Secure conditional access and digital rights management in a multimedia processor

• US 20060233149A1
• Filed: 04/06/2006
• Published: 10/19/2006
• Est. Priority Date: 04/06/2005
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Avago Technologies General IP PTE Limited (Broadcom, Inc.)
• Inventors: Boross, Christopher, Wilson, Christopher, Rustagi, Viresh
• Granted Patent: US 9,553,848 B2
• Time in Patent Office: Days
• US Class Current: 370/342
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/41407 embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57
• CPC Class Codes: H04N 21/4147 PVR [Personal Video Recorder] H04N5/76 takes precedence ; arrangements for broadcast with accumulation-type receivers H04H20/40
• CPC Class Codes: H04N 21/418 External card to be used in combination with the client device, e.g. for conditional access
• CPC Class Codes: H04N 21/42623 involving specific decryption arrangements
• CPC Class Codes: H04N 21/42692 for reading from or writing on a volatile storage medium, e.g. Random Access Memory [RAM]
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/436 Interfacing a local distribution network, e.g. communicating with another STB or one or more peripheral devices inside the home
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/443 OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/8193 dedicated tools, e.g. video decoder software or IPMP tool
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

Methods and systems for processing video data are disclosed herein and may comprise receiving within a single mobile multimedia processor chip integrated within a mobile device, a secure key from an off-chip device integrated within the mobile device. The secure key may be decrypted within the single mobile multimedia processor chip, utilizing an on-chip key. The decrypted secure key may be stored within the single mobile multimedia processor chip. The received encrypted data may be decrypted within the single mobile multimedia processor chip, using the stored, decrypted secure key. The on-chip key may be stored within a one-time programmable (OTP) memory in the single mobile multimedia processor chip. The stored on-chip key may be retrieved from the OTP memory for the decrypting. The stored decrypted received secure key may be encrypted utilizing the on-chip key stored within the single mobile multimedia processor chip.

Claims

1. A method for processing data, the method comprising:

receiving within a single mobile multimedia processor chip integrated within a mobile device, a secure key from an off-chip device integrated within said mobile device;

decrypting within said single mobile multimedia processor chip, said secure key utilizing an on-chip key;

storing said decrypted secure key within said single mobile multimedia processor chip; and

decrypting within said single mobile multimedia processor chip, received encrypted data using said stored decrypted secure key.

2. The method according to claim 1, wherein said on-chip key is stored within a one-time programmable (OTP) memory in said single mobile multimedia processor chip.

3. The method according to claim 2, further comprising retrieving said stored on-chip key from said OTP memory for said decrypting.

4. The method according to claim 1, further comprising encrypting said stored decrypted secure key utilizing said on-chip key stored within said single mobile multimedia processor chip.

5. The method according to claim 4, further comprising storing said encrypted stored decrypted secure key in a memory outside said single mobile multimedia processor chip.

6. The method according to claim 1, wherein said received encrypted data comprises at least one of:

encrypted audio data and encrypted video data.

7. The method according to claim 1, further comprising decoding said decrypted received encrypted data within said single mobile multimedia processor chip.

8. The method according to claim 7, further comprising decoding said decrypted received encrypted data within a secure kernel in said single mobile multimedia processor chip.

9. The method according to claim 1, further comprising receiving said encrypted data within a secure kernel in said single mobile multimedia processor chip.

10. The method according to claim 9, further comprising encrypting at least a portion of said secure kernel within said single mobile multimedia processor chip utilizing said on-chip key.

11. A machine-readable storage having stored thereon, a computer program having at least one code section for processing data, the at least one code section being executable by a machine for causing the machine to perform steps comprising:

receiving within a single mobile multimedia processor chip integrated within a mobile device, a secure key from an off-chip device integrated within said mobile device;

decrypting within said single mobile multimedia processor chip, said secure key utilizing an on-chip key;

storing said decrypted secure key within said single mobile multimedia processor chip; and

decrypting within said single mobile multimedia processor chip, received encrypted data using said stored decrypted secure key.

12. The machine-readable storage according to claim 11, wherein said on-chip key is stored within a one-time programmable (OTP) memory in said single mobile multimedia processor chip.

13. The machine-readable storage according to claim 12, further comprising code for retrieving said stored on-chip key from said OTP memory for said decrypting.

14. The machine-readable storage according to claim 11, further comprising code for encrypting said stored decrypted secure key utilizing said on-chip key stored within said single mobile multimedia processor chip.

15. The machine-readable storage according to claim 14, further comprising code for storing said encrypted stored decrypted secure key in a memory outside said single mobile multimedia processor chip.

16. The machine-readable storage according to claim 11, wherein said received encrypted data comprises at least one of:

encrypted audio data and encrypted video data.

17. The machine-readable storage according to claim 11, further comprising code for decoding said decrypted received encrypted data within said single mobile multimedia processor chip.

18. The machine-readable storage according to claim 17, further comprising code for decoding said decrypted received encrypted data within a secure kernel in said single mobile multimedia processor chip.

19. The machine-readable storage according to claim 11, further comprising code for receiving said encrypted data within a secure kernel in said single mobile multimedia processor chip.

20. The machine-readable storage according to claim 19, further comprising code for encrypting at least a portion of said secure kernel within said single mobile multimedia processor chip utilizing said on-chip key.

21. A system for processing data, the system comprising:

a single mobile multimedia processor chip integrated within a mobile device that receives a secure key from an off-chip device integrated within said mobile device;

said single mobile multimedia processor chip decrypts said secure key utilizing an on-chip key;

said single mobile multimedia processor chip stores said decrypted secure key within said single mobile multimedia processor chip; and

said single mobile multimedia processor chip decrypts received encrypted data using said stored decrypted secure key.

22. The system according to claim 21, wherein said single mobile multimedia processor chip comprises a one-time programmable (OTP) memory and said on-chip key is stored within said one-time programmable (OTP) memory.

23. The system according to claim 22, wherein said single mobile multimedia processor chip retrieves said stored on-chip key from said OTP memory for said decryption.

24. The system according to claim 21, wherein said single mobile multimedia processor chip encrypts said stored decrypted secure key utilizing said on-chip key.

25. The system according to claim 24, wherein said single mobile multimedia processor chip stores said encrypted stored decrypted secure key in a memory outside said single mobile multimedia processor chip.

26. The system according to claim 21, wherein said received encrypted data comprises at least one of:

encrypted audio data and encrypted video data.

27. The system according to claim 21, wherein said single mobile multimedia processor chip decodes said decrypted received encrypted data.

28. The system according to claim 27, wherein said single mobile multimedia processor chip decodes said decrypted received encrypted data within a secure kernel.

29. The system according to claim 21, wherein said single mobile multimedia processor chip receives said encrypted data within a secure kernel.

30. The system according to claim 29, wherein said single mobile multimedia processor chip encrypts at least a portion of said secure kernel utilizing said on-chip key.