Method for managing rights of subscribers to a multi-operator pay-television system

• US 20050183112A1
• Filed: 02/09/2005
• Published: 08/18/2005
• Est. Priority Date: 02/13/2004
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: Duval, Gregory
• Granted Patent: US 7,715,557 B2
• Time in Patent Office: Days
• US Class Current: 725/25
• CPC Class Codes: H04N 21/25808 Management of client data terminal profiles in network data switching protocols H04L67/303
• CPC Class Codes: H04N 21/25866 Management of end-user data customer care in data networks H04L41/5077
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The present invention proposes a method for managing rights of subscribers to a pay-television system comprising an access control system to which are connected subscriber management systems each managed by an operator and a plurality of subscriber decoders, said decoders each being equipped with a security module containing the rights for each subscriber allowing him the decryption of encrypted digital data of a stream broadcasted by at least one operator, during a modification of the rights carried out by an operator in the security module of a subscriber, the control access system receives data identifying a subscriber with modification commands of rights of said subscriber coming from a subscriber management system of an operator, generates a management message containing the modified rights and transmits said message to the security module of the subscriber via the stream containing the encrypted data, said method comprising the step of verification of the modifications according the properties and the available resources of the security module and the step of generation of the management message containing the modified rights when the result of the comparison is positive.

Claims

1. Method for managing rights of subscribers to a pay-television system comprising an access control system to which are connected subscriber management systems each managed by an operator and a plurality of subscriber decoders, said decoders each being equipped with a security module containing the rights for each subscriber allowing him the decryption of encrypted digital data of a stream broadcasted by at least one operator, during a modification of the rights carried out by an operator in the security module of a subscriber, the control access system receives data identifying a subscriber with modification commands of rights of said subscriber coming from a subscriber management system of an operator, generates a management message containing the modified rights and transmits said message to the security module of the subscriber via the stream containing the encrypted data, said method comprising the step of verification of the modifications according the properties and the available resources of the security module and the step of generation of the management message containing the modified rights when the result of the comparison is positive.

2. Method according to claim 1, wherein the verification of the right modifications is carried out by a filtering module connected to the access control system.

3. Method according to claim 1 wherein the access rights to encrypted digital data originating from several operators are stored in the security module in predefined storage areas allocated to each operator.

4. Method according to claim 2 wherein the filtering module transmits an acceptance response leading to the generation of the management message when the total size of the data of existing rights and the data of modified rights is lower or equal to the size of the available memory area in the security module.

5. Method according to claim 2 wherein the filtering module transmits a refusal response to the access control system when the total size of the data of existing rights and of the data of modified rights is larger than the size of the available storage area in the security module.

6. Method according to claim 5, wherein the refusal response is returned to the subscriber management system.

7. Method according to claim 6, wherein the subscriber management system transmits a warning message to the subscriber, said message proposing a new configuration of the rights to said subscriber by deletion and/or replacement of the superfluous rights stored in the security module.

8. Method according to claim 7, wherein the subscriber transmits a response to the operator that will transmit a new modification command to the access control system, the filtering module proceeds to a new verification leading to a positive result thanks to the new data of a reduced size to be stored in the security module followed by the generation of a managing message.

9. Method according to claim 8 wherein the response is transmitted by the return channel of the decoder of the subscriber.

10. Method according to claim 8 wherein the response is transmitted by telephone, fax, e-mail or post, when the return channel of the decoder is absent.

11. Method according to claim 1 wherein the verification of the right modifications is carried out by a filtering module included in the security module of the decoder.

12. Method according to claim 11 wherein the management messages generated by the access control system include supplementary fields containing the identifiers of different operators accompanied by the commands of right modification.

13. Method according to claim 12 wherein the filtering module of the security module stores, analyzes the management message and verifies the modifications of rights transmitted by an operator according to the storage area capacity of the security module attributed to said operator.