Key transport tamper protection

• US 20050163318A1
• Filed: 05/09/2003
• Published: 07/28/2005
• Est. Priority Date: 05/21/2002
• Status: Active Grant

• Current Assignee: InterDigital Madison Patent Holdings (InterDigital, Inc.)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Schulte, Mark Alan, Duffield, David Jay, Deiss, Michael Scott
• Granted Patent: US 7,469,420 B2
• Time in Patent Office: Days
• US Class Current: 380/268
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method for protecting the digital output signal of a security module, comprising the steps of: receiving a scrambled digital signal from a source external to said security module, recovering at least one transport scramble control flag from the scrambled digital signal, descrambling said received scrambled signal to generate a descrambled signal, monitoring the at least one transport scramble control flag, generating a scrambling key in response to said monitored at least one transport scramble control flag, and scrambling said descrambled signal using said scrambling key to generate a re-scrambled signal. The present invention also includes a conditional access system comprising a host device and a security device coupled to the host device, such that the security device includes at least one transport scramble control flag modification circuit. By monitoring the transport scramble control flag as content passes through the security module, protection of the content can be securely maintained.

Claims

1. A method for protecting the digital output signal of a security module, comprising the steps of:

(a) receiving a scrambled digital signal from a source external to said security module;

(b) recovering at least one transport scramble control flag from the scrambled digital signal;

(c) generating a descrambling key in response to the transport scramble control flag;

(d) descrambling, using said descrambling key, said received scrambled signal to generate a descrambled signal;

(e) monitoring the at least one transport scramble control flag;

(f) generating a scrambling key in response to said monitored at least one transport scramble control flag; and

,

(g) scrambling said descrambled signal using said scrambling key to generate a rescrambled signal.

2. The method of claim 1, comprising the further step of:

(h) providing said rescrambled signal to said external source.

3. The method of claim 1, wherein the step of recovering at least one transport scramble control flag comprises recovering the at least one transport scramble control flag from a header portion of the scrambled digital signal.

4. The method of claim 1, wherein the step of monitoring the at least one transport scramble control flag comprises one selected from the group of:

changing the value of the at least one transport scramble control flag or maintaining the value of the at least one transport scramble control flag.

5. A conditional access system comprising:

a host device; and

a security device coupled to the host device, wherein the security device comprises at least one transport scramble control flag monitoring circuit for monitoring at least one transport scramble control flag transmitted from the host device to the security device, and generating a scrambling key in response thereto.

6. The conditional access system of claim 5, wherein the security device further comprises:

a first transport scramble control flag reader circuit;

a descrambler coupled to the first transport scramble control flag reader circuit;

a second transport scramble control flag reader circuit; and

,

a rescrambler coupled to the second transport scramble control flag reader circuit.

7. The conditional access system of claim 6, wherein the at least one transport scramble control flag monitoring circuit is coupled between the descrambler and the second transport scramble control flag reader circuit.

8. The conditional access system of claim 5, wherein at least one transport scramble control flag monitoring circuit is adapted to modify the at least one transport scramble control flag.

9. The conditional access system of claim 5, wherein the security device further comprises:

a input transport scramble control flag circuit;

an output transport scramble control flag circuit; and

,

a microprocessor for comparing at least one input transport scramble control flag to at least one output transport scramble control flag.

10. The conditional access system of claim 6, wherein the security device further comprises:

a input transport scramble control flag circuit;

an output transport scramble control flag circuit; and

,

a microprocessor for comparing at least one input transport scramble control flag to at least one output transport scramble control flag.

11. A method for protecting the digital output signal of a security module, comprising the steps of:

(a) receiving a digital signal from a source external to said security module;

(b) recovering at least one transport scramble control flag from the digital signal;

(c) monitoring the at least one transport scramble control flag within the security module; and

,

(d) verifying the at least one transport scramble control flag at the output of the security module.

12. The method of claim 11, wherein the step of verifying the at least one transport scramble control flag at the output of the security module comprises comparing the at least transport scramble control flag at the output to the at least one transport scramble control flag received at the input of the security module.

13. The method of claim 11, wherein the digital signal comprises a scrambled digital signal.

14. A method for protecting the digital output signal of a security module, comprising the steps of:

(a) receiving a digital signal from a source external to said security module;

(b) inserting at least one transport scramble control flag into the digital signal within the security module;

(c) monitoring the at least one transport scramble control flag within the security module; and

,

(d) verifying the at least one transport scramble control flag at the output of the security module.