Open standard conditional access system

• US 20070011735A1
• Filed: 07/06/2005
• Published: 01/11/2007
• Est. Priority Date: 07/06/2005
• Status: Abandoned Application

• Current Assignee: Cable Television Laboratories Incorporated
• Original Assignee: Cable Television Laboratories Incorporated
• Inventors: Weber, Joseph, Miller, Edward, White, Gregory
• Application Number:
  US11/175,530
• Publication Number:
  US 20070011735A1
• Time in Patent Office: Days
• US Class Current: 726/14
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/2585 Generation of a revocation list, e.g. of client devices involved in piracy acts
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/6168 involving cable transmission, e.g. using a cable modem
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/17309 Transmission or handling of upstream communications

Abstract

The present open standard conditional access system uses an open standard protocol for authenticating devices, selectively enabling services, and revoking service on cable and satellite content distribution networks. This system uses a two-way communication protocol between devices in the home and security system servers in the cable network. This allows for security information to be sent only to those devices that need the security information. A two-way communication protocol also allows the end device to request security information instead of waiting for it to be broadcast as in a one-way protocol. The present open standard conditional access system uses the security system already present in most DOCSIS cable modems to protect both IP data and MPEG content.

Claims

1. A system for implementing a communication protocol between devices in a home and security system servers in a cable network for delivering both IP data and non-IP data content, comprising:

means for maintaining a communication protocol between devices in a home and security system servers in a cable network for the exchange of IP data; and

means, using said communication protocol, for creating a communication session between said devices in a home and said security system servers in a cable network for exchanging non-IP data content.

2. The system for implementing a communication protocol of claim 1 wherein said means for creating a communication session comprises:

conditional access database means for generating at least one random content key for encrypting said non-IP data content; and

content key encryption means for encrypting said at least one random content key with a session key.

3. The system for implementing a communication protocol of claim 2 further comprising:

transmitting means for transmitting said encrypted non-IP data content and said encrypted random content key to said device.

4. The system for implementing a communication protocol of claim 3 further comprising:

key storage means, located in said device, for determining whether said session key received from said transmitting means is presently stored in said device; and

content extraction means, responsive to a presence of said session key, for decrypting said non-IP data content.

5. The system for implementing a communication protocol of claim 3 wherein said means for creating a communication session further comprises:

device authorization means, responsive to receipt of a request from said device indicative of an absence of said session key received from said transmitting means in said device, for determining whether said device is authorized to receive said encrypted non-IP data content; and

key delivery means, responsive to a determination that said device is authorized to receive said encrypted non-IP data content, for transmitting said session key to said requesting device.

6. The system for implementing a communication protocol of claim 5 further comprising:

content extraction means, responsive to receipt of said session key, for decrypting said non-IP data content.

7. The system for implementing a communication protocol of claim 1 wherein said means for creating a communication session comprises:

a two-way communication protocol between said device and said security system servers in said cable network.

13. The method for implementing a communication protocol of claim 5 further comprising:

decrypting, in response to receipt of said session key, said non-IP data content.

14. The method for implementing a communication protocol of claim 1 wherein said step of creating a communication session comprises:

implementing a two-way communication protocol between said device and said security system servers in said cable network.

8. A method for implementing a communication protocol between devices in a home and security system servers in a cable network for delivering both IP data and non-IP data content, comprising:

maintaining a communication protocol between devices in a home and security system servers in a cable network for the exchange of IP data; and

creating, using said communication protocol, a communication session between said devices in a home and said security system servers in a cable network for exchanging non-IP data content.

9. The method for implementing a communication protocol of claim 8 wherein said step of creating a communication session comprises:

generating at least one random content key for encrypting said non-IP data content; and

encrypting said at least one random content key with a session key.

10. The method for implementing a communication protocol of claim 9 further comprising:

transmitting said encrypted non-IP data content and said encrypted random content key to said device.

11. The method for implementing a communication protocol of claim 10 further comprising:

determining in said device, whether said session key received from said security system servers in said cable network is presently stored in said device; and

decrypting, in response to a presence of said session key, said non-IP data content.

12. The method for implementing a communication protocol of claim 10 wherein said step of creating a communication session further comprises:

determining, in response to receipt of a request from said device indicative of an absence of said session key, received from said security system servers in said cable network, whether said device is authorized to receive said encrypted non-IP data content; and

transmitting, in response to a determination that said device is authorized to receive said encrypted non-IP data content, said session key to said requesting device.