Service activation of set-top box functionality using broadcast conditional access system

• US 20060041903A1
• Filed: 08/17/2004
• Published: 02/23/2006
• Est. Priority Date: 08/17/2004
• Status: Active Grant

• Current Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Original Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Inventors: Carpenter, Jeffrey D., James, Thomas H., Arsenault, Robert G., Kahn, Raynold M., Dulac, Stephen P., Gagnon, Gregory J., Jijina, Aspandyar M.
• Granted Patent: US 7,543,317 B2
• Time in Patent Office: Days
• US Class Current: 725/28
• CPC Class Codes: H04N 21/23895 involving multiplex stream encryption
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4353 involving decryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/43853 involving multiplex stream decryption arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/4432 Powering on the client, e.g. bootstrap loading using setup parameters being stored locally or received from the server resetting in general G06F1/14; program loading or initiating in general G06F9/445; bootstrapping in general G06F9/4401; secure boots of computer platforms G06F21/57
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/6547 comprising parameters, e.g. for client setup
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method, apparatus, and article of manufacture provide the ability to activate functionality in a set-top box. A feature authorization message is received in a set-top box. The feature authorization message comprises one or more rules to be evaluated (wherein each of the rules comprises one or more tests for a status of one or more conditional access module attributes), one or more event requirements for rule evaluation, and one or more features that are dependent by the rule evaluation result (wherein each of the one or more features represents a set of one or more abilities of hardware and/or software of the set-top box). When one or more of the event requirements have been met, the one or more rules are evaluated to obtain a result. The ability to use the one or more features are then set based on the result.

Claims

1. A method of activating functionality comprising:

(a) receiving a feature authorization message (FAM) in a set-top box, wherein the FAM comprises;

(i) one or more rules to be evaluated, wherein each of the rules comprises one or more tests for a status of one or more conditional access module (CAM) attributes;

(ii) one or more event requirements for rule evaluation; and

(iii) one or more features that are dependent by the rule evaluation result, wherein each of the one or more features represents a set of one or more abilities of hardware and/or software;

(b) when one or more of the event requirements have been met, evaluating the one or more rules to obtain a result; and

(c) setting the ability to use the one or more features based on the result.

2. The method of claim 1, wherein the FAM is embedded in a conditional access packet.

3. The method of claim 1, wherein the FAM is received in an encrypted file via a satellite data broadcast protocol specification.

4. The method of claim 1, wherein the FAM is received in a system information control stream.

5. The method of claim 4, wherein the FAM is embodied inside a program guide vendor object.

6. The method of claim 1, wherein each of the one or more features comprises an abstract identifier that is recognized and is mapped to the set of one or more abilities.

7. The method of claim 1, wherein one of the event requirements comprises a periodic time interval.

8. The method of claim 1, wherein one of the event requirements comprises a system state.

9. The method of claim 1, wherein one of the event requirements comprises a customer action.

10. The method of claim 1, further comprising storing states for each of the one or more features in cache.

11. The method of claim 1, further comprising:

uniquely encrypting the FAM; and

storing the uniquely encrypted FAM in nonvolatile memory.

12. The method of claim 1, wherein the FAM is received in a super-structure, wherein the superstructure comprises:

a control word packet that generates a decryption key;

a signature that authenticates the FAM; and

an encrypted FAM.

13. The method of claim 1, further comprising storing the FAM in random access memory (RAM).

14. The method of claim 1, wherein setting the ability to use one or more features comprises setting an interval of time for which the one or more features are enabled.

15. The method of claim 1, wherein the functionality is activated in a set-top box.

16. The method of claim 1, wherein one of the tests for the status of the conditional access module (CAM) attributes comprises:

test data and status assessment data specified by a rule in the feature authorization message;

delivery to the CAM of said test data;

generation by the CAM of output data that depends on said test data and on CAM attributes;

delivery of said output data from the CAM; and

assessment of the status of CAM attributes based on said output data and said status assessment data.

17. The method of claim 16, wherein:

said test data comprises program access data which specifies service access requirements and limitations;

said output data comprises the result of a comparison of service authorization and other attribute data of the CAM with said service access requirements and limitations in said program access data;

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.

18. The method of claim 16, wherein:

said output data comprises an encryption or decryption of said input data;

said CAM attributes comprise encryption or decryption keys and algorithms; and

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.

19. A system for activating functionality in a set-top box, comprising:

(a) a set-top box (STB);

(b) a conditional access module (CAM) communicatively coupled to the STB;

(c) a feature authorization message (FAM) comprising;

(i) one or more rules to be evaluated, wherein each of the rules comprises one or more tests for a status of one or more attributes of the CAM;

(ii) one or more event requirements for rule evaluation; and

(iii) one or more features that are dependent by the rule evaluation result, wherein each of the one or more features represents a set of one or more abilities of hardware and/or software of the STB;

(d) a vault manager in the STB configured to;

(i) receive the FAM;

(ii) when one or more of the event requirements have been met, evaluate the one or more rules to obtain a result; and

(iii) transmit the result to a feature manager; and

(e) the feature manager configured to;

(i) receive the result from the vault manager; and

(ii) set the ability to use the one or more features based on the result.

