the user terminal (3) in which the virtual card is stored.

20. System as claimed in claim 19, characterised in that said memory is a flash memory.

21. System as claimed in claim 19, characterised in that said memory is a RAM memory.

22. System as claimed in claim 16, characterised in that said means for downloading of the virtual card includes means for secured transfer.

23. System as claimed in claim 22, characterised in that said means for secured transfer comprises encrypting apparatus.

24. System as claimed in claim 16, characterised in that said system unit is a VCD injector (17), the main task of which is to generate virtual CA cards.

25. System as claimed in claim 16, characterised in that the user terminal (3) is a set-top-box (3).

26. System as claimed claim 16, characterised in that the distribution network (4) is a digital TV network.

27. System as claimed in claim 16, characterised in that said services comprises at least one of the following:

TV channels, TV programmes, movies or games.

28. System as claimed in claim 16, characterised in that said user terminal has a unique identity and that said extra data stream includes this unique identity, by means of which said virtual card can only be downloaded to this user terminal.