Digital media conditional access system for handling digital media content

• US 20050249350A1
• Filed: 05/02/2005
• Published: 11/10/2005
• Est. Priority Date: 05/04/2004
• Status: Active Grant

• Current Assignee: DIRECTV, LLC (AT&T, Inc.)
• Original Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Inventors: James, Thomas H., Kahn, Raynold M., Klauss, Peter M., Ha, David D.
• Granted Patent: US 7,590,243 B2
• Time in Patent Office: Days
• US Class Current: 380/239
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method, apparatus, and article of manufacture provide the ability to process digital media content. A secret key (Ka) is obtained and encrypted into an authorization key message (AKM) message. One or more entitlement keys (Ke) are then obtained and encrypted using the secret key (Ka) as an encryption key into an entitlement management message (EMM). One or more media content encryption keys (Kc) are obtained and encrypted using one or more of the entitlement keys (Ke) as encryption keys into an entitlement control message (ECM). Digital media data content (Dc) is then obtained and encrypted using the one or more media content encryption keys (Kc). The AKM, EMM, ECM, and encrypted digital media data content are then delivered to a set-top box that is configured to provide digital media services with the content.

Claims

1. A method for processing digital media content comprising:

obtaining a secret authorization key (Ka);

encrypting the authorization key (Ka) into an authorization key message (AKM) message;

obtaining one or more entitlement keys (Ke);

encrypting the one or more entitlement keys (Ke) using the authorization key (Ka) as an encryption key into an entitlement management message (EMM);

obtaining one or more media content encryption keys (Kc);

encrypting each of the media content encryption keys (Kc) using one or more of the entitlement keys (Ke) as encryption keys into an entitlement control message (ECM);

obtaining digital media data content (Dc);

encrypting the digital media data content using the one or more media content encryption keys (Kc);

delivering the AKM, EMM, ECM, and encrypted digital media data content to a set-top box configured to provide digital media services with the content.

2. The method of claim 1, wherein the authorization key Ka is obtained using public key techniques.

3. The method of claim 1, wherein the authorization key Ka comprises a secret chip key (SCK) programmed into a secure chip of the set-top box.

4. The method of claim 1, wherein the Ka is periodically modified.

5. The method of claim 1, wherein the Ka is encrypted using a secret chip key (SCK) programmed into a secure chip of the set-top box.

6. The method of claim 1, wherein the AKM message further comprises AKM related metadata (Ma) that comprises a time period for which the authorization key Ka applies.

7. The method of claim 1, wherein the EMM further comprises encrypted entitlement related metadata (Me) that defines one or more usage rules of the one or more entitlement keys.

8. The method of claim 1, further comprising changing the entitlement keys on a regular basis.

9. The method of claim 1, wherein a type of one or more of the entitlement keys is selected from a group comprising:

a broadcast key (Kb) for content broadcast to all users;

a service key (Ks) for services subscribed to by a customer;

a unique key (Ku) for delivery of content to a specific customer;

a transaction key (Kt) for transaction authentication; and

a reportback key (Kr) for encryption and authentication of reportback data.

10. The method of claim 1, wherein the ECM further comprises associated encrypted media content metadata (Mc) that defines one or more usage rules for the media content.

11. The method of claim 1, wherein the set-top box is a personal video recorder (PVR).

12. The method of claim 1, wherein the digital media content comprises a music jukebox.

13. The method of claim 1, wherein the digital media content comprises a delayed purchasable pay-per-view that is stored in the STB.

14. The method of claim 1, wherein the digital media content comprises a video on-demand program.

15. The method of claim 1, wherein the digital media content comprises a gaming service.

16. The method of claim 1, wherein the digital media content comprises one or more modular digital media objects.

17. A system for processing digital media content in a set-top box, comprising:

(a) a set-top box (STB) configured to receive;

(i) an encrypted secret authorization key (Ka)

(ii) an entitlement management message (EMM) comprising one or more entitlement keys (Ke) encrypted using the Ka;

(iii) an entitlement control message (ECM) comprising one or more media content encryption keys (Kc) encrypted using the one or more Ke;

(iv) digital media content (Dc) encrypted using the one or more Kc;

(b) a decryption algorithm on the STB configured to;

(i) decrypt the Ka;

(ii) decrypt the Ke using the Ka;

(iii) decrypt the Kc using the Ke; and

(iv) decrypt the Dc using the Kc;

wherein the STB is configured to provide digital media services with the decrypted Dc.

18. The STB of claim 17, wherein the authorization key Ka is received and decrypted using public key techniques.

19. The STB of claim 17, further comprising a secure chip communicatively coupled to the STB wherein the secret authorization key Ka comprises a secret chip key (SCK) programmed into the secure chip.

20. The STB of claim 17, wherein the authorization key Ka is periodically modified.

21. The STB of claim 17, further comprising a secure chip communicatively coupled to the STB, wherein:

the secure chip comprises a programmed secret chip key (SCK); and

the authorization key Ka is decrypted in the secure chip using the SCK.

22. The STB of claim 21, wherein:

the decrypted authorization key Ka is stored in the secure chip; and

the entitlement key Ke is decrypted in the secure chip using the authorization key Ka.

23. The STB of claim 22, wherein:

the decrypted entitlement key Ke is stored in the secure chip; and

the content key Kc is decrypted in the secure chip using the entitlement key Ke.

24. The STB of claim 23, wherein:

the decrypted content key Kc is stored in the secure chip; and

the digital media content is decrypted in the secure chip using the content key Kc.

25. The STB of claim 17, wherein the AKM message further comprises authorization related metadata (Ma) that comprises a time period for which the authorization key Ka applies.

26. The STB of claim 17, wherein the EMM further comprises encrypted entitlement related metadata (Me) that defines one or more usage rules of the one or more entitlement keys.

27. The STB of claim 17, wherein the one or more entitlement keys are changed on a regular basis.

28. The STB of claim 17, wherein a type of one or more of the entitlement keys is selected from a group comprising:

a broadcast key (Kb) for content broadcast to all users;

a service key (Ks) for services subscribed to by a customer;

a unique key (Ku) for delivery of content to a specific customer;

a transaction key (Kt) for transaction authentication; and

a reportback key (Kr) for encryption and authentication of reportback data.

29. The STB of claim 17, wherein the ECM further comprises associated encrypted media content metadata (Mc) that defines one or more usage rules for the media content.

30. The STB of claim 17, further comprising a hard disk communicatively coupled to the STB wherein the hard disk is configured to store the digital media content.

31. The STB of claim 17, wherein the digital media content comprises a music jukebox.

32. The STB of claim 17, wherein the digital media content comprises a delayed purchasable pay-per-view that is stored in the hard disk drive.

33. The STB of claim 17, wherein the digital media content comprises a video on-demand program.

34. The STB of claim 17, wherein the digital media content comprises a gaming service.

35. The STB of claim 17, wherein the digital media content comprises one or more modular digital media objects.

36. The STB of claim 17, further comprising a smart card communicatively coupled to the STB, wherein:

the smart card receives messages from the STB;

the smart card further processes these messages;

the STB receives these further processed messages from the smart card;

the STB uses these messages from the smart card for processing digital media content.

37. The STB of claim 36, wherein a further processed message from the smart card comprises an encrypted authorization key Ka.

38. The STB of claim 36, wherein a further processed message from the smart card comprises an EMM.

39. The STB of claim 36, wherein a further processed message from the smart card comprises an ECM.