20. The system of claim 19, wherein the FAM is embedded in a conditional access packet.

21. The system of claim 19, wherein the FAM is received in an encrypted file via a satellite data broadcast protocol specification.

22. The system of claim 19, wherein the FAM is received in a system information control stream.

23. The system of claim 22, wherein the FAM is embodied inside a program guide vendor object.

24. The system of claim 19, wherein each of the one or more features comprises an abstract identifier that the STB recognizes and maps to the set of one or more abilities.

25. The system of claim 19, wherein one of the event requirements comprises a periodic time interval.

26. The system of claim 19, wherein one of the event requirements comprises a system state.

27. The system of claim 19, wherein one of the event requirements comprises a customer action.

28. The system of claim 19, wherein the set-top box further comprises a cache comprised of states for each of the one or more features.

29. The system of claim 19, further comprising nonvolatile memory utilized for storing the FAM which has been uniquely encrypted by the STB.

30. The system of claim 19, wherein the FAM is received in a super-structure, wherein the superstructure comprises:

a control word packet that generates a decryption key;

a signature that authenticates the FAM; and

an encrypted FAM.

31. The system of claim 19, wherein the vault manager is further configured to store the FAM in random access memory (RAM).

32. The system of claim 19, wherein the feature manager is configured to set the ability to use one or more features by setting an interval of time for which the one or more features is enabled.

33. The system of claim 19, wherein one of the tests for the status of the conditional access module (CAM) attributes comprises:

test data and status assessment data specified by a rule in the feature authorization message;

delivery to the CAM of said test data;

generation by the CAM of output data that depends on said test data and on CAM attributes;

delivery of said output data from the CAM; and

assessment of the status of CAM attributes based on said output data and said status assessment data.

34. The system of claim 33, wherein:

said test data comprises program access data which specifies service access requirements and limitations;

said output data comprises the result of a comparison of service authorization and other attribute data of the CAM with said service access requirements and limitations in said program access data; and

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.

35. The system of claim 33, wherein:

said output data comprises an encryption or decryption of said input data;

said CAM attributes comprise encryption or decryption keys and algorithms; and

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.

36. An article of manufacture for activating functionality comprising:

(a) means for receiving a feature authorization message (FAM), wherein the FAM comprises;

(i) one or more rules to be evaluated, wherein each of the rules comprises one or more tests for a status of one or more conditional access module (CAM) attributes;

(ii) one or more event requirements for rule evaluation; and

(iii) one or more features that are dependent by the rule evaluation result, wherein each of the one or more features represents a set of one or more abilities of hardware and/or software;

(b) means for evaluating the one or more rules to obtain a result when one or more of the event requirements have been met; and

(c) means for setting the ability to use the one or more features based on the result.

37. The article of manufacture of claim 36, wherein the FAM is embedded in a conditional access packet.

38. The article of manufacture of claim 36, wherein the FAM is received in an encrypted file via a satellite data broadcast protocol specification.

39. The article of manufacture of claim 36, wherein the FAM is received in a system information control stream.

40. The article of manufacture of claim 39, wherein the FAM is embodied inside a program guide vendor object.

41. The article of manufacture of claim 36, wherein each of the one or more features comprises an abstract identifier that is recognized and mapped to the set of one or more abilities.

42. The article of manufacture of claim 36, wherein one of the event requirements comprises a periodic time interval.

43. The article of manufacture of claim 36, wherein one of the event requirements comprises a system state.

44. The article of manufacture of claim 36, wherein one of the event requirements comprises a customer action.

45. The article of manufacture of claim 36, further comprising means for storing states for each of the one or more features in a cache.

46. The article of manufacture of claim 36, further comprising:

means for uniquely encrypting the FAM; and

means for storing the uniquely encrypted FAM in nonvolatile memory.

47. The article of manufacture of claim 36, wherein the FAM is received in a super-structure, wherein the superstructure comprises:

a control word packet that generates a decryption key;

a signature that authenticates the FAM; and

an encrypted FAM.

48. The article of manufacture of claim 36, further comprising means for storing the FAM in random access memory (RAM).

49. The article of manufacture of claim 36, wherein the means for setting the ability to use one or more features comprises means for setting an interval of time for which the one or more features are enabled.

50. The article of manufacture of claim 36, wherein the functionality is activated in a set-top box.

51. The article of manufacture of claim 36, wherein one of the tests for the status of the conditional access module (CAM) attributes comprises:

test data and status assessment data specified by a rule in the feature authorization message;

means for delivering said test data to the CAM;

means for the CAM to generate output data that depends on said test data and on CAM attributes;

means for delivering said output data from the CAM; and

means for assessing the status of CAM attributes based on said output data and said status assessment data.

52. The article of manufacture of claim 51, wherein:

said test data comprises program access data which specifies service access requirements and limitations;

said output data comprises the result of a comparison of service authorization and other attribute data of the CAM with said service access requirements and limitations in said program access data;

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.

53. The article of manufacture of claim 51, wherein:

said output data comprises an encryption or decryption of said input data;

said CAM attributes comprise encryption or decryption keys and algorithms; and

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.